[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 79.252928][ T31] audit: type=1800 audit(1568067849.306:25): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.276433][ T31] audit: type=1800 audit(1568067849.326:26): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.313355][ T31] audit: type=1800 audit(1568067849.346:27): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/09/09 22:24:21 fuzzer started 2019/09/09 22:24:25 dialing manager at 10.128.0.26:44675 2019/09/09 22:24:25 syscalls: 2376 2019/09/09 22:24:25 code coverage: enabled 2019/09/09 22:24:25 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/09 22:24:25 extra coverage: enabled 2019/09/09 22:24:25 setuid sandbox: enabled 2019/09/09 22:24:25 namespace sandbox: enabled 2019/09/09 22:24:25 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/09 22:24:25 fault injection: enabled 2019/09/09 22:24:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/09 22:24:25 net packet injection: enabled 2019/09/09 22:24:25 net device setup: enabled 22:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syzkaller login: [ 257.728876][T11802] IPVS: ftp: loaded support on port[0] = 21 [ 257.868948][T11802] chnl_net:caif_netlink_parms(): no params data found [ 257.926437][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.934116][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.942953][T11802] device bridge_slave_0 entered promiscuous mode [ 257.953019][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.960226][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.968974][T11802] device bridge_slave_1 entered promiscuous mode [ 258.000427][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.013191][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.045791][T11802] team0: Port device team_slave_0 added [ 258.055394][T11802] team0: Port device team_slave_1 added [ 258.236793][T11802] device hsr_slave_0 entered promiscuous mode [ 258.492698][T11802] device hsr_slave_1 entered promiscuous mode [ 258.773662][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.780898][T11802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.788729][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.795979][T11802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.874542][T11802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.894352][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.907423][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.917276][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.930466][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 258.953284][T11802] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.968350][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.977888][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.988095][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.995319][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.017175][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.027066][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.036453][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.043708][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.060734][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.084091][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.094244][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.105653][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.133206][T11802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.143747][T11802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.158670][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.167747][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.177898][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.187497][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.196694][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.206339][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.215511][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.226353][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.268158][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.474247][T11812] bond0: (slave bond_slave_1): Releasing backup interface [ 259.683672][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.905450][ C1] hrtimer: interrupt took 32152 ns [ 259.911660][T11812] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 22:27:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 22:27:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0)=0x3c00, 0x443) 22:27:10 executing program 