Starting Permit User Sessions... [ OK ] Found device /dev/ttyS0. [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *** ] A start job is running for OpenBSD …Shell server (1min 27s / 2min 46s) [ *** ] A start job is running for OpenBSD …Shell server (1min 28s / 2min 46s) [*** ] A start job is running for OpenBSD …Shell server (1min 28s / 2min 46s) [** ] A start job is running for OpenBSD …Shell server (1min 30s / 2min 59s) [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2020/08/13 14:21:57 fuzzer started 2020/08/13 14:21:58 dialing manager at 10.128.0.26:35833 2020/08/13 14:21:58 syscalls: 3107 2020/08/13 14:21:58 code coverage: enabled 2020/08/13 14:21:58 comparison tracing: enabled 2020/08/13 14:21:58 extra coverage: enabled 2020/08/13 14:21:58 setuid sandbox: enabled 2020/08/13 14:21:58 namespace sandbox: enabled 2020/08/13 14:21:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/13 14:21:58 fault injection: enabled 2020/08/13 14:21:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/13 14:21:58 net packet injection: enabled 2020/08/13 14:21:58 net device setup: enabled 2020/08/13 14:21:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/13 14:21:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/13 14:21:58 USB emulation: enabled 2020/08/13 14:21:58 hci packet injection: enabled 14:26:29 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x8, 0x7, 0xb26, 0x6}) r1 = signalfd4(r0, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x80000) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x3, 0x4, 0x1, 0x1}}, 0x26) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000180)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x2001, 0x0) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/64, 0x40}], 0x2, &(0x7f0000001300)=""/29, 0x1d}, 0x40000020) sendmsg$nl_netfilter(r4, &(0x7f0000002640)={&(0x7f0000001380), 0xc, &(0x7f0000002600)={&(0x7f00000013c0)={0x1208, 0xe, 0x1, 0x101, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x7}, [@nested={0x11ef, 0x82, 0x0, 0x1, [@typed={0x1004, 0x74, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x53, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x6}, @generic="711d7b411c4e0ecb8f993685e50e4c2af51912a2df5cc23caf279419bdeb1f79b394edc89a88a0ea33fbac5c7994d681a2784f2d205fb8073098ed9760e9f25d7ceff5e1060dfb88a90485d2a9137788dfcf226c77", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="5b6b330cd622be3cbd9caae8b423662b42efe79a9eeea36be55abe79a3ad6399c4b662cf2a9d076165710d2fcc1c45be88014d995e566a69ab832e9b40371d2fc3b02ba4100d078be1ab9041acdde96d477dae183315fb27d1175f584d04c7b8df6c6e460fc171fca0a259917904a7731887be370e31f346c81bf313566a2fa6da99bf9da11a9036a8d4e9a0f56963bd2ceb1796dcc038394c333849c6a199cd9d1b19c935a5c07afdac92d0a52caf1fb464422e90c4e50dcadeba4f5a1897efb97251f194f07cabd9ee3c4311950b", @generic="e872c50ea21f5231343d87098888d0212b1eeeef387f49449dcd2ae39dcac7af1b73bdd99fa9111cd6a4ecadaea09ad2185cbc273947b8aa8c390daeebbc9ab0278f31dde5b5b19db417340722d6e54a3a1fbf94b24ea016961276fbf9019b0508e8f4ae1949cd42501497db47dc52824f472e5e3b63ec2bf67e6e36ad7e20308d8b6460a9edc6092e00e035aac2900832ee9e"]}, @typed={0x4, 0x69}]}, 0x1208}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002680)={r3, 0x800, 0x5, 0xfffffffffffffff9}) fsetxattr$security_evm(r5, &(0x7f00000026c0)='security.evm\x00', &(0x7f0000002700)=@v2={0x3, 0x1, 0xe, 0xecf, 0xc4, "4d433cb544f54a5faccd1d109a7874641b3a12641a22e2797f90938f8339789d805f33c8c9fbcbeda9e0de418aaea485c9a51f2ff6ae8826bd645890c8c343f53faa24715723e56db867fc3c4f58819a763b2273038fb8d396c14c810ddb86fe18ddf9692fbfc9ca7c159b90119324fd04dcf345c2c8c31a84f8b38e1ff2461e65796cf6fcffb2227a922299625af37071d74b6e2e565d926fe91249c6129c0609ea543c63ae229d678a71f1e2234761edb277a3d1dc41547569a6bb9192a8f0cff7990b"}, 0xcd, 0x1) r6 = socket$isdn(0x22, 0x3, 0x23) listen(r6, 0x6f3b) pipe(&(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGNAME(r8, 0x80404506, &(0x7f0000002840)=""/219) write$ppp(r7, &(0x7f0000002940)="5bbf440ccd01a44b2bbb05690926c345c8800edcd50173c475e99128c8c1306604a81a3fb4faaf0634b31921537a3385ed9c36ca6b76c9a58933043add1827082b487222e5bee8659b6e03236af72836f57363aaa3ec52021b08f23796224c9768ef7054e98d1408f40c64ac84fd", 0x6e) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a00)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x12c, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7fffffff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) syzkaller login: [ 425.425308][ T8501] IPVS: ftp: loaded support on port[0] = 21 [ 425.935398][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 426.069867][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.077321][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.087169][ T8501] device bridge_slave_0 entered promiscuous mode [ 426.100987][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.108550][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.119434][ T8501] device bridge_slave_1 entered promiscuous mode [ 426.169819][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.187614][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.238424][ T8501] team0: Port device team_slave_0 added [ 426.252683][ T8501] team0: Port device team_slave_1 added [ 426.298536][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.306519][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.332792][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.349157][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.357564][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.383747][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.449773][ T8501] device hsr_slave_0 entered promiscuous mode [ 426.460565][ T8501] device hsr_slave_1 entered promiscuous mode [ 426.806262][ T8501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.825733][ T8501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.887904][ T8501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.918815][ T8501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.233840][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.258133][ T3741] Bluetooth: hci0: command 0x0409 tx timeout [ 427.280452][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.290648][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.318214][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.342189][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.353093][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.363103][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.370373][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.383725][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.404598][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.414836][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.424515][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.431783][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.497787][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.509221][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.520835][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.531734][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.556071][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.566557][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.577484][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.600701][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.611825][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.634692][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.645083][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.668956][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.745410][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.753394][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.796275][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.869114][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.879855][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.954693][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.964772][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.989761][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.000085][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.014687][ T8501] device veth0_vlan entered promiscuous mode [ 428.060530][ T8501] device veth1_vlan entered promiscuous mode [ 428.143540][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 428.153533][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.163616][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.173980][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.198872][ T8501] device veth0_macvtap entered promiscuous mode [ 428.222695][ T8501] device veth1_macvtap entered promiscuous mode [ 428.288010][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.298513][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.308332][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.318173][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.328610][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.357611][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.367234][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.378638][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:26:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000030c0)=""/263, 0x107}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000000c40)=""/196, 0xc4}], 0x4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000480), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/13, 0xd}, 0x3f}], 0x40000000000012c, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300), 0xc, &(0x7f0000000a00)={0x0, 0x34}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000280), 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x58, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 14:26:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "8ee2b3af39e207412c6132b5fbabfcdbdfd5a5c9675503e446341606e6dab199"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="ba4100b8fbffef0f00560bf2ad660f383b9a004066b9800000c00f326635000100000f3066b9800000c00f326635000400000f300f0fdf976766c7442400660000006766c7442402280b00006766c744240600000000670f011c2481520c9500baa000ec", 0xffffffffffffffbf}], 0x1, 0x1c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 429.316158][ T8730] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 429.338399][ T3741] Bluetooth: hci0: command 0x041b tx timeout 14:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "8ee2b3af39e207412c6132b5fbabfcdbdfd5a5c9675503e446341606e6dab199"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="ba4100b8fbffef0f00560bf2ad660f383b9a004066b9800000c00f326635000100000f3066b9800000c00f326635000400000f300f0fdf976766c7442400660000006766c7442402280b00006766c744240600000000670f011c2481520c9500baa000ec", 0xffffffffffffffbf}], 0x1, 0x1c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) move_mount(r3, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x12) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x0) [ 430.813369][ T3219] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 431.085531][ T3219] usb 1-1: device descriptor read/64, error 18 [ 431.414242][ T3741] Bluetooth: hci0: command 0x040f tx timeout [ 431.473769][ T3219] usb 1-1: device descriptor read/64, error 18 [ 431.743430][ T3219] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 432.014033][ T3219] usb 1-1: device descriptor read/64, error 18 [ 432.403356][ T3219] usb 1-1: device descriptor read/64, error 18 [ 432.526161][ T3219] usb usb1-port1: attempt power cycle 14:26:38 