[ 54.778983] audit: type=1800 audit(1541116641.823:25): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.798403] audit: type=1800 audit(1541116641.823:26): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.818112] audit: type=1800 audit(1541116641.853:27): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.753630] sshd (6319) used greatest stack depth: 53232 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts. 2018/11/01 23:57:34 fuzzer started 2018/11/01 23:57:39 dialing manager at 10.128.0.26:41963 2018/11/01 23:57:39 syscalls: 1 2018/11/01 23:57:39 code coverage: enabled 2018/11/01 23:57:39 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/01 23:57:39 setuid sandbox: enabled 2018/11/01 23:57:39 namespace sandbox: enabled 2018/11/01 23:57:39 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/01 23:57:39 fault injection: enabled 2018/11/01 23:57:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/01 23:57:39 net packed injection: enabled 2018/11/01 23:57:39 net device setup: enabled 23:59:59 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x6, 0x6, 0x6f64320d, 0x4, 0x8}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdd8c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x754}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000200)={0x4, 0x103, 0x7, {0x4, 0x3f, 0x2, 0x8001}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0xffffffffffffff55, 0x7, 0x2, 0x81}, {0x5, 0xfffffffffffffffa, 0x8}]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3, 0x8, [0x5, 0x100, 0x0, 0xffff, 0x3, 0x2, 0x3ff, 0xffff]}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x0, 0x80, 0x0, 0x4, 0x7, 0x38c, 0x7fff, {r3, @in6={{0xa, 0x4e23, 0x7f, @remote, 0x40}}, 0x8, 0x827e, 0x6, 0x7f, 0x100000001}}, &(0x7f0000000480)=0xb0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x240000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r1, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x31}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000700)={r3, 0x20, 0x400}, 0x8) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000740), 0x4) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000800)={r7, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000840)={r4, 0xffffffffffffffe1, 0x72}, &(0x7f0000000880)=0x8) openat$cgroup_subtree(r0, &(0x7f00000008c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000900)={0xc618, [0x1000, 0x7, 0x4, 0x7, 0x3, 0x1f, 0x7, 0x8, 0x1f, 0x1ff, 0x401, 0xae39, 0x0, 0x0, 0x400, 0x401, 0x1f, 0x5, 0x0, 0xffffffffffffffc1, 0x2d7, 0x0, 0xf68, 0x473, 0x0, 0x2, 0x4, 0x0, 0xffffffffffffdb0f, 0xff, 0x1f, 0x7, 0x4, 0x3ff, 0xd85, 0x4, 0x3, 0x80000000, 0xcd, 0x1ff, 0x49a8, 0xfffffffffffffff9, 0x8, 0x5, 0xfffffffffffffbb6, 0xea, 0x1b91, 0x149], 0xb}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000980)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a00)={{0x1, 0x2, 0x100000001, 0xc7}, 0x6, 0x20000200, 0x7, r8, 0x3, 0x6, 'syz0\x00', &(0x7f00000009c0)=['/dev/infiniband/rdma_cm\x00', '\x00', "252e1201706f7369785f61636c5f6163636573732f00"], 0x2f, [], [0x0, 0xf48d, 0x4, 0x6]}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) write$FUSE_BMAP(r0, &(0x7f0000000c40)={0x18, 0x0, 0x5, {0x7}}, 0x18) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7ff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x188, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xef}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000f00)="3939e34e8382b75ea763563c51719a7e7d8d4f4e283f9945f3d3a89cf0cf3de5ec883ef1b4fa75ffc68925bb8dbd51fb4689842d35996d28d820cb07a79cafdada2c079410478c1a3083f9ab6feee86995374f4070ca6a7f9aa2348d395163c6b9d55165af5834e1d8267d8eb2d9b1e75b8573e6962ac6806838926551e8535f45f0c0f4c5019550c5b5eece3430a82df4d35f5bda81a4b2bc99eddce27abc519fc7b9c44042458d34fa77df7280a257be38d9dc8000f51ba7cfd0a13b0fcb8e7981b4fd50e00b75ef9cabc5fd0a9d613ed71223d28527769eb0228e1699e785735985e6da16484d9e3e2d57102aa92fe53e700f1f3a", 0xf6) syzkaller login: [ 213.338955] IPVS: ftp: loaded support on port[0] = 21 [ 215.492094] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.498617] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.507319] device bridge_slave_0 entered promiscuous mode [ 215.636686] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.643264] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.651651] device bridge_slave_1 entered promiscuous mode [ 215.778248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.905207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.297626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.430118] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:00:03 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r1}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) getrandom(&(0x7f0000000180)=""/122, 0x7a, 0x1) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000200)) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000240)=0x8, 0x4) syz_extract_tcp_res(&(0x7f0000000280), 0x1, 0x6) unlink(&(0x7f00000002c0)='./file0\x00') getcwd(&(0x7f0000000300)=""/18, 0x12) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'trusted.', ']\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000400)=0x9) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000440)) ioctl$BLKRRPART(r0, 0x125f, 0x0) sendto(r0, &(0x7f0000000480)="d17eee", 0x3, 0x24008041, &(0x7f00000004c0)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80) openat$vnet(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-net\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r0, &(0x7f0000000580)="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", &(0x7f0000000680)="22d7bad3ef134fa6cbc934497b0f8098360385b9e17e87da453697ba120e33f7b6c5d43bae70dd3a20c51785dbb6b9e1124f511f773e47566d6fcac38ce2cb71c932724fe2cfb36f556ac3870fd96484b8c5cde1f132a4462275016d856008d132c9e5128030935f5c62b0e331b8b25f57ba4af89aa44e7a0487a3be20301d8f3704486ff649068ab5f3d47247a5fd40207d3df085bf263e406844b7"}, 0x20) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000780)) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', r2}) mkdir(&(0x7f0000000800)='./file0\x00', 0xa0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000a80)={0x1, 0x1, &(0x7f0000000840)=""/245, &(0x7f0000000940)=""/60, &(0x7f0000000980)=""/208, 0x3000}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/zero\x00', 0x200082, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000c00)={'broute\x00', 0x0, 0x3, 0x4d, [], 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b80)=""/77}, &(0x7f0000000c80)=0x78) r5 = syz_open_dev$vcsa(&(0x7f0000000cc0)='/dev/vcsa#\x00', 0x0, 0x400) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000d00)="b92bed54503a6938009c1cb048535299e005e6d144220f77167edef309a90b0a50182f62a16304934d166e7a909107", 0x2f) listxattr(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80), 0x0) [ 217.236579] IPVS: ftp: loaded support on port[0] = 21 [ 217.335253] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.343411] team0: Port device team_slave_0 added [ 217.479644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.487746] team0: Port device team_slave_1 added [ 217.716082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.873345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.004233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.012075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.021031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.215022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.222844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.232147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.472624] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.479113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.486235] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.492751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.501417] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.758522] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.765211] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.773703] device bridge_slave_0 entered promiscuous mode [ 220.902377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.058650] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.065428] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.073907] device bridge_slave_1 entered promiscuous mode [ 221.276831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.507049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.089997] bond0: Enslaving bond_slave_0 as an active interface with an up link 00:00:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000080)={0x5000, 0x7001, 0x5, 0x5a5}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x700631db, 0x401}, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r3 = getegid() write$FUSE_ATTR(r0, &(0x7f00000002c0)={0x78, 0x0, 0x3, {0x2b, 0x2, 0x0, {0x5, 0x80000001, 0x100000000, 0x5, 0xfffffffffffff0ff, 0x7ff, 0xdd, 0xfffffffffffffe00, 0x8, 0xf43, 0x8, r2, r3, 0x2, 0x5}}}, 0x78) prctl$getname(0x10, &(0x7f0000000340)=""/38) r4 = timerfd_create(0x0, 0xc2566d35304a2827) recvfrom(r0, &(0x7f0000000380)=""/90, 0x5a, 0x40, 0x0, 0x0) setfsgid(r3) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) signalfd4(r4, &(0x7f0000000440)={0x1}, 0x8, 0x80000) lseek(r4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r1, 0xdb18}, &(0x7f00000004c0)=0xc) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000680)={'broute\x00', 0x0, 0x3, 0xc5, [], 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000000580)=""/197}, &(0x7f0000000700)=0x78) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffc00) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) utimensat(r0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)={{0x0, 0x7530}, {r5, r6/1000+10000}}, 0x100) write$P9_RLINK(r0, &(0x7f0000000880)={0x7, 0x47, 0x2}, 0x7) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000008c0)={0x0, 'bridge_slave_0\x00'}, 0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r1, 0xfffffffffffff5a4}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000940)={'dummy0\x00', {0x2, 0x4e20, @remote}}) r7 = syz_open_dev$adsp(&(0x7f0000000980)='/dev/adsp#\x00', 0x9, 0x2040) bind(r7, &(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @loopback}, 0x7fffffff, 0x4, 0x2, 0x3}}, 0x80) r8 = msgget$private(0x0, 0x0) msgrcv(r8, &(0x7f0000000a40)={0x0, ""/224}, 0xe8, 0x1, 0x1800) [ 222.291645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.472091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.479133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.770907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.778143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.047285] IPVS: ftp: loaded support on port[0] = 21 [ 223.555204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.563311] team0: Port device team_slave_0 added [ 223.880006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.888178] team0: Port device team_slave_1 added [ 224.078206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.085427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.094083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.363867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.370964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.379802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.639787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.647681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.656700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.919928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.927708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.936737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.983956] ip (6596) used greatest stack depth: 53216 bytes left [ 227.060359] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.067005] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.075591] device bridge_slave_0 entered promiscuous mode [ 227.371583] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.378188] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.386693] device bridge_slave_1 entered promiscuous mode [ 227.530570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.769637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.303453] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.309933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.317062] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.323592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.332358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.469769] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.696446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.982211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.994654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.032491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.246298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.253534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.870427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.878478] team0: Port device team_slave_0 added [ 230.065797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.073851] team0: Port device team_slave_1 added [ 230.346309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.353572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.362620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:00:17 executing program 3: socketpair(0x0, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x7ff, 0x6, [], {0x0, @bt={0x5, 0x8, 0x1, 0x1, 0x95db, 0xfffffffffffffffc, 0x0, 0x3, 0x6, 0x7fffffff, 0x7, 0x7ff, 0x1f, 0x800, 0x14, 0xf}}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={r2, r3/1000+10000}, 0x10) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000180)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000240)={0xd, {0x10001, 0x7, 0x40, 0x2}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x8000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e23, 0x4, @mcast1, 0x10001}, {0xa, 0x1, 0x1f, @mcast2, 0x10001}, 0x4, [0xfffffffffffffffc, 0x10000, 0x8, 0x7b, 0x80000000, 0x4, 0x80000000, 0xffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e23, 0x288a642a, @loopback, 0xa0000000000000}, {0xa, 0x4e23, 0x1, @mcast2, 0x7}, 0x0, [0x2, 0x3, 0x100000001, 0x1, 0x7, 0x1, 0x1000, 0x401]}, 0x5c) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000480)) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000500)={0x7, 0x8, 0x6, 0x8, 0xd9, 0x40, 0x100000001, 0x7f, 0x1, 0xffff, 0x3, 0x7}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', r1}, 0x10) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) preadv(r4, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/37, 0x25}, {&(0x7f0000000740)=""/156, 0x9c}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/119, 0x77}, {&(0x7f0000000b40)=""/198, 0xc6}], 0xa, 0x0) clock_gettime(0x7, &(0x7f0000000d00)) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000d40)={0x80000001, 0x5, 0x3, 0x81, 0x4, 0x4}) r5 = semget(0x1, 0x3, 0x2) semtimedop(r5, &(0x7f0000000d80)=[{0x4, 0x19be8a5a, 0x1000}, {0x1, 0x80, 0x1000}, {0x3, 0x100, 0x800}, {0x4, 0x7, 0x800}, {0x1, 0x7, 0x1000}, {0x3, 0x3ff, 0x1000}, {0x4, 0x2, 0x1000}], 0x7, &(0x7f0000000dc0)={0x77359400}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000e00)={0x5, 0x31eb97f8, 0xa5}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000ec0)={0x8000000, 0x9f0, 0x9c0, 0x4, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000f00)={0x8, 0x2, 0x1, {0x0, 0x1c9c380}, 0x10001, 0x8e63}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000f80)) listen(r1, 0x2) semget(0x3, 0x1, 0x10) fcntl$setpipe(r4, 0x407, 0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000fc0)={0x0, 0x4}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001040)={r6, 0x2, 0x7, 0x3, 0x8, 0x6}, &(0x7f0000001080)=0x14) [ 230.578472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.671979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.679094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.687755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.078111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.085891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.095043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.493793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.501387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.510579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.556233] IPVS: ftp: loaded support on port[0] = 21 [ 231.946187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.329787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.336358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.344624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.598737] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.093865] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.100352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.107493] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.114027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.122787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.129657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.888870] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.895559] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.904106] device bridge_slave_0 entered promiscuous mode [ 237.227973] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.234544] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.242986] device bridge_slave_1 entered promiscuous mode [ 237.506728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.788895] not chained 10000 origins [ 237.792746] CPU: 1 PID: 6886 Comm: ip Not tainted 4.19.0+ #77 [ 237.798636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.808002] Call Trace: [ 237.810604] dump_stack+0x32d/0x480 [ 237.814250] ? save_stack_trace+0xc6/0x110 [ 237.818516] kmsan_internal_chain_origin+0x222/0x240 [ 237.823636] ? br_port_fill_attrs+0x42b/0x1ea0 [ 237.828254] ? ___sys_recvmsg+0x444/0xae0 [ 237.832425] ? __se_sys_recvmsg+0x2fa/0x450 [ 237.836761] ? __x64_sys_recvmsg+0x4a/0x70 [ 237.841009] ? do_syscall_64+0xcf/0x110 [ 237.844996] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.850377] ? kmsan_internal_chain_origin+0x136/0x240 [ 237.855670] ? __msan_chain_origin+0x6d/0xd0 [ 237.860104] ? __save_stack_trace+0x8be/0xc60 [ 237.864610] ? save_stack_trace+0xc6/0x110 [ 237.868864] ? kmsan_internal_chain_origin+0x136/0x240 [ 237.874151] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 237.878837] ? __msan_memcpy+0x6f/0x80 [ 237.882738] ? nla_put+0x20a/0x2d0 [ 237.886296] ? br_port_fill_attrs+0x366/0x1ea0 [ 237.890896] ? br_port_fill_slave_info+0xff/0x120 [ 237.895755] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 237.900258] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 237.904689] ? netlink_dump+0xb09/0x1750 [ 237.908762] ? netlink_recvmsg+0xec2/0x19d0 [ 237.913104] ? sock_recvmsg+0x1d1/0x230 [ 237.917096] ? ___sys_recvmsg+0x444/0xae0 [ 237.921272] ? __se_sys_recvmsg+0x2fa/0x450 [ 237.925608] ? __x64_sys_recvmsg+0x4a/0x70 [ 237.929850] ? do_syscall_64+0xcf/0x110 [ 237.933836] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.939222] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 237.944607] ? __module_address+0x6a/0x610 [ 237.948869] ? get_stack_info+0x863/0x9d0 [ 237.953042] __msan_chain_origin+0x6d/0xd0 [ 237.957292] ? netlink_dump+0xb09/0x1750 [ 237.961368] __save_stack_trace+0x8be/0xc60 [ 237.966222] ? netlink_dump+0xb09/0x1750 [ 237.970296] save_stack_trace+0xc6/0x110 [ 237.974371] kmsan_internal_chain_origin+0x136/0x240 [ 237.979490] ? kmsan_internal_chain_origin+0x136/0x240 [ 237.984778] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 237.989459] ? __msan_memcpy+0x6f/0x80 [ 237.993352] ? nla_put+0x20a/0x2d0 [ 237.996907] ? br_port_fill_attrs+0x42b/0x1ea0 [ 238.001500] ? br_port_fill_slave_info+0xff/0x120 [ 238.006353] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.010854] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.015270] ? netlink_dump+0xb09/0x1750 [ 238.019336] ? netlink_recvmsg+0xec2/0x19d0 [ 238.023760] ? sock_recvmsg+0x1d1/0x230 [ 238.027742] ? ___sys_recvmsg+0x444/0xae0 [ 238.031899] ? __se_sys_recvmsg+0x2fa/0x450 [ 238.036229] ? __x64_sys_recvmsg+0x4a/0x70 [ 238.040476] ? do_syscall_64+0xcf/0x110 [ 238.044468] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.049844] ? __msan_poison_alloca+0x1e0/0x2b0 [ 238.054542] ? kmsan_set_origin+0x83/0x130 [ 238.058795] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 238.064178] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.068700] __msan_memcpy+0x6f/0x80 [ 238.072432] nla_put+0x20a/0x2d0 [ 238.075823] br_port_fill_attrs+0x42b/0x1ea0 [ 238.080251] br_port_fill_slave_info+0xff/0x120 [ 238.084933] ? br_port_get_slave_size+0x30/0x30 [ 238.089609] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.093971] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.098286] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 238.103672] ? rtnl_getlink+0xde0/0xde0 [ 238.107665] netlink_dump+0xb09/0x1750 [ 238.111590] netlink_recvmsg+0xec2/0x19d0 [ 238.115778] sock_recvmsg+0x1d1/0x230 [ 238.119592] ? netlink_sendmsg+0x1440/0x1440 [ 238.124016] ___sys_recvmsg+0x444/0xae0 [ 238.128022] ? __msan_poison_alloca+0x1e0/0x2b0 [ 238.133244] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 238.138617] ? __fdget+0x23c/0x440 [ 238.142177] __se_sys_recvmsg+0x2fa/0x450 [ 238.146350] __x64_sys_recvmsg+0x4a/0x70 [ 238.150423] do_syscall_64+0xcf/0x110 [ 238.154239] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.159433] RIP: 0033:0x7f551b67e210 [ 238.163170] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 238.182090] RSP: 002b:00007fffe10ce428 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 238.189819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f551b67e210 [ 238.197121] RDX: 0000000000000000 RSI: 00007fffe10ce470 RDI: 0000000000000003 [ 238.204413] RBP: 0000000000001fe4 R08: 00007f551b927ec8 R09: 0000000000000000 [ 238.211699] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000006395c0 [ 238.218974] R13: 00007fffe10d2500 R14: 0000000000001fe4 R15: 00007fffe10d0494 [ 238.226265] Uninit was stored to memory at: [ 238.230611] kmsan_internal_chain_origin+0x136/0x240 [ 238.235725] __msan_chain_origin+0x6d/0xd0 [ 238.239969] __save_stack_trace+0x8be/0xc60 [ 238.244299] save_stack_trace+0xc6/0x110 [ 238.248372] kmsan_internal_chain_origin+0x136/0x240 [ 238.253481] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.258016] __msan_memcpy+0x6f/0x80 [ 238.261742] nla_put+0x20a/0x2d0 [ 238.265126] br_port_fill_attrs+0x366/0x1ea0 [ 238.269545] br_port_fill_slave_info+0xff/0x120 [ 238.274228] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.278557] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.282798] netlink_dump+0xb09/0x1750 [ 238.286715] netlink_recvmsg+0xec2/0x19d0 [ 238.290871] sock_recvmsg+0x1d1/0x230 [ 238.294689] ___sys_recvmsg+0x444/0xae0 [ 238.298667] __se_sys_recvmsg+0x2fa/0x450 [ 238.302843] __x64_sys_recvmsg+0x4a/0x70 [ 238.306908] do_syscall_64+0xcf/0x110 [ 238.310726] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.315913] [ 238.317558] Uninit was stored to memory at: [ 238.321892] kmsan_internal_chain_origin+0x136/0x240 [ 238.327006] __msan_chain_origin+0x6d/0xd0 [ 238.331247] __save_stack_trace+0x8be/0xc60 [ 238.335572] save_stack_trace+0xc6/0x110 [ 238.339646] kmsan_internal_chain_origin+0x136/0x240 [ 238.344764] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.349265] __msan_memcpy+0x6f/0x80 [ 238.353013] nla_put+0x20a/0x2d0 [ 238.356390] br_port_fill_attrs+0x366/0x1ea0 [ 238.360805] br_port_fill_slave_info+0xff/0x120 [ 238.365486] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.369811] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.374055] netlink_dump+0xb09/0x1750 [ 238.377946] netlink_recvmsg+0xec2/0x19d0 [ 238.382107] sock_recvmsg+0x1d1/0x230 [ 238.385922] ___sys_recvmsg+0x444/0xae0 [ 238.389901] __se_sys_recvmsg+0x2fa/0x450 [ 238.394065] __x64_sys_recvmsg+0x4a/0x70 [ 238.398147] do_syscall_64+0xcf/0x110 [ 238.401963] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.407151] [ 238.408782] Uninit was stored to memory at: [ 238.413113] kmsan_internal_chain_origin+0x136/0x240 [ 238.418223] __msan_chain_origin+0x6d/0xd0 [ 238.422470] __save_stack_trace+0x8be/0xc60 [ 238.426797] save_stack_trace+0xc6/0x110 [ 238.430867] kmsan_internal_chain_origin+0x136/0x240 [ 238.435982] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.440488] __msan_memcpy+0x6f/0x80 [ 238.444210] nla_put+0x20a/0x2d0 [ 238.447583] br_port_fill_attrs+0x366/0x1ea0 [ 238.452002] br_port_fill_slave_info+0xff/0x120 [ 238.456692] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.461020] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.465263] netlink_dump+0xb09/0x1750 [ 238.469154] netlink_recvmsg+0xec2/0x19d0 [ 238.473309] sock_recvmsg+0x1d1/0x230 [ 238.477114] ___sys_recvmsg+0x444/0xae0 [ 238.481092] __se_sys_recvmsg+0x2fa/0x450 [ 238.485247] __x64_sys_recvmsg+0x4a/0x70 [ 238.489321] do_syscall_64+0xcf/0x110 [ 238.493130] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.498315] [ 238.499943] Uninit was stored to memory at: [ 238.504273] kmsan_internal_chain_origin+0x136/0x240 [ 238.509385] __msan_chain_origin+0x6d/0xd0 [ 238.513634] __save_stack_trace+0x8be/0xc60 [ 238.517960] save_stack_trace+0xc6/0x110 [ 238.522030] kmsan_internal_chain_origin+0x136/0x240 [ 238.527139] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.531641] __msan_memcpy+0x6f/0x80 [ 238.535373] nla_put+0x20a/0x2d0 [ 238.538748] br_port_fill_attrs+0x366/0x1ea0 [ 238.543168] br_port_fill_slave_info+0xff/0x120 [ 238.548023] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.552350] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.556588] netlink_dump+0xb09/0x1750 [ 238.560480] netlink_recvmsg+0xec2/0x19d0 [ 238.564641] sock_recvmsg+0x1d1/0x230 [ 238.568459] ___sys_recvmsg+0x444/0xae0 [ 238.572448] __se_sys_recvmsg+0x2fa/0x450 [ 238.576600] __x64_sys_recvmsg+0x4a/0x70 [ 238.580667] do_syscall_64+0xcf/0x110 [ 238.584486] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.589684] [ 238.591310] Uninit was stored to memory at: [ 238.595643] kmsan_internal_chain_origin+0x136/0x240 [ 238.600763] __msan_chain_origin+0x6d/0xd0 [ 238.605008] __save_stack_trace+0x8be/0xc60 [ 238.609336] save_stack_trace+0xc6/0x110 [ 238.613405] kmsan_internal_chain_origin+0x136/0x240 [ 238.618518] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.623024] __msan_memcpy+0x6f/0x80 [ 238.626742] nla_put+0x20a/0x2d0 [ 238.630116] br_port_fill_attrs+0x366/0x1ea0 [ 238.634530] br_port_fill_slave_info+0xff/0x120 [ 238.639212] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.643543] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.647786] netlink_dump+0xb09/0x1750 [ 238.651685] netlink_recvmsg+0xec2/0x19d0 [ 238.655846] sock_recvmsg+0x1d1/0x230 [ 238.659655] ___sys_recvmsg+0x444/0xae0 [ 238.663644] __se_sys_recvmsg+0x2fa/0x450 [ 238.667814] __x64_sys_recvmsg+0x4a/0x70 [ 238.671881] do_syscall_64+0xcf/0x110 [ 238.675696] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.680891] [ 238.682518] Uninit was stored to memory at: [ 238.686844] kmsan_internal_chain_origin+0x136/0x240 [ 238.691956] __msan_chain_origin+0x6d/0xd0 [ 238.696195] __save_stack_trace+0x8be/0xc60 [ 238.700520] save_stack_trace+0xc6/0x110 [ 238.704587] kmsan_internal_chain_origin+0x136/0x240 [ 238.709708] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.714216] __msan_memcpy+0x6f/0x80 [ 238.717940] nla_put+0x20a/0x2d0 [ 238.721313] br_port_fill_attrs+0x366/0x1ea0 [ 238.725733] br_port_fill_slave_info+0xff/0x120 [ 238.730410] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.734746] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.739000] netlink_dump+0xb09/0x1750 [ 238.742895] netlink_recvmsg+0xec2/0x19d0 [ 238.747056] sock_recvmsg+0x1d1/0x230 [ 238.750862] ___sys_recvmsg+0x444/0xae0 [ 238.754843] __se_sys_recvmsg+0x2fa/0x450 [ 238.758995] __x64_sys_recvmsg+0x4a/0x70 [ 238.763064] do_syscall_64+0xcf/0x110 [ 238.766873] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.772057] [ 238.773692] Uninit was stored to memory at: [ 238.778028] kmsan_internal_chain_origin+0x136/0x240 [ 238.783145] __msan_chain_origin+0x6d/0xd0 [ 238.787387] __save_stack_trace+0x8be/0xc60 [ 238.791717] save_stack_trace+0xc6/0x110 [ 238.795786] kmsan_internal_chain_origin+0x136/0x240 [ 238.800896] kmsan_memcpy_origins+0x13d/0x1b0 [ 238.805398] __msan_memcpy+0x6f/0x80 [ 238.809128] nla_put+0x20a/0x2d0 [ 238.812504] br_port_fill_attrs+0x366/0x1ea0 [ 238.816920] br_port_fill_slave_info+0xff/0x120 [ 238.821608] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 238.825941] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 238.830190] netlink_dump+0xb09/0x1750 [ 238.834179] netlink_recvmsg+0xec2/0x19d0 [ 238.838338] sock_recvmsg+0x1d1/0x230 00:00:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$KDDISABIO(r0, 0x4b37) r1 = dup3(r0, r0, 0x80000) write$vnet(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/222, 0xde, &(0x7f0000000180)=""/91, 0x3, 0x1}}, 0x68) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x300000, 0x401, 0x59}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r2, 0x7af6, 0x2, [0xe5a5, 0x4]}, 0xc) r3 = dup2(r1, r0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x9, 0x2002) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000380)={0x1, {0x16, 0x260}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000003c0)={0x3, 0x0, {0x3, 0x1, 0xfffffffffffffffd, 0x2, 0x4}}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000440)={0xf9, 0x0, 0x2, 0x5df, 0xa, [{0x0, 0x100000000, 0x8, 0x0, 0x0, 0x1000}, {0x7, 0x77c, 0x10001, 0x0, 0x0, 0x102}, {0x32bb3eb4, 0x4, 0x3}, {0x8001, 0x3ff, 0x4522, 0x0, 0x0, 0xc00}, {0x1ff, 0x9, 0x5, 0x0, 0x0, 0x880}, {0x22, 0x9, 0x5, 0x0, 0x0, 0x100}, {0x8, 0x6, 0x100000001, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x3}, {0x80000001, 0x6, 0x80000000, 0x0, 0x0, 0x8}, {0x3, 0x0, 0x400000000, 0x0, 0x0, 0x1}]}) write$nbd(r1, &(0x7f00000006c0)={0x67446698, 0x1, 0x4, 0x4, 0x4, "700dbd835938d5ca4f76ac3ce2b63855abf9888345f0949e6a265d1fc58ceda59dda65b8f2805027578288a4fc02fce2e52896e78e97de83e7b0370ee9b61cddc988ea56373ed7b7bbf9900f400e411e2061e77fbfb8c81a49326bf4190275bf258442bf7aab1bcc3910e500ba9f1dea3f9459d1be4c6414497bc5359a3c4e698a5b8abdfc5de37bd904a19991e175a06930c695aeafd1d18d45cb6df9"}, 0xad) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000780)={'teql0\x00', {0x2, 0x4e22, @rand_addr=0x7}}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000007c0)={0x7b, 0x0, [0x6, 0x2, 0x86f, 0x9]}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000880)={r2, 0x7}, 0x8) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000008c0)='bridge_slave_0\x00') ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000940)={r2, 0x342, 0x10}, &(0x7f0000000980)=0xc) accept$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x4000, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000a80)='ns/net\x00') ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000b80)={0x4, 0x12, &(0x7f0000000ac0)="1b3b3bfc04162a6bd99160bdea4d84157ab25f5488f0dfbe1a4897a75ca3e82f7f1eab54737965f8d6f5ba31ed409654c2a1565ee8a852703c4f329357f0e632be2f2abfba25838826d8b8aebb2e77fb132de91b41743889a98248228f9f0ebd79127281fc6435ad6e4e3be3769795f54df201f657aca4081b99a6f8f5e3c1d1deb6dba3bc695635dec0e313c0924ce306ae1b86", {0x6, 0xff, 0x0, 0x4, 0x7, 0x5, 0x2, 0x4}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000bc0)={@loopback, 0x800, 0x0, 0x2, 0x2, 0x40, 0x5d, 0x80000000}, 0x20) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000c00)=""/143) ioctl$TCFLSH(r3, 0x540b, 0x3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000cc0)={r6, 0x1ff, 0x800, 0x6, 0x5, 0x174c7c46, 0x80, 0x5, {r6, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0x9, 0xfffffffffffffff7, 0x85a, 0xc98}}, &(0x7f0000000d80)=0xb0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, r8, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}]}, 0x90}}, 0x800) [ 238.842144] ___sys_recvmsg+0x444/0xae0 [ 238.846123] __se_sys_recvmsg+0x2fa/0x450 [ 238.850277] __x64_sys_recvmsg+0x4a/0x70 [ 238.854346] do_syscall_64+0xcf/0x110 [ 238.858159] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 238.863875] [ 238.865510] Local variable description: ----c.i.i@should_fail [ 238.871393] Variable was created at: [ 238.875120] should_fail+0x162/0x13c0 [ 238.878935] __alloc_pages_nodemask+0x6fd/0x6640 [ 238.905449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.926791] IPVS: ftp: loaded support on port[0] = 21 [ 240.106878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.595882] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.939781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.947105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.325352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.332583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.530301] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.538374] team0: Port device team_slave_0 added [ 242.904142] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.912185] team0: Port device team_slave_1 added [ 243.323940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 243.331082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.339951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.367716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.689462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 243.696772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.705672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.079336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.087234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.096532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 00:00:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x3, 0xb) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000000)) [ 244.549001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.556719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.565685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 00:00:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000100), 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 244.920886] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 00:00:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r0, 0x100000002) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x8001}, 0xb) read(r0, &(0x7f0000000140)=""/113, 0x18f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x40004e23, 0x80000000, @loopback, 0x3}, 0x1c) 00:00:33 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r0, 0x100000002) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x8001}, 0xb) read(r0, &(0x7f0000000140)=""/113, 0x18f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x40004e23, 0x80000000, @loopback, 0x3}, 0x1c) 00:00:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xec4}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001040)={0xffffffff, 0x80000001, 0x5, 0x101, 0x9, [{0x0, 0x8e, 0x100, 0x0, 0x0, 0xc00}, {0x80, 0x2, 0x800, 0x0, 0x0, 0x800}, {0x1, 0x7, 0x2, 0x0, 0x0, 0x1008}, {0x7fff, 0x85, 0x3}, {0xd73, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x80}, {0x2, 0xfffffffffffffffb, 0xffff, 0x0, 0x0, 0x4}, {0x2, 0x1, 0xfd7, 0x0, 0x0, 0x2000}, {0x1f, 0x5a81, 0x0, 0x0, 0x0, 0x8}, {0xfffffffffffffffc, 0xdc1, 0x800, 0x0, 0x0, 0x4}]}) [ 246.551448] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.558089] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.566779] device bridge_slave_0 entered promiscuous mode [ 246.589087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.595726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.603930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:00:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x400, 0x0) read$FUSE(r0, &(0x7f00000014c0), 0x1000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x8000000000000}, 0x14) [ 246.915928] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.922544] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.930999] device bridge_slave_1 entered promiscuous mode [ 247.390880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.732311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:00:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0x1000}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000000c0)="9b8b", &(0x7f0000000000)=""/5}, 0x18) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x7, &(0x7f0000000040)=0x7fffffff) [ 248.133994] 8021q: adding VLAN 0 to HW filter on device team0 00:00:35 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="53b93d0788c88b032241fa3331c4825972d94e65ed540b8185cee94bd8e20ac8f442a8e5fd9cb1aebff50ea47043c5e7852537269aed8ea6351292249bcc6d9a", 0x40, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f000027b000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f00001d2000/0x4000)=nil, 0x4000, 0xa) mprotect(&(0x7f0000796000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 249.004622] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.098558] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.105112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.112184] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.118639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.126927] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.184652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.304988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.628982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.636154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.793157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.800266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.716898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.724965] team0: Port device team_slave_0 added [ 251.056619] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.064880] team0: Port device team_slave_1 added [ 251.391952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.408580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 251.415928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.425051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.719296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 251.726532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.735252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.942183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.949793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.958848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.229955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.237738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.246958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.422807] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.329884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.336736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.344610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.438773] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.138463] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.145063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.152190] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.158757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.167594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 255.174803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:00:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x44, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)=""/45, 0x2d) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x3}, 0x0, 0x0, 'id1\x00', "74696d6572310000000000000000000000000000000013000000000000c4dd0000000100000000000000000000000000000000000000000000000000000000000000000000ffffffff00", 0x0, 0x0, 0x1}) [ 258.133706] not chained 20000 origins [ 258.137582] CPU: 1 PID: 7446 Comm: ip Not tainted 4.19.0+ #77 [ 258.143485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.152858] Call Trace: [ 258.155481] dump_stack+0x32d/0x480 [ 258.159144] ? save_stack_trace+0xc6/0x110 [ 258.163408] kmsan_internal_chain_origin+0x222/0x240 [ 258.168563] ? br_port_fill_attrs+0x42b/0x1ea0 [ 258.173172] ? ___sys_recvmsg+0x444/0xae0 [ 258.177334] ? __se_sys_recvmsg+0x2fa/0x450 [ 258.181697] ? __x64_sys_recvmsg+0x4a/0x70 [ 258.185952] ? do_syscall_64+0xcf/0x110 [ 258.189956] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.195336] ? do_syscall_64+0xcf/0x110 [ 258.199332] ? kmsan_internal_chain_origin+0x136/0x240 [ 258.204632] ? __msan_chain_origin+0x6d/0xd0 [ 258.209054] ? __save_stack_trace+0x8be/0xc60 [ 258.213647] ? save_stack_trace+0xc6/0x110 [ 258.217925] ? kmsan_internal_chain_origin+0x136/0x240 [ 258.223230] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 258.227937] ? __msan_memcpy+0x6f/0x80 [ 258.231853] ? nla_put+0x20a/0x2d0 [ 258.235422] ? br_port_fill_attrs+0x366/0x1ea0 [ 258.240035] ? br_port_fill_slave_info+0xff/0x120 [ 258.245016] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.249537] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.253970] ? netlink_dump+0xb09/0x1750 [ 258.258047] ? netlink_recvmsg+0xec2/0x19d0 [ 258.262376] ? sock_recvmsg+0x1d1/0x230 [ 258.266481] ? ___sys_recvmsg+0x444/0xae0 [ 258.270730] ? __se_sys_recvmsg+0x2fa/0x450 [ 258.275141] ? __x64_sys_recvmsg+0x4a/0x70 [ 258.279531] ? do_syscall_64+0xcf/0x110 [ 258.283541] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.289001] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 258.294364] ? __module_address+0x6a/0x610 [ 258.298709] ? get_stack_info+0x863/0x9d0 [ 258.302977] __msan_chain_origin+0x6d/0xd0 [ 258.307218] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 258.311894] __save_stack_trace+0x8be/0xc60 [ 258.316235] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 258.321026] save_stack_trace+0xc6/0x110 [ 258.325087] kmsan_internal_chain_origin+0x136/0x240 [ 258.330193] ? kmsan_internal_chain_origin+0x136/0x240 [ 258.335474] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 