0: personality(0x400000a) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x1a7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:27:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r1, 0x601, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 22:27:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x4, 0x54) 22:27:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x400000000000163, 0x0, 0x0) [ 261.258101][T11830] IPVS: ftp: loaded support on port[0] = 21 22:27:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$TCSETS(r0, 0x5403, 0x0) [ 261.412347][T11830] chnl_net:caif_netlink_parms(): no params data found [ 261.481013][T11830] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.488842][T11830] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.497565][T11830] device bridge_slave_0 entered promiscuous mode [ 261.509189][T11830] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.516552][T11830] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.525475][T11830] device bridge_slave_1 entered promiscuous mode [ 261.564663][T11830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.577422][T11830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.609676][T11830] team0: Port device team_slave_0 added [ 261.618876][T11830] team0: Port device team_slave_1 added [ 261.716943][T11830] device hsr_slave_0 entered promiscuous mode [ 261.762837][T11830] device hsr_slave_1 entered promiscuous mode [ 261.802159][T11830] debugfs: Directory 'hsr0' with parent '/' already present! [ 261.839558][T11830] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.846972][T11830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.854850][T11830] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.862086][T11830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.946704][T11830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.984194][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.002700][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.021584][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.043961][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 262.072567][T11830] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.099676][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.110017][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.117299][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state 22:27:12 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/eo\"\xff\xff\xea\x00', 0x0, 0x10d040) pselect6(0x40, &(0x7f0000000300)={0x3, 0x4, 0x7, 0x1, 0x4, 0x5d05, 0x100000001, 0x4}, &(0x7f0000000380)={0x1ff, 0x25, 0x1, 0x3, 0x2, 0x53, 0xfffffffffffffff9, 0x8001}, &(0x7f00000003c0)={0x683, 0x16ec36a9, 0xe90e, 0x20, 0x1, 0x0, 0xff, 0x8}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000440)={0x7fffffff}, 0x8}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x1, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}) r1 = gettid() capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xe38, 0x80, 0x5, 0x80000001, 0x5, 0x2}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x76) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000200)="20d2a2d85920b8e4e3", &(0x7f0000000240)=""/101}, 0x18) r5 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) timer_delete(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000480)={r9, @in6={{0xa, 0x4e21, 0x6, @remote}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={r9, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={r10, 0xabd, 0x3}, 0x8) [ 262.154648][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.164181][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.171440][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.228035][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.238444][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.248161][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.258486][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.272589][T11830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.273814][T11840] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 262.313978][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.341392][T11830] 8021q: adding VLAN 0 to HW filter on device batadv0 22:27:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000280)="11dca5055e0bcfec7be070") fsetxattr(r1, &(0x7f0000000040)=@random={'system.', 'user\x00'}, &(0x7f00000001c0)='fd\x00', 0x3, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x0, 0x1}) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 