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x24002) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x81, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa00965, 0x6, [], @ptr=0x9}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x6, 0x6, 0x6, 0x8, 0x0, 0x9, 0x100, 0x2, 0x28, 0x8], 0xa, 0x0, r1, r2}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x200000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x96}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x283468b1, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x24060804) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xa000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnetconf={0x14, 0x52, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4060) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x101040, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000004c0)="9a12cd94586a5c3d8aeac031a25445b33d7aa92c8955ce8bc2c64f2205dbeaedf0a362f0629e87edbae8c9dac5f74a23fec6aa37f141a9f6c254c5de3fdaaceafae5595b0013f9355bbb972034b7933973156a8f5a5f65c816d7fc78fefe8cc15143c24e09c06e63993e2aa5db906aec0f3e4a52ea4f54a5a4ac08cb8fdc09512dca7b18b8") prctl$PR_MCE_KILL(0x21, 0x1, 0x0) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20040000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000700)={0xffeffff, 0x28000000, 0x64, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0xa10905, 0x7fff, [], @string=&(0x7f0000000680)=0xff}}) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740), &(0x7f0000000780)=0x4) r6 = openat(r3, &(0x7f00000007c0)='./file0\x00', 0x4040, 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000940), &(0x7f0000000980)=0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000009c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x23, @mcast1, 0x5}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0xfe14, @private2, 0x4}, @in6={0xa, 0x4e23, 0xc5, @empty, 0x7}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0xa, @private1, 0x4}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x80, @remote, 0x7}], 0xbc) [ 433.235108][ T3219] usb 1-1: new high-speed USB device number 4 using dummy_hcd 14:26:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000294827bb00", @ANYRES32=r3, @ANYBLOB="0000080000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$packet(0x11, 0x20000000000003, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 433.463843][ T3219] usb 1-1: device descriptor read/8, error -71 [ 433.494520][ T8716] Bluetooth: hci0: command 0x0419 tx timeout [ 433.628881][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.660571][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.676394][ T3219] usb 1-1: device descriptor read/8, error -71 [ 433.991869][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.023353][ T8771] device veth3 entered promiscuous mode [ 434.029902][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.045296][ T8781] device veth3 left promiscuous mode 14:26:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0xb04, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) [ 434.320837][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0xb04, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) [ 434.515312][ T8794] IPVS: ftp: loaded support on port[0] = 21 [ 434.772439][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0xb04, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) [ 435.444079][ T8794] chnl_net:caif_netlink_parms(): no params data found 14:26:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0xb04, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) [ 435.666585][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 435.735550][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.742845][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.752715][ T8794] device bridge_slave_0 entered promiscuous mode [ 435.766840][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.774269][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.784002][ T8794] device bridge_slave_1 entered promiscuous mode [ 435.835946][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.854045][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.908434][ T8794] team0: Port device team_slave_0 added [ 435.924244][ T8794] team0: Port device team_slave_1 added 14:26:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) [ 436.021346][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.029635][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.055949][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.150860][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.162037][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.169333][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.195463][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:26:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) socket$inet6(0xa, 0x803, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r3, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 436.366503][ T8794] device hsr_slave_0 entered promiscuous mode [ 436.374499][ T8716] Bluetooth: hci1: command 0x0409 tx timeout [ 436.399237][ T8794] device hsr_slave_1 entered promiscuous mode [ 436.425427][ T8794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.433465][ T8794] Cannot create hsr debugfs directory [ 436.445466][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) socket$inet6(0xa, 0x803, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 436.903991][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) socket$inet6(0xa, 0x803, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 437.036008][ T8794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.075672][ T8794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.096548][ T8794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.125261][ T8794] netdevsim netdevsim1 netdevsim3: renamed from eth3 14:26:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) socket$inet6(0xa, 0x803, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 437.660771][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.730337][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.739669][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.769292][ T8794] 8021q: adding VLAN 0 to HW filter on device team0 14:26:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0c9f0000000000006f77756ba7825a7162703e67da2f2200"/33], 0x14}], 0x1}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r3, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 437.828433][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.838798][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.848536][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.855870][ T8716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.928194][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.937946][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.948134][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.957638][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.965035][ T8716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.974284][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.985327][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.996392][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.007239][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.089548][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.101429][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.112411][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.178950][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.188957][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.222241][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.232866][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.265444][ T8794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.388202][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.396697][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.454312][ T8716] Bluetooth: hci1: command 0x041b tx timeout [ 438.468047][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.650976][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.661411][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.740434][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.750477][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.777848][ T8794] device veth0_vlan entered promiscuous mode [ 438.789977][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 438.799590][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.854025][ T8794] device veth1_vlan entered promiscuous mode [ 439.019035][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.028872][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.038628][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.048785][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.088288][ T8794] device veth0_macvtap entered promiscuous mode [ 439.116856][ T8794] device veth1_macvtap entered promiscuous mode [ 439.197921][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 439.209705][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.224206][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.241026][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.251355][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 439.261211][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.272081][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.319852][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 439.332243][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.346595][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.355667][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 439.366006][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:26:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x48}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8040008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100a2abd7000fbdbdf252000000008004000", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x20008015) 14:26:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r2, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 440.007058][ T9049] __nla_validate_parse: 3 callbacks suppressed [ 440.007099][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 440.111998][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:26:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r2, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 440.238692][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:26:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x48}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8040008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100a2abd7000fbdbdf252000000008004000", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x20008015) [ 440.470203][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 440.536164][ T8715] Bluetooth: hci1: command 0x040f tx timeout [ 440.738745][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:26:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r2, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:46 executing program 1: unshare(0xa56a860feed18de6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xb}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xd8}}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000180)={'syzkaller1\x00', 0x3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r5 = open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x81100) write$P9_RAUTH(r5, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x2, 0x1}}, 