258.340226] ? __msan_memcpy+0x6f/0x80 [ 258.344216] ? nla_put+0x20a/0x2d0 [ 258.347775] ? br_port_fill_attrs+0x366/0x1ea0 [ 258.352374] ? br_port_fill_slave_info+0xff/0x120 [ 258.357233] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.361745] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.366259] ? netlink_dump+0xb09/0x1750 [ 258.370532] ? netlink_recvmsg+0xec2/0x19d0 [ 258.374942] ? sock_recvmsg+0x1d1/0x230 [ 258.378925] ? ___sys_recvmsg+0x444/0xae0 [ 258.383073] ? __se_sys_recvmsg+0x2fa/0x450 [ 258.387611] ? __x64_sys_recvmsg+0x4a/0x70 [ 258.391855] ? do_syscall_64+0xcf/0x110 [ 258.395835] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.401199] ? __msan_poison_alloca+0x1e0/0x2b0 [ 258.405879] ? kmsan_set_origin+0x83/0x130 [ 258.410258] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 258.415625] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.420134] __msan_memcpy+0x6f/0x80 [ 258.423849] nla_put+0x20a/0x2d0 [ 258.427273] br_port_fill_attrs+0x42b/0x1ea0 [ 258.431734] br_port_fill_slave_info+0xff/0x120 [ 258.436425] ? br_port_get_slave_size+0x30/0x30 [ 258.441095] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.445441] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.449738] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 258.455103] ? rtnl_getlink+0xde0/0xde0 [ 258.459077] netlink_dump+0xb09/0x1750 [ 258.462979] netlink_recvmsg+0xec2/0x19d0 [ 258.467313] sock_recvmsg+0x1d1/0x230 [ 258.471111] ? netlink_sendmsg+0x1440/0x1440 [ 258.475520] ___sys_recvmsg+0x444/0xae0 [ 258.479768] ? __msan_poison_alloca+0x1e0/0x2b0 [ 258.484442] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 258.489811] ? __fdget+0x23c/0x440 [ 258.493357] __se_sys_recvmsg+0x2fa/0x450 [ 258.497515] __x64_sys_recvmsg+0x4a/0x70 [ 258.501575] do_syscall_64+0xcf/0x110 [ 258.505412] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.510739] RIP: 0033:0x7f8d08116210 [ 258.514460] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 258.533421] RSP: 002b:00007fffc2188668 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 258.541142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d08116210 [ 258.548428] RDX: 0000000000000000 RSI: 00007fffc21886b0 RDI: 0000000000000003 [ 258.555823] RBP: 0000000000001f1c R08: 00007f8d083bfec8 R09: 00007f8d0815c800 [ 258.563181] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006395c0 [ 258.570451] R13: 00007fffc218c740 R14: 0000000000001f1c R15: 00007fffc218a60c [ 258.577741] Uninit was stored to memory at: [ 258.582074] kmsan_internal_chain_origin+0x136/0x240 [ 258.587176] __msan_chain_origin+0x6d/0xd0 [ 258.591405] __save_stack_trace+0x8be/0xc60 [ 258.595723] save_stack_trace+0xc6/0x110 [ 258.599830] kmsan_internal_chain_origin+0x136/0x240 [ 258.604939] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.609430] __msan_memcpy+0x6f/0x80 [ 258.613141] nla_put+0x20a/0x2d0 [ 258.616503] br_port_fill_attrs+0x366/0x1ea0 [ 258.620912] br_port_fill_slave_info+0xff/0x120 [ 258.625581] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.629898] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.634130] netlink_dump+0xb09/0x1750 [ 258.638009] netlink_recvmsg+0xec2/0x19d0 [ 258.642163] sock_recvmsg+0x1d1/0x230 [ 258.646113] ___sys_recvmsg+0x444/0xae0 [ 258.650132] __se_sys_recvmsg+0x2fa/0x450 [ 258.654286] __x64_sys_recvmsg+0x4a/0x70 [ 258.658342] do_syscall_64+0xcf/0x110 [ 258.662152] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.667346] [ 258.668968] Uninit was stored to memory at: [ 258.673288] kmsan_internal_chain_origin+0x136/0x240 [ 258.678390] __msan_chain_origin+0x6d/0xd0 [ 258.682620] __save_stack_trace+0x8be/0xc60 [ 258.686934] save_stack_trace+0xc6/0x110 [ 258.690992] kmsan_internal_chain_origin+0x136/0x240 [ 258.696135] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.700632] __msan_memcpy+0x6f/0x80 [ 258.704349] nla_put+0x20a/0x2d0 [ 258.707726] br_port_fill_attrs+0x366/0x1ea0 [ 258.712128] br_port_fill_slave_info+0xff/0x120 [ 258.716814] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.721140] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.725384] netlink_dump+0xb09/0x1750 [ 258.729265] netlink_recvmsg+0xec2/0x19d0 [ 258.733413] sock_recvmsg+0x1d1/0x230 [ 258.737215] ___sys_recvmsg+0x444/0xae0 [ 258.741205] __se_sys_recvmsg+0x2fa/0x450 [ 258.745352] __x64_sys_recvmsg+0x4a/0x70 [ 258.749409] do_syscall_64+0xcf/0x110 [ 258.753205] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.758384] [ 258.760075] Uninit was stored to memory at: [ 258.764403] kmsan_internal_chain_origin+0x136/0x240 [ 258.769505] __msan_chain_origin+0x6d/0xd0 [ 258.773739] __save_stack_trace+0x8be/0xc60 [ 258.778067] save_stack_trace+0xc6/0x110 [ 258.782127] kmsan_internal_chain_origin+0x136/0x240 [ 258.787226] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.791737] __msan_memcpy+0x6f/0x80 [ 258.795467] nla_put+0x20a/0x2d0 [ 258.798829] br_port_fill_attrs+0x366/0x1ea0 [ 258.803234] br_port_fill_slave_info+0xff/0x120 [ 258.807949] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.812287] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.816515] netlink_dump+0xb09/0x1750 [ 258.820398] netlink_recvmsg+0xec2/0x19d0 [ 258.824634] sock_recvmsg+0x1d1/0x230 [ 258.828483] ___sys_recvmsg+0x444/0xae0 [ 258.832463] __se_sys_recvmsg+0x2fa/0x450 [ 258.836607] __x64_sys_recvmsg+0x4a/0x70 [ 258.840659] do_syscall_64+0xcf/0x110 [ 258.844471] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.849653] [ 258.851324] Uninit was stored to memory at: [ 258.855647] kmsan_internal_chain_origin+0x136/0x240 [ 258.860749] __msan_chain_origin+0x6d/0xd0 [ 258.864983] __save_stack_trace+0x8be/0xc60 [ 258.869302] save_stack_trace+0xc6/0x110 [ 258.873359] kmsan_internal_chain_origin+0x136/0x240 [ 258.878462] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.882954] __msan_memcpy+0x6f/0x80 [ 258.886663] nla_put+0x20a/0x2d0 [ 258.890043] br_port_fill_attrs+0x366/0x1ea0 [ 258.894516] br_port_fill_slave_info+0xff/0x120 [ 258.899200] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.903533] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 258.907761] netlink_dump+0xb09/0x1750 [ 258.911646] netlink_recvmsg+0xec2/0x19d0 [ 258.915815] sock_recvmsg+0x1d1/0x230 [ 258.919614] ___sys_recvmsg+0x444/0xae0 [ 258.923584] __se_sys_recvmsg+0x2fa/0x450 [ 258.927735] __x64_sys_recvmsg+0x4a/0x70 [ 258.931802] do_syscall_64+0xcf/0x110 [ 258.935611] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.940792] [ 258.942414] Uninit was stored to memory at: [ 258.946780] kmsan_internal_chain_origin+0x136/0x240 [ 258.951889] __msan_chain_origin+0x6d/0xd0 [ 258.956123] __save_stack_trace+0x8be/0xc60 [ 258.960442] save_stack_trace+0xc6/0x110 [ 258.964595] kmsan_internal_chain_origin+0x136/0x240 [ 258.970950] kmsan_memcpy_origins+0x13d/0x1b0 [ 258.975449] __msan_memcpy+0x6f/0x80 [ 258.979159] nla_put+0x20a/0x2d0 [ 258.982531] br_port_fill_attrs+0x366/0x1ea0 [ 258.986952] br_port_fill_slave_info+0xff/0x120 [ 258.991616] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 258.995935] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 259.000164] netlink_dump+0xb09/0x1750 [ 259.004135] netlink_recvmsg+0xec2/0x19d0 [ 259.008368] sock_recvmsg+0x1d1/0x230 [ 259.012162] ___sys_recvmsg+0x444/0xae0 [ 259.016141] __se_sys_recvmsg+0x2fa/0x450 [ 259.020286] __x64_sys_recvmsg+0x4a/0x70 [ 259.024347] do_syscall_64+0xcf/0x110 [ 259.028144] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.033324] [ 259.034942] Uninit was stored to memory at: [ 259.039268] kmsan_internal_chain_origin+0x136/0x240 [ 259.044367] __msan_chain_origin+0x6d/0xd0 [ 259.048598] __save_stack_trace+0x8be/0xc60 [ 259.053013] save_stack_trace+0xc6/0x110 [ 259.057157] kmsan_internal_chain_origin+0x136/0x240 [ 259.062267] kmsan_memcpy_origins+0x13d/0x1b0 [ 259.066784] __msan_memcpy+0x6f/0x80 [ 259.070540] nla_put+0x20a/0x2d0 [ 259.073918] br_port_fill_attrs+0x366/0x1ea0 [ 259.078482] br_port_fill_slave_info+0xff/0x120 [ 259.083160] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 259.087475] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 259.095254] netlink_dump+0xb09/0x1750 [ 259.099176] netlink_recvmsg+0xec2/0x19d0 [ 259.103323] sock_recvmsg+0x1d1/0x230 [ 259.107116] ___sys_recvmsg+0x444/0xae0 [ 259.111083] __se_sys_recvmsg+0x2fa/0x450 [ 259.115280] __x64_sys_recvmsg+0x4a/0x70 [ 259.124189] do_syscall_64+0xcf/0x110 [ 259.127995] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.133178] [ 259.134799] Uninit was stored to memory at: [ 259.139169] kmsan_internal_chain_origin+0x136/0x240 [ 259.144274] __msan_chain_origin+0x6d/0xd0 [ 259.148508] __save_stack_trace+0x8be/0xc60 [ 259.152825] save_stack_trace+0xc6/0x110 [ 259.156894] kmsan_internal_chain_origin+0x136/0x240 [ 259.162002] kmsan_memcpy_origins+0x13d/0x1b0 [ 259.166521] __msan_memcpy+0x6f/0x80 [ 259.170249] nla_put+0x20a/0x2d0 [ 259.173611] br_port_fill_attrs+0x366/0x1ea0 [ 259.178018] br_port_fill_slave_info+0xff/0x120 [ 259.182719] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 259.187040] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 259.191271] netlink_dump+0xb09/0x1750 [ 259.195213] netlink_recvmsg+0xec2/0x19d0 [ 259.199363] sock_recvmsg+0x1d1/0x230 [ 259.203161] ___sys_recvmsg+0x444/0xae0 [ 259.207130] __se_sys_recvmsg+0x2fa/0x450 [ 259.211273] __x64_sys_recvmsg+0x4a/0x70 [ 259.215332] do_syscall_64+0xcf/0x110 [ 259.219136] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.224318] [ 259.225939] Local variable description: ----c.i.i@should_fail [ 259.231831] Variable was created at: [ 259.235552] should_fail+0x162/0x13c0 [ 259.239366] __alloc_pages_nodemask+0x6fd/0x6640 [ 260.403013] 8021q: adding VLAN 0 to HW filter on device bond0 00:00:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x82) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300), 0x0, &(0x7f00000003c0)={0x0, r1+10000000}, &(0x7f0000000400), 0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000002580), 0x3af}], 0x100000000000032f) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40000000000000, 0x280000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) [ 261.085802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.657467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.663967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.671650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.161017] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.499370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.986526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.489722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.497182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.505127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.008098] 8021q: adding VLAN 0 to HW filter on device team0 00:00:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xa, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000080)="b2798f8408dffd38660122048efb619f773d49778a741b1241c5bec9c14a5ab21600e0b79837974fce12de2d", &(0x7f00000000c0)=""/144}, 0x18) 00:00:54 executing program 4: 00:00:54 executing program 0: futex(&(0x7f0000000180), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$intptr(0x29, 0x2) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000440)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x4, &(0x7f00000000c0), 0x1, 0x2000000000002) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x80, 0x1, 0x3}}, 0x14) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x2}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e23, 0x10000, @ipv4={[], [], @multicast1}, 0x6}, @in6={0xa, 0x4e21, 0x100000000, @ipv4={[], [], @loopback}, 0x2}, @in={0x2, 0x4e23, @broadcast}], 0x74) 00:00:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88) set_robust_list(&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0xfff, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/95) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_newrule={0x28, 0x20, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x34, 0x80, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x2}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$inet_sctp(r0, &(0x7f0000002b80)={&(0x7f00000004c0)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000500)="e1605fa10b0b70d8acdbd9a631e4462e77dcadc83d4ab342d708bbccd0b97efd6c1452454e3f45fe35e12afa3c1cb21e43f5b3f70fa584b77ee678d645832ca738807ee2024cb99b1181c03c6e8dcef17aa5732fc1e8d5456ebc6db7ab4e912fa0b58030d5b07ee56d6a9be894c38db62790c7b74a589d8fca1d8799126314329f378eafc0a172cce74b3881d86e80ea271582f7bdc5bd3eae008307ebb732ec25227baca9cafa488705837d94889f474c0f35459803b5b71e91c304b1c06605c39040c90dd991019abac9228da6d3590b6ed33c02067bea", 0xd8}, {&(0x7f0000000600)="ba05b79d347668c9027d15a0677c0e88", 0x10}, {&(0x7f0000000640)="42d721d4da0f1f0f2b27eea57a1616a7a5061a651ba4a9de23758e06dced466607b778bf6c19fcb81be8b97c63188c918fd52e3a4c3bc627b098c5c8080925eab4f84dfc40038dc9b2be5d3d0f2d719435081daf463f6750801ad6c5bcacce16eedf1e5e068c03037feeb6e3caa0c2590736884abda1199d63ca28f2d354", 0x7e}, {&(0x7f00000006c0)="084f66ca629be2c36e2e0223c32c82fd08aad1e79c970e7c297281d4578bfe006afe4de850abbefcfe5ada9ed0e6fc279038accec020ac51b56f060173cee1057ee82d2ceba84929c05e2fa0fe0401126af3d268ec851bff93a92d57f0ea2746162f7413f4dd9ea561a077bb5e969d4d9c99796973b85593515af4f40078b5c93220a8fe2d8dc29aae50c7e1471cabe60edf0301c56f79b1a92c637586232f049213ec85afbd60f16ee40dbf93206c4a42a239d3dc99d7e85a851adc8f0de045168825", 0xc3}, {&(0x7f00000007c0)="93f0da1b5681a6cafed7", 0xa}, {&(0x7f0000000800)="15077637d49d1251730be5dfdb436a34fa9202c2530742602cd21b52efcf407dff119873db2bca9089fb8408877e133512faeccce03bd3e4bea30ed75f2f1da2ac19a1e0e1f94f58fd5fdfdea141fd5ec8f6411cc6fa0feb5719dab8a639eb7c2fea9d645a0d7f1b170d5eb5eda236abdb8fa8f5f1bf71dcbdacc26011a533695d01", 0x82}, {&(0x7f00000008c0)="962bf91735c191b73afabb89b34522abc9b130c76a53ff59e64ebe24d3964f6a8cadd8f994cd168775b11c70273976934252defcdfb8aaa2ee549b55a7f8880a21b3d44476cfbbf3321d15489ac92431d03af06726468935c72253b692894f628b29ae2f4c39f3c555b17575d5e215c251fc96d5e246ab15bb7e5227bb12abfb6de9a30a10250dd6f821f1913517a15ec2438c6789b38ae5f6a986d9a4702637e20e1e4d7238220a678fad97fbcab35c95a82ea9158d14deb5b95f71d9219d65a604dbeee48ec2d0ad2b5ea539e2549e3e365f856ef415e7bff0449e3046c2369cc0cb97252fc997c497f10933ed1c5311f049bbd96665eb75ecf34df52d0cc01ab14531170f8568610bfecbf9e460955c994fbc44b7bf9a620ce15721c2c14b1e4b85885268546a5733360ecf92934ec4674ba9df90f4a7bf2280dc90d38a2c02485352cac1bd298a1c8086fdf02149685154d24977e226e6048602ceb5c8b8dafd92e0524d8c9f643c364893312fb10203e40cc6ea878f5fcf1be92e2a76661d46f0974e9810dd35647d80b57dad5a4c34cbea26bb0b1bb5fc22b700aec94a8b26b8128ab9b81df8e22e35960562951cf0cdb26ede8265ada0628931d3b20ee2af84bdb6f6d22b67dbf75d7b6d127780fc8582b9e3660fe72f41661b70b7f2b190aa6b6b4ed05852f3ebd6a1f29ac979fcec9eb3781e99d8429603a1a6c8481da1794540e2ede4ffabffee3ac10e4894fe70e93fef6fb58603b7176ddac559e4b596af9c23580098c0d4d8983d88bb5b09a29f630a0f8e56d46220ac34eda0cee07e5808947d97de6bfe0f8586c44a9edf0600142ad3635df47a8223241fb87462688993db2e1c20a18e3a47f06092690bc5fc3452a773ed23600adfe39bbb5edbfc78d9dd71fc417c404222a5beb8b9fb42d050f83aff32d0b924783d87cf0e207941bae2af3e39ca45bc8025e099847b8ede5913ee7f404c98c1bee567edbeca201aeb61a4d8172216386c4695040b78856704610b8ea9b903b27027697f61240695a7c6b95e30d8c1777dbdcf7a353df8331ef534c602d8cc8f47c82a7dd7984a5ed7d583862885d992ce55035ef04b4b8fd255c0a39e5f1cd810d727b44c70ec557802bf1ce1e4a9f1f9c2790390443a05a3b10a18f1dc5e051f5a74247b27a1c7cf2ca2d32548dd960dc887fe91189b58bf6d80f383d2b9f33d9247defce3101d109a93346e5bc0746683b97b51c41fad405375902902f8b0fc083c7fddef94186589bdffa62431309c72316023aa85dc08ce85311fc159d015acd1c0010d4e0d910d22c51bb257b7159986f02062f3c2b89c089543bfcc137249ddba97175be12be6b353bb77952cf2ed9769f1a3d7e70472f104a7320b4463e2adb34afb10d3ff143f41f32739b8301d81b5b32c0f2d51b3e26e5b538fc22646075aa0ee5082ecd6132da9310d6394a95d466ea54ab83d5a3a30278a0e0a668064e50e75090286a580277f95bc9746224fa8b0d2f2a539de11a64c234ac561b0b52a943aafa653740a5c0bdcb300f7ba24ed2167c55440eec57b16bc4b7f3dd611a5a00b5ddc3aac51809e82c0f3b54bdadbdc6dcc4f0c7f4f1a3826732d4e2bdd9e30e773bcd099530e51fddb91ed85c497887f8ef723741713d30944de648912ff40a2038d718665639d1dd1de57daf76f9f070d633865707fb996347bdb3451fb5389eb879de7b92937d2fa1304d2dc47c65c149033d259a1761c81740f8ea9f545ed1cb1c4766f3280e7752ee9219b66ae8dcc60cc3a137111ad4cb2f6b7ed8fd62d6dc91001f21b39a10f10e806e08cd52ecca996db56537a42f2cc49fb971c118ebf351ae13251523dc27a51fc846f5e93dc0d6392332ae182482cbeafa1b0cdb768996cf23d427f0e9ac882302beb678c6ece9b873a0c35d86cfac82237fc866bc69c29c374ee00f04e1ad5403401f1eb9b2f32fa50efdfba5bd0cbdcff274cc9c24551cc9c30ffe2186cf0c72f6ee26bec176ddab145eab003faec62a93fbe29475e24c6483c5bb19f52a6ec88a417dbfac2faf279e93557100e719fb8f353b0251efdcc9adfdb790a9afe95b0a3bf72372cda1378e22c3082f71c4052ba375a747a19f0d1ffc5a84d1ee641eecda0caca257f49a88ef4d9b88bdbbae29d73fd9a5e6eeeff2f246964614c7da80ef1c9f02666199735db05b4815ac6c177a3310ff8904a2e12ca0f6ee5b9e06588bfe875c3a80be5d9845e81265dfeafcf6b6f67dc22a3d327511b3b784a406555dddce5b94d4e6198960fd1c00e8a8bcbd9b80e5ba5afb4e43d433c00a42569a6a1d02303f664f39c780efab49a39264277faed21d4b222cf859c52a1f21a85b0f93e6ffb236373e85349a8791da6f1c3a891113f8b7837bd219eb0fbb4114fcaa7847d884cea415ff8a731dc29b79228af74b8346f4c72176cf64bc55a4b7b956020ff329d4de6d3064ea759c6db33e08a332e07c52e21c9e007c1707ce0d8da3ac65298ef3004a5080a86b1a8f9402e6fa3573babe5ad45abc6b81065d22a82a58161d2c3df6eb9c659e440969e78fb98dd508d0d2042ce08d619b954370d87d4b8c143cbe9eba52e4c847e7363d6aa76db993a3a173e66c1fa8d6a47f9645e5c37cf33173614e5d49dcd313038cf3c824ba6f5bb3f6a9b3aa520b9c6ee1660faa662a537fb022e26300f85fc3c427a3461063ee529b646d93b894cb11fa984d6540851b308dc0351cdc8115194cb526761d8dbee60a6f2f6ed122aaa4891594f1760adc7c5856c968d99781dec0dd5366e21a74cc1d8414f47c1061d5eb983144aa4ea2fbf3b52d2c7c716a25973c75e226551fe397de5b51ebb9821f54a154c764a9ce277730c79e301aed2262096048224765e386d6056a85c2d9e309d580a6966522d25cee29dbcd529af1dc57d32ca9f5e9f5dbe4a32d1f4e3d54641386ecf092ba185036ffe8acd35f9a6f145e24932da349de9b14d7c6a6bbf6230767540011983e2a6333f798568252a96d85bf7953d221665394e39ff1aaed846c10572710d0e527446a0ef277b7f8866ba910a9ef2f0650dcd3e9516c96661c40263aa25ae49cb033ba55b61e64a60ef14f33d312bf4862f2e1f8d451351b6e9a92e4c1b252a50f93c02c7ae20b535146b115e73055c7baac2afd28e3d9e8692afa65a72180c3f5d51504afc5c3f43a0317e016c789d518ec0ee2569ba3127096c05ce1e88b47122d12f5d98d93e12b8f3a75db6d515193595aa29deb6bf21f1c81a810a70619f976608888485e430594dcdc29ed59ea03d3ad9e8812f752bb2259e32fd3cac8530c599da2bbabf0827cb6b9dd6cf59c24fe476c0fa4915d1812c0b34e1210b3943f2bbd32d126400909f19cc7cacff302852f9f88aea3a50ac3c59bcca591c91cf2c92337995b827d4de9e56007f2d51207c1cbaa87cb28d0f3a72524d6adcdc0a3c19c2148a2c3c0c3bdefce45fc68831c43532c6a9dfafbe4c4cc3714861096b04ccedbf754b21f36cf4d542d66494eb33e22281740fcb960f117304aa005faad1f3bf588a79e001c711ac985741c286368cd996ad7ce8c8778587531f817a55e08eb636bb4efd7a71cddea90de95a6418bf41884322d06c080a070b7d9b9a86cc2243a1fca3cdf727363c29563139e1e6adca8ea1e39eb46d9871adcd94daf20f02a0fe2488e8f211480383fc76296be6e354724cb0091e7342b639b847cdcec8c8786fcc6f366885ae2fab3f5978999a9a1800cc4202599a097f1faad1cd13c50ece22390800cedf06f81b69b6dbdb02fd87164fdcf96043ada782a10531c01f07e9efa223a4d2f283a52d8207c58d58b8832dd4ec5db2817cdf1668426dbb713eba9aebd376871a43e201935ec743ba3dcb076e4e92e2f8de66e25128d8db8c22099d00fc75862719b066f4100e2ce9660988beec3ee36471365ae12244fd2b91eebfe00e6cfdbcb4b6b248a6b0a8756dd3ca887137a6a8bee803d45de29766e06d623d79363b7d667d0d67f9455c369fb0813f83357d9d81a85435968e8a3131aa26cde484cf336f04ea4a1f229be1346c5a304b9254f8df668c386d98fb9b437c2db15f68fcc5d1f98b4ed27c6279f2a72e2eee60fe8307b99f0cdff0dea1221f9ee5fd9c50265da855be4a0e08ecae90fd9765bb256c110435c7efe7a074dd2841d65803c5cbe08476db64551537e001330574a4d0dd2764c738bb4ab8492be69592d47cfdcc4ef88c15986bbfb469c8a5d53b80b2e0d60d3b1d242ef3d6eeb761bf952370804fdfe610a34955f746cb86508e0cb0f97a671a42d01b4b45ac7a94b5fbf87ac161569621695409335d57989f8fccb8497f25fe135111b575622c4915a965a39b7e00bf67684916798961e172090f454df16a270dc6a41650f5f73bfb2084fd8e4a190095f81cc5170ac758a3b6adfc55bac3236bc5750329986b27a82dc50322d789747593d2b1baddcbbf4f82cb7107cddc7727e9584984bd93a3d1fce68834bf3010d146c0d78c6bb0c08184b20ae8970b75e9993d1e0b8dacb4858058cc6e709500acf15acd84c95074f2df76770882193cbea8331dddaf4fcea23bdc2a7f0dd3a420b054e452612cb3d8952e17064c6da25de3ac30cd828b02add50a5fb9d9f276f2f90031f05d04073eb9f5661e27d181ec4264685ce1356da9f460ff339ea7e922085e7304c9da4f8012ad79f6a177bed88e24c547edf7436c1617e6fb2b80b95dda94ccf240699a98a78b5d82016152e74043d539832762dee88f375ffd575e381cf28e7d5a7db6273a03e96fc5a5fb22daf6485706caa8660fb369b00c6c0bca1c6dea70fd62f499e0d36ec10bda5dd1582a3992273f093886bd49d784da44716d468ee8353ed327077a8309dd1466a660d1f20837927ea50654e579ec8156950c341e5377e7dc0018d551acd5fcce6e45ecf51000f602d45bdb3b49020d680e3b0aac0f85dd7ebc0339603138ace084118ff60672ff12b074e55475afa12ced6cec98de5e7f236768fb7670bd0fba66da9a750f199fdb5f427fc146a29eade541579b495e143ae14ec53e269865dfa46cc0a79feb5e6c24fd0f7ac7ef2d8d57434dd92f1093cd7fecc8f7bd08679ede8ccd6bbaaaa22930bb180bad61e871f531953b1b040977f0eb9888b1c6179a2f5368383af8ee33b120b4c54ac55bc66577e329a5af9e6a3832c7fde8d60b805ddbd1e24c9c46789dfe846fedc2ca41c61a6fa3c2f409b21247cb0b3a42ace80a15849683e07139f4ac0509ce23dda95ec326e8fcd08f36345202a99f3c10ed1b0b105eb6bf9e900ac61bf7283649726140f6a7d2dcbf46849fcce2092579355167848f69a328af7aa28b6e1f62487e2645e91c62b7328196627fcdeb80248bc52b8af7268b1205a3bf356ae606bebbabc0a71e3e5f8e91bad5ba884360de5d56185f354a982cb775be78454bf93c8690f9511309cb9e3701521516c635928a7103741b5bbb1240a2894b82d1af7f5a98dfbebec8bfb1e1e3252136337fe2d4b35999f21c5172b36c51eacb2758af39a28dc66d0114476f465f99ab66c28434558a3c2b179df20a804f19c2296890695af1a7c423b637de1f295c06704e14b2820af0a927e956e89aa17e2b0892a1e404fda401f001969974f79574ce731f0084540b7defc779f545e8bbb3b60c48da0988f5805b19b33870de35dc0302931bcb8c7989ce12e5f8cc42e9a367e36aeaa297f56cc5a87750b7f526954b33c8efdef737f253f535d888ea48f8ba", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="a47164d8b0a2d4f6f5923403ed91f94166b07d46d039e572dfe7f9e5bec51e1d033cd79e22246a8e2a073b12971649dcb9931a0085ff7f8b10d93b752376fb6cd3c80eaf851d20be9b446d418b1b3d4599757cc0bad887b15ef236b86617db1de1dbae9a9352c786c83131fd5144eb97f32847009ce22dcbe0977aae9c21cd28c01b4cffa51d862d63c09bba0f22e1d207e1e3ba86cd5327e2d1247211", 0x9d}, {&(0x7f0000002980)="75c7b0c643b667f09433b8be98bc184442eaa3ae8a59c946c87a4a9ea1d78adee7353cd6aa035461d662fc27f662ff09b491a8271874e2ea018791b0fc3b9dfb544e43f5b8cbfd59", 0x48}], 0xa, &(0x7f0000002ac0)=[@sndinfo={0x20, 0x84, 0x2, {0xffffffffffffff0e, 0x8007, 0x4, 0x8, r1}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0xcdcd}}, @authinfo={0x18, 0x84, 0x6, {0x52}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0xc, 0x100, 0x20, r2}}], 0xa0, 0x408d0}, 0x4800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000002bc0)) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000002d00)={0x17, 0xf9, &(0x7f0000002c00)="7bf6a96db2af4125fbcc4005362d005083c25b5eb6c6a1314eec0efcc99e824b7ab1b5f04f25c76e36e385b13ec78ac18c786a6be5cbe3a970ffedba01b2446f44eda2fef9bde9337c1b9272b7a79dfa73020d16f8bcd1555a09e3727061ea3dfe943076d2ab082facdeae3ceff89fc204f93d17d7ddb8f0794c29b08ca60049dd6c43ea7c5e66047140a7044485600ba845474f4504ac0ee90c678a11e41b8b007df1d61e466f2f24d1a3d03a169012030168f7d7318003798a7d58d5684baa15e99b08780e6eb0c261c49f3e90e0a58202895d0dde280fa19e22972d307e1f53b495b6e481e12d016fee668fc0a786f64c4206829d506afd"}) getdents64(r0, &(0x7f0000002d40)=""/23, 0x17) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000002e40)={0x0, 0xb6, &(0x7f0000002d80)="9f630921b1a9c446576ed785d42037b3ffcf0ed234992cea172dbabfd70b7823a06b384cf95e91b0e2ab7b7dfb2dff8162483ed75da19d32fa848de1c9699b469736cab6d430f70f2d1f140ebabab84480273fe2a490a659f32282c9febf700707c32cf7f1128cba2a117ee68f20a97e6c152cdc0e3b49efaa51c1c2f16153eab6b1cd0176a33bf7231cb68291a8f310bad5ef0ec29ae3a68499c7f39cc7e78e1fe0625453d3453cd22f2d853478622f04f4ed03ef89"}) accept4(r3, &(0x7f0000002e80)=@ax25, &(0x7f0000002f00)=0x80, 0x80000) unshare(0x20000000) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000002f80)={0x100000000, 0xffffffffffffffff, 0x6, [], &(0x7f0000002f40)=0xe579}) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000002fc0)=""/58, &(0x7f0000003000)=0x3a) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0xc012, r3, 0x59) openat$cgroup_subtree(r0, &(0x7f0000003040)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000003540)={&(0x7f0000003080)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003400)=[{&(0x7f00000030c0)="3e31e25ce495c28ee0386883721c0bf9601945e8ba08c742839e996b31d8a7df317f939d41bb81b9781d4716dafaf10e962f2557aa6a0be48097c1da1ff25faa3f7cc4a4a6c22ea454ccfb348c6e733eae283a3846ed84bde206067e6c3800", 0x5f}, {&(0x7f0000003140)="64feb1258db310d826fedb75e8b0de6a742d182434fe3204dacc4178a708ca256b729c14fe84ec59faff4ea8c97657ac4e0d570397e8ea1327c3", 0x3a}, {&(0x7f0000003180)="645875d680745591a0c3ca7aa0db88833a96e5141f6a0af222c7fb737e500ef9dde937f9a29da464c6b440d8317c592973d2392a21762b1d513fefe6b2c3d7f1d18522eb8f4f615d03e075fd813bf0bf2a50897468747590c62fe70984ada2922a09e66f4ef702183eaf8ea9374c0a1787c934ac811384f8ccaf91e12dcaca8ae37f343a7c9bbad7d615b738c5554905619f088b0bc1e127b906727bd8c7bda66c8c925d24d80db349bcdd395f0d1977ed8b08e560ea3d", 0xb7}, {&(0x7f0000003240)="28fcf244ba8e884d68e3f27dc615c4a08796add75f5b83577bf9d405b9e8b9ab01eab2b9068667976d8a1eab843a60da414024bcebca68cbbb86bf5c53c6cc8563fd35f772c57ff9e854421d11d987f6adad0a6ae2497f58f53cbe", 0x5b}, {&(0x7f00000032c0)="f3f4179dc0dcadb8b1bfca5e764f6ffedf25b784fbac0caf6ebcb5d4c4c3b54dd34455287d89b309d17d5a2f220f18cee034fea188", 0x35}, {&(0x7f0000003300)="db97227cb51f7233505f3ae156e0a4e3d40359636b5795d494627cb71403ff0e724f4438699dd41b4f9ed29c529e5e18b1745ac9321c633a8aa5832daa7cfd2d16a1dd057b87eb0596ee1612fb8311ab284647d57aa53acf0840eccfb36e148097a3cea2d93cff262b40d0d3ac2bdb78b61e6d65caf5accbd932c3ab6e0e4fb4eea292509dfb4509986239f2c8857e3e8c03ea183b90867261d7f218c5adaa151d96bcc53589b769bbf89c1c5f171b960ae48f602c818af71a9881978aa46bb173a834219a2fa1cfbb", 0xc9}], 0x6, &(0x7f0000003480)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x1f, 0x3, 0x200, 0x5, 0x9, 0x7, 0x47e, 0x82, r1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xffff}}, @authinfo={0x18, 0x84, 0x6, {0x7e0}}, @dstaddrv4={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8, 0x4, 0xf21a, 0xc, 0x3ff, 0x6, 0x8000000, r2}}], 0xc0, 0x800}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000003580)={0x0, @speck128}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000035c0)={&(0x7f0000ffc000/0x1000)=nil, 0x3f, 0x4, 0x6, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffff0000}) getsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000003600)=""/20, &(0x7f0000003640)=0x14) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000003680)) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000036c0)=""/61) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000003700)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000003740)={r5, 0x21}) 00:00:54 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/108, 0x1000, 0x800}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f00000001c0)="32bd320f1b65d94b9987fde7c8cb205afe5098c30846d0503d8f2d9c488b3f55ed354b9a84bbc77881d511960ae365baa7a4baf7e6bd2f015dd4b138162f3777f9c20b3a263a66d15715fc3ce6c472951c58d25b974e379a5e5dafab882eaf9711d4a7f972273ae6bbb0eaa29bcf9f1ed8c25892578ff7afd5cb3983ff57bd63e513b5782b94a3c43b73b068bf685f6bbf3f408fa99999564be6b3ad200ddc53ed3b5cc418d7a89f55af95bf8429827c893c91d811a9f4c2400fdbc0fe3414899f706dc3da201ebdcdc8c1e642d3163b8508f9514410aa6a6d37d72885d1071f53a73fc6d1635687a240e307e543", 0xee) setsockopt$inet_buf(r1, 0x0, 0x30000000010, &(0x7f0000000180)="02000100020001b400000002072065480100000001010061", 0x18) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:00:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x44, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)=""/45, 0x2d) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x3}, 0x0, 0x0, 'id1\x00', "74696d6572310000000000000000000000000000000013000000000000c4dd0000000100000000000000000000000000000000000000000000000000000000000000000000ffffffff00", 0x0, 0x0, 0x1}) 00:00:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x80000, {{0x2, 0x4e23}}}, 0x88) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0xffffffffffffffff) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0xc00) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x401, 0x2, 0x2}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffffffffffe0, 0x2b8000) 00:00:54 executing program 3: 00:00:54 executing program 2: 00:00:54 executing program 4: 00:00:54 executing program 1: 00:00:54 executing program 3: 00:00:54 executing program 4: 00:00:54 executing program 2: [ 268.399093] IPVS: ftp: loaded support on port[0] = 21 00:00:55 executing program 0: [ 269.810401] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.816929] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.825190] device bridge_slave_0 entered promiscuous mode [ 269.902117] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.908576] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.916635] device bridge_slave_1 entered promiscuous mode [ 269.993995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 270.070228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 270.303446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 270.384144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 270.533076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.540041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.769959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 270.777567] team0: Port device team_slave_0 added [ 270.853763] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 270.861324] team0: Port device team_slave_1 added [ 270.940437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.021115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.098380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.105974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.115105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.192521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.199829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.208834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.054704] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.061120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.068177] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.074641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.082779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.492980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.191478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.488870] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 275.776134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 275.782596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.790239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.084835] 8021q: adding VLAN 0 to HW filter on device team0 00:01:05 executing program 5: 00:01:05 executing program 1: 00:01:05 executing program 3: 00:01:05 executing program 4: 00:01:05 executing program 2: 00:01:05 executing program 0: 00:01:05 executing program 5: 00:01:05 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x480, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x7, 0x10000, 0x7, 0x6de3}, 0x8) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r2}, &(0x7f0000000240)=""/240, 0xfffffde3, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)) 00:01:05 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x1) 00:01:05 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x380, 0x4}) r2 = getgid() getgroups(0x3, &(0x7f00000001c0)=[0x0, 0xee01, 0x0]) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, r4) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x4008000}, 0xc) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') sendfile(r0, r5, &(0x7f0000000040), 0x10000000000443) 00:01:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfffffffffffffffc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) 00:01:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={"736974300000000000001000", {0x2, 0x4e20, @multicast2}}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x602c0, 0x0) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)=')+wlan1@$\\trustedppp0nodev-\x00'], &(0x7f0000000300)=[&(0x7f0000000140)=')-nodevem1selinux\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='vmnet1vmnet0!.]vmnet1+\x00', &(0x7f0000000240)='vmnet0&+trustedvmnet1-\x00', &(0x7f0000000280)='md5sumvboxnet0\x00', &(0x7f00000002c0)='sit0\x00\x00\x00\t\x00'], 0x1000) sendfile(r3, r2, &(0x7f0000000340), 0x1) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'sit0\x00\x00\x00\t\x00', @ifru_ivalue=0x70f000}) shutdown(r2, 0x1) ioctl$RTC_WIE_OFF(r3, 0x7010) 00:01:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="4304a653a3fbd5e440000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x10) 00:01:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x80000000000000, 0x1, 0x6, 0x6, 0x2}, 0xc) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x177, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 278.664765] sctp: [Deprecated]: syz-executor5 (pid 8029) Use of int in max_burst socket option deprecated. [ 278.664765] Use struct sctp_assoc_value instead [ 278.775829] sctp: [Deprecated]: syz-executor5 (pid 8029) Use of int in max_burst socket option deprecated. [ 278.775829] Use struct sctp_assoc_value instead 00:01:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x12, &(0x7f0000000140)='aegis128l-generic\x00', 0xffffffffffffffff}, 0x30) capset(&(0x7f0000000280)={0x20071026, r3}, &(0x7f0000000300)={0x1, 0x6, 0x1, 0x5, 0x6, 0x7}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffff9c}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0xffffffd6) syncfs(r0) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x3, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 00:01:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x1, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl(r0, 0x20000100008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8, 0x20200040) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x8, 0x80000001, 0x3, 0x5}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x8e, "cbb187e55ba6978cb1d4404eea79faa0a4723e8d1fd71a9975cb1738fa0f5afb0065f470dafa2663304ae8b6a592abd1bd967f2dd903123cd418d9c0cfabfae2d04a8d863470e9652138f4dc8998511af16fffbbbb1df00fe014c579a5c522c35a264db481e6669670fa1c2a02ddb6ec7d07eb03f45810465a94c658f0f6c09c4970e8b70b99fce3f231f1a2cade"}, &(0x7f0000000200)=0x96) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={r5, 0x4, 0x0, 0x5f6, 0x8, 0x9, 0x0, 0xea8, {r6, @in={{0x2, 0x4e24, @remote}}, 0xd9, 0x56, 0xffffffffffffffb7, 0x7, 0x6}}, &(0x7f0000000380)=0xb0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) write$evdev(r2, &(0x7f00006f7fe8)=[{{0x77359400}, 0x0, 0x2}], 0x2ca) 00:01:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0xc01, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x501c00) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) 00:01:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$inet6(0xa, 0x6, 0x1f, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001d00faff0000000000000000639cdf280c0003000000000000000000"], 0x20}}, 0x0) [ 279.050820] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 00:01:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7f, 0x4000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0x1, 0xffffffffffffff37) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000005c0)="66b9800000c00f326635000400000f300f8e0600260fe10a0f02e0670ffb9f4b2e000066b9800000c00f326635004000000f3066b9800000c00f326635000100000f30baf80c66b810b7d48666efbafc0cb8e896ef9ebaa000b85c24ef"}], 0x1, 0x0, &(0x7f0000000580)=[@cr0={0x0, 0x2}, @cr4={0x1, 0x20440}], 0x2a0) write$smack_current(r2, &(0x7f0000000640)='/dev/kvm\x00', 0x9) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x0, 0x0, 0x7, 0x44bc05e3, 0x8, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x9, 0x101, 0x200, 0x6}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @loopback, 0x366c}}, 0x5, 0x8, 0x200, 0xc000, 0x6}, &(0x7f0000000480)=0x98) fstat(r2, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={"62726964670800000080000000000010"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000004c0)={0x9, 0xffffffffffffff61}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000700)={'broute\x00', 0x0, 0x4, 0xc, [], 0x3, &(0x7f0000000680)=[{}, {}, {}], &(0x7f00000006c0)=""/12}, &(0x7f0000000780)=0x78) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0x990004, 0x0, 0x101, [], &(0x7f0000000200)={0x990bfd, 0x800, [], @ptr=0x101}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 279.571198] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 00:01:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='P', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20}}, 0x40, 0xa}, &(0x7f0000000040)=0x90) 00:01:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair$inet(0x2, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x5, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20080, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000200)=""/109) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000180)=""/6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8050000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000021c558b6000000000000e60a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x2, 0x2, 0xff, 0xa, 0x5, 0x1, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x18, &(0x7f0000000080)={@loopback={0x400000000000000}}, 0x20) 00:01:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff020}, {0x6}]}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0xf1e, 0x767b7f7f, 0x3, @stepwise={0x6, 0x64c6, 0x8, 0x80000001, 0xffffffffffffba1b, 0xec}}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x80000000, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x0, 0x2, 0x7fffffff, 0x3, 0x5}) 00:01:06 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f00000004c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, &(0x7f0000000580)='dummy0\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet(0x2, 0x0, 0x0) [ 279.846540] Unknown ioctl -1070836150 [ 279.877258] Unknown ioctl -1072409599 [ 279.936031] Unknown ioctl -1070836150 00:01:07 executing program 5: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x2801, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000640)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000500)=[{&(0x7f0000000000)=""/169}, {&(0x7f0000000140)=""/165}, {&(0x7f0000000200)=""/245, 0x287}, {&(0x7f0000000340)=""/180}, {&(0x7f0000000400)=""/220}, {&(0x7f00000000c0)=""/30}], 0x23e) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000580)={0x1, 0x2, {0x1, 0x0, 0x6f51, 0x2, 0x6}}) 00:01:07 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000100)='cgroup.procs\x00', &(0x7f0000000200)='\x00', &(0x7f0000000280)='cgroup2\x00', &(0x7f0000000300)='self!-{@selinux\x00', &(0x7f0000000340)='cgroup2\x00', &(0x7f0000000380)='$#\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='selinux-eth1]\\:%security\\.