22:27:12 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) write$hidraw(r0, &(0x7f0000000000)="540239e8a91b2971428054004e7b4f6d7a63ae26fb6a03e90b50f4480d9346cf78dbfd12b3c24c9f0a4d47acac00c94ae228ae7c1a516f0019472436098597031bc4042cb1c248c462931037f8be1683ebcb48a0e19afd19627c6a63df39d3dc0ba1f68d81aaed2d055dfe5274a0548dd5457504fe6f27e034", 0x79) pipe(&(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) write$sndseq(r3, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 22:27:12 executing program 1: poll(0x0, 0x0, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f600000300000022") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca5055e0bcfec7be070") fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "ce670a32b32d58eb39db0c3bc0d4ed2b"}, 0x11, 0x2) 22:27:13 executing program 0: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="52e92901570ed6bb4bfffb9d6a0fdf80e65fd22a481658f7fb5e0d287d4c8daf23075d00fea4c5c6c284f9fe6c4c2792d9a5690b9a26a6c05856d169e17787f2ca7a9be24f3b514feb6de630dded80d1029cc4aa7a7453af7821999d10969529a7601ac0ae962cb62142d31cc7c9917404ab7d087ece87e2f6127c0acf95ece04d7198", 0x83, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r0, 0x72, 0xbe}, 0x0, &(0x7f0000000300)="dd64f56b622995d816e9bf19deb2cff56793c8f23a230658ce9fa74ca0255c8c0cede5272eb97f8c810b1f1c7bb157aeefcc6b385a3e629b458e610498ff0ef783f1ae85cd79be4727e811f6b81956bb560b8f30124e31bfc1bdccbbd13aac225793449b5218375caac3addd3c4e580076a4", &(0x7f0000000380)=""/190) r1 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ftruncate(r1, 0x200000) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xae, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0xfffffffffffffff8, 0x4, r6}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x20, 0x8, "1c6a0c94392062d55f7f480f9a4cbea50881d51c3994be164d0991eccbd55d26", 0xffffffffffffffff, 0x5ba, 0x5, 0x5}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000480)={r10, @in6={{0xa, 0x4e21, 0x6, @remote}}}, &(0x7f0000000540)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000440)={r10, 0x1, 0x1}, 0x8) read$eventfd(r1, &(0x7f00000002c0), 0x379) 22:27:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m2\f\x06oo\xeb\x80sents\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=0x0) sched_setaffinity(r3, 0xfffffffffffffeac, &(0x7f0000000580)=0x6) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0xfeb7) socket$inet6(0xa, 0x3, 0x1) ioctl(r4, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000200)=r9) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000840)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r5, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r1], 0x18a) close(r5) r10 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000380)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x0, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(0x0) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x4c081, 0x0) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002000290f0000000000000000020001000000000000000000040000000c001400175d231315279ed1b119f4627d60ac7188b80e4775f2c1369f47d609cbbfad01bc60bab4264a219671b980004537bee5276172fc2fa0cc80cada6a7d52f577ed6b237723973e5a636d75094ae2722bedaf9637cae08f1505928624ab499965e71d1f9e545a700f6736bf3bad3f7bef27d3381a735b7f547d56fbb4342b08c795b8680d8b0599cd3f6bd2d426421bbbea79d682d1b778431277daa20d400f02a3b33dd868e1b99fa224b080f171d7e5e8bd192ec4cb0cdf7003ee5e611549d2780d1e2ad1", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0x2}}, 0x0) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0201000210000000000006f6fffffc000000000000800000000000e000000100000000000094f40337ff6b4ed6cd69675e973e00003500bb7a7a2d00000000000000ff0000000058d52a000000bb00000000eeff48f89f48a0d44b9e8238ce8005ffff03000500000000e90200423b00000000000000400000000000000000000000002000d40470c90b2bc791a93d1260cfcb71b779839a8713564f074461669c16c64aedc3c25152e01a8ce5141e33580d608bf181e9f9d2e98e88e508f32571efa7ae4630fc30eca5a3769370b5f39e26fec23cee7a88cbab031bc4615236c130d55bee3ba60493a55cc6e1c5"], 0xdf}}, 0x0) [ 263.126063][T11864] bridge0: port 3(gretap0) entered blocking state [ 263.134487][T11864] bridge0: port 3(gretap0) entered disabled state [ 263.142643][T11864] device gretap0 entered promiscuous mode [ 263.149189][T11864] bridge0: port 3(gretap0) entered blocking state [ 263.155844][T11864] bridge0: port 3(gretap0) entered forwarding state 22:27:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x4, &(0x7f00000001c0)) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000080)={{}, {r1, r2+30000000}}, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x4000, 