}]}, 0xffffffffffffff1b}}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 21:02:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x3f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:02:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 21:02:29 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0xffffffffffffff1b}}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 21:02:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x3f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:02:29 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0x4) 21:02:30 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0x4) 21:02:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 21:02:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x56, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:02:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:32 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1f00000019002551075c0165ff0ffc02802000030011000500e1000c040007", 0x1f) 21:02:32 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0x4) 21:02:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f0a", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 21:02:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9081a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 834.345586][T24083] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 834.364661][T24085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.373527][T24085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.439876][T24085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.477836][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:02:32 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0x4) [ 834.486668][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.495208][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.503935][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.512632][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.522099][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.530768][T24087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:02:32 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1f00000019002551075c0165ff0ffc02802000030011000500e1000c040007", 0x1f) [ 834.797049][T24093] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 21:02:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:33 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1f00000019002551075c0165ff0ffc02802000030011000500e1000c040007", 0x1f) 21:02:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9081a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 835.450525][T24102] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 21:02:34 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1f00000019002551075c0165ff0ffc02802000030011000500e1000c040007", 0x1f) 21:02:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9081a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 21:02:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1}, 0x10) r3 = dup(r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x200041c1) [ 836.727295][T24117] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 21:02:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f0a", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 21:02:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9081a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 21:02:35 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') unshare(0x2000400) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 21:02:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x6, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @private}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}]}, 0xff6c) 21:02:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x6, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @private}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}]}, 0xff6c) 21:02:35 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') unshare(0x2000400) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 21:02:36 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') unshare(0x2000400) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 21:02:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 21:02:36 executing program 5: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 21:02:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x6, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @private}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}]}, 0xff6c) [ 839.142527][ C0] not chained 70000 origins [ 839.147074][ C0] CPU: 0 PID: 333 Comm: kworker/u4:7 Not tainted 5.7.0-rc4-syzkaller #0 [ 839.155430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.165506][ C0] Workqueue: krdsd rds_connect_worker [ 839.170877][ C0] Call Trace: [ 839.174165][ C0] [ 839.177071][ C0] dump_stack+0x1c9/0x220 [ 839.181403][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 839.187118][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 839.192229][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 839.197604][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.202792][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.208217][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 839.214018][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 839.220176][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 839.226002][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.231218][ C0] __msan_chain_origin+0x50/0x90 [ 839.236168][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 839.241474][ C0] tcp_conn_request+0x33d7/0x4d10 [ 839.246531][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 839.252604][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 839.258679][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.263889][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.269101][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.274233][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.279269][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 839.284556][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.289930][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 839.295725][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.300908][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 839.306703][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 839.312760][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.317950][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.322544][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.327045][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 839.333242][ C0] ? tcp_filter+0xf0/0xf0 [ 839.337566][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.343015][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.347858][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 839.352864][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 839.358479][ C0] ip_rcv+0x6cf/0x750 [ 839.362451][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 839.367201][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 839.372825][ C0] process_backlog+0xf0b/0x1410 [ 839.377665][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 839.383289][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 839.388563][ C0] net_rx_action+0x786/0x1aa0 [ 839.393238][ C0] ? net_tx_action+0xc30/0xc30 [ 839.397989][ C0] __do_softirq+0x311/0x83d [ 839.402498][ C0] do_softirq_own_stack+0x49/0x80 [ 839.407499][ C0] [ 839.410427][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 839.415612][ C0] local_bh_enable+0x36/0x40 [ 839.420186][ C0] ip_finish_output2+0x2115/0x2610 [ 839.425285][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 839.431000][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 839.436986][ C0] __ip_finish_output+0xaa7/0xd80 [ 839.442005][ C0] ip_finish_output+0x166/0x410 [ 839.446843][ C0] ip_output+0x593/0x680 [ 839.451077][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 839.456345][ C0] ? ip_finish_output+0x410/0x410 [ 839.461362][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 839.466302][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 839.471844][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.477039][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.482224][ C0] ip_queue_xmit+0xcc/0xf0 [ 839.486631][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 839.491469][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 839.496661][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.501855][ C0] tcp_connect+0x420a/0x6830 [ 839.506434][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 839.511719][ C0] tcp_v4_connect+0x21fd/0x2370 [ 839.516572][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 839.521500][ C0] __inet_stream_connect+0x2fb/0x1340 [ 839.526864][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 839.532142][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.537350][ C0] inet_stream_connect+0x101/0x180 [ 839.542466][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 839.548088][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 839.553713][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 839.558900][ C0] ? rds_tcp_state_change+0x390/0x390 [ 839.564283][ C0] rds_connect_worker+0x2a6/0x470 [ 839.569296][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 839.575354][ C0] ? rds_addr_cmp+0x200/0x200 [ 839.580017][ C0] process_one_work+0x1555/0x1f40 [ 839.585043][ C0] worker_thread+0xef6/0x2450 [ 839.589723][ C0] kthread+0x4b5/0x4f0 [ 839.594302][ C0] ? process_one_work+0x1f40/0x1f40 [ 839.599491][ C0] ? kthread_blkcg+0xf0/0xf0 [ 839.604072][ C0] ret_from_fork+0x35/0x40 [ 839.608493][ C0] Uninit was stored to memory at: [ 839.613508][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 839.619230][ C0] __msan_chain_origin+0x50/0x90 [ 839.624155][ C0] tcp_conn_request+0x1781/0x4d10 [ 839.629165][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.634261][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.639281][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.644638][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.649221][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.653723][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.659183][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.664033][ C0] ip_rcv+0x6cf/0x750 [ 839.667999][ C0] process_backlog+0xf0b/0x1410 [ 839.672834][ C0] net_rx_action+0x786/0x1aa0 [ 839.677511][ C0] __do_softirq+0x311/0x83d [ 839.681996][ C0] [ 839.684306][ C0] Uninit was stored to memory at: [ 839.689322][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 839.695043][ C0] __msan_chain_origin+0x50/0x90 [ 839.699981][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 839.706056][ C0] tcp_conn_request+0x33d7/0x4d10 [ 839.711066][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.716163][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.721174][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.726531][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.731105][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.735589][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.741032][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.745860][ C0] ip_rcv+0x6cf/0x750 [ 839.749826][ C0] process_backlog+0xf0b/0x1410 [ 839.754659][ C0] net_rx_action+0x786/0x1aa0 [ 839.759331][ C0] __do_softirq+0x311/0x83d [ 839.763809][ C0] [ 839.766119][ C0] Uninit was stored to memory at: [ 839.771129][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 839.776833][ C0] __msan_chain_origin+0x50/0x90 [ 839.781771][ C0] tcp_conn_request+0x1781/0x4d10 [ 839.786796][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.791895][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.796907][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.802267][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.806842][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.811329][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.816771][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.821604][ C0] ip_rcv+0x6cf/0x750 [ 839.825569][ C0] process_backlog+0xf0b/0x1410 [ 839.830418][ C0] net_rx_action+0x786/0x1aa0 [ 839.835101][ C0] __do_softirq+0x311/0x83d [ 839.839582][ C0] [ 839.841891][ C0] Uninit was stored to memory at: [ 839.846920][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 839.852633][ C0] __msan_chain_origin+0x50/0x90 [ 839.857569][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 839.862840][ C0] tcp_conn_request+0x33d7/0x4d10 [ 839.867851][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.872949][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.877962][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.883315][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.887895][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.892383][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.897823][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.902741][ C0] ip_rcv+0x6cf/0x750 [ 839.906706][ C0] process_backlog+0xf0b/0x1410 [ 839.911539][ C0] net_rx_action+0x786/0x1aa0 [ 839.916216][ C0] __do_softirq+0x311/0x83d [ 839.920704][ C0] [ 839.923018][ C0] Uninit was stored to memory at: [ 839.928030][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 839.933735][ C0] __msan_chain_origin+0x50/0x90 [ 839.938661][ C0] tcp_conn_request+0x1781/0x4d10 [ 839.943693][ C0] tcp_v4_conn_request+0x19b/0x240 [ 839.948804][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 839.953817][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 839.959174][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 839.964446][ C0] tcp_v4_rcv+0x425c/0x5040 [ 839.968935][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 839.974394][ C0] ip_local_deliver+0x62a/0x7c0 [ 839.979225][ C0] ip_rcv+0x6cf/0x750 [ 839.983193][ C0] process_backlog+0xf0b/0x1410 [ 839.988374][ C0] net_rx_action+0x786/0x1aa0 [ 839.993129][ C0] __do_softirq+0x311/0x83d [ 839.997610][ C0] [ 839.999920][ C0] Uninit was stored to memory at: [ 840.004931][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 840.010635][ C0] __msan_chain_origin+0x50/0x90 [ 840.015566][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 840.021599][ C0] tcp_conn_request+0x33d7/0x4d10 [ 840.026610][ C0] tcp_v4_conn_request+0x19b/0x240 [ 840.031709][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 840.036725][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 840.042081][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 840.046654][ C0] tcp_v4_rcv+0x425c/0x5040 [ 840.051157][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 840.056598][ C0] ip_local_deliver+0x62a/0x7c0 [ 840.061429][ C0] ip_rcv+0x6cf/0x750 [ 840.065399][ C0] process_backlog+0xf0b/0x1410 [ 840.070233][ C0] net_rx_action+0x786/0x1aa0 [ 840.074909][ C0] __do_softirq+0x311/0x83d [ 840.079386][ C0] [ 840.081695][ C0] Uninit was stored to memory at: [ 840.086704][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 840.092407][ C0] __msan_chain_origin+0x50/0x90 [ 840.097331][ C0] tcp_conn_request+0x1781/0x4d10 [ 840.102352][ C0] tcp_v4_conn_request+0x19b/0x240 [ 840.107465][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 840.112502][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 840.117874][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 840.122539][ C0] tcp_v4_rcv+0x425c/0x5040 [ 840.127030][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 840.132470][ C0] ip_local_deliver+0x62a/0x7c0 [ 840.137302][ C0] ip_rcv+0x6cf/0x750 [ 840.141267][ C0] process_backlog+0xf0b/0x1410 [ 840.146101][ C0] net_rx_action+0x786/0x1aa0 [ 840.150761][ C0] __do_softirq+0x311/0x83d [ 840.155241][ C0] [ 840.157551][ C0] Uninit was created at: [ 840.161783][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 840.167399][ C0] kmsan_alloc_page+0xb9/0x180 [ 840.172147][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 840.177678][ C0] alloc_pages_current+0x67d/0x990 [ 840.182773][ C0] alloc_slab_page+0x122/0x1310 [ 840.187606][ C0] new_slab+0x2bc/0x1130 [ 840.191854][ C0] ___slab_alloc+0x14a3/0x2040 [ 840.196613][ C0] kmem_cache_alloc+0xb23/0xd70 [ 840.201447][ C0] inet_reqsk_alloc+0xac/0x830 [ 840.206194][ C0] tcp_conn_request+0x753/0x4d10 [ 840.211115][ C0] tcp_v4_conn_request+0x19b/0x240 [ 840.216211][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 840.221582][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 840.227298][ C0] tcp_v4_rcv+0x425c/0x5040 [ 840.231798][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 840.237239][ C0] ip_local_deliver+0x62a/0x7c0 [ 840.243037][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 840.247888][ C0] ip_list_rcv+0x8eb/0x950 [ 840.252288][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 840.258426][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 840.264650][ C0] napi_complete_done+0x2ef/0xb60 [ 840.269670][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 840.275026][ C0] virtnet_poll+0x1468/0x19f0 [ 840.279688][ C0] net_rx_action+0x786/0x1aa0 [ 840.284348][ C0] __do_softirq+0x311/0x83d 21:02:38 executing program 3: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:38 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') unshare(0x2000400) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 21:02:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 21:02:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 21:02:38 executing program 5: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:38 executing program 2: r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x6, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @private}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}]}, 0xff6c) 21:02:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x9c) 21:02:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 21:02:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0014f9f4070009040002020000000000000000000008001e0000000000", 0x24) 21:02:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 21:02:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x9c) 21:02:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 21:02:41 executing program 3: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0014f9f4070009040002020000000000000000000008001e0000000000", 0x24) 21:02:41 executing program 5: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 21:02:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x9c) 21:02:41 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000240)=0x24) 21:02:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) 21:02:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0014f9f4070009040002020000000000000000000008001e0000000000", 0x24) 21:02:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x9c) 21:02:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0014f9f4070009040002020000000000000000000008001e0000000000", 0x24) 21:02:42 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000240)=0x24) 21:02:42 executing program 5: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:43 executing program 3: unshare(0x8000400) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/hwrng\x00', 0x6ac800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 21:02:43 executing program 1: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}}}}, &(0x7f00000000c0)=0xb0) r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000100)={0x0, 0xd65, 0x5, 0x4}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/486], 0x1ba) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000080)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20002, 0x0) ioctl$KDADDIO(r3, 0x4004510d, 0x400000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000000)={0xcd, 0x8, 0x5, 0x1}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0\x00', 0x2}, 0x18) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000002c0)) getitimer(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 21:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 21:02:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001676c4c47000000000003"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1f0ffffff, 0x0) 21:02:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000240)=0x24) 21:02:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1", 0xa4}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 845.720448][ C0] sd 0:0:1:0: [sg0] tag#3242 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.732129][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB: Test Unit Ready [ 845.738908][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.748768][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.758632][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.769580][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.779448][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.789298][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.799163][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.809019][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.818893][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.828730][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.838601][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.848469][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.858321][ C0] sd 0:0:1:0: [sg0] tag#3242 CDB[c0]: 00 00 00 00 00 00 00 00 21:02:44 executing program 5: io_setup(0x6, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) [ 845.888455][T24287] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 21:02:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001676c4c47000000000003"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1f0ffffff, 0x0) 21:02:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:44 executing program 5: io_setup(0x6, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 21:02:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000240)=0x24) [ 846.534461][ C0] sd 0:0:1:0: [sg0] tag#3244 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 846.545565][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB: Test Unit Ready [ 