\x00', &(0x7f0000000440)='vmnet0}lo\x00', &(0x7f0000000480)='cgroup2\x00', &(0x7f00000004c0)='ppp1**8\x00'], 0x1000) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000002c0), 0x12) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) 00:01:07 executing program 0: r0 = socket$kcm(0x10, 0x1000000100000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000008f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f000000a380)=[{&(0x7f0000008fc0)=""/200, 0xc8}, {&(0x7f00000090c0)=""/83, 0x53}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f00000091c0)=""/190, 0xbe}, {&(0x7f0000009280)=""/151, 0x97}, {&(0x7f0000009340)=""/9, 0x9}, {&(0x7f0000009380)=""/4096, 0x1000}], 0x7, &(0x7f000000a400)=""/218, 0x27a}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1, &(0x7f0000000a00), 0x109}, 0x800000000000) 00:01:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x4}], 0x18) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000800)=0xe8) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000c40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000240)={0x374, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@generic="c2771db06213", @generic="93a641295866187d814119489a541c35b21951ee0f8875b811d8f0f643c9c862d46024fb386178faab4456c9259100eae37ce095db084a120ca635012c01b93a85ff55043b456cb6e847dbaec4956418ed47aab3f208c10cbf", @typed={0xc, 0x4, @u64=0x8c7b}, @typed={0x8, 0x48, @pid=r2}, @generic="fa13da6b17c9a13498ba1672", @nested={0x148, 0x81, [@generic="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", @generic="f4f935953b1d506e72db0c85f5ef46970ab1c1d8b668c18a3069a3f094e2a31f70ac46105f499929e542cd744e193176c068d8dc9050f0467ea3af5e878e029a570d425815"]}, @typed={0x8, 0x71, @pid=r3}, @nested={0xe0, 0x34, [@generic="faebcbb896b517a5ed2c2bb6440c06ed34193544cec7a400b81763b076730c5ecf99c55bda7df98120c1129a0d032c42c63ddb0bdf8da8029987dda4a8fbc1423964bbc53a022c7101b25d054de10e5702b80172356cd2c362f8b3cd9fcbcb86fe2582a367369e30581fc6184856efcd9fbc9de33e4b59de60f3b63d80348d08b2bda17a767f13a6e3f5d06dccb1c5c47a5b92a0d44babcc5f277e3d317151d77f85cc812779468fe776cff26ded866daa0de67c3fee10592f7e9b5ae3b2c82c6beccab9b63f", @typed={0x14, 0x4d, @str='/selinuxkeyring\x00'}]}, @nested={0x98, 0x36, [@generic="5e4745e3f641a574c54f4cc054456171e7175faa3564e585d1217c856c36b27dafd35d84fafa1307d8a6caf9f031bcf95d0501b066fa70f4c04550d6b752cce0e3b7e5775d961a2d76c6606b6c10612b85ce8c85ceac67c6b7c3ae80", @generic="505f1e639849d7db60e6cc477d9208ec829b07682a96e8166a1ccaebf80a86c9c27c87d278de3ecb3c90", @typed={0xc, 0x96, @u64=0x479}]}, @generic="ab8d613f8d93247cd2b0de26419067bdfca38e9b6975c4180387f66ebb"]}, 0x374}], 0x1, &(0x7f0000000b80)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x98}, 0x4) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x121400) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) 00:01:07 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xd5cdfabf260e314a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xf2, 0xab, &(0x7f0000000040)="4e4928fc54795e6c4f6f9987528f7079dc8a926f84962a8a7a98b2f9885dba927d0b6ebe879253bdbded073d5371b1039df83fa106bca0fc042c6d955258f438cbfbdb2b97ef259bcf42316fb177f4e2027072bc39500e6a7ae4bcd0f9bfdb13eabe31c0d305fd504b88831ec494c0f4333cff562cd8463ad3522a303c41adb1dffdcfb3538d9a041d7896a29322db4ee93bc404588e28b7e8d0e7d532bf924f31d3b676ad36d56ce36280d9c4b72e79e9ce80e84b768b68a82a03de7bb45541da5432c9751b3446e95ab7ec6909454b7e10cf0fe7e182015b703758f0b4252f95fab937b6104d8c0fdb639b0fcc19931f57", &(0x7f0000000140)=""/171, 0x100000000}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$setmm(0x59616d61, 0xfffdffffffffffff, &(0x7f0000ff9000/0x4000)=nil) 00:01:07 executing program 5: memfd_create(&(0x7f00000000c0)='pkcs7_test\x00', 0x2) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz'}, &(0x7f0000000500)="30b8", 0x2, 0xfffffffffffffffb) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x42000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x5, {0x2cb1, 0x9, 0x3018, 0x4, 0x5, 0xf, 0x0, 0x3}}) 00:01:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='status\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000280), 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000780)={0x1000, 0xffffffff, 0x1, "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"}) 00:01:07 executing program 5: unshare(0x4000800) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c6400000500000000000000000000000000000000000000000000001f00000006000000580401000000020000d003000000000000e0040000e0040000e0040000e0040000e004000006000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000626f6e645f736c6176655f3100000000626f6e64300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000000000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000ffffffffe000000200000000000000006263736830000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x180, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000005c0)=0x408000, 0x2) 00:01:07 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x5, 0x9, 0xa, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)=0x1024) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64EXEC\x00', &(0x7f0000000180)='/dev/rfkill\x00', 0xc, 0x0) 00:01:07 executing program 4: socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000014c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2002) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0xb1c0, 0x64, 0x0, 0x80000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100)=0xffffffff80000000, 0x4) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00'], 0x8, 0x0) msgrcv(r1, &(0x7f0000745000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1008, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xcbf3, 0x212000) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x15, 0x1c, "ea9a45346bd5ac8f81f4c527dc464d7b527c4fa365c9cd17de13085eee596e21cab46235714d89d2919127ede0e6cdda3dd3bcff674cd55a7524d5bac0d6e6b8", "59b86287bda3c39ea94f3c540bb59c64cb0543d4b77be69963263e1d8dbd7b4f8bd9dcbad49251b76a0f5df2b1b777435838a601225e134360488e4423190dd0", "085d5c422820c593859a70b2ea7c9f3d9afad4094eab7e9bcaa4d2f5bca9fc35", [0xcc4]}) 00:01:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101200, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x83) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0xfffffffffffffffd) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) 00:01:08 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x5) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d7660705b8a2a0ee1b8feca66695b6c60e0b2e4920efbbdb410f94aab993a077f08ce838dd6fedf9d95344786198926250425dea5becf28edf3b18ca6bd31d726df8afe31f3183400198c83b709841aaa59b386fc83332e91c81805b51b60e92b323ae861504db0aa66fccea7648328022c2a90e2e01609c2b113b7f2708beae59520") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x100, 0x8}, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000040)=0xf4) 00:01:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/139) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x3, {0x3, 0x40, 0xffffffff, 0x3}}) 00:01:08 executing program 0: syz_emit_ethernet(0x1019f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) unlink(&(0x7f0000000180)='./file0\x00') 00:01:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100001a00130700000000000000000000000000000000000000000000000000000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000575974e7a62200000000000000000000000000000a0000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xfdaf}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:01:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000017c0)="66b8005800000f23d00f21f86635100000050f23f80f216964f30f6f13dbe0660feba40e00b8d0088ee8640f236f66b80001c0fe0f23d00f21f86635200000000f23f866b9800000c00f326635000100000f3066660f381e540c", 0x5a}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 00:01:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = dup2(r0, r2) sendto$inet(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) [ 281.657452] netlink: 72 bytes leftover after parsing attributes in process `syz-executor2'. [ 281.713366] netlink: 72 bytes leftover after parsing attributes in process `syz-executor2'. 00:01:08 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000141000/0x3000)=nil, 0x3000, 0x0, 0x4000000200020011, r1, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x8000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000053c000/0x2000)=nil, 0x2000}) 00:01:09 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x54000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) futex(&(0x7f0000000140), 0x8b, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240), 0xfffffffffdffffff) epoll_create(0x1) 00:01:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28000001000600000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d0000000000"], 0x28}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) write$P9_RRENAME(r2, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0x8, 0x4, 0x2, 0x5}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:01:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x14) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000080), 0x80000000, 0xb) 00:01:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x2c0, 0xffffffffffffffff}}]}, &(0x7f00000001c0)=0x10) shutdown(r0, 0x2000000000000002) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={r1, 0x6c4, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3100000, {r1, @in={{0x2, 0x4e24, @multicast1}}, 0x5, 0x7ff, 0x7, 0x0, 0x6}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) 00:01:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) getuid() r2 = geteuid() sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x228, 0x9, 0x4, 0x2, 0x70bd2c, 0x25dfdbfd, {0xc, 0x0, 0x1}, [@generic="77b0942b2f0ee8e7702f8335bc037252a1dd517754527de61c9e9ed5c74908f74607ac3e2e9a60a7d4adae2d194310a9ce9821d58cfa9b18d2a477e347a82517c161fb74ae44399f045e32fbf02309d2e5beadc7c1172f4cac2e8a5619db00ee8bae93a17fbf80fdb2d08ad55cf7d0f70a4c6c52322a6d13d1ddb44adeda3b9e5fc3eb14f9839dc676ca83f0ca12838f3255618f2a27474dca884cb38866e97cc1eaece3e5f7859f054405b45d6ecaf848af1011ee572a65abb4ecbeb11be2ae8f33", @nested={0xc, 0x6e, [@typed={0x8, 0x8c, @uid=r2}]}, @generic="eb3729cf016678deaf75dc4a5c9596435d6c113733fc38ede44a22da767258fabbb9466a820c5cf98812f370e517dd747f7a379b864feb06f5a13f6c22dcee1f8a2ff6657bfbc791a6889cb80269db0b1dbf722ca00f656cb7ed6550fd3a06f5fee43c204f8be4ea", @typed={0x10, 0x48, @str='$user@ppp1\x00'}, @generic="8d559cc9bc5e1907f65775fbc395fc3f1f1b8a24cfa88c34d291eca797a0b50b103f0ebc9de9f6d0e92cbcccf01b85e66f3d5826b5a0633508133adc44ab39c6e9c304959d6c4744416165d276b89e4ba1282b39e2abdb8f56513642d83658336075572ddaf6216e28c18a088b4779715e811e6092ac60e375a8915f9dd4d1d578376e3b6a22776774971f87689aab9d325f8ef68934a4f20e1fb7b745b48745bf5761f5a86f717b462385747db2e5672824e607f35701c47da5e304d08437e5596d560a066317b51b96c7656b35"]}, 0x228}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000001c0)={0x1ff, 0x8, [0x1f, 0x82]}) 00:01:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1Tto_bond\x00', 0x3805}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000240)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) [ 282.606428] QAT: Invalid ioctl [ 282.622870] QAT: Invalid ioctl [ 282.646604] QAT: Invalid ioctl 00:01:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x36, 0x404401) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x8e, 0x8000, 0x3, "00f0f37d1ce362e9b8bba2406519ee69ee924aef570ac4961ede086984cfb06b7e7d19670573596c3b10a7015310bae9ab2622ac05a51a3691182d0604f82d5af6ff725f60f0e703eb46cee79740566eded6571e227ff56f9b1b116a22b65085bdbd55136e7677f62f4fb6f465912aa82825ccb8be838f2639798c9d9d24bf6eb8bb915457dcd90727f21b3d88d5"}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x200040, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000300)={0x200, {0x1, 0x1000, 0x800, 0x1}}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="ca5ad0caa7f01d97f4fde8a54bfabf4d2d76cf0e6c4ff6b7a17686fbd89bce8372e75d7c125fec69c5a75e6385db0e9405591e001813f4a9207af35f16f578d453e71761a0fd638e8c016ac89bdbf18a2d0bb2faa616234dbd759d9580657d5091adcf2c1ed0e379432d38ff7e7e36cf9873161d991fbf3e59b57179218a00e20bfbd7edadbdd8a195c9382a51b800082c1f47f426a1182369d106450493da4d9480"], 0x1) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x24f) ioctl(r3, 0xaf08, &(0x7f00000001c0)="0a5c2d0240316285717070") shutdown(r1, 0x1) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x2) creat(&(0x7f0000000340)='./file0\x00', 0x62) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x6, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {0x0, 0x1020000, 0x9, 0xa57}, 0x1, @can={{0x1, 0xa3a, 0x4, 0x7}, 0x4, 0x1, 0x0, 0x0, "d622c5500f9b7829"}}, 0x48}}, 0x4000800) socket$nl_crypto(0x10, 0x3, 0x15) [ 282.670311] QAT: Invalid ioctl 00:01:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6eec7244"}, 0x0, 0x0, @planes=&(0x7f00000000c0), 0x4}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002240)='/dev/mixer\x00', 0x1, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000002200)={0xa, {0x5, 0xfffffffffffffffc, 0x1}}) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8, 0x200) 00:01:09 executing program 1: socket(0x0, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0xffffffffffffffb1) r0 = socket$inet(0x2b, 0x7, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000000000), 0x4000074, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="d0af8a62822303", 0x7, 0x0, 0x0, 0x0) 00:01:10 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="d92b26", 0x3, 0xfffffffffffffffd) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x7, 0x100000000, 0x5, 0x7, 0x0, 0x2000000, 0x400, 0x4, 0x4, 0x1ff, 0x9, 0x6, 0x5, 0x7ff, 0x4, 0x4, 0x4, 0x100, 0x3, 0x9, 0x37, 0x83, 0x4, 0x0, 0x4, 0x2, 0x9, 0x1, 0x7ff, 0x100000000, 0x7, 0x80000001, 0x6822, 0x1, 0x7, 0x7fffffff, 0x0, 0x1f, 0x3, @perf_config_ext={0xc7d, 0x7f}, 0x20, 0x40, 0x0, 0x2, 0x20, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 00:01:10 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f0000000280)="6e756d615f6d61707300b5c62e9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224c3925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e780781b6a8d091f88658ef4f16a21417d83d000000000000000000000000000000") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000000), 0x0, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) 00:01:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000340)={'ip6gre0\x00', {0x2, 0x4e21, @rand_addr=0x1}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1, &(0x7f0000000080)}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) get_robust_list(r1, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000280)=0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.stat\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000700)={0x3000, 0xa000}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x2000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0239", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000200,max_read=0x0000000000000401,max_read=0xfffffffffffffffc,seclabel,context=unconfined_u,dont_hash,context=system_u,\x00']) 00:01:10 executing program 2: r0 = gettid() exit(0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x161200, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000004c0)=0x80000000) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0x2}}, 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000200)=""/91, &(0x7f0000000280)=0x5b) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0x10) r4 = memfd_create(&(0x7f0000000140)="ed", 0x1) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@remote, 0x4e24, 0x8, 0x4e22, 0x7e60, 0x2, 0xa0, 0x80, 0x89, 0x0, r5}, {0x30d3, 0x100000000, 0x2, 0xc2, 0x3042, 0xcbcf, 0xe6, 0xffffffff}, {0x7ff, 0x5, 0x40, 0x7}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x3, 0x7, 0x100000000, 0x6, 0x7}}, 0xe8) get_robust_list(r0, &(0x7f0000000400)=&(0x7f00000003c0)={&(0x7f0000000300)={&(0x7f00000002c0)}, 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000440)=0x18) 00:01:10 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441fac8e3f13ca0100c1c6fe4011176e3d30cbb9b40000001000003700", 0x1d) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 00:01:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000400006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000007c0)={0x25, 0x4, 0x0, "37aa5adbf1caa08ead588308007c87cc76312cda5007c68e92820d40d69401c6"}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x7e, 0xd, 0x4, 0x1000141, {0x77359400}, {0x3, 0x0, 0x2517, 0x4, 0x3ff, 0x3ff, "6d0cf14e"}, 0xfffffffffffffff8, 0x3, @userptr=0x1ff, 0x4}) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x71, 0x80001) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x40) r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x4, 0x101800) openat(r3, &(0x7f0000000100)='./file0\x00', 0x0, 0x8) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x80001) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 00:01:10 executing program 0: lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@sha1={0x1, "d4137383b00623288d2108f251c9cbb7737a4894"}, 0x15, 0x1) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="0bf438e7f33219348760234952ffaed9352bed2c7ed01da36559a5bdc977a2b037f4e7aa6232fac9ff33866f011060f7c347145c1d8ceb494a0f8e4afb51e70e7136b3ef6423e15996d7a26ced7f33ddcee4eb35b8f6d07ab266ff415b2551b8746fa0ce9e4f767d80f06317a276db3fa131ee57752f5b8a23350512d63c1a7cc850f9e62c562ce6e54c54edb46879c21b67479fa3da91bf16e31649", 0x9c, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x7, @raw_data="232f0726600cfa3592781d678d14e2ff686694621419a78314d4b96a3307a3d0df3042f7dc7983db4770c7980c51bec41be475ce114030e0c98fb8f1c46fc1a5b971a66cd5dd45b2e97a5d958226d0b6c62abb6bbbcad5db5955a75994cbd518c855e8b47c2189102cfafb5b99dbeaca08a542cbbff5e7102b4a2096f23b81099c39b61bb2e125cdc5069ff5c17691679f073aa639604741345efded2bdb58fc907bd513ddcd27046bb715a7f6eb523310f39040df8abe71622f5e0210edfaebfa68edc6f9368f8f"}) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000440)={0x0, 0xd6, 0x7, &(0x7f0000000400)=0x488e}) 00:01:10 executing program 4: r0 = socket$inet(0x2, 0xa, 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x70d000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x21, 0x0, 0x0, {@in6=@dev}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="a1f8f763c6dbaaaaaaaaaabb0800450000280000000000009078000000007f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000640)) 00:01:10 executing program 5: recvmsg(0xffffffffffffff9c, &(0x7f00000003c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000000)=""/33, 0x21}], 0x4, 0x0, 0x0, 0xd9d}, 0x10040) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f00000004c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/160, 0xa0}], 0x2, &(0x7f0000000700)=""/202, 0xca, 0x4be}, 0x1}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/191, 0xbf}], 0x1, &(0x7f0000000980)=""/212, 0xd4, 0x1f}, 0x3}, {{&(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f0000000b40)=""/215, 0xd7}, {&(0x7f0000000c40)=""/246, 0xf6}, {&(0x7f0000000d40)=""/104, 0x68}, {&(0x7f0000000dc0)=""/217, 0xd9}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x6}, 0x5}, {{&(0x7f0000001f40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/126, 0x7e}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/190, 0xbe}, {&(0x7f0000003140)=""/255, 0xff}, {&(0x7f0000003240)=""/43, 0x2b}, {&(0x7f0000003280)=""/112, 0x70}], 0x7, 0x0, 0x0, 0x7}, 0x7ff}], 0x4, 0x1, &(0x7f0000003480)) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000034c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x32, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x3) [ 283.896058] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 00:01:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x10ffffffffffff, 0x6) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x4c, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000005c0)=0x78) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r4, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)={0x77359400}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r8 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r8, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r9}) sendmsg$nl_generic(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001a00010200000000000000000000000060017b4ccd40574d6f7cb03d8c6702bcf4fa9e640fc279fa445bff82b6c08a4a72c5671c23033f3fab128326cc0e64eefc0dd63274b6b19a0048d14fec8705af71eab423cf9432ed7629094ce2b787fe8b6563f0ead864f7eb14f0cf91815a6b1aa1bb5e45ae9a55bd4c5ad06ee91bab7136b8e01d3d024e704efcfbd109373ac9b1617bcbe2194b0657c4258052d33e2ec5d745fccb1b31310a81186ff00335391ab94822dab825997d56d2d6e74e6d4b8ae6"], 0x14}}, 0x0) 00:01:11 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)="37a2153be64090c5a519030153e6735593e4cca5eee3fe26663c72d09de05b70303467bacb327d7dcf2bd81c8737658d2c07e82c173ec4a31254acb3c85550667ea104d4a1788ee204fe1ae6198be2f3199a176286894c40cc3b39e11bd8972c5a74b8f694a38d269131f44111033fd0aef63497d50f03bf76727614", 0x7c, 0x24008010, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x9}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x3f, 0x0) close(r1) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 00:01:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001f00)=0x7fffffff, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x449) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="7d09bd0537db45f54afb5b3e61757300") sendfile(r1, r2, &(0x7f0000000080), 0x1) r3 = syz_open_dev$usb(&(0x7f0000001bc0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x80000) fcntl$setstatus(r3, 0x4, 0x2400) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r5, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000240)=0x9, 0x4) setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000002180)="249213c7c6c09e8a61b9e3df441b8c79c35fd4a8c9ab9f58fcb1bc491966ed9867c887451754f364e1709f7c5de224fa1a7120711526efa16048b01e050a5790", 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b4d) 00:01:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x2, 0x6, @local}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x103000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup3(r1, r0, 0x0) 00:01:11 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x6a282, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047440, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x6}], 0x4c) 00:01:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, &(0x7f0000000340)="49b6a277643219352a0f3009754b1f5372e51ba07b8dd61a3663b42e76317408dfbb85f2529bb546bb2b0b33c660ddb42c5b", 0x32) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x400000000009}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaa66b93c2e86ba60093a00083ae6fd000000000075e392f61f4c009cccff0200000000000000000000000000010000000000089078a31cdf57b25fc005463fd93897d0110d5cbabf852ccce80b75bfb1243e17000000000000000000000000"], &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'\x00', {0x2, 0x4e23}}) write$P9_RLCREATE(r2, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x1}, 0x100000000}}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/243, &(0x7f0000000300)=0xf3) write$P9_RLERROR(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="358813590d8d60ec0b0000000702622e"], 0xb) [ 284.394844] device bond_slave_1 entered promiscuous mode [ 284.444570] device bond_slave_1 left promiscuous mode [ 284.500784] device bond_slave_1 entered promiscuous mode [ 284.535339] device bond_slave_1 left promiscuous mode 00:01:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xd654, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f0000000680)={0x5, 0xe9, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c766e30287a8abf2"}}, 0x48}}, 0x0) 00:01:11 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0xfffffffffffffe57) sendto$inet(r0, &(0x7f0000000a00), 0x100000, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) 00:01:11 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x210480, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) r3 = fcntl$getown(r1, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r4, 0x5}}, 0x10) rt_tgsigqueueinfo(r2, r3, 0x19, &(0x7f0000000100)={0x26, 0x4e92, 0x9, 0x3}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x2c) 00:01:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000000140)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@loopback, 0x4e24, 0x8, 0x4e22, 0x5, 0x2, 0x0, 0x80, 0x21, r1, r2}, {0x1, 0x4, 0x0, 0x1, 0x7, 0x200, 0x19, 0xffffffffffffff78}, {0x5d, 0x100000000, 0x6743bf6a, 0xa}, 0x1000, 0x6e6bc0, 0x0, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x3506, 0x0, 0x0, 0x8, 0x3, 0x1, 0x6}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) 00:01:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x6, 0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 00:01:12 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x1ff, 0x0, 0x1, 0x17}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x346, r1, 0x3, 0x4}) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/123, 0xd3cb668416462a40) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/66, 0x42) 00:01:12 executing program 5: 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x800000000000007) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000140)}, &(0x7f0000000500)="6a77b8a46480", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="0835814a31842f298ce056b5eb263eb629a668f437bd84ec699fda7d20596ba8974391b6aabdaecc628ab26347282c524d59d3a35782cce8b406917c68bff4ddc744f27aabc3eb759f87d9269309222c137a95b8a96132c20e40a0b5ca", 0x5d, 0x0) keyctl$describe(0x6, r2, &(0x7f0000000140)=""/136, 0x88) 00:01:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$UI_SET_SWBIT(r0, 0xc0105500, 0x0) 00:01:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d024012eb13f47080") lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x181) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000140)={0xf198, {0x6, 0x1000}}) setsockopt$inet_buf(r1, 0x0, 0x30000000010, &(0x7f0000000040)="02000100020001b40000000207206548", 0x10) 00:01:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11}}) r1 = getpgrp(0x0) sched_getparam(r1, &(0x7f0000000200)) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = dup(r0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x84800) 00:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) r2 = memfd_create(&(0x7f0000000000)='bond_slave_0\x00', 0x6) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000080)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x3000, 0x400, 0x2, 0x5, 0x0, [{0x7, 0x8, 0x100000000, [], 0x1a9}, {0xf92c, 0xffff, 0x1000, [], 0x5}, {0xfffffffffffff386, 0x4, 0x5, [], 0x5d15}, {0x34d, 0x8, 0x4}, {0x3, 0x631, 0xfffffffffffffff8, [], 0x8}, {0xc89, 0x2, 0x2, [], 0x100}, {0x7, 0x7, 0x9, [], 0x1}, {0x100000001, 0x3, 0x6, [], 0x5}, {0x80, 0x7, 0xab4, [], 0x168e}, {0x9, 0x1, 0x1000, [], 0x3f}, {0x3f, 0x8, 0x80000001, [], 0x2}, {0x8, 0x9, 0x1}, {0x9, 0x101, 0x9, [], 0x7fffffff}, {0xfffffffffffffffc, 0x7f, 0x401, [], 0x10000}, {0x6, 0x3, 0x1, [], 0xffff}, {0x80, 0x3ff, 0x1ff, [], 0x2}, {0x5000000000000000, 0x7fff, 0x3ff, [], 0x8}, {0x8, 0x2, 0x4}, {0x10000, 0x5, 0x8, [], 0x6}, {0x4, 0xffffffffffff4f2a, 0x1, [], 0x8}, {0x8, 0x7f, 0x4e5e, [], 0x6}, {0x8, 0x7737, 0x2, [], 0x3f}, {0x541ce66c, 0x6, 0x8}, {0x81, 0xfffffffffffff011, 0x3, [], 0x6}]}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x709, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IF_NETNSID={0x8, 0x2e, 0xfffffffc}]}, 0x28}}, 0x0) 00:01:12 executing program 5: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x81, 0x62680) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @local}, &(0x7f0000000100)=0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x7fff, 0x4) 00:01:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x4ecc, 0x1ff]}, &(0x7f0000000140)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x9, 0x10001, 0x40000000, 0xc2fb]}, 0xc) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000600)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}]}, 0x30}}, 0x0) 00:01:13 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xe29df33e00, 0x30, 0x3f, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x9}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0x15, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0xffffffffffffffff}, 0x30) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r1, 0x0, 0x10, &(0x7f0000000200)='vboxnet1selinux\x00', r5}, 0x30) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000380)=0x99, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x4}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000440)={'filter\x00', 0x0, 0x4, 0x39, [], 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000400)=""/57}, &(0x7f00000004c0)=0x78) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x1) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/123) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) 00:01:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x4008083, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c) dup2(r1, r2) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x5246) 00:01:13 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) write$sndseq(r1, &(0x7f0000000500)=[{0x200, 0xfffffffffffffe00, 0xff, 0x3, @tick=0x98, {0x2486, 0x9}, {0x1f, 0x100000001}, @queue={0x96, {0xbfe, 0x1000}}}, {0xfffffffffffffffd, 0x6, 0x7, 0x4, @tick=0x9, {0x8, 0x5d67461b}, {0x6, 0x71}, @result={0x2, 0xfff}}, {0x80, 0x8, 0x1000, 0x5, @tick=0x8001, {0x8000, 0x6}, {0x6, 0x2}, @queue={0x80000000, {0x3}}}, {0x401, 0x8, 0x9, 0xf9b9, @time={0x77359400}, {0x6, 0xde}, {0x2}, @connect={{0x7fffffff, 0x7}, {0x4, 0x8}}}, {0x2, 0x3, 0x1, 0xfffffffffffffffa, @time={0x0, 0x989680}, {0x905, 0xc4}, {0x4, 0x3f}, @queue={0x3, {0x2}}}, {0x9, 0x1, 0x3, 0x0, @tick=0x3, {0x80, 0x1}, {0xd09, 0x1}, @time=@tick=0x8000}, {0x183b, 0x3f, 0x6, 0xffffffffffffff80, @time, {0x10000, 0x101}, {0x6, 0x4}, @result={0x3, 0x100}}, {0x400, 0x7, 0x8001, 0x100000001, @time={0x77359400}, {0x80000000, 0x5}, {0x3, 0x4e}, @raw8={"cce7ba6417356f22093bf00f"}}, {0x101, 0x7fffffff, 0x1, 0x5, @time={0x77359400}, {0x8, 0x4}, {0x0, 0x10000}, @quote={{0x3a, 0x80000001}, 0xffffffff00000000, &(0x7f00000004c0)={0x789, 0x100000001, 0x8, 0xddf, @time, {0x9d68, 0x800}, {0x5, 0x5c}, @time=@tick=0x7}}}], 0x1b0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000012e000/0x2000)=nil, 0x2000, 0x1000000, 0x60071, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x7fffffff, 0x0, 0x1000, 0xffffffff, 0x0, 0xfff, 0x8000, 0x1, 0x2, 0x3, 0x64, 0x6, 0xf0b, 0x9, 0x20, 0x4, 0x40, 0x3, 0xb30, 0xff, 0x5, 0x7, 0xf253, 0x43, 0x800, 0x3, 0xbe5, 0x7, 0x848, 0x0, 0x5, 0x3, 0x7, 0x2, 0x9, 0x7, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x4000, 0x1ff, 0x5f31, 0x7, 0x9, 0x3, 0x2}, r2, 0xf, r0, 0x3) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000002c0)={{0x3002, 0x6002, 0xf, 0x218, 0x7, 0x7f, 0xf, 0x8, 0x2, 0xba1, 0x1cf7dda9, 0x401}, {0x3000, 0xd000, 0xf, 0x7b47, 0x10000, 0x8001, 0x9, 0x80, 0x3, 0x46, 0x5, 0x8}, {0x4000, 0xf000, 0x0, 0x7, 0x0, 0x3, 0x1, 0x8, 0x4, 0x9, 0x9, 0x3}, {0x4000, 0x4000, 0x8, 0x10001, 0x9, 0xf2a0, 0x31, 0x8000, 0x19e000000, 0x0, 0x100, 0x400}, {0x0, 0x0, 0x3, 0x940d, 0x8000, 0x3, 0x8, 0x6a, 0xfffffffffffffffa, 0x100000000, 0x800, 0x5}, {0x10000, 0x1000, 0xa, 0xfffffffffffffffa, 0x3f, 0x3, 0x80000001, 0xdf70, 0x9b, 0x9, 0x0, 0x8}, {0x14004, 0x100000, 0xe, 0x6, 0x9, 0x9, 0x1, 0x4, 0x3, 0x7e1, 0x800, 0xf2}, {0x5000, 0x7000, 0x1d, 0x2, 0x1, 0x6, 0x490a, 0xc039, 0x0, 0x401, 0x8, 0x80}, {0x4002, 0x14000}, {0x4000}, 0x40000000, 0x0, 0x1002, 0x52146, 0x8, 0x100, 0x10f007, [0x3, 0xffff, 0x400, 0x3f]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="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") getdents(0xffffffffffffffff, &(0x7f0000000200)=""/139, 0x8b) 00:01:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0xfff7ffffffff7ffe, 0x4, 0x1}, 0x24) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200040, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) [ 286.186809] netlink: 'syz-executor1': attribute type 17 has an invalid length. 00:01:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x4000000000000000, 0x0, 0x0, 0x8d4}, 0x2c) clock_getres(0x7, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x74}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 00:01:13 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xe29df33e00, 0x30, 0x3f, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x9}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0x15, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0xffffffffffffffff}, 0x30) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r1, 0x0, 0x10, &(0x7f0000000200)='vboxnet1selinux\x00', r5}, 0x30) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000380)=0x99, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x4}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000440)={'filter\x00', 0x0, 0x4, 0x39, [], 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000400)=""/57}, &(0x7f00000004c0)=0x78) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x1) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/123) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) 00:01:13 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x10, 0x4000) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 00:01:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40080, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xc11d, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000100)=0x3) 00:01:13 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x12, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/183, 0xb7}, 0x120) write$UHID_CREATE(r0, &(0x7f0000000600)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/208, 0xd0, 0x0, 0x0, 0x100000000, 0x0, 0xffff}, 0x120) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240), 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000740)=0xc) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x55d0, 0x10b000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000440)={{0x3, 0x0, 0x8, 0x3, 0xbba6}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000380)=""/160) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) ptrace$peekuser(0x3, r1, 0x6) 00:01:13 executing program 2: setrlimit(0xc00000000000007, &(0x7f0000000040)) r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x82) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000080)={'bcsf0\x00', @ifru_hwaddr}) 00:01:13 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000440)={0x2, 0x0, 0x2080, {0x100001, 0x103000, 0x3}, [], "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", "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"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) [ 286.924905] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.931870] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.938680] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.945655] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.952661] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.959477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.966489] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.973386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.980175] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.987142] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 286.994047] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 00:01:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xd80000, 0x40000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000002000/0x3000)=nil, 0xfffffffeffffffff, 0x6, 0x80, &(0x7f0000ff9000/0x4000)=nil, 0x2}) sendto$inet(r0, &(0x7f0000000000)='H', 0xfffffffffffffefa, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000080)=0xb0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 00:01:14 executing program 0: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xac, 0x2000) r1 = getpgid(0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x3911, 0x7, 0x8, 0x3, 0x3, r1}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000380)={0x4, 0x0, @pic={0x8, 0x9, 0x4, 0x9, 0xfffffffffffffff7, 0x1, 0x18fd372e, 0xeb24, 0xfffffffff8f3fd0b, 0x81, 0xffffffff, 0xfffffffffffff800, 0x2, 0x81, 0x0, 0xfff}}) 00:01:14 executing program 1: keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f00000000c0)=""/207, 0xcf, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 00:01:14 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000003c0)=0x2, 0xfffffffffffffffd, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000100), 0x0) r2 = fcntl$getown(r0, 0x9) wait4(r2, &(0x7f0000000240), 0x0, &(0x7f0000000280)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote}}) [ 287.284859] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 00:01:14 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/104, 0x68}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 00:01:14 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x0) r1 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, {0x1, @random="c3a617645523"}, 0x0, {0x2, 0x4e22, @rand_addr}, 'ipddp0\x00'}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x3ffffff}, 0x0, &(0x7f0000000040)="c483494ba49a0000000000"}, &(0x7f0000b4afe0)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000000)="c4816decef"}, 0x8, &(0x7f00005eaff8)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) fsync(r1) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x1) 00:01:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000000380)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0x318, 0x118, 0x0, 0x0, 0x118, 0x118, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 00:01:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ca67bd6d82280600009cd7ec3e66e562", 0xffffff35) epoll_create(0x81) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="f4304868681941a96edf472d957d2e23", 0x10) 00:01:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pipe2(&(0x7f0000000080), 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0xe24, 0x8000, 0x1f, 0x8}, 0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0), 0x8) 00:01:14 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 00:01:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x10000000000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4018}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x700, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c050) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 00:01:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070") futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) 00:01:15 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r3}) dup2(r1, r0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1ac3) [ 288.209135] binder: 8431:8432 got transaction with invalid offset (0, min 0 max 0) or object. [ 288.218362] binder: 8431:8432 transaction failed 29201/-22, size 0-8 line 3033 00:01:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x45, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:01:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x101, 0x4}, 'port1\x00', 0xa, 0x40, 0x6, 0xe2, 0x40, 0x7, 0x4, 0x0, 0x6, 0x400}) signalfd4(r0, &(0x7f0000000040)={0x9}, 0x8, 0x800) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) [ 288.280077] binder_alloc: binder_alloc_mmap_handler: 8431 20ffc000-20fff000 already mapped failed -16 [ 288.313789] binder: BINDER_SET_CONTEXT_MGR already set [ 288.319318] binder: 8431:8437 ioctl 40046207 0 returned -16 [ 288.372103] binder_alloc: 8431: binder_alloc_buf, no vma [ 288.377885] binder: 8431:8432 transaction failed 29189/-3, size 0-8 line 2970 [ 288.452777] binder_alloc: 8431: binder_alloc_buf, no vma [ 288.458516] binder: 8431:8437 transaction failed 29189/-3, size 0-12288 line 2970 00:01:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x8000a, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={"6c6f0003000000000000000000000040"}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'lo\x00', 0x517}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="f80209b444127938c4ef3896149a00e8", 0x10) listen(r0, 0x9) [ 288.494357] binder: undelivered TRANSACTION_ERROR: 29189 [ 288.499920] binder: undelivered TRANSACTION_ERROR: 29189 [ 288.505975] binder: undelivered TRANSACTION_ERROR: 29201 00:01:15 executing program 1: r0 = socket$inet6(0xa, 0x9000000000002, 0x0) ioctl(r0, 0x73, &(0x7f0000000340)="025cd90700145f8f764070") clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x801, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000640)) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000001200)=""/4096) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_smack_transmute(r5, &(0x7f0000000840)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000880)='TRUE', 0x4, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$vsock_stream(0x28, 0x1, 0x0) r6 = fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x5, 0x4, 0x4, 0x1e, r6}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/134, 0x86) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000440)=""/244, &(0x7f00000002c0)=0xf4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000008c0)={0x2, 'team_slaz?