0x0) pipe2(&(0x7f0000000100), 0x80000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r5) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000040)) write(r0, &(0x7f0000000100), 0x34000) 22:27:13 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x113) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) 22:27:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x378, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 22:27:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 22:27:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000000c0)={0x6, 0x2, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000729d50000000000000007000000f885c7e35878078fb6bb9275699f1f8dbc4bec8f938d087ffb7a985b1f6265c3995b3080e374537b9f2ccc0dd307c99106b033fe310f6904dd86749ba11c4b1619d710b571edadb0b73bc81d7d45", @ANYRES32=r4, @ANYBLOB="700b7e000a000200aaaaaaaaaa0c000001000000"], 0x42e}}, 0x0) 22:27:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000200)="b6db64d3e3b36ef15f48395ae5ef4d7918a09f79ebcebaba0949f2bfe49d59cc41c3a44d5be68616fd8827dd9b1668a7563e16b3c1f887f39c1483da878ac5498b723905644c429190a4d749c5268f5fd2b493588a47dc48b9e5ccaad31b73fe7e9e095e64b76439fde5d6aad2490c71e19fc2588318c1ce00748b34adb00a4a334d48c9813ba310ded7f4da341fe760e51418f511471f12f5e5ba7c12c2f1d927fc62e500e6225cc6ceb5e5e9515704f46e2fa7e4e1bea20cdf85a90687cdc5d0c5ce07f28b9dbc20aa582551d70f2c0d40f90bcee920de9d7b0111dc3713fe015d2e11d5149f43c0484b5ce66f3e9a169ae575c4dca2", 0xf7}, {&(0x7f0000000080)="8585ae18e47058a00988b6f9", 0xc}, {&(0x7f0000000300)="f08a86d651691bbec07b", 0xa}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="5c9cdfcda853c72187848919f06f6763c38102d91dc807a26e5cc3959a15121dad15ad8dea521a1001be55a908c7f23ac3e77ae3477e9898796e29659e5a83737c3c6db6381a6ac31e0c749db12191acb7bc2acb505fb0829e8fe819a6be97d4f54108e826dd07d10731fe11b0a93c4bb9ac77d8763d9d14ee21b2532f64320ce1f2bfdb9a6414f0a90e3dea075e90cd11e03e3213de219e35ecb1a10ec99fb4e60893ed79084f1677408227c359299d0e29664e5c7d21bdc349aedbc2cb995e6e", 0xc1}, {&(0x7f0000001440)="1da419871e37fe47a83d36f38b30294b4419646c3bde5f443a3771cb80f61db5932f8543dfa5f93535253cd451", 0x2d}], 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x801, 0x0, 0x7}, 0x10) write(r0, &(0x7f0000000000)="240000004a005f0014f9f407000904000a00a7a2803c0000000000001000000000000000", 0x24) socket(0xa, 0x5, 0x4) prctl$PR_GET_KEEPCAPS(0x7) [ 263.773689][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) unshare(0x20000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="251a39584b8448d428a3de0619ee3401d0735981c659767ccd871571e29a1df2219c9f15c143625f18c66b73ff2f30a3d73ac4f33f52e74c2bdf1ab85ed8e6379889c9a446f462b7b2081f5e939904aa6b7b5614e065489f003710e1fec42ab111") r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) write$ppp(r4, &(0x7f0000000040)="4abae93a1d05587cb28c9868b4547fb4cba6d0ec92a1020d29b5073e629dbab8d0465a8bf93a01b8aa24086a5a37a414395950b829b9820ccc35a08c23ac2b7bccdca0b991f98bb6715e61be69085f0cdca27c89aa093ac6bf4e2299643ca9bb46f967bc6a986adf05b9af9806c555fc9bff61b95539c59767370a0b3d5f3a57b9810e02d86b97132a24dea0a19149ab7bd2340cd22554fcff38086a9129834bf473eff4a94cf4bdfd529bd8612a6e2ae6a11b36f10c33dc6f", 0xb9) getsockopt(r3, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/188, &(0x7f0000000000)=0xbc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300)={0x81e, 0xfffffffffffffffb, 0x7, 0x2}, 0x8) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x80000, 0x0) dup3(r9, r8, 0x0) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000240)) [ 263.869997][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:27:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x10000000000586], [0xc1]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc305}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 22:27:14 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) dup3(r2, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000100)={0x0, 0xff18, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e5ffffffffe9ee000003000000280001001800010069623ad982309c064c62dd6f6f2039b3bc0be576655b68305f74105f74656170"], 0x3c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7e9b9c135bdb9b60}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a09}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ed}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10060000}, 0x4101) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, "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", 