0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 441.019299][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:46 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r1, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:47 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r1, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:47 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) socket(0x1000000010, 0x80002, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:47 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:48 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 442.616422][ T12] Bluetooth: hci1: command 0x0419 tx timeout 14:26:48 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x8000) r2 = socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x200000000000011, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'sit0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x5, 0x100, 0x494e4f4b, 0x0, 0x5, 0xfffffff7, 0x0, 0x4, 0x0, 0x2, 0x2, 0x7}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000000c0)=0x1, 0x4) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001800010900000000000000000a0000000000000000001100140005000000000000000000000000000000000108000400", @ANYRES32=r7], 0x4c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 14:26:48 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) [ 442.999630][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.049545][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 14:26:48 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:48 executing program 1: io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4001, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0xfffffff7, 0x988}]}, 0xc, 0x3) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$bt_cmtp(0x1f, 0x3, 0x5) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(0x0, 0x3, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000200)="8067b5bb4b915e1bdea1c11806c7bb4b3f02e82781ae5293bca8620b40374302f21f56d6c4b2f8f90ebc8176f5486136cf1f3f694065002a630daa56849a59fb656a1d6f65fefd363601fea51a34ce791c98e1f10e2a05ea334b4f26867418192e9867395b010791aaf5d4ced4b9469c9813b124ac4959ded07195d9", 0x7c, 0x4, 0x0, 0x3, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfc01, r4, &(0x7f0000000340)="476efbef633d460a4c8d99fdb81712dfa740a4984ad852e91c84f7b20d3f9f09805acc7cab2d8d8f9dda287167f5add6cee321fd4c8e6b5ed6c7971cb8279068e272e19c5a89f58b9740e508c20f7845c018612c88b86ffce6991e31ffbc13e808656151b9ef666152851da8436c1a92f2872f48a4ca9d37dbe50da15a7362aaf20d1c541c4ff99849eb9effb8172a85b692c5123358ca386475d660b9e173136871c72d12f8a0a3ff95dddb8d32165e242a81762523531256c43fecd1ed953715649c647c567b2df068b7e3be617c2b0764b6e50ee24686debc7e1675b928d5e259", 0xe2, 0x10001, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000440)="2d36a6db22b4a5dfdc36a0a596edb916fd68c331994bfd4b70db9280da0cf74b62631b2bf688c9554166d4295d3018eab73037f963bfbb07a1dd6c2ea45ea2054b373f9a6f", 0x45, 0x20, 0x0, 0x1}]) io_uring_setup(0x4754, &(0x7f0000000140)={0x0, 0x142e, 0x0, 0x1, 0x253}) 14:26:49 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffe}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, 0x0, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000000340)=""/4096) 14:26:49 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) connect(0xffffffffffffffff, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x7009}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) 14:26:49 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, 0x0, 0x0) [ 444.314593][ T930] Bluetooth: hci2: Frame reassembly failed (-84) 14:26:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x7009}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) [ 444.387178][ T8506] Bluetooth: hci3: Frame reassembly failed (-84) 14:26:50 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, 0x0, 0x0) [ 444.717854][ T8506] Bluetooth: hci4: Frame reassembly failed (-84) 14:26:50 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, 0x0, 0x0) 14:26:50 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:51 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:51 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:51 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x1d, './file0\x00'}, 0x80) 14:26:51 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x1d00, './file0\x00'}, 0x80) 14:26:52 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x18) [ 446.374713][ T8714] Bluetooth: hci2: command 0xfc11 tx timeout [ 446.374748][ T2274] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 446.455148][ T8497] Bluetooth: hci3: Entering manufacturer mode failed (-110) 14:26:52 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x20000400) [ 446.773201][ T9127] Bluetooth: hci4: Entering manufacturer mode failed (-110) 14:26:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) 14:26:52 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/236, 0xec}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000080)={0x2e, 0x1, [], [@ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x754}, @pad1]}, 0x18) msgrcv(r1, 0x0, 0x1, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000580)={{0x0}}) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/70) connect(r0, &(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80) 14:26:52 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = socket$inet(0xa, 0x5, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0xf, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="31000000da5a94d9b7005773faee45d3a15832b122f9a8ba09a7489727eb9416dbc7b3701c8dea355031253f3419911eb3e47df763"], &(0x7f0000000140)=0x39) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) [ 447.415296][ T9183] tipc: Enabling not permitted [ 447.420986][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 