_1\x00', 0xfffffffffffffffd}, 0x7) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000380)={'broute\x00'}, &(0x7f0000000540)=0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000580)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000005c0)=0x24) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000007c0)={r7, 0x1}, &(0x7f0000000800)=0x8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 00:01:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x2, 0x1, 0x1}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xfffffffffffffffd, 0x1, 0x4}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000200)) 00:01:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9, 0x4}, 0x2c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00', 0x1}, 0x18) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0x101000) 00:01:15 executing program 3: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x10000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x10000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x2, 0x1, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x4, 0x3, @name="f64073773fc200687d0be25647841ab81e0ebab499df7508bd33d9993874a885"}) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xb) 00:01:16 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x1}, 0x4) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x80, 0x1, 0x0, "0f348062d210669f0e613600fa33fac1d718583a70ea62b24d0a0e2e4065af66"}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e21}}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40400, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x20000) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000001c0)=r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x8, 0x3da, 0x3f, 0x1004, 0x9}) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)=""/70, 0x46) 00:01:16 executing program 5: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket(0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x224}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="000128bd7000ffdbdf25020000002c00070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0800cf64", @ANYPTR64, @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0002004d080000000000000c00030007000000000000000c0003000000000000000000"], 0x11}, 0x1, 0x0, 0x0, 0x4000001}, 0x8804) [ 289.133410] relay: one or more items not logged [item size (56) > sub-buffer size (5)] 00:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0x2, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) [ 289.182286] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 00:01:16 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) fremovexattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974792e2c400014ec37b5c5aaa822"]) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0xfffffffffffffffd) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x5, 0x5, {0x3, 0x0, 0x7, 0x0, 0x5}}) [ 289.347625] not chained 30000 origins [ 289.351501] CPU: 1 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 289.358347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.367721] Call Trace: [ 289.370335] dump_stack+0x32d/0x480 [ 289.374001] kmsan_internal_chain_origin+0x222/0x240 [ 289.379122] ? gre_tap_xmit+0x4e3/0x910 [ 289.383120] ? ip6_finish_output+0xc13/0xca0 [ 289.387548] ? ip6_output+0x5e4/0x720 [ 289.391367] ? ip6_local_out+0x164/0x1d0 [ 289.395448] ? ip6_send_skb+0xf6/0x3b0 [ 289.399423] ? udp_v6_send_skb+0x113f/0x1df0 [ 289.403863] ? udpv6_sendmsg+0x43e5/0x4960 [ 289.408118] ? inet_sendmsg+0x4e9/0x800 [ 289.412112] ? ___sys_sendmsg+0xe68/0x1250 [ 289.416370] ? __sys_sendmmsg+0x56b/0xa90 [ 289.420536] ? __se_sys_sendmmsg+0xbd/0xe0 [ 289.424789] ? __x64_sys_sendmmsg+0x56/0x70 [ 289.429135] ? do_syscall_64+0xcf/0x110 [ 289.433143] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 289.438538] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.443924] ? __module_address+0x6a/0x610 [ 289.448175] ? is_bpf_text_address+0x3e5/0x4d0 [ 289.452783] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 289.458170] ? is_bpf_text_address+0x49e/0x4d0 [ 289.462770] ? kmsan_internal_chain_origin+0x90/0x240 [ 289.467999] ? get_stack_info+0x863/0x9d0 [ 289.472179] __msan_chain_origin+0x6d/0xd0 [ 289.476436] ? inet_sendmsg+0x4e9/0x800 [ 289.480435] __save_stack_trace+0x8be/0xc60 [ 289.484801] ? inet_sendmsg+0x4e9/0x800 [ 289.488818] save_stack_trace+0xc6/0x110 [ 289.492906] kmsan_internal_chain_origin+0x136/0x240 00:01:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f00000001c0)}}, &(0x7f00009b1ffc)) socketpair$unix(0x1, 0x4001000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000c80)='timers\x00') sendfile(r1, r2, &(0x7f0000000080), 0x400008005) [ 289.498027] ? inet_sendmsg+0x4e9/0x800 [ 289.502035] ? kmsan_internal_chain_origin+0x136/0x240 [ 289.507339] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 289.512030] ? __msan_memcpy+0x6f/0x80 [ 289.515934] ? pskb_expand_head+0x43b/0x1d20 [ 289.520365] ? gre_tap_xmit+0x4e3/0x910 [ 289.524356] ? dev_hard_start_xmit+0x6dc/0xe00 [ 289.528957] ? sch_direct_xmit+0x59b/0x890 [ 289.533209] ? __qdisc_run+0x1bac/0x3600 [ 289.537286] ? __dev_queue_xmit+0x2131/0x3e00 [ 289.541801] ? dev_queue_xmit+0x4b/0x60 00:01:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[!em1{#)\x00', 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x1, 0x404, {"8bd77118c896efad022781d63b290660"}, 0x9, 0x5e3f, 0x8000}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x401) [ 289.545807] ? ip6_finish_output2+0x1a5b/0x22d0 [ 289.550502] ? ip6_finish_output+0xc13/0xca0 [ 289.554929] ? ip6_output+0x5e4/0x720 [ 289.558750] ? ip6_local_out+0x164/0x1d0 [ 289.562827] ? ip6_send_skb+0xf6/0x3b0 [ 289.566730] ? udp_v6_send_skb+0x113f/0x1df0 [ 289.571156] ? udpv6_sendmsg+0x43e5/0x4960 [ 289.575409] ? inet_sendmsg+0x4e9/0x800 [ 289.579483] ? ___sys_sendmsg+0xe68/0x1250 [ 289.583739] ? __sys_sendmmsg+0x56b/0xa90 [ 289.587905] ? __se_sys_sendmmsg+0xbd/0xe0 [ 289.592150] ? __x64_sys_sendmmsg+0x56/0x70 [ 289.596495] ? do_syscall_64+0xcf/0x110 [ 289.600494] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 289.605892] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.611285] ? memcg_kmem_put_cache+0x8e/0x460 [ 289.615906] ? __msan_get_context_state+0x9/0x30 [ 289.620703] ? INIT_INT+0xc/0x30 [ 289.624092] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 289.629489] kmsan_memcpy_origins+0x13d/0x1b0 [ 289.633994] __msan_memcpy+0x6f/0x80 [ 289.637712] pskb_expand_head+0x43b/0x1d20 [ 289.641960] gre_tap_xmit+0x4e3/0x910 [ 289.645818] ? gre_tap_init+0x650/0x650 [ 289.649792] dev_hard_start_xmit+0x6dc/0xe00 [ 289.654320] sch_direct_xmit+0x59b/0x890 [ 289.658403] __qdisc_run+0x1bac/0x3600 [ 289.662305] ? __msan_get_context_state+0x9/0x30 [ 289.667069] __dev_queue_xmit+0x2131/0x3e00 [ 289.671391] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.676772] dev_queue_xmit+0x4b/0x60 [ 289.680580] ip6_finish_output2+0x1a5b/0x22d0 [ 289.685092] ? validate_xmit_skb+0x1780/0x1780 [ 289.689671] ip6_finish_output+0xc13/0xca0 [ 289.693924] ip6_output+0x5e4/0x720 [ 289.697556] ? ip6_output+0x720/0x720 [ 289.701356] ? ac6_seq_show+0x200/0x200 [ 289.705335] ip6_local_out+0x164/0x1d0 [ 289.709228] ip6_send_skb+0xf6/0x3b0 [ 289.712946] udp_v6_send_skb+0x113f/0x1df0 [ 289.717206] udpv6_sendmsg+0x43e5/0x4960 [ 289.721269] ? ip_copy_metadata+0x1710/0x1710 [ 289.725791] ? __msan_poison_alloca+0x1e0/0x2b0 [ 289.730470] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 289.734788] inet_sendmsg+0x4e9/0x800 [ 289.738590] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.743948] ? security_socket_sendmsg+0x1bd/0x200 [ 289.748881] ___sys_sendmsg+0xe68/0x1250 [ 289.752944] ? inet_getname+0x490/0x490 [ 289.756934] ? __msan_poison_alloca+0x1e0/0x2b0 [ 289.761605] ? rcu_all_qs+0x3b/0x310 [ 289.765321] ? _cond_resched+0x59/0x120 [ 289.769294] ? rcu_all_qs+0x53/0x310 [ 289.773023] ? _cond_resched+0x37/0x120 [ 289.776998] ? __sys_sendmmsg+0x7c9/0xa90 [ 289.781248] ? _cond_resched+0x59/0x120 [ 289.785223] __sys_sendmmsg+0x56b/0xa90 [ 289.789213] ? syscall_return_slowpath+0x123/0x8c0 [ 289.794140] ? put_timespec64+0x162/0x220 [ 289.798292] __se_sys_sendmmsg+0xbd/0xe0 [ 289.802372] __x64_sys_sendmmsg+0x56/0x70 [ 289.806522] do_syscall_64+0xcf/0x110 [ 289.810332] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 289.815521] RIP: 0033:0x457569 [ 289.818719] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.837621] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.845328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 289.852678] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 289.859946] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.867225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 289.874492] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 289.881792] Uninit was stored to memory at: [ 289.886118] kmsan_internal_chain_origin+0x136/0x240 [ 289.891216] __msan_chain_origin+0x6d/0xd0 [ 289.895464] __save_stack_trace+0x8be/0xc60 [ 289.899780] save_stack_trace+0xc6/0x110 [ 289.903839] kmsan_internal_chain_origin+0x136/0x240 [ 289.908941] kmsan_memcpy_origins+0x13d/0x1b0 [ 289.913444] __msan_memcpy+0x6f/0x80 [ 289.917159] pskb_expand_head+0x43b/0x1d20 [ 289.921387] gre_tap_xmit+0x4e3/0x910 [ 289.925182] dev_hard_start_xmit+0x6dc/0xe00 [ 289.929587] sch_direct_xmit+0x59b/0x890 [ 289.933639] __qdisc_run+0x1bac/0x3600 [ 289.937521] __dev_queue_xmit+0x2131/0x3e00 [ 289.941834] dev_queue_xmit+0x4b/0x60 [ 289.945632] ip6_finish_output2+0x1a5b/0x22d0 [ 289.950123] ip6_finish_output+0xc13/0xca0 [ 289.954350] ip6_output+0x5e4/0x720 [ 289.957982] ip6_local_out+0x164/0x1d0 [ 289.961865] ip6_send_skb+0xf6/0x3b0 [ 289.966104] udp_v6_send_skb+0x113f/0x1df0 [ 289.970336] udpv6_sendmsg+0x43e5/0x4960 [ 289.974394] inet_sendmsg+0x4e9/0x800 [ 289.978192] ___sys_sendmsg+0xe68/0x1250 [ 289.982245] __sys_sendmmsg+0x56b/0xa90 [ 289.986211] __se_sys_sendmmsg+0xbd/0xe0 [ 289.990268] __x64_sys_sendmmsg+0x56/0x70 [ 289.994415] do_syscall_64+0xcf/0x110 [ 289.998210] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.003478] [ 290.005097] Uninit was stored to memory at: [ 290.009418] kmsan_internal_chain_origin+0x136/0x240 [ 290.014517] __msan_chain_origin+0x6d/0xd0 [ 290.018749] __save_stack_trace+0x8be/0xc60 [ 290.023080] save_stack_trace+0xc6/0x110 [ 290.027135] kmsan_internal_chain_origin+0x136/0x240 [ 290.032250] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.036760] __msan_memcpy+0x6f/0x80 [ 290.040472] pskb_expand_head+0x43b/0x1d20 [ 290.044707] gre_tap_xmit+0x4e3/0x910 [ 290.048502] dev_hard_start_xmit+0x6dc/0xe00 [ 290.052905] sch_direct_xmit+0x59b/0x890 [ 290.056961] __qdisc_run+0x1bac/0x3600 [ 290.060842] __dev_queue_xmit+0x2131/0x3e00 [ 290.065160] dev_queue_xmit+0x4b/0x60 [ 290.069390] ip6_finish_output2+0x1a5b/0x22d0 [ 290.073879] ip6_finish_output+0xc13/0xca0 [ 290.078105] ip6_output+0x5e4/0x720 [ 290.081736] ip6_local_out+0x164/0x1d0 [ 290.085620] ip6_send_skb+0xf6/0x3b0 [ 290.089331] udp_v6_send_skb+0x113f/0x1df0 [ 290.093560] udpv6_sendmsg+0x43e5/0x4960 [ 290.097619] inet_sendmsg+0x4e9/0x800 [ 290.101416] ___sys_sendmsg+0xe68/0x1250 [ 290.105475] __sys_sendmmsg+0x56b/0xa90 [ 290.109441] __se_sys_sendmmsg+0xbd/0xe0 [ 290.113517] __x64_sys_sendmmsg+0x56/0x70 [ 290.117661] do_syscall_64+0xcf/0x110 [ 290.121469] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.126648] [ 290.128263] Uninit was stored to memory at: [ 290.133052] kmsan_internal_chain_origin+0x136/0x240 [ 290.138156] __msan_chain_origin+0x6d/0xd0 [ 290.142385] __save_stack_trace+0x8be/0xc60 [ 290.146709] save_stack_trace+0xc6/0x110 [ 290.150765] kmsan_internal_chain_origin+0x136/0x240 [ 290.155861] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.160355] __msan_memcpy+0x6f/0x80 [ 290.164064] pskb_expand_head+0x43b/0x1d20 [ 290.168290] gre_tap_xmit+0x4e3/0x910 [ 290.172083] dev_hard_start_xmit+0x6dc/0xe00 [ 290.176485] sch_direct_xmit+0x59b/0x890 [ 290.180534] __qdisc_run+0x1bac/0x3600 [ 290.184418] __dev_queue_xmit+0x2131/0x3e00 [ 290.188733] dev_queue_xmit+0x4b/0x60 [ 290.192534] ip6_finish_output2+0x1a5b/0x22d0 [ 290.197024] ip6_finish_output+0xc13/0xca0 [ 290.201253] ip6_output+0x5e4/0x720 [ 290.204880] ip6_local_out+0x164/0x1d0 [ 290.208768] ip6_send_skb+0xf6/0x3b0 [ 290.212480] udp_v6_send_skb+0x113f/0x1df0 [ 290.216713] udpv6_sendmsg+0x43e5/0x4960 [ 290.220782] inet_sendmsg+0x4e9/0x800 [ 290.224580] ___sys_sendmsg+0xe68/0x1250 [ 290.228638] __sys_sendmmsg+0x56b/0xa90 [ 290.232604] __se_sys_sendmmsg+0xbd/0xe0 [ 290.236657] __x64_sys_sendmmsg+0x56/0x70 [ 290.241237] do_syscall_64+0xcf/0x110 [ 290.245033] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.250209] [ 290.251831] Uninit was stored to memory at: [ 290.256151] kmsan_internal_chain_origin+0x136/0x240 [ 290.261248] __msan_chain_origin+0x6d/0xd0 [ 290.265483] __save_stack_trace+0x8be/0xc60 [ 290.269795] save_stack_trace+0xc6/0x110 [ 290.273852] kmsan_internal_chain_origin+0x136/0x240 [ 290.278946] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.283448] __msan_memcpy+0x6f/0x80 [ 290.287161] pskb_expand_head+0x43b/0x1d20 [ 290.291386] gre_tap_xmit+0x4e3/0x910 [ 290.295189] dev_hard_start_xmit+0x6dc/0xe00 [ 290.299593] sch_direct_xmit+0x59b/0x890 [ 290.303650] __qdisc_run+0x1bac/0x3600 [ 290.307543] __dev_queue_xmit+0x2131/0x3e00 [ 290.311857] dev_queue_xmit+0x4b/0x60 [ 290.315652] ip6_finish_output2+0x1a5b/0x22d0 [ 290.320151] ip6_finish_output+0xc13/0xca0 [ 290.324379] ip6_output+0x5e4/0x720 [ 290.327998] ip6_local_out+0x164/0x1d0 [ 290.331878] ip6_send_skb+0xf6/0x3b0 [ 290.335585] udp_v6_send_skb+0x113f/0x1df0 [ 290.339815] udpv6_sendmsg+0x43e5/0x4960 [ 290.343888] inet_sendmsg+0x4e9/0x800 [ 290.347690] ___sys_sendmsg+0xe68/0x1250 [ 290.351748] __sys_sendmmsg+0x56b/0xa90 [ 290.355719] __se_sys_sendmmsg+0xbd/0xe0 [ 290.359777] __x64_sys_sendmmsg+0x56/0x70 [ 290.364013] do_syscall_64+0xcf/0x110 [ 290.367814] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.372991] [ 290.374606] Uninit was stored to memory at: [ 290.378930] kmsan_internal_chain_origin+0x136/0x240 [ 290.384028] __msan_chain_origin+0x6d/0xd0 [ 290.388257] __save_stack_trace+0x8be/0xc60 [ 290.392573] save_stack_trace+0xc6/0x110 [ 290.396633] kmsan_internal_chain_origin+0x136/0x240 [ 290.401734] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.406236] __msan_memcpy+0x6f/0x80 [ 290.409943] pskb_expand_head+0x43b/0x1d20 [ 290.414172] gre_tap_xmit+0x4e3/0x910 [ 290.417970] dev_hard_start_xmit+0x6dc/0xe00 [ 290.422379] sch_direct_xmit+0x59b/0x890 [ 290.426437] __qdisc_run+0x1bac/0x3600 [ 290.430324] __dev_queue_xmit+0x2131/0x3e00 [ 290.434639] dev_queue_xmit+0x4b/0x60 [ 290.438433] ip6_finish_output2+0x1a5b/0x22d0 [ 290.442944] ip6_finish_output+0xc13/0xca0 [ 290.447175] ip6_output+0x5e4/0x720 [ 290.450800] ip6_local_out+0x164/0x1d0 [ 290.454691] ip6_send_skb+0xf6/0x3b0 [ 290.458406] udp_v6_send_skb+0x113f/0x1df0 [ 290.462644] udpv6_sendmsg+0x43e5/0x4960 [ 290.466706] inet_sendmsg+0x4e9/0x800 [ 290.470498] ___sys_sendmsg+0xe68/0x1250 [ 290.474555] __sys_sendmmsg+0x56b/0xa90 [ 290.478523] __se_sys_sendmmsg+0xbd/0xe0 [ 290.482582] __x64_sys_sendmmsg+0x56/0x70 [ 290.486722] do_syscall_64+0xcf/0x110 [ 290.490536] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.495711] [ 290.497327] Uninit was stored to memory at: [ 290.501650] kmsan_internal_chain_origin+0x136/0x240 [ 290.506763] __msan_chain_origin+0x6d/0xd0 [ 290.510994] __save_stack_trace+0x8be/0xc60 [ 290.515311] save_stack_trace+0xc6/0x110 [ 290.519367] kmsan_internal_chain_origin+0x136/0x240 [ 290.524472] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.528964] __msan_memcpy+0x6f/0x80 [ 290.532702] pskb_expand_head+0x43b/0x1d20 [ 290.536931] gre_tap_xmit+0x4e3/0x910 [ 290.540725] dev_hard_start_xmit+0x6dc/0xe00 [ 290.545132] sch_direct_xmit+0x59b/0x890 [ 290.549190] __qdisc_run+0x1bac/0x3600 [ 290.553076] __dev_queue_xmit+0x2131/0x3e00 [ 290.557391] dev_queue_xmit+0x4b/0x60 [ 290.561203] ip6_finish_output2+0x1a5b/0x22d0 [ 290.565703] ip6_finish_output+0xc13/0xca0 [ 290.569935] ip6_output+0x5e4/0x720 [ 290.573558] ip6_local_out+0x164/0x1d0 [ 290.577441] ip6_send_skb+0xf6/0x3b0 [ 290.581153] udp_v6_send_skb+0x113f/0x1df0 [ 290.585385] udpv6_sendmsg+0x43e5/0x4960 [ 290.589443] inet_sendmsg+0x4e9/0x800 [ 290.593251] ___sys_sendmsg+0xe68/0x1250 [ 290.597306] __sys_sendmmsg+0x56b/0xa90 [ 290.601272] __se_sys_sendmmsg+0xbd/0xe0 [ 290.605325] __x64_sys_sendmmsg+0x56/0x70 [ 290.609471] do_syscall_64+0xcf/0x110 [ 290.613267] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.618442] [ 290.620062] Uninit was stored to memory at: [ 290.624383] kmsan_internal_chain_origin+0x136/0x240 [ 290.629484] __msan_chain_origin+0x6d/0xd0 [ 290.633717] __save_stack_trace+0x8be/0xc60 [ 290.638034] save_stack_trace+0xc6/0x110 [ 290.642092] kmsan_internal_chain_origin+0x136/0x240 [ 290.647196] kmsan_memcpy_origins+0x13d/0x1b0 [ 290.651703] __msan_memcpy+0x6f/0x80 [ 290.655429] pskb_expand_head+0x43b/0x1d20 [ 290.659661] gre_tap_xmit+0x4e3/0x910 [ 290.663471] dev_hard_start_xmit+0x6dc/0xe00 [ 290.667876] sch_direct_xmit+0x59b/0x890 [ 290.671932] __qdisc_run+0x1bac/0x3600 [ 290.675822] __dev_queue_xmit+0x2131/0x3e00 [ 290.680227] dev_queue_xmit+0x4b/0x60 [ 290.684026] ip6_finish_output2+0x1a5b/0x22d0 [ 290.688519] ip6_finish_output+0xc13/0xca0 [ 290.692750] ip6_output+0x5e4/0x720 [ 290.696373] ip6_local_out+0x164/0x1d0 [ 290.700252] ip6_send_skb+0xf6/0x3b0 [ 290.703966] udp_v6_send_skb+0x113f/0x1df0 [ 290.708195] udpv6_sendmsg+0x43e5/0x4960 [ 290.712252] inet_sendmsg+0x4e9/0x800 [ 290.716046] ___sys_sendmsg+0xe68/0x1250 [ 290.720099] __sys_sendmmsg+0x56b/0xa90 [ 290.724068] __se_sys_sendmmsg+0xbd/0xe0 [ 290.728131] __x64_sys_sendmmsg+0x56/0x70 [ 290.732277] do_syscall_64+0xcf/0x110 [ 290.736177] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.741353] [ 290.742974] Local variable description: ----_type.i@icmp6_send [ 290.748930] Variable was created at: [ 290.752641] icmp6_send+0x171/0x3ca0 [ 290.756348] icmpv6_send+0xe5/0x110 00:01:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in=@loopback}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x2}) sendto$inet6(r0, &(0x7f00000005c0)="21c668a5fba164391e49751cb989", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x8906, 0xaa4, @dev}, 0x1c) 00:01:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x4) prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xfffffffffffffffc, 0x200, 0xdb}, {0x7, 0x5, 0x6, 0x2}, {0xfffffffffffffffb, 0x5, 0x4, 0x5cc2}]}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x0, 0x1, &(0x7f00000001c0)="a9"}) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x309000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x3ff, 0x7, 0x3, 0xc1}, {0x0, 0x100000001, 0x4, 0x10001}, {0xfffffffffffffffb, 0x100000001, 0x1d, 0x800}, {0x7, 0x4, 0x4, 0xbb54}]}, 0x10) [ 291.158567] kauditd_printk_skb: 3 callbacks suppressed [ 291.158603] audit: type=1326 audit(1541116878.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8502 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 291.236875] not chained 40000 origins [ 291.240747] CPU: 0 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 291.247590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.256956] Call Trace: [ 291.259562] dump_stack+0x32d/0x480 [ 291.263217] kmsan_internal_chain_origin+0x222/0x240 [ 291.268329] ? gre_tap_xmit+0x4e3/0x910 [ 291.272318] ? ip6_finish_output+0xc13/0xca0 [ 291.276750] ? ip6_output+0x5e4/0x720 [ 291.280572] ? ip6_local_out+0x164/0x1d0 [ 291.284666] ? ip6_send_skb+0xf6/0x3b0 [ 291.288593] ? udp_v6_send_skb+0x113f/0x1df0 [ 291.293028] ? udpv6_sendmsg+0x43e5/0x4960 [ 291.297284] ? inet_sendmsg+0x4e9/0x800 [ 291.301539] ? ___sys_sendmsg+0xe68/0x1250 [ 291.305789] ? __sys_sendmmsg+0x56b/0xa90 [ 291.309960] ? __se_sys_sendmmsg+0xbd/0xe0 [ 291.314218] ? __x64_sys_sendmmsg+0x56/0x70 [ 291.318554] ? do_syscall_64+0xcf/0x110 [ 291.322545] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.327933] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.333324] ? __module_address+0x6a/0x610 [ 291.337581] ? is_bpf_text_address+0x3e5/0x4d0 [ 291.342198] ? apic_timer_interrupt+0xa/0x20 [ 291.346634] ? kmsan_internal_chain_origin+0x90/0x240 [ 291.351860] ? get_stack_info+0x863/0x9d0 [ 291.356041] __msan_chain_origin+0x6d/0xd0 [ 291.360294] ? __sys_sendmmsg+0x56b/0xa90 [ 291.364466] __save_stack_trace+0x8be/0xc60 [ 291.368827] ? __sys_sendmmsg+0x56b/0xa90 [ 291.372995] save_stack_trace+0xc6/0x110 [ 291.377087] kmsan_internal_chain_origin+0x136/0x240 [ 291.382208] ? inet_sendmsg+0x4e9/0x800 [ 291.386221] ? kmsan_internal_chain_origin+0x136/0x240 [ 291.391507] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 291.396183] ? __msan_memcpy+0x6f/0x80 [ 291.400063] ? pskb_expand_head+0x43b/0x1d20 [ 291.404464] ? gre_tap_xmit+0x4e3/0x910 [ 291.408432] ? dev_hard_start_xmit+0x6dc/0xe00 [ 291.413006] ? sch_direct_xmit+0x59b/0x890 [ 291.417239] ? __qdisc_run+0x1bac/0x3600 [ 291.421299] ? __dev_queue_xmit+0x2131/0x3e00 [ 291.425795] ? dev_queue_xmit+0x4b/0x60 [ 291.429786] ? ip6_finish_output2+0x1a5b/0x22d0 [ 291.434460] ? ip6_finish_output+0xc13/0xca0 [ 291.438883] ? ip6_output+0x5e4/0x720 [ 291.442693] ? ip6_local_out+0x164/0x1d0 [ 291.446746] ? ip6_send_skb+0xf6/0x3b0 [ 291.450641] ? udp_v6_send_skb+0x113f/0x1df0 [ 291.455070] ? udpv6_sendmsg+0x43e5/0x4960 [ 291.459295] ? inet_sendmsg+0x4e9/0x800 [ 291.463258] ? ___sys_sendmsg+0xe68/0x1250 [ 291.467579] ? __sys_sendmmsg+0x56b/0xa90 [ 291.471735] ? __se_sys_sendmmsg+0xbd/0xe0 [ 291.475964] ? __x64_sys_sendmmsg+0x56/0x70 [ 291.480285] ? do_syscall_64+0xcf/0x110 [ 291.484273] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.489665] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.495042] ? memcg_kmem_put_cache+0x8e/0x460 [ 291.499701] ? __msan_get_context_state+0x9/0x30 [ 291.504472] ? INIT_INT+0xc/0x30 [ 291.507854] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 291.513247] kmsan_memcpy_origins+0x13d/0x1b0 [ 291.517776] __msan_memcpy+0x6f/0x80 [ 291.521502] pskb_expand_head+0x43b/0x1d20 [ 291.525859] gre_tap_xmit+0x4e3/0x910 [ 291.529693] ? gre_tap_init+0x650/0x650 [ 291.533690] dev_hard_start_xmit+0x6dc/0xe00 [ 291.538117] sch_direct_xmit+0x59b/0x890 [ 291.542205] __qdisc_run+0x1bac/0x3600 [ 291.546128] ? __msan_get_context_state+0x9/0x30 [ 291.550894] __dev_queue_xmit+0x2131/0x3e00 [ 291.555211] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.560577] dev_queue_xmit+0x4b/0x60 [ 291.564393] ip6_finish_output2+0x1a5b/0x22d0 [ 291.568907] ? validate_xmit_skb+0x1780/0x1780 [ 291.573511] ip6_finish_output+0xc13/0xca0 [ 291.577778] ip6_output+0x5e4/0x720 [ 291.581417] ? ip6_output+0x720/0x720 [ 291.585208] ? ac6_seq_show+0x200/0x200 [ 291.589187] ip6_local_out+0x164/0x1d0 [ 291.593093] ip6_send_skb+0xf6/0x3b0 [ 291.596835] udp_v6_send_skb+0x113f/0x1df0 [ 291.601088] udpv6_sendmsg+0x43e5/0x4960 [ 291.605163] ? ip_copy_metadata+0x1710/0x1710 [ 291.609731] ? __msan_poison_alloca+0x1e0/0x2b0 [ 291.614433] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 291.618774] inet_sendmsg+0x4e9/0x800 [ 291.622577] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.627943] ? security_socket_sendmsg+0x1bd/0x200 [ 291.632908] ___sys_sendmsg+0xe68/0x1250 [ 291.636993] ? inet_getname+0x490/0x490 [ 291.641015] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.646401] ? kmsan_set_origin+0x83/0x130 [ 291.650641] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 291.656008] ? _cond_resched+0xc7/0x120 [ 291.660004] __sys_sendmmsg+0x56b/0xa90 [ 291.664001] ? syscall_return_slowpath+0x123/0x8c0 [ 291.668941] ? put_timespec64+0x162/0x220 [ 291.673148] __se_sys_sendmmsg+0xbd/0xe0 [ 291.677219] __x64_sys_sendmmsg+0x56/0x70 [ 291.681359] do_syscall_64+0xcf/0x110 [ 291.685166] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.690354] RIP: 0033:0x457569 [ 291.693539] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.712452] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 291.720172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 291.727444] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 291.734723] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.741994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 291.749279] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 291.756586] Uninit was stored to memory at: [ 291.760923] kmsan_internal_chain_origin+0x136/0x240 [ 291.766049] __msan_chain_origin+0x6d/0xd0 [ 291.770312] __save_stack_trace+0x8be/0xc60 [ 291.774640] save_stack_trace+0xc6/0x110 [ 291.778710] kmsan_internal_chain_origin+0x136/0x240 [ 291.783821] kmsan_memcpy_origins+0x13d/0x1b0 [ 291.788317] __msan_memcpy+0x6f/0x80 [ 291.792038] pskb_expand_head+0x43b/0x1d20 [ 291.796287] gre_tap_xmit+0x4e3/0x910 [ 291.800090] dev_hard_start_xmit+0x6dc/0xe00 [ 291.804496] sch_direct_xmit+0x59b/0x890 [ 291.808561] __qdisc_run+0x1bac/0x3600 [ 291.812465] __dev_queue_xmit+0x2131/0x3e00 [ 291.816791] dev_queue_xmit+0x4b/0x60 [ 291.820606] ip6_finish_output2+0x1a5b/0x22d0 [ 291.825116] ip6_finish_output+0xc13/0xca0 [ 291.829373] ip6_output+0x5e4/0x720 [ 291.833006] ip6_local_out+0x164/0x1d0 [ 291.836910] ip6_send_skb+0xf6/0x3b0 [ 291.840636] udp_v6_send_skb+0x113f/0x1df0 [ 291.844882] udpv6_sendmsg+0x43e5/0x4960 [ 291.848962] inet_sendmsg+0x4e9/0x800 [ 291.852780] ___sys_sendmsg+0xe68/0x1250 [ 291.856850] __sys_sendmmsg+0x56b/0xa90 [ 291.860832] __se_sys_sendmmsg+0xbd/0xe0 [ 291.864915] __x64_sys_sendmmsg+0x56/0x70 [ 291.869079] do_syscall_64+0xcf/0x110 [ 291.872883] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.878065] [ 291.879700] Uninit was stored to memory at: [ 291.884029] kmsan_internal_chain_origin+0x136/0x240 [ 291.889136] __msan_chain_origin+0x6d/0xd0 [ 291.893373] __save_stack_trace+0x8be/0xc60 [ 291.897714] save_stack_trace+0xc6/0x110 [ 291.901887] kmsan_internal_chain_origin+0x136/0x240 [ 291.907005] kmsan_memcpy_origins+0x13d/0x1b0 [ 291.911504] __msan_memcpy+0x6f/0x80 [ 291.915222] pskb_expand_head+0x43b/0x1d20 [ 291.919471] gre_tap_xmit+0x4e3/0x910 [ 291.923274] dev_hard_start_xmit+0x6dc/0xe00 [ 291.927702] sch_direct_xmit+0x59b/0x890 [ 291.931782] __qdisc_run+0x1bac/0x3600 [ 291.935663] __dev_queue_xmit+0x2131/0x3e00 [ 291.939993] dev_queue_xmit+0x4b/0x60 [ 291.943801] ip6_finish_output2+0x1a5b/0x22d0 [ 291.948285] ip6_finish_output+0xc13/0xca0 [ 291.952517] ip6_output+0x5e4/0x720 [ 291.956161] ip6_local_out+0x164/0x1d0 [ 291.960050] ip6_send_skb+0xf6/0x3b0 [ 291.963775] udp_v6_send_skb+0x113f/0x1df0 [ 291.968011] udpv6_sendmsg+0x43e5/0x4960 [ 291.972076] inet_sendmsg+0x4e9/0x800 [ 291.975882] ___sys_sendmsg+0xe68/0x1250 [ 291.979946] __sys_sendmmsg+0x56b/0xa90 [ 291.983933] __se_sys_sendmmsg+0xbd/0xe0 [ 291.986933] audit: type=1326 audit(1541116878.283:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8502 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 291.987996] __x64_sys_sendmmsg+0x56/0x70 [ 291.988013] do_syscall_64+0xcf/0x110 [ 291.988030] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.988036] [ 291.988042] Uninit was stored to memory at: [ 291.988061] kmsan_internal_chain_origin+0x136/0x240 [ 291.988078] __msan_chain_origin+0x6d/0xd0 [ 291.988096] __save_stack_trace+0x8be/0xc60 [ 291.988111] save_stack_trace+0xc6/0x110 [ 291.988128] kmsan_internal_chain_origin+0x136/0x240 [ 291.988144] kmsan_memcpy_origins+0x13d/0x1b0 [ 291.988160] __msan_memcpy+0x6f/0x80 [ 291.988174] pskb_expand_head+0x43b/0x1d20 [ 291.988188] gre_tap_xmit+0x4e3/0x910 [ 291.988201] dev_hard_start_xmit+0x6dc/0xe00 [ 291.988213] sch_direct_xmit+0x59b/0x890 [ 291.988243] __qdisc_run+0x1bac/0x3600 [ 292.080365] __dev_queue_xmit+0x2131/0x3e00 [ 292.084693] dev_queue_xmit+0x4b/0x60 [ 292.088502] ip6_finish_output2+0x1a5b/0x22d0 [ 292.093001] ip6_finish_output+0xc13/0xca0 [ 292.097258] ip6_output+0x5e4/0x720 [ 292.100882] ip6_local_out+0x164/0x1d0 [ 292.104777] ip6_send_skb+0xf6/0x3b0 [ 292.108510] udp_v6_send_skb+0x113f/0x1df0 [ 292.112746] udpv6_sendmsg+0x43e5/0x4960 [ 292.116894] inet_sendmsg+0x4e9/0x800 [ 292.120704] ___sys_sendmsg+0xe68/0x1250 [ 292.124768] __sys_sendmmsg+0x56b/0xa90 [ 292.128732] __se_sys_sendmmsg+0xbd/0xe0 [ 292.133424] __x64_sys_sendmmsg+0x56/0x70 [ 292.137581] do_syscall_64+0xcf/0x110 [ 292.141376] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.146548] [ 292.148162] Uninit was stored to memory at: [ 292.152483] kmsan_internal_chain_origin+0x136/0x240 [ 292.157580] __msan_chain_origin+0x6d/0xd0 [ 292.161818] __save_stack_trace+0x8be/0xc60 [ 292.166141] save_stack_trace+0xc6/0x110 [ 292.170207] kmsan_internal_chain_origin+0x136/0x240 [ 292.175325] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.179843] __msan_memcpy+0x6f/0x80 [ 292.183565] pskb_expand_head+0x43b/0x1d20 [ 292.187794] gre_tap_xmit+0x4e3/0x910 [ 292.191605] dev_hard_start_xmit+0x6dc/0xe00 [ 292.196011] sch_direct_xmit+0x59b/0x890 [ 292.200062] __qdisc_run+0x1bac/0x3600 [ 292.203947] __dev_queue_xmit+0x2131/0x3e00 [ 292.208284] dev_queue_xmit+0x4b/0x60 [ 292.212091] ip6_finish_output2+0x1a5b/0x22d0 [ 292.216586] ip6_finish_output+0xc13/0xca0 [ 292.220829] ip6_output+0x5e4/0x720 [ 292.224466] ip6_local_out+0x164/0x1d0 [ 292.228354] ip6_send_skb+0xf6/0x3b0 [ 292.232085] udp_v6_send_skb+0x113f/0x1df0 [ 292.236315] udpv6_sendmsg+0x43e5/0x4960 [ 292.240391] inet_sendmsg+0x4e9/0x800 [ 292.244199] ___sys_sendmsg+0xe68/0x1250 [ 292.248259] __sys_sendmmsg+0x56b/0xa90 [ 292.252231] __se_sys_sendmmsg+0xbd/0xe0 [ 292.256295] __x64_sys_sendmmsg+0x56/0x70 [ 292.260464] do_syscall_64+0xcf/0x110 [ 292.264256] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.269433] [ 292.271056] Uninit was stored to memory at: [ 292.275376] kmsan_internal_chain_origin+0x136/0x240 [ 292.280470] __msan_chain_origin+0x6d/0xd0 [ 292.284700] __save_stack_trace+0x8be/0xc60 [ 292.289025] save_stack_trace+0xc6/0x110 [ 292.293104] kmsan_internal_chain_origin+0x136/0x240 [ 292.298226] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.302727] __msan_memcpy+0x6f/0x80 [ 292.306450] pskb_expand_head+0x43b/0x1d20 [ 292.310692] gre_tap_xmit+0x4e3/0x910 [ 292.314488] dev_hard_start_xmit+0x6dc/0xe00 [ 292.318900] sch_direct_xmit+0x59b/0x890 [ 292.322949] __qdisc_run+0x1bac/0x3600 [ 292.326837] __dev_queue_xmit+0x2131/0x3e00 [ 292.331156] dev_queue_xmit+0x4b/0x60 [ 292.334944] ip6_finish_output2+0x1a5b/0x22d0 [ 292.339447] ip6_finish_output+0xc13/0xca0 [ 292.343691] ip6_output+0x5e4/0x720 [ 292.347314] ip6_local_out+0x164/0x1d0 [ 292.351200] ip6_send_skb+0xf6/0x3b0 [ 292.354931] udp_v6_send_skb+0x113f/0x1df0 [ 292.359175] udpv6_sendmsg+0x43e5/0x4960 [ 292.363227] inet_sendmsg+0x4e9/0x800 [ 292.367015] ___sys_sendmsg+0xe68/0x1250 [ 292.371071] __sys_sendmmsg+0x56b/0xa90 [ 292.375053] __se_sys_sendmmsg+0xbd/0xe0 [ 292.379113] __x64_sys_sendmmsg+0x56/0x70 [ 292.383249] do_syscall_64+0xcf/0x110 [ 292.387042] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.392218] [ 292.393851] Uninit was stored to memory at: [ 292.398189] kmsan_internal_chain_origin+0x136/0x240 [ 292.403473] __msan_chain_origin+0x6d/0xd0 [ 292.407719] __save_stack_trace+0x8be/0xc60 [ 292.412031] save_stack_trace+0xc6/0x110 [ 292.416096] kmsan_internal_chain_origin+0x136/0x240 [ 292.421212] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.425721] __msan_memcpy+0x6f/0x80 [ 292.429423] pskb_expand_head+0x43b/0x1d20 [ 292.433658] gre_tap_xmit+0x4e3/0x910 [ 292.437474] dev_hard_start_xmit+0x6dc/0xe00 [ 292.441885] sch_direct_xmit+0x59b/0x890 [ 292.445942] __qdisc_run+0x1bac/0x3600 [ 292.449821] __dev_queue_xmit+0x2131/0x3e00 [ 292.454133] dev_queue_xmit+0x4b/0x60 [ 292.457945] ip6_finish_output2+0x1a5b/0x22d0 [ 292.462461] ip6_finish_output+0xc13/0xca0 [ 292.466708] ip6_output+0x5e4/0x720 [ 292.470326] ip6_local_out+0x164/0x1d0 [ 292.474202] ip6_send_skb+0xf6/0x3b0 [ 292.477920] udp_v6_send_skb+0x113f/0x1df0 [ 292.482164] udpv6_sendmsg+0x43e5/0x4960 [ 292.486233] inet_sendmsg+0x4e9/0x800 [ 292.490042] ___sys_sendmsg+0xe68/0x1250 [ 292.494100] __sys_sendmmsg+0x56b/0xa90 [ 292.498063] __se_sys_sendmmsg+0xbd/0xe0 [ 292.502123] __x64_sys_sendmmsg+0x56/0x70 [ 292.506273] do_syscall_64+0xcf/0x110 [ 292.510062] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.515244] [ 292.516868] Uninit was stored to memory at: [ 292.521195] kmsan_internal_chain_origin+0x136/0x240 [ 292.526302] __msan_chain_origin+0x6d/0xd0 [ 292.530543] __save_stack_trace+0x8be/0xc60 [ 292.534873] save_stack_trace+0xc6/0x110 [ 292.538934] kmsan_internal_chain_origin+0x136/0x240 [ 292.544038] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.548542] __msan_memcpy+0x6f/0x80 [ 292.552269] pskb_expand_head+0x43b/0x1d20 [ 292.556507] gre_tap_xmit+0x4e3/0x910 [ 292.560297] dev_hard_start_xmit+0x6dc/0xe00 [ 292.564712] sch_direct_xmit+0x59b/0x890 [ 292.568775] __qdisc_run+0x1bac/0x3600 [ 292.572668] __dev_queue_xmit+0x2131/0x3e00 [ 292.577003] dev_queue_xmit+0x4b/0x60 [ 292.580820] ip6_finish_output2+0x1a5b/0x22d0 [ 292.585317] ip6_finish_output+0xc13/0xca0 [ 292.589557] ip6_output+0x5e4/0x720 [ 292.593197] ip6_local_out+0x164/0x1d0 [ 292.597095] ip6_send_skb+0xf6/0x3b0 [ 292.600824] udp_v6_send_skb+0x113f/0x1df0 [ 292.605064] udpv6_sendmsg+0x43e5/0x4960 [ 292.609121] inet_sendmsg+0x4e9/0x800 [ 292.612913] ___sys_sendmsg+0xe68/0x1250 [ 292.616968] __sys_sendmmsg+0x56b/0xa90 [ 292.620930] __se_sys_sendmmsg+0xbd/0xe0 [ 292.624979] __x64_sys_sendmmsg+0x56/0x70 [ 292.629134] do_syscall_64+0xcf/0x110 [ 292.632949] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.638141] [ 292.639767] Local variable description: ----_type.i@icmp6_send [ 292.645746] Variable was created at: [ 292.649473] icmp6_send+0x171/0x3ca0 [ 292.653192] icmpv6_send+0xe5/0x110 [ 292.672782] not chained 50000 origins [ 292.676623] CPU: 0 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 292.683483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.692849] Call Trace: [ 292.695458] dump_stack+0x32d/0x480 [ 292.699118] kmsan_internal_chain_origin+0x222/0x240 [ 292.704234] ? gre_tap_xmit+0x4e3/0x910 [ 292.708224] ? ip6_finish_output+0xc13/0xca0 [ 292.712641] ? ip6_output+0x5e4/0x720 [ 292.716457] ? ip6_local_out+0x164/0x1d0 [ 292.720533] ? ip6_send_skb+0xf6/0x3b0 [ 292.724436] ? udp_v6_send_skb+0x113f/0x1df0 [ 292.728861] ? udpv6_sendmsg+0x43e5/0x4960 [ 292.733112] ? inet_sendmsg+0x4e9/0x800 [ 292.737108] ? ___sys_sendmsg+0xe68/0x1250 [ 292.741352] ? __sys_sendmmsg+0x56b/0xa90 [ 292.745508] ? __se_sys_sendmmsg+0xbd/0xe0 [ 292.749754] ? __x64_sys_sendmmsg+0x56/0x70 [ 292.754087] ? do_syscall_64+0xcf/0x110 [ 292.758075] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.763462] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.768842] ? __module_address+0x6a/0x610 [ 292.773091] ? is_bpf_text_address+0x3e5/0x4d0 [ 292.777704] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 292.783087] ? is_bpf_text_address+0x49e/0x4d0 [ 292.787694] ? kmsan_internal_chain_origin+0x90/0x240 [ 292.792915] ? get_stack_info+0x863/0x9d0 [ 292.797093] __msan_chain_origin+0x6d/0xd0 [ 292.801352] ? ip6_send_skb+0xf6/0x3b0 [ 292.805259] __save_stack_trace+0x8be/0xc60 [ 292.809614] ? ip6_send_skb+0xf6/0x3b0 [ 292.813522] save_stack_trace+0xc6/0x110 [ 292.817603] kmsan_internal_chain_origin+0x136/0x240 [ 292.822729] ? inet_sendmsg+0x4e9/0x800 [ 292.826738] ? kmsan_internal_chain_origin+0x136/0x240 [ 292.832031] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 292.837594] ? __msan_memcpy+0x6f/0x80 [ 292.841527] ? pskb_expand_head+0x43b/0x1d20 [ 292.845949] ? gre_tap_xmit+0x4e3/0x910 [ 292.849943] ? dev_hard_start_xmit+0x6dc/0xe00 [ 292.854543] ? sch_direct_xmit+0x59b/0x890 [ 292.858792] ? __qdisc_run+0x1bac/0x3600 [ 292.862873] ? __dev_queue_xmit+0x2131/0x3e00 [ 292.867379] ? dev_queue_xmit+0x4b/0x60 [ 292.871458] ? ip6_finish_output2+0x1a5b/0x22d0 [ 292.876145] ? ip6_finish_output+0xc13/0xca0 [ 292.880570] ? ip6_output+0x5e4/0x720 [ 292.884384] ? ip6_local_out+0x164/0x1d0 [ 292.888458] ? ip6_send_skb+0xf6/0x3b0 [ 292.892356] ? udp_v6_send_skb+0x113f/0x1df0 [ 292.896779] ? udpv6_sendmsg+0x43e5/0x4960 [ 292.901024] ? inet_sendmsg+0x4e9/0x800 [ 292.905011] ? ___sys_sendmsg+0xe68/0x1250 [ 292.909257] ? __sys_sendmmsg+0x56b/0xa90 [ 292.913415] ? __se_sys_sendmmsg+0xbd/0xe0 [ 292.917661] ? __x64_sys_sendmmsg+0x56/0x70 [ 292.922003] ? do_syscall_64+0xcf/0x110 [ 292.926000] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.931391] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.936772] ? memcg_kmem_put_cache+0x8e/0x460 [ 292.941381] ? __msan_get_context_state+0x9/0x30 [ 292.946151] ? INIT_INT+0xc/0x30 [ 292.949539] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 292.954934] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.959466] __msan_memcpy+0x6f/0x80 [ 292.963200] pskb_expand_head+0x43b/0x1d20 [ 292.967732] gre_tap_xmit+0x4e3/0x910 [ 292.971551] ? gre_tap_init+0x650/0x650 [ 292.975544] dev_hard_start_xmit+0x6dc/0xe00 [ 292.979999] sch_direct_xmit+0x59b/0x890 [ 292.984093] __qdisc_run+0x1bac/0x3600 [ 292.988027] ? __msan_get_context_state+0x9/0x30 [ 292.992811] __dev_queue_xmit+0x2131/0x3e00 [ 292.997137] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.002516] dev_queue_xmit+0x4b/0x60 [ 293.006324] ip6_finish_output2+0x1a5b/0x22d0 [ 293.010932] ? validate_xmit_skb+0x1780/0x1780 [ 293.015523] ip6_finish_output+0xc13/0xca0 [ 293.019767] ip6_output+0x5e4/0x720 [ 293.023402] ? ip6_output+0x720/0x720 [ 293.027215] ? ac6_seq_show+0x200/0x200 [ 293.031201] ip6_local_out+0x164/0x1d0 [ 293.035092] ip6_send_skb+0xf6/0x3b0 [ 293.038812] udp_v6_send_skb+0x113f/0x1df0 [ 293.043065] udpv6_sendmsg+0x43e5/0x4960 [ 293.047134] ? ip_copy_metadata+0x1710/0x1710 [ 293.051678] ? __msan_poison_alloca+0x1e0/0x2b0 [ 293.056369] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 293.060695] inet_sendmsg+0x4e9/0x800 [ 293.064500] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.069859] ? security_socket_sendmsg+0x1bd/0x200 [ 293.074792] ___sys_sendmsg+0xe68/0x1250 [ 293.078850] ? inet_getname+0x490/0x490 [ 293.082835] ? __msan_poison_alloca+0x1e0/0x2b0 [ 293.087500] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.092862] ? rcu_all_qs+0x3b/0x310 [ 293.096573] ? _cond_resched+0x59/0x120 [ 293.100544] ? rcu_all_qs+0x53/0x310 [ 293.104257] ? _cond_resched+0x37/0x120 [ 293.108226] ? __sys_sendmmsg+0x7c9/0xa90 [ 293.112373] ? _cond_resched+0x59/0x120 [ 293.116343] __sys_sendmmsg+0x56b/0xa90 [ 293.120331] ? syscall_return_slowpath+0x123/0x8c0 [ 293.125254] ? put_timespec64+0x162/0x220 [ 293.129402] __se_sys_sendmmsg+0xbd/0xe0 [ 293.133470] __x64_sys_sendmmsg+0x56/0x70 [ 293.137613] do_syscall_64+0xcf/0x110 [ 293.141413] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.146598] RIP: 0033:0x457569 [ 293.149786] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.168690] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.176395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 293.183657] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 293.190928] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.198341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 293.205616] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 293.212891] Uninit was stored to memory at: [ 293.217218] kmsan_internal_chain_origin+0x136/0x240 [ 293.222318] __msan_chain_origin+0x6d/0xd0 [ 293.226549] __save_stack_trace+0x8be/0xc60 [ 293.230875] save_stack_trace+0xc6/0x110 [ 293.234932] kmsan_internal_chain_origin+0x136/0x240 [ 293.240044] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.244535] __msan_memcpy+0x6f/0x80 [ 293.248246] pskb_expand_head+0x43b/0x1d20 [ 293.252477] gre_tap_xmit+0x4e3/0x910 [ 293.256282] dev_hard_start_xmit+0x6dc/0xe00 [ 293.260682] sch_direct_xmit+0x59b/0x890 [ 293.264753] __qdisc_run+0x1bac/0x3600 [ 293.268641] __dev_queue_xmit+0x2131/0x3e00 [ 293.272959] dev_queue_xmit+0x4b/0x60 [ 293.276760] ip6_finish_output2+0x1a5b/0x22d0 [ 293.281254] ip6_finish_output+0xc13/0xca0 [ 293.285488] ip6_output+0x5e4/0x720 [ 293.289109] ip6_local_out+0x164/0x1d0 [ 293.292990] ip6_send_skb+0xf6/0x3b0 [ 293.296704] udp_v6_send_skb+0x113f/0x1df0 [ 293.300932] udpv6_sendmsg+0x43e5/0x4960 [ 293.304990] inet_sendmsg+0x4e9/0x800 [ 293.308793] ___sys_sendmsg+0xe68/0x1250 [ 293.312846] __sys_sendmmsg+0x56b/0xa90 [ 293.316814] __se_sys_sendmmsg+0xbd/0xe0 [ 293.320867] __x64_sys_sendmmsg+0x56/0x70 [ 293.325012] do_syscall_64+0xcf/0x110 [ 293.328807] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.333984] [ 293.335602] Uninit was stored to memory at: [ 293.339920] kmsan_internal_chain_origin+0x136/0x240 [ 293.345019] __msan_chain_origin+0x6d/0xd0 [ 293.349247] __save_stack_trace+0x8be/0xc60 [ 293.353562] save_stack_trace+0xc6/0x110 [ 293.357621] kmsan_internal_chain_origin+0x136/0x240 [ 293.362725] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.367214] __msan_memcpy+0x6f/0x80 [ 293.371026] pskb_expand_head+0x43b/0x1d20 [ 293.375262] gre_tap_xmit+0x4e3/0x910 [ 293.379061] dev_hard_start_xmit+0x6dc/0xe00 [ 293.383468] sch_direct_xmit+0x59b/0x890 [ 293.387521] __qdisc_run+0x1bac/0x3600 [ 293.391402] __dev_queue_xmit+0x2131/0x3e00 [ 293.395717] dev_queue_xmit+0x4b/0x60 [ 293.399518] ip6_finish_output2+0x1a5b/0x22d0 [ 293.404010] ip6_finish_output+0xc13/0xca0 [ 293.408238] ip6_output+0x5e4/0x720 [ 293.411873] ip6_local_out+0x164/0x1d0 [ 293.415759] ip6_send_skb+0xf6/0x3b0 [ 293.419467] udp_v6_send_skb+0x113f/0x1df0 [ 293.423703] udpv6_sendmsg+0x43e5/0x4960 [ 293.427762] inet_sendmsg+0x4e9/0x800 [ 293.431558] ___sys_sendmsg+0xe68/0x1250 [ 293.435614] __sys_sendmmsg+0x56b/0xa90 [ 293.439582] __se_sys_sendmmsg+0xbd/0xe0 [ 293.443638] __x64_sys_sendmmsg+0x56/0x70 [ 293.447784] do_syscall_64+0xcf/0x110 [ 293.451578] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.456751] [ 293.458367] Uninit was stored to memory at: [ 293.462691] kmsan_internal_chain_origin+0x136/0x240 [ 293.467792] __msan_chain_origin+0x6d/0xd0 [ 293.472024] __save_stack_trace+0x8be/0xc60 [ 293.476342] save_stack_trace+0xc6/0x110 [ 293.480408] kmsan_internal_chain_origin+0x136/0x240 [ 293.485513] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.490013] __msan_memcpy+0x6f/0x80 [ 293.493720] pskb_expand_head+0x43b/0x1d20 [ 293.497948] gre_tap_xmit+0x4e3/0x910 [ 293.501748] dev_hard_start_xmit+0x6dc/0xe00 [ 293.506152] sch_direct_xmit+0x59b/0x890 [ 293.510206] __qdisc_run+0x1bac/0x3600 [ 293.514087] __dev_queue_xmit+0x2131/0x3e00 [ 293.518401] dev_queue_xmit+0x4b/0x60 [ 293.522200] ip6_finish_output2+0x1a5b/0x22d0 [ 293.526710] ip6_finish_output+0xc13/0xca0 [ 293.530941] ip6_output+0x5e4/0x720 [ 293.534567] ip6_local_out+0x164/0x1d0 [ 293.538447] ip6_send_skb+0xf6/0x3b0 [ 293.542245] udp_v6_send_skb+0x113f/0x1df0 [ 293.546476] udpv6_sendmsg+0x43e5/0x4960 [ 293.550530] inet_sendmsg+0x4e9/0x800 [ 293.554323] ___sys_sendmsg+0xe68/0x1250 [ 293.558383] __sys_sendmmsg+0x56b/0xa90 [ 293.562351] __se_sys_sendmmsg+0xbd/0xe0 [ 293.566412] __x64_sys_sendmmsg+0x56/0x70 [ 293.570554] do_syscall_64+0xcf/0x110 [ 293.574363] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.579539] [ 293.581158] Uninit was stored to memory at: [ 293.585476] kmsan_internal_chain_origin+0x136/0x240 [ 293.590576] __msan_chain_origin+0x6d/0xd0 [ 293.594814] __save_stack_trace+0x8be/0xc60 [ 293.599129] save_stack_trace+0xc6/0x110 [ 293.603187] kmsan_internal_chain_origin+0x136/0x240 [ 293.608287] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.612779] __msan_memcpy+0x6f/0x80 [ 293.616485] pskb_expand_head+0x43b/0x1d20 [ 293.620726] gre_tap_xmit+0x4e3/0x910 [ 293.624533] dev_hard_start_xmit+0x6dc/0xe00 [ 293.628938] sch_direct_xmit+0x59b/0x890 [ 293.632997] __qdisc_run+0x1bac/0x3600 [ 293.636879] __dev_queue_xmit+0x2131/0x3e00 [ 293.641203] dev_queue_xmit+0x4b/0x60 [ 293.645000] ip6_finish_output2+0x1a5b/0x22d0 [ 293.649494] ip6_finish_output+0xc13/0xca0 [ 293.653725] ip6_output+0x5e4/0x720 [ 293.657347] ip6_local_out+0x164/0x1d0 [ 293.661240] ip6_send_skb+0xf6/0x3b0 [ 293.664957] udp_v6_send_skb+0x113f/0x1df0 [ 293.669187] udpv6_sendmsg+0x43e5/0x4960 [ 293.673247] inet_sendmsg+0x4e9/0x800 [ 293.677039] ___sys_sendmsg+0xe68/0x1250 [ 293.681095] __sys_sendmmsg+0x56b/0xa90 [ 293.685068] __se_sys_sendmmsg+0xbd/0xe0 [ 293.689123] __x64_sys_sendmmsg+0x56/0x70 [ 293.693265] do_syscall_64+0xcf/0x110 [ 293.697070] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.702248] [ 293.703867] Uninit was stored to memory at: [ 293.708190] kmsan_internal_chain_origin+0x136/0x240 [ 293.713288] __msan_chain_origin+0x6d/0xd0 [ 293.717518] __save_stack_trace+0x8be/0xc60 [ 293.721835] save_stack_trace+0xc6/0x110 [ 293.725890] kmsan_internal_chain_origin+0x136/0x240 [ 293.730988] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.735503] __msan_memcpy+0x6f/0x80 [ 293.739209] pskb_expand_head+0x43b/0x1d20 [ 293.743436] gre_tap_xmit+0x4e3/0x910 [ 293.747230] dev_hard_start_xmit+0x6dc/0xe00 [ 293.751636] sch_direct_xmit+0x59b/0x890 [ 293.755702] __qdisc_run+0x1bac/0x3600 [ 293.759582] __dev_queue_xmit+0x2131/0x3e00 [ 293.763896] dev_queue_xmit+0x4b/0x60 [ 293.767703] ip6_finish_output2+0x1a5b/0x22d0 [ 293.772193] ip6_finish_output+0xc13/0xca0 [ 293.776423] ip6_output+0x5e4/0x720 [ 293.780049] ip6_local_out+0x164/0x1d0 [ 293.783946] ip6_send_skb+0xf6/0x3b0 [ 293.787673] udp_v6_send_skb+0x113f/0x1df0 [ 293.791918] udpv6_sendmsg+0x43e5/0x4960 [ 293.795982] inet_sendmsg+0x4e9/0x800 [ 293.799792] ___sys_sendmsg+0xe68/0x1250 [ 293.803851] __sys_sendmmsg+0x56b/0xa90 [ 293.807938] __se_sys_sendmmsg+0xbd/0xe0 [ 293.811999] __x64_sys_sendmmsg+0x56/0x70 [ 293.816139] do_syscall_64+0xcf/0x110 [ 293.819938] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.825115] [ 293.826731] Uninit was stored to memory at: [ 293.831051] kmsan_internal_chain_origin+0x136/0x240 [ 293.836150] __msan_chain_origin+0x6d/0xd0 [ 293.840381] __save_stack_trace+0x8be/0xc60 [ 293.844710] save_stack_trace+0xc6/0x110 [ 293.848780] kmsan_internal_chain_origin+0x136/0x240 [ 293.853880] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.858378] __msan_memcpy+0x6f/0x80 [ 293.862088] pskb_expand_head+0x43b/0x1d20 [ 293.866320] gre_tap_xmit+0x4e3/0x910 [ 293.870119] dev_hard_start_xmit+0x6dc/0xe00 [ 293.874611] sch_direct_xmit+0x59b/0x890 [ 293.878664] __qdisc_run+0x1bac/0x3600 [ 293.882557] __dev_queue_xmit+0x2131/0x3e00 [ 293.886870] dev_queue_xmit+0x4b/0x60 [ 293.890667] ip6_finish_output2+0x1a5b/0x22d0 [ 293.895163] ip6_finish_output+0xc13/0xca0 [ 293.899394] ip6_output+0x5e4/0x720 [ 293.903016] ip6_local_out+0x164/0x1d0 [ 293.906902] ip6_send_skb+0xf6/0x3b0 [ 293.910611] udp_v6_send_skb+0x113f/0x1df0 [ 293.914844] udpv6_sendmsg+0x43e5/0x4960 [ 293.918908] inet_sendmsg+0x4e9/0x800 [ 293.922710] ___sys_sendmsg+0xe68/0x1250 [ 293.926763] __sys_sendmmsg+0x56b/0xa90 [ 293.930730] __se_sys_sendmmsg+0xbd/0xe0 [ 293.934789] __x64_sys_sendmmsg+0x56/0x70 [ 293.938934] do_syscall_64+0xcf/0x110 [ 293.942736] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.947910] [ 293.949526] Uninit was stored to memory at: [ 293.953849] kmsan_internal_chain_origin+0x136/0x240 [ 293.958946] __msan_chain_origin+0x6d/0xd0 [ 293.963183] __save_stack_trace+0x8be/0xc60 [ 293.968986] save_stack_trace+0xc6/0x110 [ 293.973049] kmsan_internal_chain_origin+0x136/0x240 [ 293.978153] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.982653] __msan_memcpy+0x6f/0x80 [ 293.986367] pskb_expand_head+0x43b/0x1d20 [ 293.990592] gre_tap_xmit+0x4e3/0x910 [ 293.994389] dev_hard_start_xmit+0x6dc/0xe00 [ 293.998795] sch_direct_xmit+0x59b/0x890 [ 294.002853] __qdisc_run+0x1bac/0x3600 [ 294.006734] __dev_queue_xmit+0x2131/0x3e00 [ 294.011046] dev_queue_xmit+0x4b/0x60 [ 294.014846] ip6_finish_output2+0x1a5b/0x22d0 [ 294.019337] ip6_finish_output+0xc13/0xca0 [ 294.023564] ip6_output+0x5e4/0x720 [ 294.027185] ip6_local_out+0x164/0x1d0 [ 294.031070] ip6_send_skb+0xf6/0x3b0 [ 294.034783] udp_v6_send_skb+0x113f/0x1df0 [ 294.039027] udpv6_sendmsg+0x43e5/0x4960 [ 294.043085] inet_sendmsg+0x4e9/0x800 00:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000380), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000003c0)="f0400fab3267410f22c166ba200066edc7442400f1000000c7442402a9dd0000ff1c24410f2137b9800000c00f3235000800000f30fdf30f07c4226d96923d1af14d66ba4200ed", 0x47}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) rt_sigreturn() ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:01:19 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000500)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x3, 0x7, 0x0, 0x7, '\x00', 0x8}, 0x1, 0x1, 0x6, r1, 0x2, 0x6, 'syz0\x00', &(0x7f0000000080)=['$*\x00', 'mime_type\x00'], 0xd, [], [0x800, 0x3, 0x43f6, 0x100]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$eventfd(r2, &(0x7f0000000140), 0x296) lseek(r2, 0x0, 0x1000202) open$dir(&(0x7f0000000180)='./file0\x00', 0x40, 0x100000000082) 00:01:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x2013, r1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fddbdf25010000000c00040002000000000000000c0008000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) [ 294.046879] ___sys_sendmsg+0xe68/0x1250 [ 294.050934] __sys_sendmmsg+0x56b/0xa90 [ 294.054912] __se_sys_sendmmsg+0xbd/0xe0 [ 294.059179] __x64_sys_sendmmsg+0x56/0x70 [ 294.063322] do_syscall_64+0xcf/0x110 [ 294.067116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.072293] [ 294.073910] Local variable description: ----_type.i@icmp6_send [ 294.079867] Variable was created at: [ 294.083576] icmp6_send+0x171/0x3ca0 [ 294.087287] icmpv6_send+0xe5/0x110 [ 294.130026] not chained 60000 origins [ 294.134384] CPU: 0 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 294.141238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.150604] Call Trace: [ 294.153207] dump_stack+0x32d/0x480 [ 294.156867] kmsan_internal_chain_origin+0x222/0x240 [ 294.161990] ? gre_tap_xmit+0x4e3/0x910 [ 294.165988] ? ip6_finish_output+0xc13/0xca0 [ 294.170413] ? ip6_output+0x5e4/0x720 [ 294.174227] ? ip6_local_out+0x164/0x1d0 00:01:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000002700)=[{0x50, 0x11b, 0x7fff, "cd08c8f5e1a5a96739101131ef292ceb6cf08647580c2410a0da9c5e3b972627aec34a7c0d3759f102d086615c5db129df8b164333a22f3ad775"}], 0x50, 0x10}, 0x4}], 0x1, 0x0) [ 294.178314] ? ip6_send_skb+0xf6/0x3b0 [ 294.182224] ? udp_v6_send_skb+0x113f/0x1df0 [ 294.186651] ? udpv6_sendmsg+0x43e5/0x4960 [ 294.190903] ? inet_sendmsg+0x4e9/0x800 [ 294.194892] ? ___sys_sendmsg+0xe68/0x1250 [ 294.199143] ? __sys_sendmmsg+0x56b/0xa90 [ 294.203303] ? __se_sys_sendmmsg+0xbd/0xe0 [ 294.207556] ? __x64_sys_sendmmsg+0x56/0x70 [ 294.211891] ? do_syscall_64+0xcf/0x110 [ 294.216100] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.221485] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.226876] ? __module_address+0x6a/0x610 [ 294.231225] ? is_bpf_text_address+0x3e5/0x4d0 [ 294.235831] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 294.241207] ? is_bpf_text_address+0x49e/0x4d0 [ 294.245814] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.251195] ? __module_address+0x6a/0x610 [ 294.255451] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 294.260830] ? is_bpf_text_address+0x49e/0x4d0 [ 294.265430] ? INIT_INT+0xc/0x30 [ 294.268824] __msan_chain_origin+0x6d/0xd0 [ 294.273077] __save_stack_trace+0xaff/0xc60 [ 294.277440] save_stack_trace+0xc6/0x110 [ 294.281521] kmsan_internal_chain_origin+0x136/0x240 [ 294.286647] ? inet_sendmsg+0x4e9/0x800 [ 294.290659] ? kmsan_internal_chain_origin+0x136/0x240 [ 294.295964] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 294.300655] ? __msan_memcpy+0x6f/0x80 [ 294.304566] ? pskb_expand_head+0x43b/0x1d20 [ 294.308992] ? gre_tap_xmit+0x4e3/0x910 [ 294.312988] ? dev_hard_start_xmit+0x6dc/0xe00 [ 294.317587] ? sch_direct_xmit+0x59b/0x890 [ 294.321829] ? __qdisc_run+0x1bac/0x3600 [ 294.325906] ? __dev_queue_xmit+0x2131/0x3e00 [ 294.330427] ? dev_queue_xmit+0x4b/0x60 [ 294.334402] ? ip6_finish_output2+0x1a5b/0x22d0 [ 294.339071] ? ip6_finish_output+0xc13/0xca0 [ 294.343479] ? ip6_output+0x5e4/0x720 [ 294.347279] ? ip6_local_out+0x164/0x1d0 [ 294.351362] ? ip6_send_skb+0xf6/0x3b0 [ 294.355251] ? udp_v6_send_skb+0x113f/0x1df0 [ 294.359661] ? udpv6_sendmsg+0x43e5/0x4960 [ 294.363902] ? inet_sendmsg+0x4e9/0x800 [ 294.367868] ? ___sys_sendmsg+0xe68/0x1250 [ 294.372095] ? __sys_sendmmsg+0x56b/0xa90 [ 294.376238] ? __se_sys_sendmmsg+0xbd/0xe0 [ 294.380468] ? __x64_sys_sendmmsg+0x56/0x70 [ 294.384785] ? do_syscall_64+0xcf/0x110 [ 294.388756] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.394124] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.399484] ? memcg_kmem_put_cache+0x8e/0x460 [ 294.404069] ? __msan_get_context_state+0x9/0x30 [ 294.408822] ? INIT_INT+0xc/0x30 [ 294.412186] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 294.417553] kmsan_memcpy_origins+0x13d/0x1b0 [ 294.422051] __msan_memcpy+0x6f/0x80 [ 294.425761] pskb_expand_head+0x43b/0x1d20 [ 294.430010] gre_tap_xmit+0x4e3/0x910 [ 294.433812] ? gre_tap_init+0x650/0x650 [ 294.437783] dev_hard_start_xmit+0x6dc/0xe00 [ 294.442202] sch_direct_xmit+0x59b/0x890 [ 294.446270] __qdisc_run+0x1bac/0x3600 [ 294.450170] ? __msan_get_context_state+0x9/0x30 [ 294.454930] __dev_queue_xmit+0x2131/0x3e00 [ 294.459252] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.464628] dev_queue_xmit+0x4b/0x60 [ 294.468424] ip6_finish_output2+0x1a5b/0x22d0 [ 294.472934] ? validate_xmit_skb+0x1780/0x1780 [ 294.477517] ip6_finish_output+0xc13/0xca0 [ 294.481760] ip6_output+0x5e4/0x720 [ 294.485391] ? ip6_output+0x720/0x720 [ 294.489197] ? ac6_seq_show+0x200/0x200 [ 294.493171] ip6_local_out+0x164/0x1d0 [ 294.497061] ip6_send_skb+0xf6/0x3b0 [ 294.500783] udp_v6_send_skb+0x113f/0x1df0 [ 294.505034] udpv6_sendmsg+0x43e5/0x4960 [ 294.509095] ? ip_copy_metadata+0x1710/0x1710 [ 294.513617] ? __msan_poison_alloca+0x1e0/0x2b0 [ 294.518289] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 294.522607] inet_sendmsg+0x4e9/0x800 [ 294.526408] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.531769] ? security_socket_sendmsg+0x1bd/0x200 [ 294.536711] ___sys_sendmsg+0xe68/0x1250 [ 294.540770] ? kmsan_set_origin+0x83/0x130 [ 294.545000] ? inet_getname+0x490/0x490 [ 294.548986] ? __msan_poison_alloca+0x1e0/0x2b0 [ 294.553654] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.559029] ? rcu_all_qs+0x3b/0x310 [ 294.562745] ? _cond_resched+0x59/0x120 [ 294.566729] ? rcu_all_qs+0x53/0x310 [ 294.570435] ? _cond_resched+0x37/0x120 [ 294.574402] ? __sys_sendmmsg+0x7c9/0xa90 [ 294.578552] ? _cond_resched+0x59/0x120 [ 294.582524] __sys_sendmmsg+0x56b/0xa90 [ 294.586521] ? syscall_return_slowpath+0x123/0x8c0 [ 294.591446] ? put_timespec64+0x162/0x220 [ 294.595597] __se_sys_sendmmsg+0xbd/0xe0 [ 294.599655] __x64_sys_sendmmsg+0x56/0x70 [ 294.603804] do_syscall_64+0xcf/0x110 [ 294.607606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.612790] RIP: 0033:0x457569 [ 294.615980] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.634875] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.642577] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 294.649943] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 294.657217] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.664482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 294.671750] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 294.679028] Uninit was stored to memory at: [ 294.683350] kmsan_internal_chain_origin+0x136/0x240 [ 294.688447] __msan_chain_origin+0x6d/0xd0 [ 294.692679] __save_stack_trace+0x8be/0xc60 [ 294.697001] save_stack_trace+0xc6/0x110 [ 294.701055] kmsan_internal_chain_origin+0x136/0x240 [ 294.706151] kmsan_memcpy_origins+0x13d/0x1b0 [ 294.710650] __msan_memcpy+0x6f/0x80 [ 294.714357] pskb_expand_head+0x43b/0x1d20 [ 294.718586] gre_tap_xmit+0x4e3/0x910 [ 294.722383] dev_hard_start_xmit+0x6dc/0xe00 [ 294.726784] sch_direct_xmit+0x59b/0x890 [ 294.730848] __qdisc_run+0x1bac/0x3600 [ 294.734735] __dev_queue_xmit+0x2131/0x3e00 [ 294.739051] dev_queue_xmit+0x4b/0x60 [ 294.742847] ip6_finish_output2+0x1a5b/0x22d0 [ 294.747347] ip6_finish_output+0xc13/0xca0 [ 294.751573] ip6_output+0x5e4/0x720 [ 294.755197] ip6_local_out+0x164/0x1d0 [ 294.759077] ip6_send_skb+0xf6/0x3b0 [ 294.762786] udp_v6_send_skb+0x113f/0x1df0 [ 294.767022] udpv6_sendmsg+0x43e5/0x4960 [ 294.771077] inet_sendmsg+0x4e9/0x800 [ 294.774873] ___sys_sendmsg+0xe68/0x1250 [ 294.778925] __sys_sendmmsg+0x56b/0xa90 [ 294.782899] __se_sys_sendmmsg+0xbd/0xe0 [ 294.786955] __x64_sys_sendmmsg+0x56/0x70 [ 294.791095] do_syscall_64+0xcf/0x110 [ 294.794895] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.800068] [ 294.801695] Uninit was stored to memory at: [ 294.806018] kmsan_internal_chain_origin+0x136/0x240 [ 294.811118] __msan_chain_origin+0x6d/0xd0 [ 294.815350] __save_stack_trace+0x8be/0xc60 [ 294.819667] save_stack_trace+0xc6/0x110 [ 294.823749] kmsan_internal_chain_origin+0x136/0x240 [ 294.828845] kmsan_memcpy_origins+0x13d/0x1b0 [ 294.833332] __msan_memcpy+0x6f/0x80 [ 294.837040] pskb_expand_head+0x43b/0x1d20 [ 294.841266] gre_tap_xmit+0x4e3/0x910 [ 294.845059] dev_hard_start_xmit+0x6dc/0xe00 [ 294.849469] sch_direct_xmit+0x59b/0x890 [ 294.853529] __qdisc_run+0x1bac/0x3600 [ 294.857407] __dev_queue_xmit+0x2131/0x3e00 [ 294.861725] dev_queue_xmit+0x4b/0x60 [ 294.865522] ip6_finish_output2+0x1a5b/0x22d0 [ 294.870010] ip6_finish_output+0xc13/0xca0 [ 294.874241] ip6_output+0x5e4/0x720 [ 294.877864] ip6_local_out+0x164/0x1d0 [ 294.881746] ip6_send_skb+0xf6/0x3b0 [ 294.885457] udp_v6_send_skb+0x113f/0x1df0 [ 294.889692] udpv6_sendmsg+0x43e5/0x4960 [ 294.893751] inet_sendmsg+0x4e9/0x800 [ 294.897544] ___sys_sendmsg+0xe68/0x1250 [ 294.901608] __sys_sendmmsg+0x56b/0xa90 [ 294.905576] __se_sys_sendmmsg+0xbd/0xe0 [ 294.909632] __x64_sys_sendmmsg+0x56/0x70 [ 294.913777] do_syscall_64+0xcf/0x110 [ 294.917575] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.922750] [ 294.924371] Uninit was stored to memory at: [ 294.928700] kmsan_internal_chain_origin+0x136/0x240 [ 294.933797] __msan_chain_origin+0x6d/0xd0 [ 294.938025] __save_stack_trace+0x8be/0xc60 [ 294.942340] save_stack_trace+0xc6/0x110 [ 294.946398] kmsan_internal_chain_origin+0x136/0x240 [ 294.951497] kmsan_memcpy_origins+0x13d/0x1b0 [ 294.955985] __msan_memcpy+0x6f/0x80 [ 294.959701] pskb_expand_head+0x43b/0x1d20 [ 294.963932] gre_tap_xmit+0x4e3/0x910 [ 294.967949] dev_hard_start_xmit+0x6dc/0xe00 [ 294.972353] sch_direct_xmit+0x59b/0x890 [ 294.976407] __qdisc_run+0x1bac/0x3600 [ 294.980285] __dev_queue_xmit+0x2131/0x3e00 [ 294.984597] dev_queue_xmit+0x4b/0x60 [ 294.988390] ip6_finish_output2+0x1a5b/0x22d0 [ 294.992882] ip6_finish_output+0xc13/0xca0 [ 294.997113] ip6_output+0x5e4/0x720 [ 295.000732] ip6_local_out+0x164/0x1d0 [ 295.004614] ip6_send_skb+0xf6/0x3b0 [ 295.008335] udp_v6_send_skb+0x113f/0x1df0 [ 295.012564] udpv6_sendmsg+0x43e5/0x4960 [ 295.016622] inet_sendmsg+0x4e9/0x800 [ 295.020414] ___sys_sendmsg+0xe68/0x1250 [ 295.024472] __sys_sendmmsg+0x56b/0xa90 [ 295.028438] __se_sys_sendmmsg+0xbd/0xe0 [ 295.032491] __x64_sys_sendmmsg+0x56/0x70 [ 295.036632] do_syscall_64+0xcf/0x110 [ 295.040429] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.045606] [ 295.047224] Uninit was stored to memory at: [ 295.051540] kmsan_internal_chain_origin+0x136/0x240 [ 295.056636] __msan_chain_origin+0x6d/0xd0 [ 295.060864] __save_stack_trace+0x8be/0xc60 [ 295.065183] save_stack_trace+0xc6/0x110 [ 295.069246] kmsan_internal_chain_origin+0x136/0x240 [ 295.074346] kmsan_memcpy_origins+0x13d/0x1b0 [ 295.078839] __msan_memcpy+0x6f/0x80 [ 295.082544] pskb_expand_head+0x43b/0x1d20 [ 295.086789] gre_tap_xmit+0x4e3/0x910 [ 295.090585] dev_hard_start_xmit+0x6dc/0xe00 [ 295.094985] sch_direct_xmit+0x59b/0x890 [ 295.099037] __qdisc_run+0x1bac/0x3600 [ 295.102918] __dev_queue_xmit+0x2131/0x3e00 [ 295.107229] dev_queue_xmit+0x4b/0x60 [ 295.111025] ip6_finish_output2+0x1a5b/0x22d0 [ 295.115515] ip6_finish_output+0xc13/0xca0 [ 295.119754] ip6_output+0x5e4/0x720 [ 295.123475] ip6_local_out+0x164/0x1d0 [ 295.127367] ip6_send_skb+0xf6/0x3b0 [ 295.131080] udp_v6_send_skb+0x113f/0x1df0 [ 295.135322] udpv6_sendmsg+0x43e5/0x4960 [ 295.139375] inet_sendmsg+0x4e9/0x800 [ 295.143169] ___sys_sendmsg+0xe68/0x1250 [ 295.147223] __sys_sendmmsg+0x56b/0xa90 [ 295.151190] __se_sys_sendmmsg+0xbd/0xe0 [ 295.155250] __x64_sys_sendmmsg+0x56/0x70 [ 295.159393] do_syscall_64+0xcf/0x110 [ 295.163190] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.168368] [ 295.169986] Uninit was stored to memory at: [ 295.174304] kmsan_internal_chain_origin+0x136/0x240 [ 295.179401] __msan_chain_origin+0x6d/0xd0 [ 295.183629] __save_stack_trace+0x8be/0xc60 [ 295.187944] save_stack_trace+0xc6/0x110 [ 295.192006] kmsan_internal_chain_origin+0x136/0x240 [ 295.197106] kmsan_memcpy_origins+0x13d/0x1b0 [ 295.201594] __msan_memcpy+0x6f/0x80 [ 295.205306] pskb_expand_head+0x43b/0x1d20 [ 295.209533] gre_tap_xmit+0x4e3/0x910 [ 295.213326] dev_hard_start_xmit+0x6dc/0xe00 [ 295.217725] sch_direct_xmit+0x59b/0x890 [ 295.221778] __qdisc_run+0x1bac/0x3600 [ 295.225658] __dev_queue_xmit+0x2131/0x3e00 [ 295.229977] dev_queue_xmit+0x4b/0x60 [ 295.233782] ip6_finish_output2+0x1a5b/0x22d0 [ 295.238272] ip6_finish_output+0xc13/0xca0 [ 295.242501] ip6_output+0x5e4/0x720 [ 295.246120] ip6_local_out+0x164/0x1d0 [ 295.250000] ip6_send_skb+0xf6/0x3b0 [ 295.253714] udp_v6_send_skb+0x113f/0x1df0 [ 295.257946] udpv6_sendmsg+0x43e5/0x4960 [ 295.262007] inet_sendmsg+0x4e9/0x800 [ 295.265799] ___sys_sendmsg+0xe68/0x1250 [ 295.269853] __sys_sendmmsg+0x56b/0xa90 [ 295.273820] __se_sys_sendmmsg+0xbd/0xe0 [ 295.277876] __x64_sys_sendmmsg+0x56/0x70 [ 295.282020] do_syscall_64+0xcf/0x110 [ 295.285813] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.290990] [ 295.292605] Uninit was stored to memory at: [ 295.296923] kmsan_internal_chain_origin+0x136/0x240 [ 295.302027] __msan_chain_origin+0x6d/0xd0 [ 295.306253] __save_stack_trace+0x8be/0xc60 [ 295.310565] save_stack_trace+0xc6/0x110 [ 295.314621] kmsan_internal_chain_origin+0x136/0x240 [ 295.319719] kmsan_memcpy_origins+0x13d/0x1b0 [ 295.324207] __msan_memcpy+0x6f/0x80 [ 295.327916] pskb_expand_head+0x43b/0x1d20 [ 295.332142] gre_tap_xmit+0x4e3/0x910 [ 295.335937] dev_hard_start_xmit+0x6dc/0xe00 [ 295.340339] sch_direct_xmit+0x59b/0x890 [ 295.344394] __qdisc_run+0x1bac/0x3600 [ 295.348272] __dev_queue_xmit+0x2131/0x3e00 [ 295.352585] dev_queue_xmit+0x4b/0x60 [ 295.356378] ip6_finish_output2+0x1a5b/0x22d0 [ 295.360864] ip6_finish_output+0xc13/0xca0 [ 295.365091] ip6_output+0x5e4/0x720 [ 295.368718] ip6_local_out+0x164/0x1d0 [ 295.372602] ip6_send_skb+0xf6/0x3b0 [ 295.376312] udp_v6_send_skb+0x113f/0x1df0 [ 295.380539] udpv6_sendmsg+0x43e5/0x4960 [ 295.384596] inet_sendmsg+0x4e9/0x800 [ 295.388395] ___sys_sendmsg+0xe68/0x1250 [ 295.392451] __sys_sendmmsg+0x56b/0xa90 [ 295.396415] __se_sys_sendmmsg+0xbd/0xe0 [ 295.400468] __x64_sys_sendmmsg+0x56/0x70 [ 295.404608] do_syscall_64+0xcf/0x110 [ 295.408401] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.413576] [ 295.415192] Uninit was stored to memory at: [ 295.419511] kmsan_internal_chain_origin+0x136/0x240 [ 295.424624] __msan_chain_origin+0x6d/0xd0 [ 295.428855] __save_stack_trace+0x8be/0xc60 [ 295.433168] save_stack_trace+0xc6/0x110 [ 295.437221] kmsan_internal_chain_origin+0x136/0x240 [ 295.442319] kmsan_memcpy_origins+0x13d/0x1b0 [ 295.446806] __msan_memcpy+0x6f/0x80 [ 295.450512] pskb_expand_head+0x43b/0x1d20 [ 295.454742] gre_tap_xmit+0x4e3/0x910 [ 295.458534] dev_hard_start_xmit+0x6dc/0xe00 [ 295.462945] sch_direct_xmit+0x59b/0x890 [ 295.467013] __qdisc_run+0x1bac/0x3600 [ 295.470896] __dev_queue_xmit+0x2131/0x3e00 [ 295.475208] dev_queue_xmit+0x4b/0x60 [ 295.479002] ip6_finish_output2+0x1a5b/0x22d0 [ 295.484970] ip6_finish_output+0xc13/0xca0 [ 295.489198] ip6_output+0x5e4/0x720 [ 295.492821] ip6_local_out+0x164/0x1d0 [ 295.496704] ip6_send_skb+0xf6/0x3b0 [ 295.500414] udp_v6_send_skb+0x113f/0x1df0 [ 295.504646] udpv6_sendmsg+0x43e5/0x4960 [ 295.508707] inet_sendmsg+0x4e9/0x800 [ 295.512498] ___sys_sendmsg+0xe68/0x1250 [ 295.516551] __sys_sendmmsg+0x56b/0xa90 [ 295.520519] __se_sys_sendmmsg+0xbd/0xe0 [ 295.524572] __x64_sys_sendmmsg+0x56/0x70 [ 295.528717] do_syscall_64+0xcf/0x110 [ 295.532516] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.537696] [ 295.539313] Local variable description: ----_type.i@icmp6_send [ 295.545280] Variable was created at: [ 295.548984] icmp6_send+0x171/0x3ca0 [ 295.552697] icmpv6_send+0xe5/0x110 [ 295.692392] not chained 70000 origins [ 295.696251] CPU: 0 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 295.703363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.712734] Call Trace: [ 295.715340] dump_stack+0x32d/0x480 [ 295.719007] kmsan_internal_chain_origin+0x222/0x240 [ 295.724121] ? gre_tap_xmit+0x4e3/0x910 [ 295.728112] ? ip6_finish_output+0xc13/0xca0 [ 295.732530] ? ip6_output+0x5e4/0x720 [ 295.736348] ? ip6_local_out+0x164/0x1d0 [ 295.740426] ? ip6_send_skb+0xf6/0x3b0 [ 295.744326] ? udp_v6_send_skb+0x113f/0x1df0 [ 295.748750] ? udpv6_sendmsg+0x43e5/0x4960 [ 295.752995] ? inet_sendmsg+0x4e9/0x800 [ 295.756996] ? ___sys_sendmsg+0xe68/0x1250 [ 295.761245] ? __sys_sendmmsg+0x56b/0xa90 [ 295.765407] ? __se_sys_sendmmsg+0xbd/0xe0 [ 295.769661] ? __x64_sys_sendmmsg+0x56/0x70 [ 295.774004] ? do_syscall_64+0xcf/0x110 [ 295.777998] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.783383] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.788768] ? __module_address+0x6a/0x610 [ 295.793022] ? is_bpf_text_address+0x3e5/0x4d0 [ 295.797624] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 295.802999] ? is_bpf_text_address+0x49e/0x4d0 [ 295.807597] ? kmsan_internal_chain_origin+0x90/0x240 [ 295.812814] ? get_stack_info+0x863/0x9d0 [ 295.816986] __msan_chain_origin+0x6d/0xd0 [ 295.821235] ? __qdisc_run+0x1bac/0x3600 [ 295.825309] __save_stack_trace+0x8be/0xc60 [ 295.829666] ? __qdisc_run+0x1bac/0x3600 [ 295.833750] save_stack_trace+0xc6/0x110 [ 295.837828] kmsan_internal_chain_origin+0x136/0x240 [ 295.842948] ? inet_sendmsg+0x4e9/0x800 [ 295.846949] ? kmsan_internal_chain_origin+0x136/0x240 [ 295.852236] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 295.856899] ? __msan_memcpy+0x6f/0x80 [ 295.860869] ? pskb_expand_head+0x43b/0x1d20 [ 295.865275] ? gre_tap_xmit+0x4e3/0x910 [ 295.869240] ? dev_hard_start_xmit+0x6dc/0xe00 [ 295.873814] ? sch_direct_xmit+0x59b/0x890 [ 295.878038] ? __qdisc_run+0x1bac/0x3600 [ 295.882096] ? __dev_queue_xmit+0x2131/0x3e00 [ 295.886586] ? dev_queue_xmit+0x4b/0x60 [ 295.890556] ? ip6_finish_output2+0x1a5b/0x22d0 [ 295.895218] ? ip6_finish_output+0xc13/0xca0 [ 295.899618] ? ip6_output+0x5e4/0x720 [ 295.903414] ? ip6_local_out+0x164/0x1d0 [ 295.907468] ? ip6_send_skb+0xf6/0x3b0 [ 295.911351] ? udp_v6_send_skb+0x113f/0x1df0 [ 295.915756] ? udpv6_sendmsg+0x43e5/0x4960 [ 295.919986] ? inet_sendmsg+0x4e9/0x800 [ 295.923957] ? ___sys_sendmsg+0xe68/0x1250 [ 295.928183] ? __sys_sendmmsg+0x56b/0xa90 [ 295.932326] ? __se_sys_sendmmsg+0xbd/0xe0 [ 295.936552] ? __x64_sys_sendmmsg+0x56/0x70 [ 295.940867] ? do_syscall_64+0xcf/0x110 [ 295.944838] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.950205] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.955565] ? memcg_kmem_put_cache+0x8e/0x460 [ 295.960146] ? __msan_get_context_state+0x9/0x30 [ 295.965371] ? INIT_INT+0xc/0x30 [ 295.968735] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 295.974103] kmsan_memcpy_origins+0x13d/0x1b0 [ 295.978600] __msan_memcpy+0x6f/0x80 [ 295.982310] pskb_expand_head+0x43b/0x1d20 [ 295.986555] gre_tap_xmit+0x4e3/0x910 [ 295.990357] ? gre_tap_init+0x650/0x650 [ 295.994334] dev_hard_start_xmit+0x6dc/0xe00 [ 295.998754] sch_direct_xmit+0x59b/0x890 [ 296.002819] __qdisc_run+0x1bac/0x3600 [ 296.006720] ? __msan_get_context_state+0x9/0x30 [ 296.011479] __dev_queue_xmit+0x2131/0x3e00 [ 296.015805] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.021177] dev_queue_xmit+0x4b/0x60 [ 296.024982] ip6_finish_output2+0x1a5b/0x22d0 [ 296.029489] ? validate_xmit_skb+0x1780/0x1780 [ 296.034078] ip6_finish_output+0xc13/0xca0 [ 296.038317] ip6_output+0x5e4/0x720 [ 296.041956] ? ip6_output+0x720/0x720 [ 296.045752] ? ac6_seq_show+0x200/0x200 [ 296.049729] ip6_local_out+0x164/0x1d0 [ 296.053619] ip6_send_skb+0xf6/0x3b0 [ 296.057337] udp_v6_send_skb+0x113f/0x1df0 [ 296.061585] udpv6_sendmsg+0x43e5/0x4960 [ 296.065649] ? ip_copy_metadata+0x1710/0x1710 [ 296.070168] ? __msan_poison_alloca+0x1e0/0x2b0 [ 296.074840] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 296.079160] inet_sendmsg+0x4e9/0x800 [ 296.082967] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.088326] ? security_socket_sendmsg+0x1bd/0x200 [ 296.093271] ___sys_sendmsg+0xe68/0x1250 [ 296.097334] ? kmsan_set_origin+0x83/0x130 [ 296.101563] ? inet_getname+0x490/0x490 [ 296.105559] ? __msan_poison_alloca+0x1e0/0x2b0 [ 296.110222] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.115584] ? rcu_all_qs+0x3b/0x310 [ 296.119306] ? _cond_resched+0x59/0x120 [ 296.123281] ? rcu_all_qs+0x53/0x310 [ 296.127161] ? _cond_resched+0x37/0x120 [ 296.131131] ? __sys_sendmmsg+0x7c9/0xa90 [ 296.135747] ? _cond_resched+0x59/0x120 [ 296.139723] __sys_sendmmsg+0x56b/0xa90 [ 296.143721] ? syscall_return_slowpath+0x123/0x8c0 [ 296.148659] ? put_timespec64+0x162/0x220 [ 296.152813] __se_sys_sendmmsg+0xbd/0xe0 [ 296.156875] __x64_sys_sendmmsg+0x56/0x70 [ 296.161021] do_syscall_64+0xcf/0x110 [ 296.164822] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.170009] RIP: 0033:0x457569 [ 296.173199] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.192098] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.199803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 296.207064] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 296.214328] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 296.221590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 296.228853] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 296.236313] Uninit was stored to memory at: [ 296.240632] kmsan_internal_chain_origin+0x136/0x240 [ 296.245734] __msan_chain_origin+0x6d/0xd0 [ 296.249980] __save_stack_trace+0x8be/0xc60 [ 296.254309] save_stack_trace+0xc6/0x110 [ 296.258367] kmsan_internal_chain_origin+0x136/0x240 [ 296.263466] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.267961] __msan_memcpy+0x6f/0x80 [ 296.271672] pskb_expand_head+0x43b/0x1d20 [ 296.275915] gre_tap_xmit+0x4e3/0x910 [ 296.279711] dev_hard_start_xmit+0x6dc/0xe00 [ 296.284110] sch_direct_xmit+0x59b/0x890 [ 296.288163] __qdisc_run+0x1bac/0x3600 [ 296.292044] __dev_queue_xmit+0x2131/0x3e00 [ 296.296361] dev_queue_xmit+0x4b/0x60 [ 296.300171] ip6_finish_output2+0x1a5b/0x22d0 [ 296.304658] ip6_finish_output+0xc13/0xca0 [ 296.308892] ip6_output+0x5e4/0x720 [ 296.312516] ip6_local_out+0x164/0x1d0 [ 296.316396] ip6_send_skb+0xf6/0x3b0 [ 296.320105] udp_v6_send_skb+0x113f/0x1df0 [ 296.324332] udpv6_sendmsg+0x43e5/0x4960 [ 296.328386] inet_sendmsg+0x4e9/0x800 [ 296.332180] ___sys_sendmsg+0xe68/0x1250 [ 296.336231] __sys_sendmmsg+0x56b/0xa90 [ 296.340202] __se_sys_sendmmsg+0xbd/0xe0 [ 296.344254] __x64_sys_sendmmsg+0x56/0x70 [ 296.348394] do_syscall_64+0xcf/0x110 [ 296.352192] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.357379] [ 296.358993] Uninit was stored to memory at: [ 296.363312] kmsan_internal_chain_origin+0x136/0x240 [ 296.368413] __msan_chain_origin+0x6d/0xd0 [ 296.372641] __save_stack_trace+0x8be/0xc60 [ 296.376960] save_stack_trace+0xc6/0x110 [ 296.381019] kmsan_internal_chain_origin+0x136/0x240 [ 296.386120] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.390614] __msan_memcpy+0x6f/0x80 [ 296.394324] pskb_expand_head+0x43b/0x1d20 [ 296.398549] gre_tap_xmit+0x4e3/0x910 [ 296.402345] dev_hard_start_xmit+0x6dc/0xe00 [ 296.406748] sch_direct_xmit+0x59b/0x890 [ 296.410801] __qdisc_run+0x1bac/0x3600 [ 296.414690] __dev_queue_xmit+0x2131/0x3e00 [ 296.419004] dev_queue_xmit+0x4b/0x60 [ 296.422799] ip6_finish_output2+0x1a5b/0x22d0 [ 296.427286] ip6_finish_output+0xc13/0xca0 [ 296.431513] ip6_output+0x5e4/0x720 [ 296.435137] ip6_local_out+0x164/0x1d0 [ 296.439022] ip6_send_skb+0xf6/0x3b0 [ 296.442731] udp_v6_send_skb+0x113f/0x1df0 [ 296.446966] udpv6_sendmsg+0x43e5/0x4960 [ 296.451031] inet_sendmsg+0x4e9/0x800 [ 296.454826] ___sys_sendmsg+0xe68/0x1250 [ 296.458877] __sys_sendmmsg+0x56b/0xa90 [ 296.462842] __se_sys_sendmmsg+0xbd/0xe0 [ 296.466897] __x64_sys_sendmmsg+0x56/0x70 [ 296.471041] do_syscall_64+0xcf/0x110 [ 296.474835] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.480013] [ 296.481627] Uninit was stored to memory at: [ 296.485963] kmsan_internal_chain_origin+0x136/0x240 [ 296.491064] __msan_chain_origin+0x6d/0xd0 [ 296.495294] __save_stack_trace+0x8be/0xc60 [ 296.499609] save_stack_trace+0xc6/0x110 [ 296.503667] kmsan_internal_chain_origin+0x136/0x240 [ 296.508772] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.513262] __msan_memcpy+0x6f/0x80 [ 296.516976] pskb_expand_head+0x43b/0x1d20 [ 296.521293] gre_tap_xmit+0x4e3/0x910 [ 296.525091] dev_hard_start_xmit+0x6dc/0xe00 [ 296.529504] sch_direct_xmit+0x59b/0x890 [ 296.533571] __qdisc_run+0x1bac/0x3600 [ 296.537454] __dev_queue_xmit+0x2131/0x3e00 [ 296.541782] dev_queue_xmit+0x4b/0x60 [ 296.545583] ip6_finish_output2+0x1a5b/0x22d0 [ 296.550074] ip6_finish_output+0xc13/0xca0 [ 296.554307] ip6_output+0x5e4/0x720 [ 296.557927] ip6_local_out+0x164/0x1d0 [ 296.561815] ip6_send_skb+0xf6/0x3b0 [ 296.565524] udp_v6_send_skb+0x113f/0x1df0 [ 296.569757] udpv6_sendmsg+0x43e5/0x4960 [ 296.573826] inet_sendmsg+0x4e9/0x800 [ 296.577619] ___sys_sendmsg+0xe68/0x1250 [ 296.581680] __sys_sendmmsg+0x56b/0xa90 [ 296.585665] __se_sys_sendmmsg+0xbd/0xe0 [ 296.589728] __x64_sys_sendmmsg+0x56/0x70 [ 296.593871] do_syscall_64+0xcf/0x110 [ 296.597752] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.602932] [ 296.604552] Uninit was stored to memory at: [ 296.608872] kmsan_internal_chain_origin+0x136/0x240 [ 296.613973] __msan_chain_origin+0x6d/0xd0 [ 296.618202] __save_stack_trace+0x8be/0xc60 [ 296.622514] save_stack_trace+0xc6/0x110 [ 296.626572] kmsan_internal_chain_origin+0x136/0x240 [ 296.631676] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.636180] __msan_memcpy+0x6f/0x80 [ 296.639886] pskb_expand_head+0x43b/0x1d20 [ 296.644114] gre_tap_xmit+0x4e3/0x910 [ 296.647906] dev_hard_start_xmit+0x6dc/0xe00 [ 296.652310] sch_direct_xmit+0x59b/0x890 [ 296.656361] __qdisc_run+0x1bac/0x3600 [ 296.660241] __dev_queue_xmit+0x2131/0x3e00 [ 296.664559] dev_queue_xmit+0x4b/0x60 [ 296.668357] ip6_finish_output2+0x1a5b/0x22d0 [ 296.672850] ip6_finish_output+0xc13/0xca0 [ 296.677079] ip6_output+0x5e4/0x720 [ 296.680706] ip6_local_out+0x164/0x1d0 [ 296.684587] ip6_send_skb+0xf6/0x3b0 [ 296.688295] udp_v6_send_skb+0x113f/0x1df0 [ 296.692530] udpv6_sendmsg+0x43e5/0x4960 [ 296.696584] inet_sendmsg+0x4e9/0x800 [ 296.700379] ___sys_sendmsg+0xe68/0x1250 [ 296.704442] __sys_sendmmsg+0x56b/0xa90 [ 296.708420] __se_sys_sendmmsg+0xbd/0xe0 [ 296.712476] __x64_sys_sendmmsg+0x56/0x70 [ 296.716617] do_syscall_64+0xcf/0x110 [ 296.720412] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.725602] [ 296.727222] Uninit was stored to memory at: [ 296.731540] kmsan_internal_chain_origin+0x136/0x240 [ 296.736648] __msan_chain_origin+0x6d/0xd0 [ 296.740880] __save_stack_trace+0x8be/0xc60 [ 296.745196] save_stack_trace+0xc6/0x110 [ 296.749253] kmsan_internal_chain_origin+0x136/0x240 [ 296.754352] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.758842] __msan_memcpy+0x6f/0x80 [ 296.762548] pskb_expand_head+0x43b/0x1d20 [ 296.766778] gre_tap_xmit+0x4e3/0x910 [ 296.770569] dev_hard_start_xmit+0x6dc/0xe00 [ 296.774974] sch_direct_xmit+0x59b/0x890 [ 296.779029] __qdisc_run+0x1bac/0x3600 [ 296.782912] __dev_queue_xmit+0x2131/0x3e00 [ 296.787226] dev_queue_xmit+0x4b/0x60 [ 296.791025] ip6_finish_output2+0x1a5b/0x22d0 [ 296.795516] ip6_finish_output+0xc13/0xca0 [ 296.799741] ip6_output+0x5e4/0x720 [ 296.803365] ip6_local_out+0x164/0x1d0 [ 296.807342] ip6_send_skb+0xf6/0x3b0 [ 296.811052] udp_v6_send_skb+0x113f/0x1df0 [ 296.815283] udpv6_sendmsg+0x43e5/0x4960 [ 296.819337] inet_sendmsg+0x4e9/0x800 [ 296.823130] ___sys_sendmsg+0xe68/0x1250 [ 296.827187] __sys_sendmmsg+0x56b/0xa90 [ 296.831155] __se_sys_sendmmsg+0xbd/0xe0 [ 296.835214] __x64_sys_sendmmsg+0x56/0x70 [ 296.839357] do_syscall_64+0xcf/0x110 [ 296.843158] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.848334] [ 296.849964] Uninit was stored to memory at: [ 296.854285] kmsan_internal_chain_origin+0x136/0x240 [ 296.859386] __msan_chain_origin+0x6d/0xd0 [ 296.863614] __save_stack_trace+0x8be/0xc60 [ 296.867934] save_stack_trace+0xc6/0x110 [ 296.871994] kmsan_internal_chain_origin+0x136/0x240 [ 296.877092] kmsan_memcpy_origins+0x13d/0x1b0 [ 296.881583] __msan_memcpy+0x6f/0x80 [ 296.885292] pskb_expand_head+0x43b/0x1d20 [ 296.889516] gre_tap_xmit+0x4e3/0x910 [ 296.893315] dev_hard_start_xmit+0x6dc/0xe00 [ 296.897720] sch_direct_xmit+0x59b/0x890 [ 296.901773] __qdisc_run+0x1bac/0x3600 [ 296.905654] __dev_queue_xmit+0x2131/0x3e00 [ 296.909977] dev_queue_xmit+0x4b/0x60 [ 296.913777] ip6_finish_output2+0x1a5b/0x22d0 [ 296.918270] ip6_finish_output+0xc13/0xca0 [ 296.922518] ip6_output+0x5e4/0x720 [ 296.926143] ip6_local_out+0x164/0x1d0 [ 296.930028] ip6_send_skb+0xf6/0x3b0 [ 296.933738] udp_v6_send_skb+0x113f/0x1df0 [ 296.937973] udpv6_sendmsg+0x43e5/0x4960 [ 296.942034] inet_sendmsg+0x4e9/0x800 [ 296.945830] ___sys_sendmsg+0xe68/0x1250 [ 296.949883] __sys_sendmmsg+0x56b/0xa90 [ 296.953850] __se_sys_sendmmsg+0xbd/0xe0 [ 296.957904] __x64_sys_sendmmsg+0x56/0x70 [ 296.962050] do_syscall_64+0xcf/0x110 [ 296.966043] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.971221] [ 296.972837] Uninit was stored to memory at: [ 296.977158] kmsan_internal_chain_origin+0x136/0x240 [ 296.982259] __msan_chain_origin+0x6d/0xd0 [ 296.986489] __save_stack_trace+0x8be/0xc60 [ 296.990803] save_stack_trace+0xc6/0x110 [ 296.994860] kmsan_internal_chain_origin+0x136/0x240 [ 296.999963] kmsan_memcpy_origins+0x13d/0x1b0 [ 297.004456] __msan_memcpy+0x6f/0x80 [ 297.008164] pskb_expand_head+0x43b/0x1d20 [ 297.012393] gre_tap_xmit+0x4e3/0x910 [ 297.016191] dev_hard_start_xmit+0x6dc/0xe00 [ 297.020592] sch_direct_xmit+0x59b/0x890 [ 297.024655] __qdisc_run+0x1bac/0x3600 [ 297.028548] __dev_queue_xmit+0x2131/0x3e00 [ 297.032866] dev_queue_xmit+0x4b/0x60 [ 297.036660] ip6_finish_output2+0x1a5b/0x22d0 [ 297.041155] ip6_finish_output+0xc13/0xca0 [ 297.045382] ip6_output+0x5e4/0x720 [ 297.049005] ip6_local_out+0x164/0x1d0 [ 297.052885] ip6_send_skb+0xf6/0x3b0 [ 297.056591] udp_v6_send_skb+0x113f/0x1df0 [ 297.060820] udpv6_sendmsg+0x43e5/0x4960 [ 297.064878] inet_sendmsg+0x4e9/0x800 [ 297.068681] ___sys_sendmsg+0xe68/0x1250 [ 297.072744] __sys_sendmmsg+0x56b/0xa90 [ 297.076713] __se_sys_sendmmsg+0xbd/0xe0 [ 297.080766] __x64_sys_sendmmsg+0x56/0x70 [ 297.084910] do_syscall_64+0xcf/0x110 [ 297.088719] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.093896] [ 297.095521] Local variable description: ----_type.i@icmp6_send [ 297.101483] Variable was created at: [ 297.105191] icmp6_send+0x171/0x3ca0 [ 297.108904] icmpv6_send+0xe5/0x110 [ 297.179924] not chained 80000 origins [ 297.183873] CPU: 0 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 297.190725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.200095] Call Trace: [ 297.202721] dump_stack+0x32d/0x480 [ 297.206379] kmsan_internal_chain_origin+0x222/0x240 [ 297.211498] ? gre_tap_xmit+0x4e3/0x910 [ 297.215493] ? ip6_finish_output+0xc13/0xca0 [ 297.219911] ? ip6_output+0x5e4/0x720 [ 297.223729] ? ip6_local_out+0x164/0x1d0 [ 297.227800] ? ip6_send_skb+0xf6/0x3b0 [ 297.231709] ? udp_v6_send_skb+0x113f/0x1df0 [ 297.236131] ? udpv6_sendmsg+0x43e5/0x4960 [ 297.240380] ? inet_sendmsg+0x4e9/0x800 [ 297.244368] ? ___sys_sendmsg+0xe68/0x1250 [ 297.248611] ? __sys_sendmmsg+0x56b/0xa90 [ 297.252775] ? __se_sys_sendmmsg+0xbd/0xe0 [ 297.257022] ? __x64_sys_sendmmsg+0x56/0x70 [ 297.261352] ? do_syscall_64+0xcf/0x110 [ 297.265342] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.270730] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 297.276113] ? __module_address+0x6a/0x610 [ 297.280363] ? is_bpf_text_address+0x3e5/0x4d0 [ 297.284963] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 297.290323] ? is_bpf_text_address+0x49e/0x4d0 [ 297.294902] ? kmsan_internal_chain_origin+0x90/0x240 [ 297.300102] ? get_stack_info+0x863/0x9d0 [ 297.304255] __msan_chain_origin+0x6d/0xd0 [ 297.308489] ? inet_sendmsg+0x4e9/0x800 [ 297.312462] __save_stack_trace+0x8be/0xc60 [ 297.316798] ? inet_sendmsg+0x4e9/0x800 [ 297.320772] save_stack_trace+0xc6/0x110 [ 297.324835] kmsan_internal_chain_origin+0x136/0x240 [ 297.329937] ? inet_sendmsg+0x4e9/0x800 [ 297.333916] ? kmsan_internal_chain_origin+0x136/0x240 [ 297.339203] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 297.343881] ? __msan_memcpy+0x6f/0x80 [ 297.347762] ? pskb_expand_head+0x43b/0x1d20 [ 297.352166] ? gre_tap_xmit+0x4e3/0x910 [ 297.356132] ? dev_hard_start_xmit+0x6dc/0xe00 [ 297.360719] ? sch_direct_xmit+0x59b/0x890 [ 297.364961] ? __qdisc_run+0x1bac/0x3600 [ 297.369015] ? __dev_queue_xmit+0x2131/0x3e00 [ 297.373509] ? dev_queue_xmit+0x4b/0x60 [ 297.377485] ? ip6_finish_output2+0x1a5b/0x22d0 [ 297.382150] ? ip6_finish_output+0xc13/0xca0 [ 297.386554] ? ip6_output+0x5e4/0x720 [ 297.390352] ? ip6_local_out+0x164/0x1d0 [ 297.394408] ? ip6_send_skb+0xf6/0x3b0 [ 297.398293] ? udp_v6_send_skb+0x113f/0x1df0 [ 297.402707] ? udpv6_sendmsg+0x43e5/0x4960 [ 297.406940] ? inet_sendmsg+0x4e9/0x800 [ 297.410913] ? ___sys_sendmsg+0xe68/0x1250 [ 297.415143] ? __sys_sendmmsg+0x56b/0xa90 [ 297.419290] ? __se_sys_sendmmsg+0xbd/0xe0 [ 297.423520] ? __x64_sys_sendmmsg+0x56/0x70 [ 297.427859] ? do_syscall_64+0xcf/0x110 [ 297.431833] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.437199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 297.442558] ? memcg_kmem_put_cache+0x8e/0x460 [ 297.447160] ? __msan_get_context_state+0x9/0x30 [ 297.451920] ? INIT_INT+0xc/0x30 [ 297.455294] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 297.460661] kmsan_memcpy_origins+0x13d/0x1b0 [ 297.465168] __msan_memcpy+0x6f/0x80 [ 297.468884] pskb_expand_head+0x43b/0x1d20 [ 297.473131] gre_tap_xmit+0x4e3/0x910 [ 297.476932] ? gre_tap_init+0x650/0x650 [ 297.480906] dev_hard_start_xmit+0x6dc/0xe00 [ 297.485338] sch_direct_xmit+0x59b/0x890 [ 297.489410] __qdisc_run+0x1bac/0x3600 [ 297.493308] ? __msan_get_context_state+0x9/0x30 [ 297.498089] __dev_queue_xmit+0x2131/0x3e00 [ 297.502414] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 297.507798] dev_queue_xmit+0x4b/0x60 [ 297.511602] ip6_finish_output2+0x1a5b/0x22d0 [ 297.516125] ? validate_xmit_skb+0x1780/0x1780 [ 297.520720] ip6_finish_output+0xc13/0xca0 [ 297.524966] ip6_output+0x5e4/0x720 [ 297.528601] ? ip6_output+0x720/0x720 [ 297.532399] ? ac6_seq_show+0x200/0x200 [ 297.536371] ip6_local_out+0x164/0x1d0 [ 297.540262] ip6_send_skb+0xf6/0x3b0 [ 297.543996] udp_v6_send_skb+0x113f/0x1df0 [ 297.548248] udpv6_sendmsg+0x43e5/0x4960 [ 297.552310] ? ip_copy_metadata+0x1710/0x1710 [ 297.556836] ? __msan_poison_alloca+0x1e0/0x2b0 [ 297.561511] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 297.565833] inet_sendmsg+0x4e9/0x800 [ 297.569633] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 297.575016] ? security_socket_sendmsg+0x1bd/0x200 [ 297.579946] ___sys_sendmsg+0xe68/0x1250 [ 297.584012] ? kmsan_set_origin+0x83/0x130 [ 297.588245] ? inet_getname+0x490/0x490 [ 297.592228] ? __msan_poison_alloca+0x1e0/0x2b0 [ 297.596895] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 297.602261] ? rcu_all_qs+0x3b/0x310 [ 297.605973] ? _cond_resched+0x59/0x120 [ 297.609946] ? rcu_all_qs+0x53/0x310 [ 297.613659] ? _cond_resched+0x37/0x120 [ 297.617638] ? __sys_sendmmsg+0x7c9/0xa90 [ 297.621785] ? _cond_resched+0x59/0x120 [ 297.625761] __sys_sendmmsg+0x56b/0xa90 [ 297.629751] ? syscall_return_slowpath+0x123/0x8c0 [ 297.634678] ? put_timespec64+0x162/0x220 [ 297.638846] __se_sys_sendmmsg+0xbd/0xe0 [ 297.643014] __x64_sys_sendmmsg+0x56/0x70 [ 297.647158] do_syscall_64+0xcf/0x110 [ 297.650964] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.656148] RIP: 0033:0x457569 [ 297.659338] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.678235] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.685939] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 297.693209] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 297.700476] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.707739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 297.715004] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 297.722554] Uninit was stored to memory at: [ 297.726877] kmsan_internal_chain_origin+0x136/0x240 [ 297.731980] __msan_chain_origin+0x6d/0xd0 [ 297.736217] __save_stack_trace+0x8be/0xc60 [ 297.740537] save_stack_trace+0xc6/0x110 [ 297.744592] kmsan_internal_chain_origin+0x136/0x240 [ 297.749701] kmsan_memcpy_origins+0x13d/0x1b0 [ 297.754191] __msan_memcpy+0x6f/0x80 [ 297.757895] pskb_expand_head+0x43b/0x1d20 [ 297.762122] gre_tap_xmit+0x4e3/0x910 [ 297.765918] dev_hard_start_xmit+0x6dc/0xe00 [ 297.770319] sch_direct_xmit+0x59b/0x890 [ 297.774376] __qdisc_run+0x1bac/0x3600 [ 297.778257] __dev_queue_xmit+0x2131/0x3e00 [ 297.782575] dev_queue_xmit+0x4b/0x60 [ 297.786373] ip6_finish_output2+0x1a5b/0x22d0 [ 297.790861] ip6_finish_output+0xc13/0xca0 [ 297.795092] ip6_output+0x5e4/0x720 [ 297.798714] ip6_local_out+0x164/0x1d0 [ 297.802598] ip6_send_skb+0xf6/0x3b0 [ 297.806310] udp_v6_send_skb+0x113f/0x1df0 [ 297.810551] udpv6_sendmsg+0x43e5/0x4960 [ 297.814622] inet_sendmsg+0x4e9/0x800 [ 297.818414] ___sys_sendmsg+0xe68/0x1250 [ 297.822470] __sys_sendmmsg+0x56b/0xa90 [ 297.826437] __se_sys_sendmmsg+0xbd/0xe0 [ 297.830490] __x64_sys_sendmmsg+0x56/0x70 [ 297.834636] do_syscall_64+0xcf/0x110 [ 297.838433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.843612] [ 297.845227] Uninit was stored to memory at: [ 297.849548] kmsan_internal_chain_origin+0x136/0x240 [ 297.854645] __msan_chain_origin+0x6d/0xd0 [ 297.858878] __save_stack_trace+0x8be/0xc60 [ 297.863198] save_stack_trace+0xc6/0x110 [ 297.867257] kmsan_internal_chain_origin+0x136/0x240 [ 297.872354] kmsan_memcpy_origins+0x13d/0x1b0 [ 297.876846] __msan_memcpy+0x6f/0x80 [ 297.880554] pskb_expand_head+0x43b/0x1d20 [ 297.884780] gre_tap_xmit+0x4e3/0x910 [ 297.888586] dev_hard_start_xmit+0x6dc/0xe00 [ 297.893000] sch_direct_xmit+0x59b/0x890 [ 297.897060] __qdisc_run+0x1bac/0x3600 [ 297.900944] __dev_queue_xmit+0x2131/0x3e00 [ 297.905263] dev_queue_xmit+0x4b/0x60 [ 297.909061] ip6_finish_output2+0x1a5b/0x22d0 [ 297.913554] ip6_finish_output+0xc13/0xca0 [ 297.917796] ip6_output+0x5e4/0x720 [ 297.921418] ip6_local_out+0x164/0x1d0 [ 297.925301] ip6_send_skb+0xf6/0x3b0 [ 297.929012] udp_v6_send_skb+0x113f/0x1df0 [ 297.933246] udpv6_sendmsg+0x43e5/0x4960 [ 297.937304] inet_sendmsg+0x4e9/0x800 [ 297.941098] ___sys_sendmsg+0xe68/0x1250 [ 297.945159] __sys_sendmmsg+0x56b/0xa90 [ 297.949128] __se_sys_sendmmsg+0xbd/0xe0 [ 297.953180] __x64_sys_sendmmsg+0x56/0x70 [ 297.957322] do_syscall_64+0xcf/0x110 [ 297.961119] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 297.967764] [ 297.969386] Uninit was stored to memory at: [ 297.973721] kmsan_internal_chain_origin+0x136/0x240 [ 297.978818] __msan_chain_origin+0x6d/0xd0 [ 297.983050] __save_stack_trace+0x8be/0xc60 [ 297.987367] save_stack_trace+0xc6/0x110 [ 297.991426] kmsan_internal_chain_origin+0x136/0x240 [ 297.996526] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.001012] __msan_memcpy+0x6f/0x80 [ 