0x1000}, 0x1006) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) r6 = dup(r0) getpeername$packet(r6, 0x0, &(0x7f0000000400)) [ 264.031124][T11902] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 264.119423][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.128982][T11903] Enabling of bearer rejected, illegal name [ 264.138443][T11675] ================================================================== [ 264.147010][T11675] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 264.154209][T11675] CPU: 1 PID: 11675 Comm: rsyslogd Not tainted 5.3.0-rc7+ #0 [ 264.161589][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.171739][T11675] Call Trace: [ 264.175146][T11675] dump_stack+0x191/0x1f0 [ 264.179522][T11675] kmsan_report+0x162/0x2d0 [ 264.184040][T11675] kmsan_internal_check_memory+0x455/0x8d0 [ 264.189893][T11675] ? msg_print_text+0x9c5/0xa70 [ 264.194764][T11675] kmsan_copy_to_user+0xa9/0xb0 [ 264.199624][T11675] _copy_to_user+0x16b/0x1f0 [ 264.204211][T11675] do_syslog+0x2e62/0x3160 [ 264.208637][T11675] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 264.214739][T11675] ? aa_file_perm+0x66e/0x25e0 [ 264.219531][T11675] ? init_wait_entry+0x190/0x190 [ 264.224531][T11675] kmsg_read+0x142/0x1a0 [ 264.228788][T11675] ? mmap_vmcore_fault+0x30/0x30 [ 264.233743][T11675] proc_reg_read+0x25f/0x360 [ 264.238359][T11675] ? proc_reg_llseek+0x2f0/0x2f0 [ 264.243349][T11675] __vfs_read+0x1a9/0xc90 [ 264.247687][T11675] ? rw_verify_area+0x3a5/0x5e0 [ 264.252550][T11675] vfs_read+0x359/0x6f0 [ 264.256711][T11675] ksys_read+0x265/0x430 [ 264.260955][T11675] __se_sys_read+0x92/0xb0 [ 264.265384][T11675] __x64_sys_read+0x4a/0x70 [ 264.269936][T11675] do_syscall_64+0xbc/0xf0 [ 264.274379][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.280265][T11675] RIP: 0033:0x7fd2b8eac1fd [ 264.284674][T11675] Code: d1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e fa ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 a7 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 264.304282][T11675] RSP: 002b:00007fd2b644be30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 264.312790][T11675] RAX: ffffffffffffffda RBX: 0000000001b464b0 RCX: 00007fd2b8eac1fd [ 264.320750][T11675] RDX: 0000000000000fff RSI: 00007fd2b7c805a0 RDI: 0000000000000004 [ 264.328717][T11675] RBP: 0000000000000000 R08: 0000000001b31260 R09: 0000000004000001 [ 264.336693][T11675] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 264.344665][T11675] R13: 00007fd2b644c9c0 R14: 00007fd2b94f1040 R15: 0000000000000003 [ 264.352825][T11675] [ 264.355160][T11675] Uninit was stored to memory at: [ 264.360178][T11675] kmsan_internal_chain_origin+0xcc/0x150 [ 264.365900][T11675] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 264.371877][T11675] kmsan_memcpy_metadata+0xb/0x10 [ 264.376893][T11675] __msan_memcpy+0x56/0x70 [ 264.381297][T11675] msg_print_text+0x871/0xa70 [ 264.385959][T11675] do_syslog+0x2a3f/0x3160 [ 264.390372][T11675] kmsg_read+0x142/0x1a0 [ 264.394654][T11675] proc_reg_read+0x25f/0x360 [ 264.399243][T11675] __vfs_read+0x1a9/0xc90 [ 264.403558][T11675] vfs_read+0x359/0x6f0 [ 264.407698][T11675] ksys_read+0x265/0x430 [ 264.411933][T11675] __se_sys_read+0x92/0xb0 [ 264.416351][T11675] __x64_sys_read+0x4a/0x70 [ 264.420843][T11675] do_syscall_64+0xbc/0xf0 [ 264.425270][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.431504][T11675] [ 264.433837][T11675] Uninit was stored to memory at: [ 264.438965][T11675] kmsan_internal_chain_origin+0xcc/0x150 [ 264.444687][T11675] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 264.450654][T11675] kmsan_memcpy_metadata+0xb/0x10 [ 264.455677][T11675] __msan_memcpy+0x56/0x70 [ 264.460102][T11675] log_store+0xe7e/0x14d0 [ 264.464418][T11675] vprintk_store+0xc0c/0x11e0 [ 264.469083][T11675] vprintk_emit+0x313/0x8f0 [ 264.473572][T11675] vprintk_default+0x90/0xa0 [ 264.478160][T11675] vprintk_func+0x635/0x810 [ 264.482735][T11675] printk+0x180/0x1c3 [ 264.486810][T11675] __tipc_nl_bearer_enable+0x16f7/0x1c80 [ 264.492440][T11675] tipc_nl_bearer_enable+0x6c/0xb0 [ 264.497599][T11675] genl_rcv_msg+0x16c5/0x1f20 [ 264.502306][T11675] netlink_rcv_skb+0x431/0x620 [ 264.507057][T11675] genl_rcv+0x63/0x80 [ 264.511113][T11675] netlink_unicast+0xf6c/0x1050 [ 264.515967][T11675] netlink_sendmsg+0x110f/0x1330 [ 264.520951][T11675] ___sys_sendmsg+0x14ff/0x1590 [ 264.525791][T11675] __se_sys_sendmsg+0x305/0x460 [ 264.530628][T11675] __x64_sys_sendmsg+0x4a/0x70 [ 