448.176772][ T9190] tipc: Enabling not permitted [ 448.182625][ T9190] tipc: Enabling of bearer rejected, failed to enable media 14:26:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c041, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}, 0x800}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000000)={0x7, "ee0179ac2c729e3ec4284aca344df9597dd24c3a4d104eb8dc02ca905490d500", 0x8, 0x1f, 0x10000, 0x2, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x40000000000003f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x34, r8, 0xd34c83bbe0ec6c25, 0x0, 0x0, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c4, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x9ed0}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf1f}, {0x8, 0x15, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x400}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x6}}]}, 0x1c4}}, 0x0) 14:26:54 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xb}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xd8}}, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'vlan\x00'}, {0x20, '-U}'}, {0x20, 'vlan\x00'}, {0x20, 'vlan\x00'}], 0xa, "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"}, 0x11f) getsockname(r0, &(0x7f0000000000)=@in={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x80) [ 448.615948][ T9197] ===================================================== [ 448.623120][ T9197] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 448.630648][ T9197] CPU: 0 PID: 9197 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 448.639251][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.649331][ T9197] Call Trace: [ 448.652743][ T9197] dump_stack+0x21c/0x280 [ 448.657125][ T9197] kmsan_report+0xf7/0x1e0 [ 448.661594][ T9197] kmsan_internal_check_memory+0x238/0x3d0 [ 448.667426][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.672654][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.677892][ T9197] kmsan_copy_to_user+0x81/0x90 [ 448.682839][ T9197] _copy_to_user+0x18e/0x260 [ 448.687547][ T9197] move_addr_to_user+0x3de/0x670 [ 448.692571][ T9197] __sys_getsockname+0x407/0x5e0 [ 448.697553][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.702783][ T9197] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 448.708619][ T9197] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 448.714853][ T9197] ? __prepare_exit_to_usermode+0x16c/0x560 [ 448.720790][ T9197] __se_sys_getsockname+0x91/0xb0 [ 448.725855][ T9197] __x64_sys_getsockname+0x4a/0x70 [ 448.731073][ T9197] do_syscall_64+0xad/0x160 [ 448.735653][ T9197] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.741580][ T9197] RIP: 0033:0x45d189 [ 448.745482][ T9197] Code: Bad RIP value. [ 448.749569][ T9197] RSP: 002b:00007fb60b3dfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 448.758004][ T9197] RAX: ffffffffffffffda RBX: 00000000000046c0 RCX: 000000000045d189 [ 448.765999][ T9197] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 448.773995][ T9197] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 448.781997][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 448.789993][ T9197] R13: 000000000169fb6f R14: 00007fb60b3e09c0 R15: 000000000118cf4c [ 448.797997][ T9197] [ 448.800339][ T9197] Local variable ----address@__sys_getsockname created at: [ 448.807562][ T9197] __sys_getsockname+0x91/0x5e0 [ 448.812434][ T9197] __sys_getsockname+0x91/0x5e0 [ 448.817283][ T9197] [ 448.819623][ T9197] Bytes 2-3 of 24 are uninitialized [ 448.824830][ T9197] Memory access of size 24 starts at ffff888030d0fde8 [ 448.831600][ T9197] Data copied to user address 0000000020000000 [ 448.837757][ T9197] ===================================================== [ 448.844702][ T9197] Disabling lock debugging due to kernel taint [ 448.850868][ T9197] Kernel panic - not syncing: panic_on_warn set ... [ 448.857487][ T9197] CPU: 0 PID: 9197 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 448.867476][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.877569][ T9197] Call Trace: [ 448.880900][ T9197] dump_stack+0x21c/0x280 [ 448.885375][ T9197] panic+0x4d7/0xef7 [ 448.889328][ T9197] ? add_taint+0x17c/0x210 [ 448.893804][ T9197] kmsan_report+0x1df/0x1e0 [ 448.898340][ T9197] kmsan_internal_check_memory+0x238/0x3d0 [ 448.904196][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.909417][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.914651][ T9197] kmsan_copy_to_user+0x81/0x90 [ 448.919528][ T9197] _copy_to_user+0x18e/0x260 [ 448.924176][ T9197] move_addr_to_user+0x3de/0x670 [ 448.929166][ T9197] __sys_getsockname+0x407/0x5e0 [ 448.934148][ T9197] ? kmsan_get_metadata+0x116/0x180 [ 448.939373][ T9197] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 448.945213][ T9197] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 448.951399][ T9197] ? __prepare_exit_to_usermode+0x16c/0x560 [ 448.957327][ T9197] __se_sys_getsockname+0x91/0xb0 [ 448.962387][ T9197] __x64_sys_getsockname+0x4a/0x70 [ 448.967528][ T9197] do_syscall_64+0xad/0x160 [ 448.972077][ T9197] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.977986][ T9197] RIP: 0033:0x45d189 [ 448.981880][ T9197] Code: Bad RIP value. [ 448.985954][ T9197] RSP: 002b:00007fb60b3dfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 448.994412][ T9197] RAX: ffffffffffffffda RBX: 00000000000046c0 RCX: 000000000045d189 [ 449.002411][ T9197] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 449.010402][ T9197] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 449.018388][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 449.026385][ T9197] R13: 000000000169fb6f R14: 00007fb60b3e09c0 R15: 000000000118cf4c [ 449.035424][ T9197] Kernel Offset: disabled [ 449.039757][ T9197] Rebooting in 86400 seconds..