298.004718] pskb_expand_head+0x43b/0x1d20 [ 298.008946] gre_tap_xmit+0x4e3/0x910 [ 298.012745] dev_hard_start_xmit+0x6dc/0xe00 [ 298.017145] sch_direct_xmit+0x59b/0x890 [ 298.021196] __qdisc_run+0x1bac/0x3600 [ 298.025083] __dev_queue_xmit+0x2131/0x3e00 [ 298.029395] dev_queue_xmit+0x4b/0x60 [ 298.033191] ip6_finish_output2+0x1a5b/0x22d0 [ 298.037682] ip6_finish_output+0xc13/0xca0 [ 298.041923] ip6_output+0x5e4/0x720 [ 298.045548] ip6_local_out+0x164/0x1d0 [ 298.049428] ip6_send_skb+0xf6/0x3b0 [ 298.053140] udp_v6_send_skb+0x113f/0x1df0 [ 298.057373] udpv6_sendmsg+0x43e5/0x4960 [ 298.061431] inet_sendmsg+0x4e9/0x800 [ 298.065228] ___sys_sendmsg+0xe68/0x1250 [ 298.069281] __sys_sendmmsg+0x56b/0xa90 [ 298.073249] __se_sys_sendmmsg+0xbd/0xe0 [ 298.077301] __x64_sys_sendmmsg+0x56/0x70 [ 298.081451] do_syscall_64+0xcf/0x110 [ 298.085270] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.090454] [ 298.092071] Uninit was stored to memory at: [ 298.096389] kmsan_internal_chain_origin+0x136/0x240 [ 298.101487] __msan_chain_origin+0x6d/0xd0 [ 298.105717] __save_stack_trace+0x8be/0xc60 [ 298.110033] save_stack_trace+0xc6/0x110 [ 298.114108] kmsan_internal_chain_origin+0x136/0x240 [ 298.119206] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.123707] __msan_memcpy+0x6f/0x80 [ 298.127417] pskb_expand_head+0x43b/0x1d20 [ 298.131645] gre_tap_xmit+0x4e3/0x910 [ 298.135959] dev_hard_start_xmit+0x6dc/0xe00 [ 298.140363] sch_direct_xmit+0x59b/0x890 [ 298.144417] __qdisc_run+0x1bac/0x3600 [ 298.148298] __dev_queue_xmit+0x2131/0x3e00 [ 298.152613] dev_queue_xmit+0x4b/0x60 [ 298.156408] ip6_finish_output2+0x1a5b/0x22d0 [ 298.160900] ip6_finish_output+0xc13/0xca0 [ 298.165127] ip6_output+0x5e4/0x720 [ 298.168746] ip6_local_out+0x164/0x1d0 [ 298.172631] ip6_send_skb+0xf6/0x3b0 [ 298.176340] udp_v6_send_skb+0x113f/0x1df0 [ 298.180570] udpv6_sendmsg+0x43e5/0x4960 [ 298.184631] inet_sendmsg+0x4e9/0x800 [ 298.188436] ___sys_sendmsg+0xe68/0x1250 [ 298.192490] __sys_sendmmsg+0x56b/0xa90 [ 298.196458] __se_sys_sendmmsg+0xbd/0xe0 [ 298.200511] __x64_sys_sendmmsg+0x56/0x70 [ 298.204658] do_syscall_64+0xcf/0x110 [ 298.208462] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.213639] [ 298.215254] Uninit was stored to memory at: [ 298.219570] kmsan_internal_chain_origin+0x136/0x240 [ 298.224677] __msan_chain_origin+0x6d/0xd0 [ 298.228915] __save_stack_trace+0x8be/0xc60 [ 298.233231] save_stack_trace+0xc6/0x110 [ 298.237289] kmsan_internal_chain_origin+0x136/0x240 [ 298.242391] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.246883] __msan_memcpy+0x6f/0x80 [ 298.250590] pskb_expand_head+0x43b/0x1d20 [ 298.254823] gre_tap_xmit+0x4e3/0x910 [ 298.258618] dev_hard_start_xmit+0x6dc/0xe00 [ 298.263022] sch_direct_xmit+0x59b/0x890 [ 298.267081] __qdisc_run+0x1bac/0x3600 [ 298.270968] __dev_queue_xmit+0x2131/0x3e00 [ 298.275288] dev_queue_xmit+0x4b/0x60 [ 298.279087] ip6_finish_output2+0x1a5b/0x22d0 [ 298.283582] ip6_finish_output+0xc13/0xca0 [ 298.287814] ip6_output+0x5e4/0x720 [ 298.291439] ip6_local_out+0x164/0x1d0 [ 298.295321] ip6_send_skb+0xf6/0x3b0 [ 298.299035] udp_v6_send_skb+0x113f/0x1df0 [ 298.303270] udpv6_sendmsg+0x43e5/0x4960 [ 298.307329] inet_sendmsg+0x4e9/0x800 [ 298.311123] ___sys_sendmsg+0xe68/0x1250 [ 298.315180] __sys_sendmmsg+0x56b/0xa90 [ 298.319161] __se_sys_sendmmsg+0xbd/0xe0 [ 298.323228] __x64_sys_sendmmsg+0x56/0x70 [ 298.327374] do_syscall_64+0xcf/0x110 [ 298.331170] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.336358] [ 298.337988] Uninit was stored to memory at: [ 298.342307] kmsan_internal_chain_origin+0x136/0x240 [ 298.347404] __msan_chain_origin+0x6d/0xd0 [ 298.351632] __save_stack_trace+0x8be/0xc60 [ 298.355960] save_stack_trace+0xc6/0x110 [ 298.360018] kmsan_internal_chain_origin+0x136/0x240 [ 298.365118] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.369619] __msan_memcpy+0x6f/0x80 [ 298.373328] pskb_expand_head+0x43b/0x1d20 [ 298.377557] gre_tap_xmit+0x4e3/0x910 [ 298.381352] dev_hard_start_xmit+0x6dc/0xe00 [ 298.385754] sch_direct_xmit+0x59b/0x890 [ 298.389808] __qdisc_run+0x1bac/0x3600 [ 298.393703] __dev_queue_xmit+0x2131/0x3e00 [ 298.398016] dev_queue_xmit+0x4b/0x60 [ 298.401815] ip6_finish_output2+0x1a5b/0x22d0 [ 298.406307] ip6_finish_output+0xc13/0xca0 [ 298.410536] ip6_output+0x5e4/0x720 [ 298.414157] ip6_local_out+0x164/0x1d0 [ 298.418038] ip6_send_skb+0xf6/0x3b0 [ 298.421751] udp_v6_send_skb+0x113f/0x1df0 [ 298.425986] udpv6_sendmsg+0x43e5/0x4960 [ 298.430040] inet_sendmsg+0x4e9/0x800 [ 298.433836] ___sys_sendmsg+0xe68/0x1250 [ 298.437896] __sys_sendmmsg+0x56b/0xa90 [ 298.441865] __se_sys_sendmmsg+0xbd/0xe0 [ 298.445922] __x64_sys_sendmmsg+0x56/0x70 [ 298.450072] do_syscall_64+0xcf/0x110 [ 298.453867] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.459131] [ 298.460748] Uninit was stored to memory at: [ 298.465073] kmsan_internal_chain_origin+0x136/0x240 [ 298.470175] __msan_chain_origin+0x6d/0xd0 [ 298.474407] __save_stack_trace+0x8be/0xc60 [ 298.478732] save_stack_trace+0xc6/0x110 [ 298.482798] kmsan_internal_chain_origin+0x136/0x240 [ 298.487897] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.492390] __msan_memcpy+0x6f/0x80 [ 298.496100] pskb_expand_head+0x43b/0x1d20 [ 298.500329] gre_tap_xmit+0x4e3/0x910 [ 298.504130] dev_hard_start_xmit+0x6dc/0xe00 [ 298.508532] sch_direct_xmit+0x59b/0x890 [ 298.512584] __qdisc_run+0x1bac/0x3600 [ 298.516464] __dev_queue_xmit+0x2131/0x3e00 [ 298.520796] dev_queue_xmit+0x4b/0x60 [ 298.524593] ip6_finish_output2+0x1a5b/0x22d0 [ 298.529082] ip6_finish_output+0xc13/0xca0 [ 298.533309] ip6_output+0x5e4/0x720 [ 298.536935] ip6_local_out+0x164/0x1d0 [ 298.540830] ip6_send_skb+0xf6/0x3b0 [ 298.544539] udp_v6_send_skb+0x113f/0x1df0 [ 298.548787] udpv6_sendmsg+0x43e5/0x4960 [ 298.552841] inet_sendmsg+0x4e9/0x800 [ 298.556639] ___sys_sendmsg+0xe68/0x1250 [ 298.560702] __sys_sendmmsg+0x56b/0xa90 [ 298.564670] __se_sys_sendmmsg+0xbd/0xe0 [ 298.568731] __x64_sys_sendmmsg+0x56/0x70 [ 298.572873] do_syscall_64+0xcf/0x110 [ 298.576670] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.581857] [ 298.583491] Local variable description: ----_type.i@icmp6_send [ 298.589454] Variable was created at: [ 298.593165] icmp6_send+0x171/0x3ca0 [ 298.596875] icmpv6_send+0xe5/0x110 [ 298.629664] not chained 90000 origins [ 298.633536] CPU: 1 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 298.640386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.649758] Call Trace: [ 298.652363] dump_stack+0x32d/0x480 [ 298.656026] kmsan_internal_chain_origin+0x222/0x240 [ 298.661145] ? gre_tap_xmit+0x4e3/0x910 [ 298.665141] ? ip6_finish_output+0xc13/0xca0 [ 298.669558] ? ip6_output+0x5e4/0x720 [ 298.673366] ? ip6_local_out+0x164/0x1d0 [ 298.677448] ? ip6_send_skb+0xf6/0x3b0 [ 298.681354] ? udp_v6_send_skb+0x113f/0x1df0 [ 298.685778] ? udpv6_sendmsg+0x43e5/0x4960 [ 298.690061] ? inet_sendmsg+0x4e9/0x800 [ 298.694070] ? ___sys_sendmsg+0xe68/0x1250 [ 298.698317] ? __sys_sendmmsg+0x56b/0xa90 [ 298.702483] ? __se_sys_sendmmsg+0xbd/0xe0 [ 298.706730] ? __x64_sys_sendmmsg+0x56/0x70 [ 298.711047] ? do_syscall_64+0xcf/0x110 [ 298.715029] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.720416] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 298.725807] ? __module_address+0x6a/0x610 [ 298.730060] ? is_bpf_text_address+0x3e5/0x4d0 [ 298.734669] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 298.740060] ? is_bpf_text_address+0x49e/0x4d0 [ 298.744671] ? kmsan_internal_chain_origin+0x90/0x240 [ 298.749907] ? get_stack_info+0x863/0x9d0 [ 298.754084] __msan_chain_origin+0x6d/0xd0 [ 298.758340] ? kmsan_internal_chain_origin+0x136/0x240 [ 298.763623] __save_stack_trace+0x8be/0xc60 [ 298.767944] ? kmsan_internal_chain_origin+0x136/0x240 [ 298.773251] save_stack_trace+0xc6/0x110 [ 298.777303] kmsan_internal_chain_origin+0x136/0x240 [ 298.782394] ? inet_sendmsg+0x4e9/0x800 [ 298.786383] ? kmsan_internal_chain_origin+0x136/0x240 [ 298.791668] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 298.796343] ? __msan_memcpy+0x6f/0x80 [ 298.800217] ? pskb_expand_head+0x43b/0x1d20 [ 298.804611] ? gre_tap_xmit+0x4e3/0x910 [ 298.808570] ? dev_hard_start_xmit+0x6dc/0xe00 [ 298.813138] ? sch_direct_xmit+0x59b/0x890 [ 298.817359] ? __qdisc_run+0x1bac/0x3600 [ 298.821408] ? __dev_queue_xmit+0x2131/0x3e00 [ 298.825892] ? dev_queue_xmit+0x4b/0x60 [ 298.829856] ? ip6_finish_output2+0x1a5b/0x22d0 [ 298.834511] ? ip6_finish_output+0xc13/0xca0 [ 298.838915] ? ip6_output+0x5e4/0x720 [ 298.842707] ? ip6_local_out+0x164/0x1d0 [ 298.846774] ? ip6_send_skb+0xf6/0x3b0 [ 298.850651] ? udp_v6_send_skb+0x113f/0x1df0 [ 298.855050] ? udpv6_sendmsg+0x43e5/0x4960 [ 298.859272] ? inet_sendmsg+0x4e9/0x800 [ 298.863232] ? ___sys_sendmsg+0xe68/0x1250 [ 298.867455] ? __sys_sendmmsg+0x56b/0xa90 [ 298.871588] ? __se_sys_sendmmsg+0xbd/0xe0 [ 298.875812] ? __x64_sys_sendmmsg+0x56/0x70 [ 298.880119] ? do_syscall_64+0xcf/0x110 [ 298.884079] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 298.889449] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 298.894808] ? memcg_kmem_put_cache+0x8e/0x460 [ 298.899405] ? __msan_get_context_state+0x9/0x30 [ 298.904149] ? INIT_INT+0xc/0x30 [ 298.907506] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 298.912868] kmsan_memcpy_origins+0x13d/0x1b0 [ 298.917384] __msan_memcpy+0x6f/0x80 [ 298.921105] pskb_expand_head+0x43b/0x1d20 [ 298.925343] gre_tap_xmit+0x4e3/0x910 [ 298.929134] ? gre_tap_init+0x650/0x650 [ 298.933118] dev_hard_start_xmit+0x6dc/0xe00 [ 298.937526] sch_direct_xmit+0x59b/0x890 [ 298.941582] __qdisc_run+0x1bac/0x3600 [ 298.945483] ? __msan_get_context_state+0x9/0x30 [ 298.950253] __dev_queue_xmit+0x2131/0x3e00 [ 298.954583] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 298.959945] dev_queue_xmit+0x4b/0x60 [ 298.963742] ip6_finish_output2+0x1a5b/0x22d0 [ 298.968238] ? validate_xmit_skb+0x1780/0x1780 [ 298.972821] ip6_finish_output+0xc13/0xca0 [ 298.977071] ip6_output+0x5e4/0x720 [ 298.980707] ? ip6_output+0x720/0x720 [ 298.984494] ? ac6_seq_show+0x200/0x200 [ 298.988459] ip6_local_out+0x164/0x1d0 [ 298.992366] ip6_send_skb+0xf6/0x3b0 [ 298.996087] udp_v6_send_skb+0x113f/0x1df0 [ 299.000321] udpv6_sendmsg+0x43e5/0x4960 [ 299.004375] ? ip_copy_metadata+0x1710/0x1710 [ 299.008889] ? __msan_poison_alloca+0x1e0/0x2b0 [ 299.013552] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 299.017861] inet_sendmsg+0x4e9/0x800 [ 299.021662] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 299.027032] ? security_socket_sendmsg+0x1bd/0x200 [ 299.032115] ___sys_sendmsg+0xe68/0x1250 [ 299.036169] ? inet_getname+0x490/0x490 [ 299.040140] ? __msan_poison_alloca+0x1e0/0x2b0 [ 299.044799] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 299.050155] ? rcu_all_qs+0x3b/0x310 [ 299.053874] ? _cond_resched+0x59/0x120 [ 299.057864] ? rcu_all_qs+0x53/0x310 [ 299.061570] ? _cond_resched+0x37/0x120 [ 299.065580] ? __sys_sendmmsg+0x7c9/0xa90 [ 299.069733] ? _cond_resched+0x59/0x120 [ 299.073704] __sys_sendmmsg+0x56b/0xa90 [ 299.077677] ? syscall_return_slowpath+0x123/0x8c0 [ 299.082600] ? put_timespec64+0x162/0x220 [ 299.086737] __se_sys_sendmmsg+0xbd/0xe0 [ 299.090786] __x64_sys_sendmmsg+0x56/0x70 [ 299.094925] do_syscall_64+0xcf/0x110 [ 299.098716] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.103906] RIP: 0033:0x457569 [ 299.107085] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.125977] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.133676] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 299.140940] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 299.148197] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.155469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 299.162726] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 299.169987] Uninit was stored to memory at: [ 299.174308] kmsan_internal_chain_origin+0x136/0x240 [ 299.179397] __msan_chain_origin+0x6d/0xd0 [ 299.183621] __save_stack_trace+0x8be/0xc60 [ 299.187932] save_stack_trace+0xc6/0x110 [ 299.191985] kmsan_internal_chain_origin+0x136/0x240 [ 299.197083] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.201566] __msan_memcpy+0x6f/0x80 [ 299.205282] pskb_expand_head+0x43b/0x1d20 [ 299.209510] gre_tap_xmit+0x4e3/0x910 [ 299.213356] dev_hard_start_xmit+0x6dc/0xe00 [ 299.217762] sch_direct_xmit+0x59b/0x890 [ 299.221815] __qdisc_run+0x1bac/0x3600 [ 299.225700] __dev_queue_xmit+0x2131/0x3e00 [ 299.230025] dev_queue_xmit+0x4b/0x60 [ 299.233818] ip6_finish_output2+0x1a5b/0x22d0 [ 299.238323] ip6_finish_output+0xc13/0xca0 [ 299.242545] ip6_output+0x5e4/0x720 [ 299.246159] ip6_local_out+0x164/0x1d0 [ 299.250033] ip6_send_skb+0xf6/0x3b0 [ 299.253740] udp_v6_send_skb+0x113f/0x1df0 [ 299.257973] udpv6_sendmsg+0x43e5/0x4960 [ 299.262033] inet_sendmsg+0x4e9/0x800 [ 299.265850] ___sys_sendmsg+0xe68/0x1250 [ 299.269910] __sys_sendmmsg+0x56b/0xa90 [ 299.273870] __se_sys_sendmmsg+0xbd/0xe0 [ 299.277928] __x64_sys_sendmmsg+0x56/0x70 [ 299.282064] do_syscall_64+0xcf/0x110 [ 299.285852] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.291021] [ 299.292635] Uninit was stored to memory at: [ 299.296960] kmsan_internal_chain_origin+0x136/0x240 [ 299.302066] __msan_chain_origin+0x6d/0xd0 [ 299.306305] __save_stack_trace+0x8be/0xc60 [ 299.310613] save_stack_trace+0xc6/0x110 [ 299.314665] kmsan_internal_chain_origin+0x136/0x240 [ 299.319762] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.324246] __msan_memcpy+0x6f/0x80 [ 299.327948] pskb_expand_head+0x43b/0x1d20 [ 299.332185] gre_tap_xmit+0x4e3/0x910 [ 299.335975] dev_hard_start_xmit+0x6dc/0xe00 [ 299.340370] sch_direct_xmit+0x59b/0x890 [ 299.344418] __qdisc_run+0x1bac/0x3600 [ 299.348304] __dev_queue_xmit+0x2131/0x3e00 [ 299.352615] dev_queue_xmit+0x4b/0x60 [ 299.356427] ip6_finish_output2+0x1a5b/0x22d0 [ 299.360918] ip6_finish_output+0xc13/0xca0 [ 299.365165] ip6_output+0x5e4/0x720 [ 299.368784] ip6_local_out+0x164/0x1d0 [ 299.372658] ip6_send_skb+0xf6/0x3b0 [ 299.376368] udp_v6_send_skb+0x113f/0x1df0 [ 299.380591] udpv6_sendmsg+0x43e5/0x4960 [ 299.384647] inet_sendmsg+0x4e9/0x800 [ 299.388436] ___sys_sendmsg+0xe68/0x1250 [ 299.392484] __sys_sendmmsg+0x56b/0xa90 [ 299.396446] __se_sys_sendmmsg+0xbd/0xe0 [ 299.400495] __x64_sys_sendmmsg+0x56/0x70 [ 299.404641] do_syscall_64+0xcf/0x110 [ 299.408428] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.413601] [ 299.415212] Uninit was stored to memory at: [ 299.419521] kmsan_internal_chain_origin+0x136/0x240 [ 299.424613] __msan_chain_origin+0x6d/0xd0 [ 299.428835] __save_stack_trace+0x8be/0xc60 [ 299.433144] save_stack_trace+0xc6/0x110 [ 299.437193] kmsan_internal_chain_origin+0x136/0x240 [ 299.442285] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.446800] __msan_memcpy+0x6f/0x80 [ 299.450504] pskb_expand_head+0x43b/0x1d20 [ 299.454727] gre_tap_xmit+0x4e3/0x910 [ 299.458516] dev_hard_start_xmit+0x6dc/0xe00 [ 299.462914] sch_direct_xmit+0x59b/0x890 [ 299.466968] __qdisc_run+0x1bac/0x3600 [ 299.470839] __dev_queue_xmit+0x2131/0x3e00 [ 299.475144] dev_queue_xmit+0x4b/0x60 [ 299.478931] ip6_finish_output2+0x1a5b/0x22d0 [ 299.483419] ip6_finish_output+0xc13/0xca0 [ 299.487642] ip6_output+0x5e4/0x720 [ 299.491256] ip6_local_out+0x164/0x1d0 [ 299.495134] ip6_send_skb+0xf6/0x3b0 [ 299.498835] udp_v6_send_skb+0x113f/0x1df0 [ 299.503056] udpv6_sendmsg+0x43e5/0x4960 [ 299.507101] inet_sendmsg+0x4e9/0x800 [ 299.510889] ___sys_sendmsg+0xe68/0x1250 [ 299.514946] __sys_sendmmsg+0x56b/0xa90 [ 299.518934] __se_sys_sendmmsg+0xbd/0xe0 [ 299.522994] __x64_sys_sendmmsg+0x56/0x70 [ 299.527127] do_syscall_64+0xcf/0x110 [ 299.530923] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.536091] [ 299.537710] Uninit was stored to memory at: [ 299.542022] kmsan_internal_chain_origin+0x136/0x240 [ 299.547114] __msan_chain_origin+0x6d/0xd0 [ 299.551358] __save_stack_trace+0x8be/0xc60 [ 299.555670] save_stack_trace+0xc6/0x110 [ 299.559741] kmsan_internal_chain_origin+0x136/0x240 [ 299.564844] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.569327] __msan_memcpy+0x6f/0x80 [ 299.573031] pskb_expand_head+0x43b/0x1d20 [ 299.577253] gre_tap_xmit+0x4e3/0x910 [ 299.581038] dev_hard_start_xmit+0x6dc/0xe00 [ 299.585433] sch_direct_xmit+0x59b/0x890 [ 299.589497] __qdisc_run+0x1bac/0x3600 [ 299.593371] __dev_queue_xmit+0x2131/0x3e00 [ 299.597677] dev_queue_xmit+0x4b/0x60 [ 299.601477] ip6_finish_output2+0x1a5b/0x22d0 [ 299.605973] ip6_finish_output+0xc13/0xca0 [ 299.610194] ip6_output+0x5e4/0x720 [ 299.613829] ip6_local_out+0x164/0x1d0 [ 299.617715] ip6_send_skb+0xf6/0x3b0 [ 299.621432] udp_v6_send_skb+0x113f/0x1df0 [ 299.625762] udpv6_sendmsg+0x43e5/0x4960 [ 299.629808] inet_sendmsg+0x4e9/0x800 [ 299.633595] ___sys_sendmsg+0xe68/0x1250 [ 299.637644] __sys_sendmmsg+0x56b/0xa90 [ 299.641618] __se_sys_sendmmsg+0xbd/0xe0 [ 299.645669] __x64_sys_sendmmsg+0x56/0x70 [ 299.649832] do_syscall_64+0xcf/0x110 [ 299.653626] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.658798] [ 299.660407] Uninit was stored to memory at: [ 299.664725] kmsan_internal_chain_origin+0x136/0x240 [ 299.669831] __msan_chain_origin+0x6d/0xd0 [ 299.674078] __save_stack_trace+0x8be/0xc60 [ 299.678384] save_stack_trace+0xc6/0x110 [ 299.682436] kmsan_internal_chain_origin+0x136/0x240 [ 299.687531] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.692013] __msan_memcpy+0x6f/0x80 [ 299.695713] pskb_expand_head+0x43b/0x1d20 [ 299.699937] gre_tap_xmit+0x4e3/0x910 [ 299.703743] dev_hard_start_xmit+0x6dc/0xe00 [ 299.708146] sch_direct_xmit+0x59b/0x890 [ 299.712191] __qdisc_run+0x1bac/0x3600 [ 299.716070] __dev_queue_xmit+0x2131/0x3e00 [ 299.720377] dev_queue_xmit+0x4b/0x60 [ 299.724165] ip6_finish_output2+0x1a5b/0x22d0 [ 299.728665] ip6_finish_output+0xc13/0xca0 [ 299.732897] ip6_output+0x5e4/0x720 [ 299.736510] ip6_local_out+0x164/0x1d0 [ 299.740402] ip6_send_skb+0xf6/0x3b0 [ 299.744106] udp_v6_send_skb+0x113f/0x1df0 [ 299.748326] udpv6_sendmsg+0x43e5/0x4960 [ 299.752375] inet_sendmsg+0x4e9/0x800 [ 299.756162] ___sys_sendmsg+0xe68/0x1250 [ 299.760210] __sys_sendmmsg+0x56b/0xa90 [ 299.764167] __se_sys_sendmmsg+0xbd/0xe0 [ 299.768226] __x64_sys_sendmmsg+0x56/0x70 [ 299.772370] do_syscall_64+0xcf/0x110 [ 299.776157] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.781355] [ 299.782970] Uninit was stored to memory at: [ 299.787281] kmsan_internal_chain_origin+0x136/0x240 [ 299.792377] __msan_chain_origin+0x6d/0xd0 [ 299.796606] __save_stack_trace+0x8be/0xc60 [ 299.800921] save_stack_trace+0xc6/0x110 [ 299.804970] kmsan_internal_chain_origin+0x136/0x240 [ 299.810058] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.814541] __msan_memcpy+0x6f/0x80 [ 299.818258] pskb_expand_head+0x43b/0x1d20 [ 299.822483] gre_tap_xmit+0x4e3/0x910 [ 299.826271] dev_hard_start_xmit+0x6dc/0xe00 [ 299.830674] sch_direct_xmit+0x59b/0x890 [ 299.834732] __qdisc_run+0x1bac/0x3600 [ 299.838607] __dev_queue_xmit+0x2131/0x3e00 [ 299.842934] dev_queue_xmit+0x4b/0x60 [ 299.846728] ip6_finish_output2+0x1a5b/0x22d0 [ 299.851210] ip6_finish_output+0xc13/0xca0 [ 299.855431] ip6_output+0x5e4/0x720 [ 299.859058] ip6_local_out+0x164/0x1d0 [ 299.862935] ip6_send_skb+0xf6/0x3b0 [ 299.866639] udp_v6_send_skb+0x113f/0x1df0 [ 299.870860] udpv6_sendmsg+0x43e5/0x4960 [ 299.874925] inet_sendmsg+0x4e9/0x800 [ 299.878714] ___sys_sendmsg+0xe68/0x1250 [ 299.882771] __sys_sendmmsg+0x56b/0xa90 [ 299.886731] __se_sys_sendmmsg+0xbd/0xe0 [ 299.890785] __x64_sys_sendmmsg+0x56/0x70 [ 299.894923] do_syscall_64+0xcf/0x110 [ 299.898714] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 299.903898] [ 299.905513] Uninit was stored to memory at: [ 299.909825] kmsan_internal_chain_origin+0x136/0x240 [ 299.914914] __msan_chain_origin+0x6d/0xd0 [ 299.919134] __save_stack_trace+0x8be/0xc60 [ 299.923442] save_stack_trace+0xc6/0x110 [ 299.927499] kmsan_internal_chain_origin+0x136/0x240 [ 299.932591] kmsan_memcpy_origins+0x13d/0x1b0 [ 299.937075] __msan_memcpy+0x6f/0x80 [ 299.940783] pskb_expand_head+0x43b/0x1d20 [ 299.945007] gre_tap_xmit+0x4e3/0x910 [ 299.948801] dev_hard_start_xmit+0x6dc/0xe00 [ 299.953195] sch_direct_xmit+0x59b/0x890 [ 299.957240] __qdisc_run+0x1bac/0x3600 [ 299.961114] __dev_queue_xmit+0x2131/0x3e00 [ 299.965420] dev_queue_xmit+0x4b/0x60 [ 299.969737] ip6_finish_output2+0x1a5b/0x22d0 [ 299.974222] ip6_finish_output+0xc13/0xca0 [ 299.978444] ip6_output+0x5e4/0x720 [ 299.982064] ip6_local_out+0x164/0x1d0 [ 299.985939] ip6_send_skb+0xf6/0x3b0 [ 299.989657] udp_v6_send_skb+0x113f/0x1df0 [ 299.993888] udpv6_sendmsg+0x43e5/0x4960 [ 299.997935] inet_sendmsg+0x4e9/0x800 [ 300.001730] ___sys_sendmsg+0xe68/0x1250 [ 300.005786] __sys_sendmmsg+0x56b/0xa90 [ 300.009743] __se_sys_sendmmsg+0xbd/0xe0 [ 300.013789] __x64_sys_sendmmsg+0x56/0x70 [ 300.017941] do_syscall_64+0xcf/0x110 [ 300.021741] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.026923] [ 300.028536] Local variable description: ----_type.i@icmp6_send [ 300.034503] Variable was created at: [ 300.038229] icmp6_send+0x171/0x3ca0 [ 300.041936] icmpv6_send+0xe5/0x110 [ 300.061063] not chained 100000 origins [ 300.064992] CPU: 1 PID: 8475 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 300.071845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.081190] Call Trace: [ 300.083774] dump_stack+0x32d/0x480 [ 300.087399] kmsan_internal_chain_origin+0x222/0x240 [ 300.092491] ? gre_tap_xmit+0x4e3/0x910 [ 300.096458] ? ip6_finish_output+0xc13/0xca0 [ 300.100856] ? ip6_output+0x5e4/0x720 [ 300.104645] ? ip6_local_out+0x164/0x1d0 [ 300.108699] ? ip6_send_skb+0xf6/0x3b0 [ 300.112575] ? udp_v6_send_skb+0x113f/0x1df0 [ 300.116989] ? udpv6_sendmsg+0x43e5/0x4960 [ 300.121216] ? inet_sendmsg+0x4e9/0x800 [ 300.125178] ? ___sys_sendmsg+0xe68/0x1250 [ 300.129401] ? __sys_sendmmsg+0x56b/0xa90 [ 300.133535] ? __se_sys_sendmmsg+0xbd/0xe0 [ 300.137757] ? __x64_sys_sendmmsg+0x56/0x70 [ 300.142077] ? do_syscall_64+0xcf/0x110 [ 300.146050] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.151851] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 300.157208] ? __module_address+0x6a/0x610 [ 300.161433] ? is_bpf_text_address+0x3e5/0x4d0 [ 300.166012] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 300.171361] ? is_bpf_text_address+0x49e/0x4d0 [ 300.175932] ? kmsan_internal_chain_origin+0x90/0x240 [ 300.181210] ? get_stack_info+0x863/0x9d0 [ 300.185351] __msan_chain_origin+0x6d/0xd0 [ 300.189573] ? ip6_finish_output2+0x1a5b/0x22d0 [ 300.194232] __save_stack_trace+0x8be/0xc60 [ 300.198552] ? ip6_finish_output2+0x1a5b/0x22d0 [ 300.203211] save_stack_trace+0xc6/0x110 [ 300.207263] kmsan_internal_chain_origin+0x136/0x240 [ 300.212355] ? inet_sendmsg+0x4e9/0x800 [ 300.216321] ? kmsan_internal_chain_origin+0x136/0x240 [ 300.221585] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 300.226242] ? __msan_memcpy+0x6f/0x80 [ 300.230141] ? pskb_expand_head+0x43b/0x1d20 [ 300.234537] ? gre_tap_xmit+0x4e3/0x910 [ 300.238496] ? dev_hard_start_xmit+0x6dc/0xe00 [ 300.243085] ? sch_direct_xmit+0x59b/0x890 [ 300.247309] ? __qdisc_run+0x1bac/0x3600 [ 300.251377] ? __dev_queue_xmit+0x2131/0x3e00 [ 300.255865] ? dev_queue_xmit+0x4b/0x60 [ 300.259825] ? ip6_finish_output2+0x1a5b/0x22d0 [ 300.264481] ? ip6_finish_output+0xc13/0xca0 [ 300.268878] ? ip6_output+0x5e4/0x720 [ 300.272670] ? ip6_local_out+0x164/0x1d0 [ 300.276728] ? ip6_send_skb+0xf6/0x3b0 [ 300.280602] ? udp_v6_send_skb+0x113f/0x1df0 [ 300.284999] ? udpv6_sendmsg+0x43e5/0x4960 [ 300.289219] ? inet_sendmsg+0x4e9/0x800 [ 300.293180] ? ___sys_sendmsg+0xe68/0x1250 [ 300.297397] ? __sys_sendmmsg+0x56b/0xa90 [ 300.301530] ? __se_sys_sendmmsg+0xbd/0xe0 [ 300.305752] ? __x64_sys_sendmmsg+0x56/0x70 [ 300.310077] ? do_syscall_64+0xcf/0x110 [ 300.314043] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.319399] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 300.324754] ? memcg_kmem_put_cache+0x8e/0x460 [ 300.329331] ? __msan_get_context_state+0x9/0x30 [ 300.334076] ? INIT_INT+0xc/0x30 [ 300.337494] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 300.342855] kmsan_memcpy_origins+0x13d/0x1b0 [ 300.347340] __msan_memcpy+0x6f/0x80 [ 300.351045] pskb_expand_head+0x43b/0x1d20 [ 300.355364] gre_tap_xmit+0x4e3/0x910 [ 300.359154] ? gre_tap_init+0x650/0x650 [ 300.363116] dev_hard_start_xmit+0x6dc/0xe00 [ 300.367525] sch_direct_xmit+0x59b/0x890 [ 300.371583] __qdisc_run+0x1bac/0x3600 [ 300.375473] ? __msan_get_context_state+0x9/0x30 [ 300.380224] __dev_queue_xmit+0x2131/0x3e00 [ 300.384540] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 300.389903] dev_queue_xmit+0x4b/0x60 [ 300.393699] ip6_finish_output2+0x1a5b/0x22d0 [ 300.398194] ? validate_xmit_skb+0x1780/0x1780 [ 300.402766] ip6_finish_output+0xc13/0xca0 [ 300.406994] ip6_output+0x5e4/0x720 [ 300.410621] ? ip6_output+0x720/0x720 [ 300.414413] ? ac6_seq_show+0x200/0x200 [ 300.418373] ip6_local_out+0x164/0x1d0 [ 300.422253] ip6_send_skb+0xf6/0x3b0 [ 300.426046] udp_v6_send_skb+0x113f/0x1df0 [ 300.430277] udpv6_sendmsg+0x43e5/0x4960 [ 300.434339] ? ip_copy_metadata+0x1710/0x1710 [ 300.438844] ? __msan_poison_alloca+0x1e0/0x2b0 [ 300.443511] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 300.447821] inet_sendmsg+0x4e9/0x800 [ 300.451611] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 300.456965] ? security_socket_sendmsg+0x1bd/0x200 [ 300.461906] ___sys_sendmsg+0xe68/0x1250 [ 300.465955] ? inet_getname+0x490/0x490 [ 300.469927] ? __msan_poison_alloca+0x1e0/0x2b0 [ 300.474583] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 300.479937] ? rcu_all_qs+0x3b/0x310 [ 300.483642] ? _cond_resched+0x59/0x120 [ 300.487607] ? rcu_all_qs+0x53/0x310 [ 300.491306] ? _cond_resched+0x37/0x120 [ 300.495272] ? __sys_sendmmsg+0x7c9/0xa90 [ 300.499672] ? _cond_resched+0x59/0x120 [ 300.503643] __sys_sendmmsg+0x56b/0xa90 [ 300.507620] ? syscall_return_slowpath+0x123/0x8c0 [ 300.512541] ? put_timespec64+0x162/0x220 [ 300.516682] __se_sys_sendmmsg+0xbd/0xe0 [ 300.520741] __x64_sys_sendmmsg+0x56/0x70 [ 300.524881] do_syscall_64+0xcf/0x110 [ 300.528759] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.533938] RIP: 0033:0x457569 [ 300.537120] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.556013] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 300.563721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 300.570986] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 300.578243] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.585523] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 300.592783] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 300.600053] Uninit was stored to memory at: [ 300.604377] kmsan_internal_chain_origin+0x136/0x240 [ 300.609559] __msan_chain_origin+0x6d/0xd0 [ 300.613785] __save_stack_trace+0x8be/0xc60 [ 300.618091] save_stack_trace+0xc6/0x110 [ 300.622144] kmsan_internal_chain_origin+0x136/0x240 [ 300.627233] kmsan_memcpy_origins+0x13d/0x1b0 [ 300.631726] __msan_memcpy+0x6f/0x80 [ 300.635440] pskb_expand_head+0x43b/0x1d20 [ 300.639661] gre_tap_xmit+0x4e3/0x910 [ 300.643458] dev_hard_start_xmit+0x6dc/0xe00 [ 300.647852] sch_direct_xmit+0x59b/0x890 [ 300.651909] __qdisc_run+0x1bac/0x3600 [ 300.655784] __dev_queue_xmit+0x2131/0x3e00 [ 300.660088] dev_queue_xmit+0x4b/0x60 [ 300.663881] ip6_finish_output2+0x1a5b/0x22d0 [ 300.668362] ip6_finish_output+0xc13/0xca0 [ 300.672587] ip6_output+0x5e4/0x720 [ 300.676219] ip6_local_out+0x164/0x1d0 [ 300.680099] ip6_send_skb+0xf6/0x3b0 [ 300.683802] udp_v6_send_skb+0x113f/0x1df0 [ 300.688022] udpv6_sendmsg+0x43e5/0x4960 [ 300.692075] inet_sendmsg+0x4e9/0x800 [ 300.695875] ___sys_sendmsg+0xe68/0x1250 [ 300.699921] __sys_sendmmsg+0x56b/0xa90 [ 300.703899] __se_sys_sendmmsg+0xbd/0xe0 [ 300.707950] __x64_sys_sendmmsg+0x56/0x70 [ 300.712096] do_syscall_64+0xcf/0x110 [ 300.715897] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.721082] [ 300.722704] Uninit was stored to memory at: [ 300.727029] kmsan_internal_chain_origin+0x136/0x240 [ 300.732122] __msan_chain_origin+0x6d/0xd0 [ 300.736346] __save_stack_trace+0x8be/0xc60 [ 300.740656] save_stack_trace+0xc6/0x110 [ 300.744713] kmsan_internal_chain_origin+0x136/0x240 [ 300.749804] kmsan_memcpy_origins+0x13d/0x1b0 [ 300.754289] __msan_memcpy+0x6f/0x80 [ 300.757995] pskb_expand_head+0x43b/0x1d20 [ 300.762215] gre_tap_xmit+0x4e3/0x910 [ 300.765999] dev_hard_start_xmit+0x6dc/0xe00 [ 300.770411] sch_direct_xmit+0x59b/0x890 [ 300.774467] __qdisc_run+0x1bac/0x3600 [ 300.778342] __dev_queue_xmit+0x2131/0x3e00 [ 300.782651] dev_queue_xmit+0x4b/0x60 [ 300.786440] ip6_finish_output2+0x1a5b/0x22d0 [ 300.790927] ip6_finish_output+0xc13/0xca0 [ 300.795149] ip6_output+0x5e4/0x720 [ 300.798773] ip6_local_out+0x164/0x1d0 [ 300.802661] ip6_send_skb+0xf6/0x3b0 [ 300.806370] udp_v6_send_skb+0x113f/0x1df0 [ 300.810592] udpv6_sendmsg+0x43e5/0x4960 [ 300.814643] inet_sendmsg+0x4e9/0x800 [ 300.818429] ___sys_sendmsg+0xe68/0x1250 [ 300.822487] __sys_sendmmsg+0x56b/0xa90 [ 300.826446] __se_sys_sendmmsg+0xbd/0xe0 [ 300.830497] __x64_sys_sendmmsg+0x56/0x70 [ 300.834631] do_syscall_64+0xcf/0x110 [ 300.838422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.843601] [ 300.845211] Uninit was stored to memory at: [ 300.849524] kmsan_internal_chain_origin+0x136/0x240 [ 300.854614] __msan_chain_origin+0x6d/0xd0 [ 300.858837] __save_stack_trace+0x8be/0xc60 [ 300.863143] save_stack_trace+0xc6/0x110 [ 300.867192] kmsan_internal_chain_origin+0x136/0x240 [ 300.872283] kmsan_memcpy_origins+0x13d/0x1b0 [ 300.876765] __msan_memcpy+0x6f/0x80 [ 300.880466] pskb_expand_head+0x43b/0x1d20 [ 300.884701] gre_tap_xmit+0x4e3/0x910 [ 300.888505] dev_hard_start_xmit+0x6dc/0xe00 [ 300.892919] sch_direct_xmit+0x59b/0x890 [ 300.896968] __qdisc_run+0x1bac/0x3600 [ 300.900839] __dev_queue_xmit+0x2131/0x3e00 [ 300.905153] dev_queue_xmit+0x4b/0x60 [ 300.908944] ip6_finish_output2+0x1a5b/0x22d0 [ 300.913434] ip6_finish_output+0xc13/0xca0 [ 300.917655] ip6_output+0x5e4/0x720 [ 300.921273] ip6_local_out+0x164/0x1d0 [ 300.925153] ip6_send_skb+0xf6/0x3b0 [ 300.928852] udp_v6_send_skb+0x113f/0x1df0 [ 300.933099] udpv6_sendmsg+0x43e5/0x4960 [ 300.937150] inet_sendmsg+0x4e9/0x800 [ 300.940937] ___sys_sendmsg+0xe68/0x1250 [ 300.944986] __sys_sendmmsg+0x56b/0xa90 [ 300.948948] __se_sys_sendmmsg+0xbd/0xe0 [ 300.952997] __x64_sys_sendmmsg+0x56/0x70 [ 300.957128] do_syscall_64+0xcf/0x110 [ 300.960918] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 300.966090] [ 300.967707] Uninit was stored to memory at: [ 300.972044] kmsan_internal_chain_origin+0x136/0x240 [ 300.977168] __msan_chain_origin+0x6d/0xd0 [ 300.981392] __save_stack_trace+0x8be/0xc60 [ 300.985705] save_stack_trace+0xc6/0x110 [ 300.989769] kmsan_internal_chain_origin+0x136/0x240 [ 300.994861] kmsan_memcpy_origins+0x13d/0x1b0 [ 300.999339] __msan_memcpy+0x6f/0x80 [ 301.003040] pskb_expand_head+0x43b/0x1d20 [ 301.007277] gre_tap_xmit+0x4e3/0x910 [ 301.011062] dev_hard_start_xmit+0x6dc/0xe00 [ 301.015462] sch_direct_xmit+0x59b/0x890 [ 301.019506] __qdisc_run+0x1bac/0x3600 [ 301.023468] __dev_queue_xmit+0x2131/0x3e00 [ 301.027776] dev_queue_xmit+0x4b/0x60 [ 301.031573] ip6_finish_output2+0x1a5b/0x22d0 [ 301.036053] ip6_finish_output+0xc13/0xca0 [ 301.040274] ip6_output+0x5e4/0x720 [ 301.043891] ip6_local_out+0x164/0x1d0 [ 301.047762] ip6_send_skb+0xf6/0x3b0 [ 301.051466] udp_v6_send_skb+0x113f/0x1df0 [ 301.055703] udpv6_sendmsg+0x43e5/0x4960 [ 301.059748] inet_sendmsg+0x4e9/0x800 [ 301.063533] ___sys_sendmsg+0xe68/0x1250 [ 301.067587] __sys_sendmmsg+0x56b/0xa90 [ 301.071543] __se_sys_sendmmsg+0xbd/0xe0 [ 301.075593] __x64_sys_sendmmsg+0x56/0x70 [ 301.079729] do_syscall_64+0xcf/0x110 [ 301.083520] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 301.088698] [ 301.090309] Uninit was stored to memory at: [ 301.094633] kmsan_internal_chain_origin+0x136/0x240 [ 301.099724] __msan_chain_origin+0x6d/0xd0 [ 301.103951] __save_stack_trace+0x8be/0xc60 [ 301.108260] save_stack_trace+0xc6/0x110 [ 301.112313] kmsan_internal_chain_origin+0x136/0x240 [ 301.117497] kmsan_memcpy_origins+0x13d/0x1b0 [ 301.121982] __msan_memcpy+0x6f/0x80 [ 301.125699] pskb_expand_head+0x43b/0x1d20 [ 301.129920] gre_tap_xmit+0x4e3/0x910 [ 301.133728] dev_hard_start_xmit+0x6dc/0xe00 [ 301.138125] sch_direct_xmit+0x59b/0x890 [ 301.142170] __qdisc_run+0x1bac/0x3600 [ 301.146042] __dev_queue_xmit+0x2131/0x3e00 [ 301.150352] dev_queue_xmit+0x4b/0x60 [ 301.154138] ip6_finish_output2+0x1a5b/0x22d0 [ 301.158618] ip6_finish_output+0xc13/0xca0 [ 301.162841] ip6_output+0x5e4/0x720 [ 301.166478] ip6_local_out+0x164/0x1d0 [ 301.170351] ip6_send_skb+0xf6/0x3b0 [ 301.174060] udp_v6_send_skb+0x113f/0x1df0 [ 301.178291] udpv6_sendmsg+0x43e5/0x4960 [ 301.182341] inet_sendmsg+0x4e9/0x800 [ 301.186125] ___sys_sendmsg+0xe68/0x1250 [ 301.190167] __sys_sendmmsg+0x56b/0xa90 [ 301.194126] __se_sys_sendmmsg+0xbd/0xe0 [ 301.198170] __x64_sys_sendmmsg+0x56/0x70 [ 301.202305] do_syscall_64+0xcf/0x110 [ 301.206095] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 301.211266] [ 301.212881] Uninit was stored to memory at: [ 301.217193] kmsan_internal_chain_origin+0x136/0x240 [ 301.222297] __msan_chain_origin+0x6d/0xd0 [ 301.226542] __save_stack_trace+0x8be/0xc60 [ 301.230847] save_stack_trace+0xc6/0x110 [ 301.234919] kmsan_internal_chain_origin+0x136/0x240 [ 301.240008] kmsan_memcpy_origins+0x13d/0x1b0 [ 301.244489] __msan_memcpy+0x6f/0x80 [ 301.248192] pskb_expand_head+0x43b/0x1d20 [ 301.252410] gre_tap_xmit+0x4e3/0x910 [ 301.256196] dev_hard_start_xmit+0x6dc/0xe00 [ 301.260589] sch_direct_xmit+0x59b/0x890 [ 301.264633] __qdisc_run+0x1bac/0x3600 [ 301.268507] __dev_queue_xmit+0x2131/0x3e00 [ 301.272815] dev_queue_xmit+0x4b/0x60 [ 301.276606] ip6_finish_output2+0x1a5b/0x22d0 [ 301.281098] ip6_finish_output+0xc13/0xca0 [ 301.285320] ip6_output+0x5e4/0x720 [ 301.288937] ip6_local_out+0x164/0x1d0 [ 301.292820] ip6_send_skb+0xf6/0x3b0 [ 301.296523] udp_v6_send_skb+0x113f/0x1df0 [ 301.300741] udpv6_sendmsg+0x43e5/0x4960 [ 301.304791] inet_sendmsg+0x4e9/0x800 [ 301.308576] ___sys_sendmsg+0xe68/0x1250 [ 301.312625] __sys_sendmmsg+0x56b/0xa90 [ 301.316587] __se_sys_sendmmsg+0xbd/0xe0 [ 301.320632] __x64_sys_sendmmsg+0x56/0x70 [ 301.324768] do_syscall_64+0xcf/0x110 [ 301.328559] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 301.333733] [ 301.335346] Uninit was stored to memory at: [ 301.339659] kmsan_internal_chain_origin+0x136/0x240 [ 301.344774] __msan_chain_origin+0x6d/0xd0 [ 301.349003] __save_stack_trace+0x8be/0xc60 [ 301.353319] save_stack_trace+0xc6/0x110 [ 301.357376] kmsan_internal_chain_origin+0x136/0x240 [ 301.362477] kmsan_memcpy_origins+0x13d/0x1b0 [ 301.366970] __msan_memcpy+0x6f/0x80 [ 301.370691] pskb_expand_head+0x43b/0x1d20 [ 301.374918] gre_tap_xmit+0x4e3/0x910 [ 301.378710] dev_hard_start_xmit+0x6dc/0xe00 [ 301.383106] sch_direct_xmit+0x59b/0x890 [ 301.387155] __qdisc_run+0x1bac/0x3600 [ 301.391025] __dev_queue_xmit+0x2131/0x3e00 [ 301.395334] dev_queue_xmit+0x4b/0x60 [ 301.399122] ip6_finish_output2+0x1a5b/0x22d0 [ 301.403634] ip6_finish_output+0xc13/0xca0 [ 301.407863] ip6_output+0x5e4/0x720 [ 301.411481] ip6_local_out+0x164/0x1d0 [ 301.415353] ip6_send_skb+0xf6/0x3b0 [ 301.419054] udp_v6_send_skb+0x113f/0x1df0 [ 301.423298] udpv6_sendmsg+0x43e5/0x4960 [ 301.427347] inet_sendmsg+0x4e9/0x800 [ 301.431148] ___sys_sendmsg+0xe68/0x1250 [ 301.435216] __sys_sendmmsg+0x56b/0xa90 [ 301.439182] __se_sys_sendmmsg+0xbd/0xe0 [ 301.443235] __x64_sys_sendmmsg+0x56/0x70 [ 301.447369] do_syscall_64+0xcf/0x110 [ 301.451155] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 301.456341] [ 301.457961] Local variable description: ----_type.i@icmp6_send [ 301.463917] Variable was created at: [ 301.467616] icmp6_send+0x171/0x3ca0 [ 301.471317] icmpv6_send+0xe5/0x110 00:01:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5154, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000240)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00030100000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000eebb000000000000727800b6a7be3ab427cc0108fe80ae5668a45fc68375b8495051744a4153a2861df31b23dcb897e672c7802c5b03ab6f5ebf8d108555e64bb9706fea1fc09ac0e21abd5a897dc8849294e954ca7320728123a5c36ae94e59ac0e40845d070eb293510f04a39e29927637d84e02000000000000006f434db19838af9644012e2c3d5e4fd811c84ea136967d66c06a32010dc83a2588b50a1590fa79f1065a705f4e86e07ab12a8e397e26dfaa596f984fbdfe38b00899adfc816f51380164814db485ae6c"], 0x30}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x7, 0x40, 0x100, 0x5, 0x7}, 0x14) 00:01:28 executing program 1: inotify_init1(0x80000) r0 = openat$rdma_cm(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x10, 0x5, @in6={0xa, 0x0, 0x0, @local}}}, 0xa0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x418000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xb) 00:01:28 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x1}, 0x4) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x80, 0x1, 0x0, "0f348062d210669f0e613600fa33fac1d718583a70ea62b24d0a0e2e4065af66"}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e21}}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40400, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x20000) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000001c0)=r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x8, 0x3da, 0x3f, 0x1004, 0x9}) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)=""/70, 0x46) 00:01:28 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x1fe, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) close(r0) r2 = getpid() sched_getparam(r2, &(0x7f00000000c0)) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) 00:01:28 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000580)=0x2) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x4, 0x6c5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000880], 0x0, &(0x7f00000000c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"]}, 0x73d) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x589041, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r6, 0x40086408, &(0x7f0000000500)={0xfcb, 0xffffffffcdc7817a}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x3, 0x0, [{0x100000, 0x98, &(0x7f0000000740)=""/152}, {0xf000, 0xba, &(0x7f0000000880)=""/186}, {0x3002, 0xe5, &(0x7f0000000940)=""/229}]}) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000640)={'bridge0\x00', 0xc200}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xc22, 0x400) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000700)) syz_open_dev$vcsn(&(0x7f0000000bc0)='/dev/vcs#\x00', 0x3, 0x100) bind$inet(r7, &(0x7f0000000840)={0x2, 0x0, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000a80)={0x6, 0x118, 0xfa00, {{0x1f, 0xffff, "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", 0xff, 0x2, 0x0, 0x2, 0x3, 0x1, 0x2, 0x1}, r8}}, 0x120) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nullb0\x00', 0x80000, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000180)=""/73, 0x49}, &(0x7f0000000080)}, 0x20) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000600)=0xc) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 00:01:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) name_to_handle_at(r0, &(0x7f0000000400)='\x00', &(0x7f0000000480)={0x8}, &(0x7f00000004c0), 0x1000) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000001500)=""/133, 0x85}], 0x6) [ 301.805408] not chained 110000 origins [ 301.809361] CPU: 0 PID: 8548 Comm: syz-executor4 Not tainted 4.19.0+ #77 [ 301.816214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.825580] Call Trace: [ 301.828188] dump_stack+0x32d/0x480 [ 301.831844] kmsan_internal_chain_origin+0x222/0x240 [ 301.836971] ? gre_tap_xmit+0x4e3/0x910 [ 301.840973] ? ip6_finish_output+0xc13/0xca0 [ 301.845393] ? ip6_output+0x5e4/0x720 [ 301.849205] ? ip6_local_out+0x164/0x1d0 [ 301.853274] ? ip6_send_skb+0xf6/0x3b0 [ 301.857173] ? udp_v6_send_skb+0x113f/0x1df0 [ 301.861593] ? udpv6_sendmsg+0x43e5/0x4960 [ 301.865844] ? inet_sendmsg+0x4e9/0x800 [ 301.869832] ? ___sys_sendmsg+0xe68/0x1250 [ 301.874080] ? __sys_sendmmsg+0x56b/0xa90 [ 301.878243] ? __se_sys_sendmmsg+0xbd/0xe0 [ 301.882492] ? __x64_sys_sendmmsg+0x56/0x70 [ 301.886827] ? do_syscall_64+0xcf/0x110 [ 301.890901] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 301.896284] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 301.901668] ? __module_address+0x6a/0x610 [ 301.905922] ? is_bpf_text_address+0x3e5/0x4d0 [ 301.910535] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 301.915918] ? is_bpf_text_address+0x49e/0x4d0 [ 301.920526] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 301.925916] ? __module_address+0x6a/0x610 [ 301.930179] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 301.935559] ? is_bpf_text_address+0x49e/0x4d0 [ 301.940160] ? INIT_INT+0xc/0x30 [ 301.943556] __msan_chain_origin+0x6d/0xd0 [ 301.947819] __save_stack_trace+0xaff/0xc60 [ 301.952182] save_stack_trace+0xc6/0x110 [ 301.956263] kmsan_internal_chain_origin+0x136/0x240 [ 301.961384] ? inet_sendmsg+0x4e9/0x800 [ 301.966932] ? kmsan_internal_chain_origin+0x136/0x240 [ 301.972246] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 301.976931] ? __msan_memcpy+0x6f/0x80 [ 301.980831] ? pskb_expand_head+0x43b/0x1d20 [ 301.985251] ? gre_tap_xmit+0x4e3/0x910 [ 301.989240] ? dev_hard_start_xmit+0x6dc/0xe00 [ 301.993839] ? sch_direct_xmit+0x59b/0x890 [ 301.998090] ? __qdisc_run+0x1bac/0x3600 [ 302.002168] ? __dev_queue_xmit+0x2131/0x3e00 00:01:29 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000004000/0x5000)=nil, 0x5000, 0x800002, 0x132, r4, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) write$P9_RLCREATE(r4, &(0x7f0000000500)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x6}, 0x4}}, 0x18) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 00:01:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x5000}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cd"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000e8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x408040, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0xe00, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 