264.535382][T11675] do_syscall_64+0xbc/0xf0 [ 264.539791][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.545676][T11675] [ 264.548002][T11675] Uninit was stored to memory at: [ 264.553031][T11675] kmsan_internal_chain_origin+0xcc/0x150 [ 264.558740][T11675] __msan_chain_origin+0x6b/0xe0 [ 264.563663][T11675] string+0x530/0x600 [ 264.567631][T11675] vsnprintf+0x218f/0x3210 [ 264.572054][T11675] vscnprintf+0xc2/0x180 [ 264.576305][T11675] vprintk_store+0xef/0x11e0 [ 264.580882][T11675] vprintk_emit+0x313/0x8f0 [ 264.585389][T11675] vprintk_default+0x90/0xa0 [ 264.589972][T11675] vprintk_func+0x635/0x810 [ 264.594479][T11675] printk+0x180/0x1c3 [ 264.598449][T11675] __tipc_nl_bearer_enable+0x16f7/0x1c80 [ 264.604086][T11675] tipc_nl_bearer_enable+0x6c/0xb0 [ 264.609182][T11675] genl_rcv_msg+0x16c5/0x1f20 [ 264.613846][T11675] netlink_rcv_skb+0x431/0x620 [ 264.618592][T11675] genl_rcv+0x63/0x80 [ 264.622561][T11675] netlink_unicast+0xf6c/0x1050 [ 264.627412][T11675] netlink_sendmsg+0x110f/0x1330 [ 264.632349][T11675] ___sys_sendmsg+0x14ff/0x1590 [ 264.637185][T11675] __se_sys_sendmsg+0x305/0x460 [ 264.642040][T11675] __x64_sys_sendmsg+0x4a/0x70 [ 264.646792][T11675] do_syscall_64+0xbc/0xf0 [ 264.651228][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.657326][T11675] [ 264.659744][T11675] Uninit was created at: [ 264.664017][T11675] kmsan_internal_poison_shadow+0x58/0xb0 [ 264.669732][T11675] kmsan_slab_alloc+0xaa/0x120 [ 264.674550][T11675] __kmalloc_node_track_caller+0xb55/0x1320 [ 264.680435][T11675] __alloc_skb+0x306/0xa10 [ 264.684858][T11675] netlink_sendmsg+0x783/0x1330 [ 264.689694][T11675] ___sys_sendmsg+0x14ff/0x1590 [ 264.694550][T11675] __se_sys_sendmsg+0x305/0x460 [ 264.699908][T11675] __x64_sys_sendmsg+0x4a/0x70 [ 264.705183][T11675] do_syscall_64+0xbc/0xf0 [ 264.709589][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.715462][T11675] [ 264.717781][T11675] Bytes 78-79 of 105 are uninitialized [ 264.723224][T11675] Memory access of size 105 starts at ffff88805827b000 [ 264.730054][T11675] Data copied to user address 00007fd2b7c8060b [ 264.736191][T11675] ================================================================== [ 264.744243][T11675] Disabling lock debugging due to kernel taint [ 264.750383][T11675] Kernel panic - not syncing: panic_on_warn set ... [ 264.756959][T11675] CPU: 1 PID: 11675 Comm: rsyslogd Tainted: G B 5.3.0-rc7+ #0 [ 264.765698][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.775760][T11675] Call Trace: [ 264.779050][T11675] dump_stack+0x191/0x1f0 [ 264.783479][T11675] panic+0x3c9/0xc1e [ 264.787385][T11675] kmsan_report+0x2ca/0x2d0 [ 264.791886][T11675] kmsan_internal_check_memory+0x455/0x8d0 [ 264.797685][T11675] ? msg_print_text+0x9c5/0xa70 [ 264.802536][T11675] kmsan_copy_to_user+0xa9/0xb0 [ 264.807375][T11675] _copy_to_user+0x16b/0x1f0 [ 264.811962][T11675] do_syslog+0x2e62/0x3160 [ 264.816370][T11675] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 264.822422][T11675] ? aa_file_perm+0x66e/0x25e0 [ 264.827186][T11675] ? init_wait_entry+0x190/0x190 [ 264.832116][T11675] kmsg_read+0x142/0x1a0 [ 264.836350][T11675] ? mmap_vmcore_fault+0x30/0x30 [ 264.841276][T11675] proc_reg_read+0x25f/0x360 [ 264.845861][T11675] ? proc_reg_llseek+0x2f0/0x2f0 [ 264.850791][T11675] __vfs_read+0x1a9/0xc90 [ 264.855119][T11675] ? rw_verify_area+0x3a5/0x5e0 [ 264.859969][T11675] vfs_read+0x359/0x6f0 [ 264.864129][T11675] ksys_read+0x265/0x430 [ 264.868370][T11675] __se_sys_read+0x92/0xb0 [ 264.872785][T11675] __x64_sys_read+0x4a/0x70 [ 264.877287][T11675] do_syscall_64+0xbc/0xf0 [ 264.881700][T11675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.887582][T11675] RIP: 0033:0x7fd2b8eac1fd [ 264.891988][T11675] Code: d1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e fa ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 a7 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 264.911670][T11675] RSP: 002b:00007fd2b644be30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 264.920075][T11675] RAX: ffffffffffffffda RBX: 0000000001b464b0 RCX: 00007fd2b8eac1fd [ 264.928037][T11675] RDX: 0000000000000fff RSI: 00007fd2b7c805a0 RDI: 0000000000000004 [ 264.935999][T11675] RBP: 0000000000000000 R08: 0000000001b31260 R09: 0000000004000001 [ 264.943974][T11675] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 264.951940][T11675] R13: 00007fd2b644c9c0 R14: 00007fd2b94f1040 R15: 0000000000000003 [ 264.961314][T11675] Kernel Offset: disabled [ 264.965651][T11675] Rebooting in 86400 seconds..