00:01:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@dev, @multicast1, @dev}, &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000003c0)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000ac6714a3ceb3492c0d00", @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf250a0000001c000200080008000800000008000600b20000000800030002000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000851}, 0x4001) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000280)={'nr0\x00', 0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e21}, @in6={0xa, 0x4e21, 0x5d03, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0x8, @empty, 0x7}], 0x48) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_buf(r1, 0x0, 0x2000100000004, &(0x7f0000000000)="000010", 0x3) 00:01:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf", 0x4d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x300000000000000, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000000)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000240)=0x54) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x0, [0x4b564d02, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:01:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x248) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000001000000000"], 0x98) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="9f4c673f17dc7c010876f466c2da110a", 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000600)="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", 0x1000) [ 302.006680] ? dev_queue_xmit+0x4b/0x60 [ 302.010692] ? ip6_finish_output2+0x1a5b/0x22d0 [ 302.015382] ? ip6_finish_output+0xc13/0xca0 [ 302.019807] ? ip6_output+0x5e4/0x720 [ 302.023628] ? ip6_local_out+0x164/0x1d0 [ 302.027716] ? ip6_send_skb+0xf6/0x3b0 [ 302.031618] ? udp_v6_send_skb+0x113f/0x1df0 [ 302.036042] ? udpv6_sendmsg+0x43e5/0x4960 [ 302.040292] ? inet_sendmsg+0x4e9/0x800 [ 302.044281] ? ___sys_sendmsg+0xe68/0x1250 [ 302.048529] ? __sys_sendmmsg+0x56b/0xa90 [ 302.052707] ? __se_sys_sendmmsg+0xbd/0xe0 [ 302.056965] ? __x64_sys_sendmmsg+0x56/0x70 [ 302.061302] ? do_syscall_64+0xcf/0x110 [ 302.065294] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.070702] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.076175] ? memcg_kmem_put_cache+0x8e/0x460 [ 302.080784] ? __msan_get_context_state+0x9/0x30 [ 302.085556] ? INIT_INT+0xc/0x30 [ 302.088934] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 302.094329] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.098849] __msan_memcpy+0x6f/0x80 [ 302.102578] pskb_expand_head+0x43b/0x1d20 [ 302.106847] gre_tap_xmit+0x4e3/0x910 [ 302.110677] ? gre_tap_init+0x650/0x650 [ 302.114683] dev_hard_start_xmit+0x6dc/0xe00 [ 302.119137] sch_direct_xmit+0x59b/0x890 [ 302.123227] __qdisc_run+0x1bac/0x3600 [ 302.127148] ? __msan_get_context_state+0x9/0x30 [ 302.131936] __dev_queue_xmit+0x2131/0x3e00 [ 302.136756] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.142157] dev_queue_xmit+0x4b/0x60 [ 302.145983] ip6_finish_output2+0x1a5b/0x22d0 [ 302.150516] ? validate_xmit_skb+0x1780/0x1780 [ 302.155121] ip6_finish_output+0xc13/0xca0 [ 302.159367] ip6_output+0x5e4/0x720 [ 302.163090] ? ip6_output+0x720/0x720 [ 302.166889] ? ac6_seq_show+0x200/0x200 [ 302.170864] ip6_local_out+0x164/0x1d0 [ 302.174760] ip6_send_skb+0xf6/0x3b0 [ 302.178479] udp_v6_send_skb+0x113f/0x1df0 [ 302.182734] udpv6_sendmsg+0x43e5/0x4960 [ 302.186797] ? ip_copy_metadata+0x1710/0x1710 [ 302.191319] ? __msan_poison_alloca+0x1e0/0x2b0 [ 302.195996] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 302.200324] inet_sendmsg+0x4e9/0x800 [ 302.204137] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.209504] ? security_socket_sendmsg+0x1bd/0x200 [ 302.214438] ___sys_sendmsg+0xe68/0x1250 [ 302.218706] ? inet_getname+0x490/0x490 [ 302.222703] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.228065] ? kmsan_set_origin+0x83/0x130 [ 302.232302] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 302.237670] ? _cond_resched+0xc7/0x120 [ 302.241648] __sys_sendmmsg+0x56b/0xa90 [ 302.245649] ? syscall_return_slowpath+0x123/0x8c0 [ 302.250574] ? put_timespec64+0x162/0x220 [ 302.254724] __se_sys_sendmmsg+0xbd/0xe0 [ 302.258787] __x64_sys_sendmmsg+0x56/0x70 [ 302.262933] do_syscall_64+0xcf/0x110 [ 302.266732] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.271915] RIP: 0033:0x457569 [ 302.275103] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.294010] RSP: 002b:00007f3adb330c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.301718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 302.308982] RDX: 000000000000004f RSI: 00000000200092c0 RDI: 0000000000000006 [ 302.316249] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.323526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3adb3316d4 [ 302.330789] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 302.338059] Uninit was stored to memory at: [ 302.342380] kmsan_internal_chain_origin+0x136/0x240 [ 302.347489] __msan_chain_origin+0x6d/0xd0 [ 302.351728] __save_stack_trace+0x8be/0xc60 [ 302.356047] save_stack_trace+0xc6/0x110 [ 302.360103] kmsan_internal_chain_origin+0x136/0x240 [ 302.365200] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.369694] __msan_memcpy+0x6f/0x80 [ 302.373405] pskb_expand_head+0x43b/0x1d20 [ 302.377629] gre_tap_xmit+0x4e3/0x910 [ 302.381423] dev_hard_start_xmit+0x6dc/0xe00 [ 302.385823] sch_direct_xmit+0x59b/0x890 [ 302.389874] __qdisc_run+0x1bac/0x3600 [ 302.393756] __dev_queue_xmit+0x2131/0x3e00 [ 302.398067] dev_queue_xmit+0x4b/0x60 [ 302.401862] ip6_finish_output2+0x1a5b/0x22d0 [ 302.406349] ip6_finish_output+0xc13/0xca0 [ 302.410577] ip6_output+0x5e4/0x720 [ 302.414198] ip6_local_out+0x164/0x1d0 [ 302.418078] ip6_send_skb+0xf6/0x3b0 [ 302.421786] udp_v6_send_skb+0x113f/0x1df0 [ 302.426016] udpv6_sendmsg+0x43e5/0x4960 [ 302.430069] inet_sendmsg+0x4e9/0x800 [ 302.433863] ___sys_sendmsg+0xe68/0x1250 [ 302.437914] __sys_sendmmsg+0x56b/0xa90 [ 302.441882] __se_sys_sendmmsg+0xbd/0xe0 [ 302.445937] __x64_sys_sendmmsg+0x56/0x70 [ 302.450083] do_syscall_64+0xcf/0x110 [ 302.453876] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.459052] [ 302.460668] Uninit was stored to memory at: [ 302.464999] kmsan_internal_chain_origin+0x136/0x240 [ 302.470094] __msan_chain_origin+0x6d/0xd0 [ 302.474323] __save_stack_trace+0x8be/0xc60 [ 302.478636] save_stack_trace+0xc6/0x110 [ 302.482705] kmsan_internal_chain_origin+0x136/0x240 [ 302.487804] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.492297] __msan_memcpy+0x6f/0x80 [ 302.496005] pskb_expand_head+0x43b/0x1d20 [ 302.500234] gre_tap_xmit+0x4e3/0x910 [ 302.504027] dev_hard_start_xmit+0x6dc/0xe00 [ 302.508426] sch_direct_xmit+0x59b/0x890 [ 302.512479] __qdisc_run+0x1bac/0x3600 [ 302.516360] __dev_queue_xmit+0x2131/0x3e00 [ 302.520674] dev_queue_xmit+0x4b/0x60 [ 302.524488] ip6_finish_output2+0x1a5b/0x22d0 [ 302.528979] ip6_finish_output+0xc13/0xca0 [ 302.533204] ip6_output+0x5e4/0x720 [ 302.536828] ip6_local_out+0x164/0x1d0 [ 302.540717] ip6_send_skb+0xf6/0x3b0 [ 302.544427] udp_v6_send_skb+0x113f/0x1df0 [ 302.548659] udpv6_sendmsg+0x43e5/0x4960 [ 302.552720] inet_sendmsg+0x4e9/0x800 [ 302.556511] ___sys_sendmsg+0xe68/0x1250 [ 302.560566] __sys_sendmmsg+0x56b/0xa90 [ 302.564532] __se_sys_sendmmsg+0xbd/0xe0 [ 302.568584] __x64_sys_sendmmsg+0x56/0x70 [ 302.572727] do_syscall_64+0xcf/0x110 [ 302.576520] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.581714] [ 302.583333] Uninit was stored to memory at: [ 302.587651] kmsan_internal_chain_origin+0x136/0x240 [ 302.592752] __msan_chain_origin+0x6d/0xd0 [ 302.596982] __save_stack_trace+0x8be/0xc60 [ 302.601300] save_stack_trace+0xc6/0x110 [ 302.605361] kmsan_internal_chain_origin+0x136/0x240 [ 302.610456] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.614944] __msan_memcpy+0x6f/0x80 [ 302.618654] pskb_expand_head+0x43b/0x1d20 [ 302.622886] gre_tap_xmit+0x4e3/0x910 [ 302.626680] dev_hard_start_xmit+0x6dc/0xe00 [ 302.631087] sch_direct_xmit+0x59b/0x890 [ 302.635138] __qdisc_run+0x1bac/0x3600 [ 302.639020] __dev_queue_xmit+0x2131/0x3e00 [ 302.643335] dev_queue_xmit+0x4b/0x60 [ 302.647130] ip6_finish_output2+0x1a5b/0x22d0 [ 302.651618] ip6_finish_output+0xc13/0xca0 [ 302.655846] ip6_output+0x5e4/0x720 [ 302.659466] ip6_local_out+0x164/0x1d0 [ 302.663346] ip6_send_skb+0xf6/0x3b0 [ 302.667057] udp_v6_send_skb+0x113f/0x1df0 [ 302.671287] udpv6_sendmsg+0x43e5/0x4960 [ 302.675341] inet_sendmsg+0x4e9/0x800 [ 302.679134] ___sys_sendmsg+0xe68/0x1250 [ 302.683188] __sys_sendmmsg+0x56b/0xa90 [ 302.687155] __se_sys_sendmmsg+0xbd/0xe0 [ 302.691209] __x64_sys_sendmmsg+0x56/0x70 [ 302.695351] do_syscall_64+0xcf/0x110 [ 302.699148] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.704323] [ 302.705943] Uninit was stored to memory at: [ 302.710265] kmsan_internal_chain_origin+0x136/0x240 [ 302.715362] __msan_chain_origin+0x6d/0xd0 [ 302.719589] __save_stack_trace+0x8be/0xc60 [ 302.723903] save_stack_trace+0xc6/0x110 [ 302.727965] kmsan_internal_chain_origin+0x136/0x240 [ 302.733248] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.737735] __msan_memcpy+0x6f/0x80 [ 302.741441] pskb_expand_head+0x43b/0x1d20 [ 302.745672] gre_tap_xmit+0x4e3/0x910 [ 302.749474] dev_hard_start_xmit+0x6dc/0xe00 [ 302.753873] sch_direct_xmit+0x59b/0x890 [ 302.757924] __qdisc_run+0x1bac/0x3600 [ 302.761809] __dev_queue_xmit+0x2131/0x3e00 [ 302.766124] dev_queue_xmit+0x4b/0x60 [ 302.769920] ip6_finish_output2+0x1a5b/0x22d0 [ 302.774410] ip6_finish_output+0xc13/0xca0 [ 302.778639] ip6_output+0x5e4/0x720 [ 302.782259] ip6_local_out+0x164/0x1d0 [ 302.786138] ip6_send_skb+0xf6/0x3b0 [ 302.789849] udp_v6_send_skb+0x113f/0x1df0 [ 302.794078] udpv6_sendmsg+0x43e5/0x4960 [ 302.798135] inet_sendmsg+0x4e9/0x800 [ 302.801928] ___sys_sendmsg+0xe68/0x1250 [ 302.805984] __sys_sendmmsg+0x56b/0xa90 [ 302.809948] __se_sys_sendmmsg+0xbd/0xe0 [ 302.814018] __x64_sys_sendmmsg+0x56/0x70 [ 302.818161] do_syscall_64+0xcf/0x110 [ 302.821959] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.827134] [ 302.828753] Uninit was stored to memory at: [ 302.833071] kmsan_internal_chain_origin+0x136/0x240 [ 302.838170] __msan_chain_origin+0x6d/0xd0 [ 302.842397] __save_stack_trace+0x8be/0xc60 [ 302.846719] save_stack_trace+0xc6/0x110 [ 302.850772] kmsan_internal_chain_origin+0x136/0x240 [ 302.855871] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.860362] __msan_memcpy+0x6f/0x80 [ 302.864069] pskb_expand_head+0x43b/0x1d20 [ 302.868293] gre_tap_xmit+0x4e3/0x910 [ 302.872088] dev_hard_start_xmit+0x6dc/0xe00 [ 302.876496] sch_direct_xmit+0x59b/0x890 [ 302.880550] __qdisc_run+0x1bac/0x3600 [ 302.884433] __dev_queue_xmit+0x2131/0x3e00 [ 302.888754] dev_queue_xmit+0x4b/0x60 [ 302.892551] ip6_finish_output2+0x1a5b/0x22d0 [ 302.897040] ip6_finish_output+0xc13/0xca0 [ 302.901265] ip6_output+0x5e4/0x720 [ 302.904889] ip6_local_out+0x164/0x1d0 [ 302.908769] ip6_send_skb+0xf6/0x3b0 [ 302.912478] udp_v6_send_skb+0x113f/0x1df0 [ 302.916718] udpv6_sendmsg+0x43e5/0x4960 [ 302.920772] inet_sendmsg+0x4e9/0x800 [ 302.924567] ___sys_sendmsg+0xe68/0x1250 [ 302.928618] __sys_sendmmsg+0x56b/0xa90 [ 302.932586] __se_sys_sendmmsg+0xbd/0xe0 [ 302.936643] __x64_sys_sendmmsg+0x56/0x70 [ 302.940787] do_syscall_64+0xcf/0x110 [ 302.944580] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.949759] [ 302.951374] Uninit was stored to memory at: [ 302.955699] kmsan_internal_chain_origin+0x136/0x240 [ 302.960797] __msan_chain_origin+0x6d/0xd0 [ 302.965033] __save_stack_trace+0x8be/0xc60 [ 302.969350] save_stack_trace+0xc6/0x110 [ 302.973407] kmsan_internal_chain_origin+0x136/0x240 [ 302.978515] kmsan_memcpy_origins+0x13d/0x1b0 [ 302.983008] __msan_memcpy+0x6f/0x80 [ 302.986715] pskb_expand_head+0x43b/0x1d20 [ 302.990940] gre_tap_xmit+0x4e3/0x910 [ 302.994744] dev_hard_start_xmit+0x6dc/0xe00 [ 302.999148] sch_direct_xmit+0x59b/0x890 [ 303.003201] __qdisc_run+0x1bac/0x3600 [ 303.007081] __dev_queue_xmit+0x2131/0x3e00 [ 303.011396] dev_queue_xmit+0x4b/0x60 [ 303.015190] ip6_finish_output2+0x1a5b/0x22d0 [ 303.019676] ip6_finish_output+0xc13/0xca0 [ 303.023915] ip6_output+0x5e4/0x720 [ 303.027540] ip6_local_out+0x164/0x1d0 [ 303.031424] ip6_send_skb+0xf6/0x3b0 [ 303.035135] udp_v6_send_skb+0x113f/0x1df0 [ 303.039363] udpv6_sendmsg+0x43e5/0x4960 [ 303.043417] inet_sendmsg+0x4e9/0x800 [ 303.047209] ___sys_sendmsg+0xe68/0x1250 [ 303.051264] __sys_sendmmsg+0x56b/0xa90 [ 303.055229] __se_sys_sendmmsg+0xbd/0xe0 [ 303.059291] __x64_sys_sendmmsg+0x56/0x70 [ 303.063430] do_syscall_64+0xcf/0x110 [ 303.067224] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.072401] [ 303.074017] Uninit was stored to memory at: [ 303.078332] kmsan_internal_chain_origin+0x136/0x240 [ 303.083433] __msan_chain_origin+0x6d/0xd0 [ 303.087661] __save_stack_trace+0x8be/0xc60 [ 303.091982] save_stack_trace+0xc6/0x110 [ 303.096036] kmsan_internal_chain_origin+0x136/0x240 [ 303.101133] kmsan_memcpy_origins+0x13d/0x1b0 [ 303.105621] __msan_memcpy+0x6f/0x80 [ 303.109329] pskb_expand_head+0x43b/0x1d20 [ 303.113568] gre_tap_xmit+0x4e3/0x910 [ 303.117359] dev_hard_start_xmit+0x6dc/0xe00 [ 303.121758] sch_direct_xmit+0x59b/0x890 [ 303.125809] __qdisc_run+0x1bac/0x3600 [ 303.129694] __dev_queue_xmit+0x2131/0x3e00 [ 303.134007] dev_queue_xmit+0x4b/0x60 [ 303.137803] ip6_finish_output2+0x1a5b/0x22d0 [ 303.142293] ip6_finish_output+0xc13/0xca0 [ 303.146520] ip6_output+0x5e4/0x720 [ 303.150142] ip6_local_out+0x164/0x1d0 [ 303.154025] ip6_send_skb+0xf6/0x3b0 [ 303.157734] udp_v6_send_skb+0x113f/0x1df0 [ 303.161967] udpv6_sendmsg+0x43e5/0x4960 [ 303.166021] inet_sendmsg+0x4e9/0x800 [ 303.169812] ___sys_sendmsg+0xe68/0x1250 [ 303.173865] __sys_sendmmsg+0x56b/0xa90 [ 303.177831] __se_sys_sendmmsg+0xbd/0xe0 [ 303.181888] __x64_sys_sendmmsg+0x56/0x70 [ 303.186030] do_syscall_64+0xcf/0x110 [ 303.189823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.195005] [ 303.196625] Local variable description: ----i.addr.i.i.i.i.i@memcg_kmem_put_cache [ 303.204232] Variable was created at: [ 303.207938] memcg_kmem_put_cache+0x5e/0x460 [ 303.212342] kmem_cache_alloc+0xc7a/0xe20 [ 303.342355] IPVS: ftp: loaded support on port[0] = 21 00:01:30 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000440)={0x10000, 0x6, 0xfffffffffffffffb, 0x0, 0x0, [], [], [], 0xb1, 0x70000000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='fuse\x00', 0x1) sync_file_range(r1, 0x8, 0xf53, 0x7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000b80400007002000050030000700200005003000070020000200400002004000020040000200400002004000005000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000c40000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="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"], 0x518) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="040037", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000002000), 0x1068) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x12440}}, 0x50) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 00:01:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000001b80)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013001108000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001f0001000010000000000000"], 0x2c}}, 0x0) [ 303.718258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 00:01:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x2091b40246a4874d) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000000c0)={@multicast2, @remote, @loopback}, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40001, 0x80) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x440400) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x388, 0x0, 0x0, 0x0, 0x158, 0x158, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, &(0x7f0000000040), {[{{@ipv6={@loopback, @remote, [0xff000000, 0xffffffff, 0x0, 0xff0000ff], [0xffffffff, 0x0, 0xffffff00, 0xff], 'team_slave_0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2e, 0x0, 0x3, 0x9}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x10000, 0x5, 0x1, [0x3, 0x7, 0x40, 0xa2, 0x78c1, 0x100000001, 0x7, 0x200, 0x3, 0x2, 0xfffffffffffffc00, 0xfb0, 0x34, 0x6, 0x7, 0x20], 0x6}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'irlan0\x00', 'vcan0\x00', {}, {0xff}, 0xff, 0xe9c, 0x7, 0xc}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0xdf, 0x1ff, 0xfffffffffffffff9, 0x3, 0x6, 0x20, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0xfffffffffffffff7, 0xffffffff, 0x100, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) close(r0) 00:01:31 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f000037eff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'osx.', '\x00'}, &(0x7f0000000080)='selinux\x00', 0x8, 0x2) fcntl$setlease(r0, 0x400, 0x2) 00:01:31 executing program 3: r0 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @raw_data="7129993eecce8b054eb853f821c0a9a98caf00ac339312a83b5e0be0d4714e6974dc20049d5a89b05cce5c8f4fad5c62e42924874c14e850d096547bc318f93b624955bddb3f01a9c5c26bbbb0cf6597d9796b43a265f9f2f3a7b714fcf998e206f19b17189fc17b764029a3938a84a81eb91cf9ca63e4d8bb21c056278df29a811dbd4a542bb69b315c9fc3f894ec6a2b9f9c4f007915a7d41a0e40194b2722aa291a85c330bd9b1a33d5ccef40bece216aa003f8daad9afbbca961142bfcc3f191d665bb16d399"}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:01:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200), 0x7d) [ 304.040416] vivid-000: ================= START STATUS ================= [ 304.047639] vivid-000: Enable Output Cropping: true [ 304.052903] vivid-000: Enable Output Composing: true [ 304.058087] vivid-000: Enable Output Scaler: true [ 304.063100] vivid-000: Tx RGB Quantization Range: Automatic [ 304.068897] vivid-000: Transmit Mode: HDMI [ 304.073300] vivid-000: ================== END STATUS ================== 00:01:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x2, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) socket$inet(0x2, 0x2, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x1) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/112) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)=""/143, &(0x7f00000000c0)=0x3c3) sendto$inet6(r3, &(0x7f00000000c0), 0x10282, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @rand_addr}, {0x0, @random="79d2106aa561"}, 0x0, {0x2, 0x0, @loopback}, "0000407100eeffffff00000000000200"}) 00:01:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000050607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:01:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000017c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001800), &(0x7f0000001840)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x47}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xb9, "12f0eb485d596b3eee8024c031e55102a3a619e952f53e1b56983a7b354fe289e5a12a4f62225ef856e9516745eb1c067e778a9ddb6586a5f7b4e685ffb2432423cd64283bcc0dcee5533d83cea021a60dc640f6b666505537e792ef46a5b59bbf87a56d2366ca52e1113532b543d1195f16f7d8010dfde188c895732be0c93a2bfe489d2392170aee5cf0d3200afc0a302f7a4955f98116a7592a53ecf5d86544605bd86142e373a8841fc4c669b4d2b538dc2559eb4d7818"}, &(0x7f0000000140)=0xc1) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@ipv4={[], [], @rand_addr}, @loopback, @dev]}, 0x38) sendmsg$key(r4, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) [ 304.287522] vivid-000: ================= START STATUS ================= [ 304.294832] vivid-000: Enable Output Cropping: true [ 304.299934] vivid-000: Enable Output Composing: true [ 304.305305] vivid-000: Enable Output Scaler: true [ 304.310228] vivid-000: Tx RGB Quantization Range: Automatic [ 304.316181] vivid-000: Transmit Mode: HDMI [ 304.320503] vivid-000: ================== END STATUS ================== [ 304.466462] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 304.474197] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 00:01:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 00:01:32 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xa4400, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) 00:01:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffffffffffffffd, [], @ptr=0x70f000}}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x5, 0x3, 0x4, 0x1, 0x5, [{0x4, 0x8, 0x255cc446, 0x0, 0x0, 0x280b}, {0x7f, 0x8001, 0x1f, 0x0, 0x0, 0x100}, {0x0, 0xc4d6, 0x3c, 0x0, 0x0, 0x2400}, {0x4, 0xd57, 0xb6cc, 0x0, 0x0, 0x200}, {0x8d8, 0xfffffffffffffff9, 0x6, 0x0, 0x0, 0x80}]}) 00:01:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000180)="143e66f8e60677346941cadec1f6eba858923f10b9f815f55adaacf370f27b46ce8ec05e4def96ea0be06bc06464428c28745b5bff5f165ec2995ddda5cf332f71ef6166cbe2829766463cc0c0931ce47d348ff60ad297f05cf4a8a9d6fdd728d27a1802608ecaa0ab8a5d7d78d316cc6be7ef6cbfdb8a619385b88c9373d3582f9ed6f9fe2b5621bc275d1d7ee9768d7ac264c4c337d21e6031405bd23719e3bcb0ac492dac3951c118f0c5", 0xac) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x400040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @in6={0xa, 0x4e22, 0x7, @empty, 0x7}}}, 0x90) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000000)=0x78) 00:01:32 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffe1, 0x82080) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x5, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}]}, 0x310) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x383000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in=@rand_addr=0xffff, @in=@broadcast, 0x4e21, 0x5, 0x100, 0x0, 0xa, 0x80, 0xa0, 0x87, r2, r3}, {0x1, 0xf7bf, 0x437, 0x476, 0x1ff, 0xfffffffffffffffd, 0x400, 0x4}, {0x6, 0x1, 0x7fff, 0x6}, 0x2, 0x6e6bb1, 0x3, 0x1, 0x2}, {{@in6, 0x4d3}, 0x2, @in=@local, 0x3500, 0x3, 0x0, 0xe35, 0x4, 0x1f, 0x10000}}, 0xe8) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) close(r1) 00:01:32 executing program 2: r0 = socket$inet6(0x10, 0x9000000000000002, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@nl=@kern={0x10, 0xfffffffffffff000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="5500000018007f5300fe0199a4a280930a60000032a84302910000003900090035003900020000000d000500000000000080c78b80082314e9030b1ee4ad69b167320b0051dc1338d54400009b84136ef75afb83de", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x9, 0xe1c, 0x447, 0x6a1, 0x1, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0xf1, 0x8000, 0x0, 0x8, 0x8}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={r3, 0xe, "254dbd70163476ddcc2c07f3b153"}, &(0x7f0000000380)=0x16) tkill(r1, 0x34) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0xc712f9cc24c2aed5) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x45) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000140)={0x8, "d648c8b3073d7f7e21394553c10e3dca91d4450fff8728514e3adc914e2e53fd", 0x2, 0x401, 0x8f, 0xb700, 0x7820a581d0428340}) 00:01:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3f4f1466440ab8777637c875ffb7c4910c16834d", 0x14}, {&(0x7f0000000200)="3f45b3238b682fd7c437ad6fcc623b31317f136aca76abdcc225fe84aa843b9cc3ba146aafc6e85edefc1a88dca714db7a26c7df0efa709f4326e6df77204d74388fc83b724f5ba46177ce0f8be056dec602ce1b407f113dfb1142ebedac2d7ee2837d134f8aa89f64a6b6ed53aced76c73be202933fb46724a3ea2b38d78ffc7c099cddb0b4", 0x86}], 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x800) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f00000002c0)=0x4) [ 305.590180] IPv6: NLM_F_CREATE should be specified when creating new route 00:01:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f00000000c0), 0x10, &(0x7f0000000580)=[{&(0x7f0000000800)='(', 0x1}], 0x1, &(0x7f0000000240)}, 0x0) 00:01:32 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) r0 = gettid() setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), 0x4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f00009b1ffc)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)) process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/143, 0x8f}], 0x1, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0) tkill(r0, 0x1000000000016) 00:01:32 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000001c0)="150000000075d25d766070dde75ca3fff76c3d1bfced02d4a266f23b5d4ee30f784c68e5cccf54f60fe5dc7e6f9f27cbf4de93a7b1fb5d8b2b2eecc628ad9ac2bd2061355184999db5dc7a9353b7f0764a37ed898947dd7c48efeb104dd6c01ebfc1a49b95662b6a0d69955bc70f66648daf531715") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0x11, 0xfffffffffffffffb) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000001540)) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x40c01) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x8, 0x2) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a84470080ffe00646230f00000000a2bc5603ca00000f7f89000000200000000101ff00000031adff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 00:01:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3f4f1466440ab8777637c875ffb7c4910c16834d", 0x14}, {&(0x7f0000000200)="3f45b3238b682fd7c437ad6fcc623b31317f136aca76abdcc225fe84aa843b9cc3ba146aafc6e85edefc1a88dca714db7a26c7df0efa709f4326e6df77204d74388fc83b724f5ba46177ce0f8be056dec602ce1b407f113dfb1142ebedac2d7ee2837d134f8aa89f64a6b6ed53aced76c73be202933fb46724a3ea2b38d78ffc7c099cddb0b4", 0x86}], 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x800) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f00000002c0)=0x4) 00:01:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200010081000000"], 0x18) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fsync(r1) 00:01:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x101) listen(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:01:33 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x3d, 0x0, @thr={&(0x7f0000000740), &(0x7f00000000c0)}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000000)) timer_gettime(r0, &(0x7f0000000180)) 00:01:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) listen(0xffffffffffffffff, 0x7) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x87be}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r2, 0xffffff0000000000}, &(0x7f00000000c0)=0x8) sendfile(r1, 0xffffffffffffffff, &(0x7f000025d000), 0x1000) 00:01:33 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) personality(0x2000000) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x201) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={[], 0x1f}, 'lo\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfcfc, &(0x7f0000000040), 0x1, &(0x7f0000000000), 0x16f}, 0x0) 00:01:33 executing program 0: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x3, 0x7, 0x80000001, r1}) fsync(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x45, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8, 0x2, 0x80, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(r3, 0x14, 0x48000032, r2, &(0x7f00000000c0)='./file0\x00') ioctl$TIOCSTI(r2, 0x5412, 0x6) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x80000001}, 0x2) 00:01:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001b00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004000), 0x0, &(0x7f00000040c0)=""/13, 0xd}}], 0x1, 0x40000002, &(0x7f0000004a00)={0x77359400}) 00:01:33 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1e, &(0x7f0000000080)=0xfffffffffffffff9, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0x12}, 0x80000000000000a}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0xfffffffffffffdd0) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}], 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:01:33 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x516b, 0x3ff, 0xfffffffffffffe01, 0x3, 0x0, 0x8, 0x5, 0x1, 0xf7, 0xfffffffffffff1f8, 0x2, 0x8, 0x9, 0x2, 0x3, 0x0, 0x1, 0x0, 0xbf0, 0x9, 0x2, 0x6, 0xfffffffffffffff7, 0x7, 0x0, 0x1, 0x6, 0x10000, 0x9, 0xfffffffffffffffa, 0xea, 0x5856, 0x6, 0x1, 0x7, 0x9, 0x0, 0x7f, 0x1, @perf_config_ext={0x6, 0x5}, 0x2000, 0x101, 0x8, 0x0, 0x74, 0x6, 0x6}) 00:01:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x80000, &(0x7f0000000200)="b24c17e475fc48d826c0a602f0af2b03845e04d3f83adc29268ab6b3ee80d17b4bb6a9559024e88a89037386d9aa728e77bc7f3bddd0c6c861223ef07197dfa2c1a776400434e3b1fa63d0e3e1402807a95c616927d96f8d9b2cec61cc162cb962d4f4260506bc99e6473da2cfe94c2158dd6825bb62a815bb8e430fa804909af9badb52f5aa93fe6ffce56176c3d0d68547881d0f29d6ca864d2dd22bf90008c12347477cfe321f5fc47f34e87dcb3c38b5ea87ebe5777a7d9bb88b23679516e3737ec62c75687a104bab525ebdcf8e9fbe74d9031ecc9b46c1a1096b6aba3981182c2af109f6fb79b7ada63a4548f3da49a876097e9389d22c33493210ed96cde86d23113c20c5c38edf7620d924c08b8994df987c39c85747faec55b1be68cd16334ae2f7c2047b74c592453dae2478dc2bc7ac06d269d3a60bac20c24daa4e65644155f552bd3a0d5d4ba4c09b4cf02e46195f0c2e313bb09db479779c7f60b2d80526c58d0183e72e66f10b472f7c65922f6a456cf67b186d998fe477a587b92201ae515f011cd1de5f2101723e926af08fadf1f665182c90d85f9dbf16737384bcdb7877f4eae15e1bd706cadf1ca66e92b9589e419b04f387d7ccb970f4bd2c3f334c88ed3ee281f3fe3289ded96dd339ac28bde288359968c275f2456b6beb7bcdb572dfd6c72a02e1b68c34bd0b5b0c6a4aa2409a3f195d5e9322917c375b506eeec7f556e5cfe334ee5c1571a397646a5f5b70279d0b0dd22915f111e053fd0bc854f977b575688d9d53ad12a50a77de120995a52a1ed47373269cd83dae0eb01a4b064d2e300190468fd97e54405c8315368a91af6a756d57584e990813bc16a8e455f1e2b28d64a47a21de6486d04003efb48c399b1de6c28693e625bb235452d0f5faee9f46440273ee6207f500d27419c0245bc14ff600a333e508aaf4c390a2f1c8e910721987a56872d5ddac954b051320d7432a3203bf2db410cd739875f28489d9a6c37123ee124e5de3e8a2db61447c82f229f88ecd8398b5bfc9e33f272cdf6e97102c934c788df388fba5a480f82d049956fbe1bf4e570553d70a9d6a02051a7402da2acf5b4767bf4636e66945900e70f24bc9054089f069c4d9d2da6bbcd2ef6acaa1b7b4b086ba571bd7639bba19bee0d348d6d5c63ed0fc80d40d834c52d0591abb6701e680b4b78c44a31d33817762117edc5cc1eb775198a4daf91870268a4e9218e3d82ee7ab3850703b9cecce073f220d483711af69c803086a2851cbe15a95e6ff7012ed682926bca39c059bbf0992adc153c6484bf5243254ce81a66510924d94622c220900f2c1dea1659e89e9b507051b4adb0471234c89fb4e3d34367a333b93464038b9046c6d9df67336a7e8c976cb715e913901dd7e155ae1132b6acc60ed88456dbadaa440596f46f6adeba9bfec11b064731d986bda8b1f705cc6c1dbf5c5980c2fa9de0607f9a14bcf949bc41873a7f292bed3a82811026e25d5a8dfad5c2915ed96b462a1553bb2dfbce722209b02880c8db63a62e51ba097607c94e0214a3a472315a8c366b02fec3d4ce43941d123a65439fa020265ab516e934eff5950e1b1f3140196237ef8b3638329c42c2bf2738d49e8f011555ca593d020ee42898d7bd198ad9547263e558132bf3d1f209e83742c0ad1cc072c06986b2b169323cc602caec30438f713bd68e1e79c75e838b1e448b3c053f3022e63d6e56aa11b1b0761d7d8c2976c24f7bd0e19614e6a948b89fa665c3c3db7391ad62b7dc172300653c202dad6aad714ce9eb168987d09fd5dcb6d2969e1607d52531b95c9bd46b07931b8421eb652741bf375ebc3393082222e68dfadbd136fbda6ea22fc5b49cef403502a1a3bfafdf35840946d260d5514c394d1386567462b347416a996a72c8d86e43efc3c178256afd49a34f955d8b1261bc237688a5abc98934bf8880709109aca0873f5b07556ae1d3e691e29b38b5fd0d4868e489a6b1834b07e8347cad7280401aff228a47b68965ebe3e0a628955e40065a040f9bd821940f1d7ade32792608b492f18abe2f52d178ee5bb703b25c7342ac245a6d54cb915842020882220e49f8f5b33253bac0ef7190be41e0fcc002a8d78c6baddbc7e2b4fb793bb472d966cf8fb4649e6dc2af2c60c675538a79083813cba6a626300dd8aa27dfbbe3c6cd3c8f2cb1584586f6670cd2f6afd022c078052edcca75786bc2cfbf335ee8fcb5e52e465fb3833725c818d944aab7318aa0c2e6665ca5346c9d9dbe1e7fa541c04182e1352efeb2085c70e0ac4c4f860705e6c98dd4332a49a324128feb7b82d146383371ff681b107f2ea1bc6ddb9c2db0be21b861d355c7a677f0bc068ee00250f396d04818e39d0b20790d581118be91c4f8a89211049b7a9f9852e7731184ab0958d7e46a1bb5b11157d021c219463f0f580863f31f587676f97af843dbcebb22276a92aff10e5417794aed10a11f6f5eb00c6f55b9a5081a786b6b6bd614750ccce48ed9dfa9d4ced3a08e851ff63732401dfb512f2be15926d9303fcabc87b94f9234b4aff76c6c354624372fcc0c6cb202eec6ac210828bd59141d6c4c474a54aaadbc1b9d526c0867d2f55ec079b0a1d7fd264b133ceb194e80cae4eef55e34335037cbcdf46e2d83fb3677e85e678ab66a60b80e9430ebe84f57d3b7e27b0e1b4d0b81e67d462c34a2c1f97dad276f2f5c5e1a3ad633bb810c92de3dd1605df0fdf5ecac9a075d51f84fdc0388b767f9939f5a4e26659331d5b654f872534d1e138f5aa7db0ffd1375493f34fb23bf04917daedb3e3191e8e9ce72a0859a16bd6345c6f5fa59123230f55114379fabde1c25eaf8f6889416bd7d50bc0e91d8f7c2e8bba588f8b09100b9bbec7e791c68bca06ddec74f9d0619a48dc48928cd0e4d4e32980a4d102a8b9cb30d58ac13bcf7004608496e64b768328128b1cf9f05bdbfa62dc1c66aae55d4200523d3a60286759ed088cba7ccdaac6c2e403e254035cfc56773f3607cc8f9c31cf2c104da698035a4681c4de977b1f3a4678b18e30be1572f1b77378bb862285bbd1147d890c57754a62c798b2daf87deabe37722b28383d243bf8866484e1d8ef0b7d6ba9632628a3a5815ccf74a001d8669ec96f85597b6cf0711ef716bbd5aef4be111414dc90dcbed9fd88ef81a757d3ea5be6cbc9e2df9effdffb475fc235ea7427890c90d6d7deb0518c120f7a217ce7ff3e70fb2e6196f95ec27c62bf280f74a6b08c7743645115b9814123e56f5d740f0c2d8661ef01f2fbed822fabcd3d13130f15c96a91f03b8187e576b6e2f8016b65ce81e9a2fb2b941d81941f07761cbfe6b7754be383a21d61a3be89501f0b824dc561f739f6c7c2641eaa2a350905c109164fbb6c0aacca0bc83b64ad64263399f09879200ad627220977e0011198df7a9a8026f47d8d04b9914be6f9611bbe594bc52d9c0be945c807c7ff19f5dcb7448fda6b0bd6cfe09212d2d12dd34fb36e261f056e867dc10f37f226e75112046f7b0643bf7aaff514755139fc5fd572e2cd3244643f81242aa7875b7acec6df21c76f76451b570fa9282b3cd93bca8407e7d65a764cb4d0d58ad2480698fc81383414de95bbca17b928cce9e55ce156dfa636f4f463234c0d14357398ab4dbe26e61a3a45081f8198d5ac37046ea9ea486b85291022145e90dcf7b92fddb6e32dc37e10522b3c966cf38c5409240599ee7171ceda6e8db228fc628571e1e5974d54a34e6c33c7285dacfbf2bdc2daea96ed3fcf5f3d0c5583d6f911ef6e9ff5a49d501d1006554caa4a1b02fcfa02f4bb75fc5c425b277262fb929e2334c14325b338ceb95687b6f08fc9ac03fb49e01341e651ab41de9c702f44a1fd3d21f54b728065873364153c2f71399e98df42c284edf7fb32f26b7c36fa0d0b11dd5f7f3a427da62cd733ff2225721ab140f108590594b23da1bc938b001b4857a674e72d0f79fff8a98345768babaea5616c0792af81cf06dac22d75fe7bdea36ef56abb3613b3ce61ab3c8ebc8c478206348aefc8f9d844e81bc9f797e222799632f6d9425d07c174a1709f57193617ddf55329f1e0a74c89ff13ceb2b5647dcbb62565b5d520f0280ef44ce2d1e2e6f1f1c4d4b5924f5f2fb5ab8c57c830d0d5e9006058d1c09bbe943bfa8cdc0af0d904c42587f2183c9b73cd3e6a237919bae8ab31c1dfe0e57889162085e3bd2fb70e0887aa72c48119ebd59ab9ffb609bd53f662fd525b580be964ac94f1052371bae5e4eca06f5d5b861fb310724b37785adc43abe1758837acfdc81df36e26d036aa4467df889072a03bc6223e67f6688581e2c4106b811e33cf665c2def970a159a06337e007db9b9ba389d72fcc1a9d1e70dd56efb7efcee377eaffbdab41651c39cff9b5234f28b53c3ea365b0d6228fcfa660e1430549143f434711decfd9d1acc34b9aabc914a2b43e75db2339815296808879b72634328e0b8981245d3aa5c5c5aaa38433c352329bf7a7d30a518d8df0efb9b6fe0c78a58c45c37d9ba1e55868968f3d5f94f7133b3bcb9c1d407c84236d91e55d307665a9373477fb2a85a1dff9c4e6d97a08678a6f6c4a2c60462abd517a68ba97698d18c76c290f3534035325c9068ad8fbf5dbd8460a41815583601fda7c5aa05d13bb60c6d4d2b33d0d9a0ed3c9dfb99a78f6641282f69f6e9e31221351046622f05722639b1d67bc767337052491e8e631407596a118c56871a6cbbb26492f6e92c713b0bdc036c56d405d1a1ede97925328bba0cb813958b061aa6c82a68f2ae783505e79cff6a81018e194cb6ece81c44107dc8c461e5cb294633b1533fd7c0b6ee9603139f9fa8d9e9d78e753491b9265c963c813b3d6692700d7899ef78c4dfb507fd84642f08a1d9e740838aa9bf213ae6d5cd0bb1f797e3912a68766aefc84cead496b62730ba22de26a755e7d61910f7f01335d80e0ff2208c767b8bed684a89ddb6948bd8183e2576d5405402f09abd479879f4b39907f3f74efde9894c39c87439a9dd3adf281a39423978443b5e2f262735d76491b880d2b42612ba2d722471df3e727d9456d7a24efb1cfce804292ff604cddec4ba8fc85e32823bf7050d7ddbcb723b74bbdc180deab1aaf99ebd728337e0b001b67a59d899e6414325fae1dceebedaf2e5a2363acaa4b8d0b69dfc5021804c4611f99b6ae9bb4e7971ff14d3d9fcebfea846b16b0dfa0f5d29ea57ade487ad7e48e5558a646b0f6822374b52d2feda662ec3426b25423caf1611145fac61296fafed179415ce9ef39358d3d36b257e2b508d4dbcb2a1aed626fe1d6cace08f3841be5089eb7dc88eb1223dc4be913468b92b64c8ac9fb5ade3c7ba82ce6d6be713d995579dcaacc74cd19602b6ce7a3d01fac8f19e6e1c3d09f3894840711f70b9476f0d4a9fd3d8aea6afd8d08ff4642d07ed6a55ad8a612337c737e4a11e53abfc634bc593ed885fc7b9234a450311214af876edf2e0f97b66b296f123a83c7162a1c313bced60060c0a9eb707b951eff31755724175a8844e294bd2d8a2ed141ab27d9cfaa92bf6ef4ed3cce9e880b66443b9f94dd056d3dc10a129611657ba5bab4462f626819934c75b1a3a5bb34fe9d23f04899d9b232eef5fe85e05f40df6edab5dd3ba72b5fead13c92d62b888fba4047c3112ae705c1c34b8364fc55f02e18c9372589c6d2912bd0c55b97910cf33841aa5a42425eea478012524a47631c55341717e6bb4e04b1fb2d60e44ce54", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001200)="e7ad229fa2b3ad665ece2c633e5c8d366928dd8a3f70712b424edfeec5f420b9e3d09fb9e4b0de9fe685ba7d69f64215d5ea01ed5bc3bdb95c7822d2a4a0c7838846a75f3217fede0a041999f560773f1ac1f09f5b732b03d157aba4da3c58f74b902c3340751c9972d1c1a83e672c6ee8cdf52d68bd506cf8c4b669ae9a98e3ae5425e653a0aaaea2107fc2763c3444d56350b8dc1464d5d134d36996f60cefc53e0cb7fe3cca3c112da9c26c2546ccc395050bde1dc351ea974431b84f16a4710fb24ece94167374b223668dc0cbab84ae852ff630a435f80c106eef87a2d08187c5d6f744bad3025e655a") syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000180)="67660f384075800f01d166b8be0000000f23d80f21f86635400000e00f23f8a5440f20c0663502000000440f22c0670f22dd652680e7020fc71d0f01bfb3bf9a0020ae00", 0x44}], 0x22c, 0x0, &(0x7f0000000300), 0x102) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f00000000c0)=0x6d2) 00:01:33 executing program 4: r0 = shmget(0x1, 0x4000, 0x77fffffc, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r1, r1) lsetxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = syz_open_procfs(0x0, &(0x7f0000000240)="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") bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0xda}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000000)=0x1) unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x200) getsockopt$inet_int(r3, 0x10d, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 306.961785] hrtimer: interrupt took 123317 ns 00:01:34 executing program 1: io_setup(0x3, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x181040, 0x10) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) close(r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x200100, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3ff, 0x6040) 00:01:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @dev}]}, 0x48}}, 0x0) 00:01:34 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast2}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0xa15]}) 00:01:34 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1383"], 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 00:01:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xb, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @loopback}}, 0xab, 0x401, 0x0, "b0948a52bf877a36898974cc0f589ca48b11cd4db45eb3faa679b236df82c8f424a119e92937e0cc725e54c2fdcb9b76d132ba878489150807ed6c41c5d65ec5efeb0e59bbbab5bd0bed394198731f50"}, 0x9e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f0000dc5f98)) [ 307.653274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.660252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:01:34 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) r3 = fcntl$dupfd(r2, 0x0, r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x6, 0x3, 0x8, 0x101, 0x3}, &(0x7f00000001c0)=0x14) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) epoll_create1(0x80000) 00:01:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved}) 00:01:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="000000902a1cff0f497f5d8ac91a64685a00000000000000", 0x18) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x20801, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000200)) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/161) 00:01:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x2, 0x540, [0x0, 0x20000500, 0x20000920, 0x20000a10], 0x0, &(0x7f0000000140), &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x5b8) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@local, @rand_addr=0x1ff, @local}, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4608ff0103ffff00000000000002003e00b9000000a40300003800000081020000be"], 0x25) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 00:01:35 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='mountstats\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x2, 0x9, 0x5, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendfile(r1, r1, &(0x7f0000000080), 0x1000000000043f) [ 308.133086] QAT: Invalid ioctl [ 308.152071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:01:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) 00:01:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4e, 0xfffffffffffffffd, 0xa45ac3b3574a9149) [ 308.394328] QAT: Invalid ioctl 00:01:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000331000)={0x1, 0x4, 0x7, 0x9}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2000000000000}, 0x20) 00:01:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x4b0000) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x7ff, 0x3, 0x8, "985961ee13b39c53b10659381999469d3dcd70a0eba9cc651b17cba4a6efb8bfda91542c0ff8dc43d1f7c55fb3845b8649dc61b1cc06192f5826fe7a", 0x2d, "2841b9cdd753f02642dc579f40f6d015adbf3c82cf641f1ef6add799e1836cfd50ad012e78eddb309397d8653ef9553555baf05ffd2a4c0aa989b025", 0xd0}) r2 = dup(r0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x4, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x8400}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000100)=0x1e) 00:01:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x800, 0x0) unshare(0x20400) ioctl$EVIOCGPROP(r0, 0x40047438, 0xfffffffffffffffd) 00:01:35 executing program 4: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x66, 0x411}, 0x14}}, 0x0) 00:01:35 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 00:01:36 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x0, 0xffffffffffffffc0, 0xff, 0x2, 0x3, 0x22cd8000000}, 0x1c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) restart_syscall() 00:01:36 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4, 0x4}}}]}, 0x38}}, 0x0) 00:01:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x10000, 0xe92b, 0x6, @random="d1e16e81a7e1", 'ifb0\x00'}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bind$pptp(r1, &(0x7f0000000440)={0x18, 0x2, {0x3, @remote}}, 0x1e) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x20000, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x3f) sendmsg$key(r2, &(0x7f0000f56000)={0x2800000000000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070000ec000000000100000000e543"], 0x10}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000280)=""/210, 0xd2, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) 00:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x4b0000) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x7ff, 0x3, 0x8, "985961ee13b39c53b10659381999469d3dcd70a0eba9cc651b17cba4a6efb8bfda91542c0ff8dc43d1f7c55fb3845b8649dc61b1cc06192f5826fe7a", 0x2d, "2841b9cdd753f02642dc579f40f6d015adbf3c82cf641f1ef6add799e1836cfd50ad012e78eddb309397d8653ef9553555baf05ffd2a4c0aa989b025", 0xd0}) r2 = dup(r0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x4, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x8400}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000100)=0x1e) 00:01:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x4b0000) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x7ff, 0x3, 0x8, "985961ee13b39c53b10659381999469d3dcd70a0eba9cc651b17cba4a6efb8bfda91542c0ff8dc43d1f7c55fb3845b8649dc61b1cc06192f5826fe7a", 0x2d, "2841b9cdd753f02642dc579f40f6d015adbf3c82cf641f1ef6add799e1836cfd50ad012e78eddb309397d8653ef9553555baf05ffd2a4c0aa989b025", 0xd0}) r2 = dup(r0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x4, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x8400}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000100)=0x1e) 00:01:36 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x100000000) unshare(0x20400) setsockopt(r0, 0x65, 0x10000000004, &(0x7f0000000000)="c8d63f23", 0x4) 00:01:36 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001500)=[{0xc}], 0xc}}], 0x1, 0x0) 00:01:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="7b1af8fffff5000069a21850010030019e5c74aa9c8332ce7347897b74b08ad8355a18e37297dc471b00000000000000000000000071471beaadc0f7f48add9ad78b5b"], &(0x7f0000000100)='GXL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, &(0x7f0000000000), 0x100d1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x7}, 0x1c) 00:01:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x7d) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", &(0x7f0000000440)=""/95, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) 00:01:37 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x2) r2 = request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)=':cgroup\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', ','}, 0x1a, r2) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4004550c, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x180000}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xed96}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 00:01:37 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x200, 0x8080) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000180)={0x0, 0x9, [], @raw_data=[0xffffffff, 0x0, 0x10000, 0x2, 0x5, 0x7fffffff, 0x100, 0xb6f, 0xfffffffffffff800, 0x81, 0x7, 0x7fffffff, 0xffffffffffff7fff, 0x9, 0x80000000, 0x401, 0x6, 0x31, 0x0, 0x6, 0xced, 0x67c4, 0x0, 0x7d4, 0x3ff, 0xdde671c, 0x7, 0x4, 0x5, 0xffffffff, 0x4c59b7b2, 0x9]}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@buf={0x7c, &(0x7f00000000c0)="c6e3909fb5fcd0a1b507f7fd29df2d5983ca3ab3f76f0ba2e7d7ae16915f5d709774048be1afe0b4e79722035b76e50d4835f55be3e4cb38739fb8d040d1576c716e388dffa102aa10540a95a7ece3a879f3cd6b99903b525120d93cecf5771c5f5cc16a5d7b1e710ea1de7a34234589c989bb59210a8968bc9833d0"}) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xfe73, &(0x7f0000001400)={&(0x7f0000000580)=@getspdinfo={0x0, 0x25, 0xc00, 0x70bd29, 0x25dfdbfc, 0x7, [@address_filter={0x0, 0x1a, {@in=@rand_addr=0x1, @in=@multicast2, 0xa, 0x1, 0x3}}]}, 0x138}}, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000040)) 00:01:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x1000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002080)=""/204, 0xcc}, {&(0x7f0000002180)=""/223, 0xdf}], 0x3, &(0x7f0000002340)=""/110, 0x6e}, 0x0) set_robust_list(&(0x7f00000006c0)={0x0, 0x9}, 0x18) process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}], 0x2, &(0x7f0000002180), 0x0, 0x0) bind(r2, &(0x7f0000000140)=@sco={0x1f, {0x3, 0x4, 0x0, 0xe8, 0x8, 0x100}}, 0x80) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 00:01:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4794}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x90}}, 0xc080) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @remote}, 0x10) r4 = dup3(r0, r1, 0x0) write$P9_RLINK(r4, &(0x7f0000000040)={0x7}, 0x7) 00:01:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4018920a, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000140)=0x1) fchmod(r0, 0x84) getsockname$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/251) 00:01:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x10000, 0xe92b, 0x6, @random="d1e16e81a7e1", 'ifb0\x00'}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bind$pptp(r1, &(0x7f0000000440)={0x18, 0x2, {0x3, @remote}}, 0x1e) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x20000, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x3f) sendmsg$key(r2, &(0x7f0000f56000)={0x2800000000000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070000ec000000000100000000e543"], 0x10}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000280)=""/210, 0xd2, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) 00:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = open(&(0x7f0000000000)='./file0\x00', 0x99d1aa91ee6d9eaf, 0x2) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4a6) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1, @broadcast}}, 0x0, 0xffff}, 0x90) [ 311.253212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:01:38 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x81, 0x31424752, 0x0, @stepwise}) 00:01:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x18e, 0x1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x100, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f00000001c0)}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:01:38 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x400) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000280)=0x5) tkill(r2, 0x1000000000015) 00:01:38 executing program 0: r0 = epoll_create1(0x80000) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x8, 0x1000, 0x8, 0x10000000, 0x85a8, 0x1f, 0x2, {r3, @in6={{0xa, 0x4e23, 0x401, @empty, 0x400}}, 0x2, 0x2afa3c91, 0x84c, 0x1, 0x3ff}}, &(0x7f0000000340)=0xb0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80000) 00:01:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/139, 0x8b, &(0x7f0000000000)=""/64, 0x0, 0x2}}, 0x68) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000001900)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000380)=0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001800)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000400)={0x5, 0x5, 0xd4, &(0x7f0000001640)="c86ceef5decaf3693620661275da1471d157a722c6d925dbec3e0101ef5a50c814d7057085fd886c301088c8dc2c506cac4d96ef95ec6cb506bd04ff790d31a45a81613f665e85a8dbc5fd745516421c264e53dcd4cd854be3694b8a6e0e1118a5aef1f29293b7264c9daaa151e859b3f6650583b885a1f25c5097624ac866efb93ca83d0c502ba50f5ba629bda9909ffce1a520431e15bc425423e4860e275f4ece04ba98aeb1cf8d05fcb21ea0987ae7cb5dbdeccc4bf5585c040b3f95af48d64e11b15b5ae9dbfb1792e6a0541efb79cd3fd9"}) 00:01:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000200)=""/162, 0xfffffffffffffda5}, {&(0x7f00000002c0)=""/212, 0xd4}], 0x3, &(0x7f0000000040)=""/75, 0x4b, 0xffffffffffffffff}, 0x10000) r2 = dup2(r0, r0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000003c0)={0x1, {0x0, 0x9d1, 0xafae, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@ipv4={[], [], @multicast2}, @mcast2, @mcast2, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0xfffffffffffffffe, 0x40400021, r1}) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000500)={0x9, "8c3791f879b254e0936fca3ae3cdaee9b0d9ed4bd1a2a5962c7a2a6a962318e2", 0x1, 0x1, 0x1, 0x8, 0x5}) 00:01:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xf3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000140)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000001c0)="65d39500080000c4839d6c6ed400c7442400ccae0000c7442402ea700000c7442406000000000f0114240f0f58280d3e0f01c866baa100edf246aa2e0f01f8440f20c03501000000440f22c0460f2207"}], 0x2d3, 0x0, &(0x7f0000000180)=[@cstype3={0x5, 0x5}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0xff, 0x0, 0x100, 0x0, 0x80000000}], 0x8e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:01:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001980)={0x10, 0x31, 0x1}, 0xfdb3}], 0x1}, 0x0) [ 312.020739] Unknown ioctl 44609 [ 312.025471] Unknown ioctl 28674 00:01:39 executing program 0: munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mlock(&(0x7f0000539000/0x4000)=nil, 0x4000) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x5}, 0x1}, 0x20, 0x1, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000538000/0x4000)=nil, &(0x7f000053a000/0x3000)=nil, 0x4000}) [ 312.073316] Unknown ioctl 44609 [ 312.088841] Unknown ioctl 28674 00:01:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000180)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000200)=r5) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0\x00'}) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000100)={0x2, 0x6}) 00:01:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0xfffffffffffff800}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x28, 0xb01, 0x0, 0x0, {0x16}, [@typed={0x4, 0x1, @binary}]}, 0x18}}, 0x0) 00:01:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000200)={{r2, r3+30000000}}, &(0x7f0000000240)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7ff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000440), 0x34f, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0x7208e9740e18ff24, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x304, 0x4) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:01:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f00000002c0)=""/143, 0x1a) getdents64(r0, &(0x7f0000000100)=""/70, 0x46) write$nbd(r0, &(0x7f0000000040)={0x67446698, 0x0, 0x0, 0x2, 0x3, "041bb71814fa72f00e319c96cd44eac1287466c1704dbf46652c21679b2378b41fb95ec3d00cae14cb91da763da6f72ceb4fac69d98fcddb3ae93857a059154f5c3e5cb80c4cad2a5a8d5240b3416ed9916f8750390d3a0fb6e594c9"}, 0x6c) 00:01:39 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000006780)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="5fb59f5ec8b577f4ce64cb38a7f63530", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000001380)={0x77359400}) 00:01:39 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x4d, 0x0, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 00:01:40 executing program 4: r0 = socket$packet(0x11, 0x40000000003, 0x300) r1 = socket$inet6(0xa, 0x4, 0x7ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000009900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="b96cc5a2635b4b1657c4058a692f", 0xe}], 0x1, &(0x7f0000000380)}}], 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x3}, {0xa, 0x4e22, 0x8, @empty, 0x6}, 0x9, [0x2, 0x4, 0x7, 0x3, 0x3eb4, 0x9, 0x0, 0x1f]}, 0x5c) 00:01:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7fff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/101, 0xfdc1, 0x0, 0x0, 0xffffffffffffff99) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 00:01:40 executing program 1: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)="58199ad4399ada27", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001540)={0xc5e1bde241b56265, 0x2, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f0000000300)={&(0x7f0000000040)={"637263743130646966000000fdffffff00"}, &(0x7f0000000480)="1079abc71b2cdd9b229e8bc8b584b29146b6e19432c41d59d14a641eb95c03db0f58f653ac0295d5da3b18270f2a9d5ae0b93e6fd7dbfb8738cce95a78410d8bf875a258792647e3fa3a2f146262a5886264a738b4a039ebd4d867277ac7bfcad2b794ed5a02e142948d00b04ec8f2ff1a38930fab8194031d8cb28b0a3a98a4bcbb156bd1a61e", 0x87}) r3 = add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000001580)={'syz', 0x2}, 0x0, 0xfffffd92, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000540)="0a804ee082c1927d1441999ca87130782b4c382054f9f3b00008f21b17c2e1f71aca303d07614376ca2482f921a484afa2b52c9299ca789795f6d97ea7b9a7bf1f6c60917e11b2c77b70ef89e70f146d0882c5c949df54a30e5a2bef1a3d6891475a035473c595a57f7f35150480e5f90e9cbe7ac43635293df541d0907e5a493cd9dee46183e51a1dd150374fe8d63ffef5385ff0589d7468858e17e455345f55436a3b5f682d806c9b831a710a9d9657c9cd4c9987de884ea632c83feaad11137416676159565438b4d29f3625144712b4232fbca02cf0b12a18e29fb10ca9b2cdfb20ca7ab000a08f7deacb8c77022039373a13e181ced32b57216423d0050d02b268a2b099ec3969d001f60e107d94997d0ede3c8aac7a8123f301453772ea67960696a4106bd65ed79178cc3b6e5544fe728117e9b81f233be6e135b7657ba52794e80a0419cb44945826b65ede421f3f9a59446cf959afb7ecf829b028f3c2ae0768c99187cebe83f8f24664c98b64fb52220f7b485721f9b7d3dafdbe3961348803027b63ede4968af251145a79bdce26bafcaeea5d592170b6cf84a3fd0a3a183a86355345d63d8d191617e687e4b9bb7cefa6908f334c282a9d93ee7168427913b4b3bc237144be90f56e5fa25a2af7fb931e73ad0afe37bef0821723210d1a8268a2c2c58c66300aaedba90493873a90a256ab87d95b664444cd848e18aeda928d08c8b1cd668736c785758d70675aa05650d2d70e42372971d6cf47665111fc393f6cef0e0e24a4500d2a72f49f2a164226a46ff3ea891d8206d31311ff14dd53bd07ed359110d4d3f06eba87e8bf3b84e2e624a11cfcc5bbb4695e9100c25becc2813af24c5f5d29a1dc752be303005c79918fc0da9abad43d7e93bba103b36685456dd91b1a5b578a9f7466f3ce537b99115ac7623d43991033c7d94e4d376dc4295a4ce3087fcb3d8d25c3d484f78e2944ad71c657cb82a85f418b392d8012942510c44951a90f97a18a30e207af49ddf1b16542d53ceb3eaa38813e8c7be1ae3b44fd414d1f952f800d5b80fd7320dc0b4754a34a863e0d31ec6ecee6a3bd23c2470bf3cd71e2da244e5c6548617116566fe496a571e3d899eaa3d7c8b4f7aa8986aaad785d3eb9e8836b950db12929f19607f1aed5b1f9c0f86d156aa4c642c734ecddb6169485260c4a4c12f55e2191334456f533a4d8fe716cf08b6fd5711c4ff4a3130ad6394903db9fdfffe6993d025ee64da4959c8c430c3279a711c84ff067525266f54293c3922d231a9d1fa568a9c0fc5013bd05459bfadbd957946555ef1f88f4a27852520774a891a4671dd91139db3230f43050d4ca3c4d8815f802316ab99d2f4c34c43ddd5c3cfc5aec47097b1c2ca6ced003bfb8e5092aadcbd548ef34265045b86807a7f98829cb0b95666ef81da4382d8b4773ba84a97322e284e1bd619e259415a62a4ad6494eb2f693331e6a04d04c8c91d579fc152e39c8b4a2269ae0427bf3149bd35cd26b589385e26b69df56dd0a9185187554ebef7dfd38fb5cb15afd537fa7a50dfa72caa08f5322fae319133fbb24dfa0fd27d35e99cc8cbdb81a656ed8c691e1c0a7492a922ccd84e0a580af54ec9c183e53884b11828a9db2c00e81e23648bcceb53743daf070d46dc956a5c2a60b77d8a50cdafab995d04182778d2e5a3660bb3db80771ebe544a90cd6e453cad0945425a20f25719605d40c695c33d7cb99c71aa5b9ddcb248ddbaee0ef654091c2c241c8c56224d773b6464237f68e0b60a33c0792388632ce36840d92b654df664c522657786feec35b325df05fcc6b49aeed2193a8dcac4009fe66204fd3ab5c6b6e5f773fe4dd2d02a55b7d6f9884c2da06df9f0a89df11d98b7bfc32a116b50a0db056d4d20201986063398a8ff838526033442147bf3a69e2476c22664a6330bdb9d5945dc404d508676fa5038651b65496b7f53f3d6f9552040945a17b898c492ef4d80b8a0b3dc929eb45629ec5422fea903cbf583c9673b87b964ddb0fff95e924209107055a94d5a0f1d59c6a9869d95131f0ed3aa83ff4e47db9ca0bd1d88dadaa84f6bb7df20fb18332c9b62e912700f572152ca16050758ead7fdc61170a0c0b2f321ad06f71721d895b2fe167aa71865f74eb30bc8cde32d26762f40891f6b2c17ad54689d714065fe683ce692c389054a11eb78b8232bb9c1af45fa6f052fe627adc8c3dc2a3fdab10a7b757b568f35b1083fcd3a81a3554a2af6fa5dc288e3eaf305791f382a42b293f8016a317c4ccf0a639c5ebabad4513a1ab7542b725dfa85e5ffef8ed976d3c93b1e3b34d09b2c8c8d52295f8451e009b7ff01c4a5a1bd91eb2104519a419fd4df4e4ddb3d644746a611bd3ba715dd8f3b132ade7c8381b0a9694c637233b5ad682c9367977438ceb1e6ed391c5d0759a916bc8731dbdada6540eaeccab0e9a8ab31b0220da7809d661fea2649e204b0709b6dc3983800fc8ecafe133acd7694d92985ae5fd7c03a0e426143419280033d4ed42a42b1b2fb56ea749ba38683223a0ad0f03e1970624e11c6d2aded7f43aa9707951a92759752b21e7b5098735e20f045fcd1e23f0558b6c2d28e48f6dd2e9801c178ccacec7ca3f0a9fa940b446eb763814aec10de6b46523aad783927692a76e1b86b3904bd897b64a78188ec18fcd08eb94d21fb25cc61f48c142caa702105af332e6e0ca6e309f0491cae0daa15f8f26d43a2db3a92e0d78babbce085ba53ab286d8450ccac5545e4969952a54e476ce2e887285eddd01e99d6d9e8b943b9fcad63c4861f386dd79944b212bef2823bdb25b2d43f85818f46e269726d4e10fdb2b658447a08aeae7c63de58e37f34619f8dcbca63ba42b778088e768e27cbd7b7705815e34b9c70509b693999cad3f73951855d7f5628bc673037404fb2e5bba88d7528316f0cef15da88d22cbd0716fc3bf54fad67b967662886396f919116bfc513dc0c5fddf4bb13fbe4f3a93f2a37601b6ff83561d3c7211a3a94e7d6cebd6299653708b792a0abd0760e0bedffe6f28d247d75bc972e6920cee687f1f074d0eafabef1e6a1df3d1ea82feb7794d4f436add9d174ad55834794f807e871d65836a85449db1b1a3e3fa4e1efebdff7f777f7ed2b67101a45d0b419f969c9cadd6e6d284e5cb9856da01506e4889a87d9e051d84897f239795e6a11b0c737ed88c7ae0533e71bc0d6b738c0bb195e51f9fcfe56274455b459e3197c0e4da0f5214e6533b02dc4eb3da5e693219f635bf03f0a0cc074a8dd67e51240464205d3142bea9e6a32f36d50d8e271ffe4e363291aeb382b8556c12a8af97d9a809f4f0d38740aab8ae434eccd5f62f54ff0fe700f121e7d932f873b272933d7d381dbea6b724a7cc1056a5a53444575e814e82dc4d7770deb65801fef7b0d1590f8926c99dfd69be10d2f91c741bf2c74d3e2a3d643b171d474fac61a4d3021bcf06181e0a351ca8b7f4160d7a65c6b89235de726a1fea68478835365a8df68c1943b20fc358158800e919331f9a0ea881306fcd884399a32e8cdb21810361c83bbb8f5e69744d248d11ed776f8800aa3347b8063f240e61b62c78db73ce3245641bbe65ac9aabb6d28fc5dac9857b37b30997c49ad3313deb79bb5165f2a5d1e3cd710765e326aa80dfd8f8aa404d2821d3b85e85b702fe979d5d6d3462092fda799bb7d94e3e6ca01baaf737e78b1fc102d1ad7ac3e5d5302fcb3535b872ecd07614685e25dbafdf3baf064b0f407cf0cd35147dad873293835919a93072b2190925d56064683ecf13008f21c38142c9d3487bc474790035735b5db26e350432498f68fe2938f768f88f6bb0de67f4be4607cf1d8d8c3ae52905bab7c9e333a4695f75c6daab649351453c973a4bd58b896b84579ab3dffae77b2621871a2eafcf3e1e78786104c0215dc5a380bbda168afefa3c068b98f9e64666c7ef0687c898cb238c84c1bf12590f732a92ccef44e3933ee37e501cb777ecd11c691c17d460df7e971fb9fcd64253bda2d43a2f7a616c7625e96ca6cd1874bf99c54dc0a6fa5f323ed9f574bba409d0fa3f149e15f9196b9c3bc284c8e5badb8ef8cb662e1317b800b5c5c123e30a299f67d169218f7a04092b2d263cb6ba002b507361d92210f4be6450b7696991e741c92fc0e94c9bd489e21cbdabe2bcb027fa6b8b37b9a6d0bb6e2c2843833f3053e1c235141a4a8089e5026aefdcab01feed5c9f127decbff3c45a9c918ace3afe0e2864812645acec36b862bc94503ded68945b5fb1520982c059c4b1f303f042144f676cda0ca2599095a8536d830199a69c8ae02ea8092f58af428c0ff4c1cc8ea899bda60b354276ed094747906a00201ee632f7f25697f9075105d1aa0c6b2a129d48432d68c131c3e889b163d5c1039c76ea0ac0d5ea720dfab8ba90e4479a7080075f019f564d3aaba0337f7d9e2c8578bad35fc50648f195138dc084600a307e6fc6d8b28c32f3b03bdf356f1c4439b5369396dfe830d5ae0615ae644179789534928095abc062e854c6d6c54a4af9093a85037423c74fbdd955d9f498b21a2d8e08662193a1445c570eb975e9c6cd93ac2883a9a66594e2a69fe3f6113e6a4d6c47916a6c7bf7ed20eba4786a70c1426ea7fba61055758875bd2372006eaa5d2fa72c177dfbc08e380d51b55e781982b1fb420acc9287fea1e2d834e0009b5ad1e8fec696bb93946c92c9ab8ab0c14c021c1cd20feeda805b8d8427a44cf6a96f9e7b4af14bd9023981f7cb938658c26c8762a6e02335840ae77706557cddb300e904fcdc760b07e0fe2158d44d223819d2828d23180c4d05b0a6aa0f6b1bc95c4e1243435765a90c005edcee7c2204df4f4570d1462fc9f28f9cd7445774b317a209bbc855d6a2c67bd4482a8e391f9093c5bf6fa0351d8d5e97d0055fe90e0353f1a0b0e64b17a3933068ec63194841a5c067d658636840613858dcba2fef22262d8cd4d38cd198619f0f46859f436f7d3c50cebd326156b1d3e5429a31aa8e097c84882d12206a326e4a6d6bfae116d677e886a9230412783da49721ae2d9cfb7cccf0cefd77da4de4d6223ca0add8bea7f18bf158241f3bccc8b9b314437348c90909c8509714abca728f38a8555bc2a7fd0a4a0f8bf53c713ae0e3edc59c7929bc3776cc89f18de911acf107bee2a9f333558bb99716d5bfede67ce7e0df2408c50310215495951aa6ca2e514ec04ea4a93c4aa86a7ab70cca07011a6a480db806a2952eb87a55655ddbe0cd5ebdd778f42ed6508f5c575f1ce29b0e417f91321b0caa4bd5500ddb36fd8ad8a4e16218f7e8a27b5fa5631891731ce2890f1a574c99c9099f4775d1559d16706682b90516bda98192e646c6e188bf1bd4d6ef13e81030a687282d771d303ba46b30927e9f4cd8eaec75442707fd879888e97df70b8aca067a13cbed276a65b45a5620a4223185b1a316bd43f6158c890df46928146d82de780fc3b337387bf582eb6feed95e7e50c655381ecae13a96d7fd88d925f8cbd9489847f2d0b2f9659ec1de84f64ebe746e6ccac2ca11474cd8a6e07089efe81f2529e0804a9da8c9e9fcfbf717b3de917ce119bdbef3c1d8c1ed3c9895f4164de2ec7283a05160c487f1aab3982ad719389ff25cbbdab893ce48c2d4546b39dd318d7daf346a04d32714021e563419f75186f6b7eba1195334f2f3a55c4e4e4b885f0440060e9521c1d8548a2992c893fc2ee44d15ac11ca87098c75ce6b944b480e", 0x1000, r3) 00:01:40 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) r2 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)="c0684e00466daab090c7554372e62cefd52e291f1e3ce55e2d5da89c8c1f64cd83058f7ebb5f2a1c42e87cdd60f935fb1c87b1ad7e802d4a8698df3cf316065f2421f267e404ab54d9a9deac46c866d8e353017ee95032d792db3facbe", 0x5d, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x8000}, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) mmap$perf(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x100000a, 0x10, r3, 0x0) 00:01:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x100, 0x4) 00:01:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xe5, 0x0) r2 = socket(0x3, 0x4, 0x6) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffcb5, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000220003040000000000000000000000002dbac3489cb2015783c97711ffef379acccb1739795fc8a956280d997c73f4fbf156ec8e59e35059758a7785941083b85c44064515ce967bbf75d60befca25fd6508756c83b23eae519253df97c0c3263c9b3e9d9071954c75c951bc469414131f55e2e26b28953a2f57feb870"], 0xfffffffffffffd08}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000150015000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bb6b6e0000000000"], 0x50}, 0x8}, 0x0) 00:01:40 executing program 1: r0 = memfd_create(&(0x7f0000000200)='wlan0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0x1f, @mcast2, 0x1}}, 0x5, 0xffffffff}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_names\x00') sendfile(r0, r2, &(0x7f0000000000), 0x1080025000) 00:01:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x800000000008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="bad004b8c0abef2e360f0966b9cc0a00000f3266b8010000000f01c12e0f22420fc7a814590fc72d650f00d1670fae0af30f209c", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000003c0)="66b8410000000f23c80f21f86635080040000f23f8ba4300edf390baf80c66b8186f4a8666efbafc0c66b88d3f000066ef66b9e402000066b80080000066ba000000000f3066b9760100000f32b800008ec00f01c90f2202f3650f011b", 0x5d}], 0x1, 0x0, &(0x7f00000003c0), 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x12fe0000) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000200)={0x28}, 0x28) [ 313.586314] netlink: 'syz-executor0': attribute type 6 has an invalid length. [ 313.663020] netlink: 'syz-executor0': attribute type 6 has an invalid length. 00:01:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008913, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r3 = geteuid() fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000040)="a2ed3900fe895400edfbd62828f68b7d4482c24d6d0a3c8461ca8a27791cb7bd08dd2b228c4f26d1995716", 0x2b}, {&(0x7f0000000200)="c160fb543ec39c823cfe16474f4492a9a94140fefdb9d80ae695d68da21ffe83589f45153c7dcbf447d42950368336304f638335ae9f7f20ac89b928e60a35e63a405999d52412567b9bc9de0d5208d350a2d2ed43139596787fc099ea94812dc4869f94ff21b5d993814e26d7134353d9ede87047441f9f8d0c9363c8adaaaa32a24d014bb6084571fa73dea40ff87dbf62483a9520a262e5512d4b36cbc45b8b5b4c3af934a929dd4dc6475b584bf1bbb726d9873e2d31d045f082f06b9e3c440a", 0xc2}, {&(0x7f0000000300)="efed05e805b8cdf2ff68edd9bb9f3081b1e51c583b3d3aeb1917b9d1cbf7dd96d87fe59f67b6748c73502422d636301a2a577c3404bdfc1a2c7bd0c8eb2a3d5c1c881564f07c667c31000c2e63674259d7e4087393ea3093ddabe1ba2a1ac811", 0x60}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="6d4033c9e77348410000000001000000000000ba", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x50, 0x20000040}, 0x80) fallocate(r1, 0x44, 0x9, 0x10001) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c0045002, &(0x7f0000000180)=0x1f40) 00:01:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00, {0x500000000000000}}, 0xfffffefd) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='/dev/kvm\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in, 0x7c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000002c0)={@in6={0xa, 0x4e22, 0x6, @remote, 0x80}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000000280)}, 0xa0) 00:01:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x9e) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:01:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000140)={0xfff, 0x25, 0x622, @link_local, 'teql0\x00'}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x40000106]}) 00:01:41 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001a80)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000140)=""/101, 0x65}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x3, 0xd0651b1}) 00:01:41 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2042, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x3, 0x2, 0x0, 0x4, 0xc1]}, 0xe) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000280)=""/185) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000600)=r0) 00:01:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) recvmmsg(r1, &(0x7f0000003d00)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000100)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x4}, 0xfffffffffffffe00}, {{&(0x7f00000002c0)=@ax25, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/9, 0x9}], 0x3, &(0x7f0000000500)=""/5, 0x5, 0xffffffffffff0001}, 0xa931}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1, &(0x7f0000000700)=""/119, 0x77}, 0x9}, {{&(0x7f0000000780)=@ax25, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/27, 0x1b}], 0x2, &(0x7f0000000980)=""/119, 0x77, 0xfffffffffffffff7}, 0x724eac45}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000a80)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/53, 0x35}], 0x3, &(0x7f0000000b40)=""/235, 0xeb, 0x593e1771}, 0x9}, {{&(0x7f0000000c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/58, 0x3a}, {&(0x7f0000000d00)=""/47, 0x2f}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/12, 0xc}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/37, 0x25}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x8, &(0x7f0000000e80)=""/32, 0x20, 0x80000001}, 0xa6}, {{&(0x7f0000000fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001040)=""/43, 0x2b}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f00000033c0)=""/20, 0x14}], 0x3, &(0x7f0000003440)=""/250, 0xfa, 0x4}, 0x9}, {{&(0x7f0000003540)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003780)=[{&(0x7f00000035c0)=""/38, 0x26}, {&(0x7f0000003600)=""/206, 0xce}, {&(0x7f0000003700)=""/13, 0xd}, {&(0x7f0000003740)=""/56, 0x38}], 0x4, 0x0, 0x0, 0x8}, 0x5}, {{&(0x7f00000037c0), 0x80, &(0x7f0000003b80)=[{&(0x7f0000003840)=""/174, 0xae}, {&(0x7f0000003900)=""/253, 0xfd}, {&(0x7f0000003a00)=""/83, 0x53}, {&(0x7f0000003a80)=""/18, 0x12}, {&(0x7f0000003ac0)=""/40, 0x28}, {&(0x7f0000003b00)=""/64, 0x40}, {&(0x7f0000003b40)=""/12, 0xc}], 0x7, &(0x7f0000003c00)=""/198, 0xc6, 0x7}, 0x7}], 0x9, 0x2040, &(0x7f0000003f40)={0x77359400}) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x121, 0x0, &(0x7f0000001380)={0x77359400}) 00:01:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e") write$eventfd(r0, &(0x7f0000000040)=0x988c, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffeba) 00:01:42 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000140)={0x0, "605ae98aa62d441a712821d5d9879c72a15909f979aa9d17d5a5fef8a2c98df2", 0x1, 0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x40096100, &(0x7f00000000c0)={{0x2, 0x0, @broadcast, [0xfe, 0x60000000]}, {0x0, @random="c7b0678274ef"}, 0x0, {0x2, 0x0, @loopback}}) recvfrom$inet(r1, &(0x7f0000002180)=""/4096, 0x1000, 0x2000, 0x0, 0x343) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 00:01:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000140)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002f00290800000000000000000201002b81e50400000007000f000000000000000001"], 0x2c}}, 0x0) 00:01:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4188aea7, &(0x7f0000000140)={0x2, 0x0, [0x1000000]}) [ 315.292643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 315.385904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 315.772747] kvm: pic: non byte write [ 315.776735] kvm: pic: non byte write [ 315.780737] kvm: pic: non byte write [ 315.784985] kvm: pic: non byte write [ 315.788924] kvm: pic: non byte write [ 315.793143] kvm: pic: non byte write [ 315.797075] kvm: pic: non byte write [ 315.801039] kvm: pic: non byte write [ 315.805257] kvm: pic: non byte write [ 315.809186] kvm: pic: non byte write 00:01:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x200000000) bind$netlink(r0, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000002700)='/dev/usbmon#\x00', 0x6, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002740)={0x0, @in6={{0xa, 0x4e23, 0x80e7, @mcast1, 0x100}}, 0x8000, 0xffffffff}, &(0x7f0000002800)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002840)={r3, 0x6, 0xffffffff}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) 00:01:44 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7f, 0x200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) 00:01:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d02402b6285717070") bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) 00:01:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x6, {0x3a9b, 0x9, 0x100, 0x7}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) 00:01:44 executing program 1: prctl$seccomp(0x16, 0x0, &(0x7f0000000080)) r0 = socket(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) io_submit(r1, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) 00:01:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) [ 317.349275] sctp: [Deprecated]: syz-executor2 (pid 9139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.349275] Use struct sctp_sack_info instead 00:01:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x98) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xca9f, 0x40400) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) [ 317.393498] sctp: [Deprecated]: syz-executor2 (pid 9145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.393498] Use struct sctp_sack_info instead 00:01:44 executing program 3: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0xfffffffffffffedb) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000101d00226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="10075e7fff44df0afefa6835ca54b89adfbcf49f40e4a946314951eb1810dce91649ece51dadb0da318afa58d4fe940791fb219019c31c469dc080e56bc14ef79b5004cc0adb55d0a81748dbfad1d3560071e6fa47a9268465e54cdc6f84cb0a49346f017dd52250e3e1957a1a58735ad71b810673b2da9f85e38cdaef5afc301c657c7605ff06d200931afcd7c743d26394fdae4ca7f4733f184595ded09208adc27625078c74f8a4f2b24acff53ac08be6c2bf61a7d12b43d42529285aaa33ceff21a25a66df7632b6dbae8b628b3f01cec0ab14b9c64ab115600c5cf454eeed5aa955a626cd", 0xe7}, {&(0x7f00000001c0)="475aa3665f2bc2014930ea21ddbdcd52393f2564fcbebf781837fc1553cfa519d85d6bf9dafe84a179f4cc740e31c6458e7d48e9aa9b7c4ae589da6f3ca7fea1f17d3ea4a27a4d07152bfe7caa05f3a33da8943b9de8db1a95b12dcc94428966ed3eb8184e69824d209ddbc32ebbcdb87336247c14bd9e4f79ddba7f089a67e9ab3afd3424abcadcb5e35274ba5c8538155a3a59173a6792096ed5c0d72f44a616e0bad43a8050e4366c4df55797d64d22b759896eb765812a792064d02f01061e95bbc75749c897044e7ee8269fcc75dc3a2600eaa09225eca955cd", 0xdc}], 0x2, &(0x7f00006e9c68), 0x28}, 0x0) 00:01:44 executing program 5: r0 = socket(0x10, 0x3, 0x7) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_ivalue}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffff7}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) 00:01:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x64) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x5, 0xa5, 0x1, 0x459b, 0x1, 0x56}) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x1f, 0x8, '9P2000.L'}, 0x15) 00:01:44 executing program 2: prctl$setname(0xf, 0xfffffffffffffffe) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4000) 00:01:44 executing program 1: semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x0, 0x3, 0x108) semop(r0, &(0x7f0000000000)=[{0x3, 0x9, 0x10000001800}, {0xb, 0x7ff, 0x1800}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = semget(0x3, 0x3, 0xd4) semctl$IPC_RMID(r1, 0x0, 0x0) 00:01:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x28) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'teql0\x00', 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00006ed000), &(0x7f0000000100)=0x364) 00:01:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="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") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8000, &(0x7f0000000080), &(0x7f00000000c0)=0x100000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/115) uselib(&(0x7f0000000040)='./file0\x00') 00:01:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)) dup2(r1, r0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000780)=@setlink={0x40, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x1f) 00:01:45 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x8000000000103ff, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r5 = accept(0xffffffffffffffff, &(0x7f0000000280)=@generic, &(0x7f00000001c0)=0x80) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x1f, @local, 0xfff}}, 0x6a850990, 0x4000000000000000, 0x800, 0x3, 0x7}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000580)={r6, 0x4, 0x0, 0x9, 0xe25, 0x6, 0xb, 0x3, {r6, @in={{0x2, 0x4e20, @broadcast}}, 0xddf4, 0x9, 0x7f, 0x1ff, 0xff}}, &(0x7f0000000640)=0x453) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000800)="0f0159000f09c462fd31921b000000c4e2e59902421c9d66baf80cb8d817b684ef66bafc0cb000ee66baa00066ed0fc76889650fc7a907000000f0418072e6d7", 0x40}], 0x1, 0x0, &(0x7f0000000840), 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) modify_ldt$read(0x0, &(0x7f0000000200)=""/71, 0x47) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:01:45 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x28113e26) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x400000000002012, r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x80) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0x9, 0x332, 0x7, 0x9, 0x7}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000000c0)='\x00') 00:01:45 executing program 1: r0 = msgget(0x3, 0x200) msgctl$IPC_RMID(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = semget(0x2, 0x3, 0x0) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000080)=""/207) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x40}) 00:01:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={"6c6f00000000001400000900", 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', r3}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0x171, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000ae0200000505000000000000ffe702000000", @ANYRES32=r3, @ANYBLOB="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"], 0x20}}, 0x0) dup2(r2, r2) 00:01:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, &(0x7f0000000380), 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="66b8008000000f23d00f21f86635000000070f23f80f20e06635000004000f22e09a0090f1000f06660fede70fc719baf80c66b850d1618666efbafc0c66ed2e66dd4e4e3e0f09ea6f351401", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) 00:01:45 executing program 5: memfd_create(&(0x7f0000000180)='/dev/zero\x00', 0x3463c2b64f644b62) memfd_create(&(0x7f0000000000)="e5", 0x5) 00:01:45 executing program 2: mkdir(&(0x7f0000000dc0)='./file0\x00', 0x0) mount(&(0x7f0000000700)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) r0 = open(&(0x7f0000000980)='./file0/../file0/file0\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x2}}, 0x18) 00:01:45 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x80000) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000000c0)=""/37, &(0x7f0000000140)=0x25) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000029000100000000000000000001000000180000000841000000000018000000005b2bffffac1414bb"], 0x2c}}, 0x0) 00:01:46 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7fff}) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000140)='/dev/ptmx\x00', &(0x7f0000000240)='*\x00', &(0x7f0000000280)='/dev/qat_adf_ctl\x00', &(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)='dns_resolver\x00'], &(0x7f0000000580)=[&(0x7f00000003c0)='gid_map\x00', &(0x7f0000000400)='/dev/qat_adf_ctl\x00', &(0x7f0000000440)='wlan0\x00', &(0x7f0000000480)='vboxnet1bdev(self\x00', &(0x7f00000004c0)='gid_map\x00', &(0x7f0000000500)='dns_resolver\x00', &(0x7f0000000540)='keyring+^GPLmime_type&GPLuser\x00'], 0x100) r2 = syz_open_pts(r1, 0x2) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)='gid_map\x00', 0xffffffffffffffff) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000005c0)={0x1, 0x200, 0x2, 0x0, 0x0, [{r1}, {r3, 0x0, 0x1000}]}) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000380)="cc", 0x1}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffffffffffa}) [ 318.967376] ================================================================== [ 318.974806] BUG: KMSAN: uninit-value in strlen+0x3b/0xa0 [ 318.980277] CPU: 0 PID: 9207 Comm: syz-executor1 Not tainted 4.19.0+ #77 [ 318.987132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.996495] Call Trace: [ 318.999103] dump_stack+0x32d/0x480 [ 319.002750] ? _raw_spin_lock_irqsave+0x237/0x340 [ 319.007613] ? strlen+0x3b/0xa0 [ 319.010929] kmsan_report+0x1a2/0x2e0 [ 319.014773] __msan_warning+0x74/0xd0 [ 319.018599] strlen+0x3b/0xa0 [ 319.021738] tipc_nl_compat_link_set+0xa37/0x18b0 [ 319.026615] ? tipc_nl_compat_link_dump+0x5e0/0x5e0 [ 319.031653] tipc_nl_compat_doit+0x39f/0xae0 [ 319.036108] tipc_nl_compat_recv+0x148a/0x2770 [ 319.040729] ? __msan_get_context_state+0x9/0x30 [ 319.045515] ? tipc_nl_node_dump+0x1350/0x1350 [ 319.050126] ? tipc_nl_compat_link_dump+0x5e0/0x5e0 [ 319.055168] ? tipc_netlink_compat_stop+0x40/0x40 [ 319.060025] genl_rcv_msg+0x185c/0x1a20 [ 319.064042] ? kmsan_set_origin+0x83/0x130 [ 319.068305] netlink_rcv_skb+0x394/0x640 [ 319.072393] ? genl_unbind+0x390/0x390 [ 319.076396] genl_rcv+0x63/0x80 [ 319.079698] netlink_unicast+0x1699/0x1740 [ 319.083975] ? genl_pernet_exit+0x90/0x90 [ 319.088152] netlink_sendmsg+0x13c7/0x1440 [ 319.092421] ___sys_sendmsg+0xe68/0x1250 [ 319.096502] ? netlink_getsockopt+0x16b0/0x16b0 [ 319.101217] ? __fdget+0x329/0x440 [ 319.104780] __se_sys_sendmsg+0x305/0x460 [ 319.108969] __x64_sys_sendmsg+0x4a/0x70 [ 319.113046] do_syscall_64+0xcf/0x110 [ 319.116861] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.122060] RIP: 0033:0x457569 [ 319.125267] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.144185] RSP: 002b:00007f137b517c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.151916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 319.159206] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 319.166495] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 319.173783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f137b5186d4 [ 319.181064] R13: 00000000004c3aee R14: 00000000004d5bd8 R15: 00000000ffffffff [ 319.188355] [ 319.189988] Uninit was created at: [ 319.193554] kmsan_internal_poison_shadow+0xc8/0x1e0 [ 319.198677] kmsan_kmalloc+0x98/0x110 [ 319.202506] kmsan_slab_alloc+0xe/0x10 [ 319.206410] __kmalloc_node_track_caller+0xf62/0x14e0 [ 319.211617] __alloc_skb+0x42b/0xeb0 [ 319.215345] netlink_sendmsg+0xc9e/0x1440 [ 319.219509] ___sys_sendmsg+0xe68/0x1250 [ 319.223590] __se_sys_sendmsg+0x305/0x460 [ 319.227752] __x64_sys_sendmsg+0x4a/0x70 [ 319.231835] do_syscall_64+0xcf/0x110 [ 319.235656] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.240855] ================================================================== [ 319.248220] Disabling lock debugging due to kernel taint [ 319.253681] Kernel panic - not syncing: panic_on_warn set ... [ 319.253681] [ 319.261075] CPU: 0 PID: 9207 Comm: syz-executor1 Tainted: G B 4.19.0+ #77 [ 319.269316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.278678] Call Trace: [ 319.281292] dump_stack+0x32d/0x480 [ 319.284946] panic+0x57e/0xb28 [ 319.288233] kmsan_report+0x2d3/0x2e0 [ 319.292068] __msan_warning+0x74/0xd0 [ 319.295893] strlen+0x3b/0xa0 [ 319.299025] tipc_nl_compat_link_set+0xa37/0x18b0 [ 319.303900] ? tipc_nl_compat_link_dump+0x5e0/0x5e0 [ 319.308934] tipc_nl_compat_doit+0x39f/0xae0 [ 319.313387] tipc_nl_compat_recv+0x148a/0x2770 [ 319.318001] ? __msan_get_context_state+0x9/0x30 [ 319.322781] ? tipc_nl_node_dump+0x1350/0x1350 [ 319.327381] ? tipc_nl_compat_link_dump+0x5e0/0x5e0 [ 319.332419] ? tipc_netlink_compat_stop+0x40/0x40 [ 319.337276] genl_rcv_msg+0x185c/0x1a20 [ 319.341291] ? kmsan_set_origin+0x83/0x130 [ 319.345555] netlink_rcv_skb+0x394/0x640 [ 319.349631] ? genl_unbind+0x390/0x390 [ 319.353544] genl_rcv+0x63/0x80 [ 319.356838] netlink_unicast+0x1699/0x1740 [ 319.361102] ? genl_pernet_exit+0x90/0x90 [ 319.365275] netlink_sendmsg+0x13c7/0x1440 [ 319.369548] ___sys_sendmsg+0xe68/0x1250 [ 319.373629] ? netlink_getsockopt+0x16b0/0x16b0 [ 319.378346] ? __fdget+0x329/0x440 [ 319.381907] __se_sys_sendmsg+0x305/0x460 [ 319.386090] __x64_sys_sendmsg+0x4a/0x70 [ 319.390164] do_syscall_64+0xcf/0x110 [ 319.393986] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.399185] RIP: 0033:0x457569 [ 319.402391] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.421308] RSP: 002b:00007f137b517c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.429038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 319.436322] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 319.443603] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 319.450889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f137b5186d4 [ 319.458168] R13: 00000000004c3aee R14: 00000000004d5bd8 R15: 00000000ffffffff [ 319.466608] Kernel Offset: disabled [ 319.470249] Rebooting in 86400 seconds..