846.552341][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.562193][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.572056][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.581922][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.591788][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.601645][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.611497][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.621329][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:02:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001676c4c47000000000003"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1f0ffffff, 0x0) [ 846.631241][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.641567][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.651440][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.664377][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 846.674289][ C0] sd 0:0:1:0: [sg0] tag#3244 CDB[c0]: 00 00 00 00 00 00 00 00 [ 846.757015][T24298] vivid-009: kernel_thread() failed 21:02:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:46 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 21:02:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:46 executing program 5: io_setup(0x6, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 21:02:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001676c4c47000000000003"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1f0ffffff, 0x0) 21:02:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="5a8000"}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a041d0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 21:02:46 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 21:02:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:46 executing program 5: io_setup(0x6, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='5', 0x1}]) 21:02:46 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0x3, 0x0, 0x0, @mcast1}}, 0x24) 21:02:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:47 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 21:02:47 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0x3, 0x0, 0x0, @mcast1}}, 0x24) 21:02:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400001c00600000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 21:02:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 21:02:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/222, 0xde}], 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) [ 849.271058][T24362] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.279425][T24362] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 849.287750][T24362] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:47 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0x3, 0x0, 0x0, @mcast1}}, 0x24) 21:02:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="5a8000"}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a041d0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 21:02:48 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 21:02:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x7}}) 21:02:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400001c00600000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 21:02:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0x3, 0x0, 0x0, @mcast1}}, 0x24) 21:02:48 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x4000000fff9) [ 850.810939][T24396] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 850.819678][T24396] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x7}}) 21:02:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e704b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) 21:02:49 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x2) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:02:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400001c00600000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 21:02:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x7}}) [ 851.196300][T24408] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 851.205084][T24408] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:49 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x2) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:02:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="5a8000"}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a041d0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 21:02:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e704b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) 21:02:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400001c00600000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 21:02:50 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x2) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:02:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x7}}) 21:02:50 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x4000000fff9) [ 852.504290][T24441] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 852.512715][T24441] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e704b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) 21:02:50 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x2) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:02:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000100)='nomand\x00', 0x0, 0x0) 21:02:51 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) 21:02:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "96a4cd", 0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@hopopts={0x0, 0x1, [], [@ra, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}, 0x0) 21:02:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e704b05f9f95274b0a0002840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) 21:02:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="5a8000"}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a041d0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 21:02:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:02:52 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x4000000fff9) 21:02:52 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) 21:02:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000001a, &(0x7f0000222000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000100)=0x90) 21:02:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "96a4cd", 0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@hopopts={0x0, 0x1, [], [@ra, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}, 0x0) [ 854.330035][T24477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:02:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000001a, &(0x7f0000222000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000100)=0x90) 21:02:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "96a4cd", 0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@hopopts={0x0, 0x1, [], [@ra, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}, 0x0) 21:02:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000001a, &(0x7f0000222000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000100)=0x90) 21:02:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "96a4cd", 0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@hopopts={0x0, 0x1, [], [@ra, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}, 0x0) 21:02:53 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) 21:02:53 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000001a, &(0x7f0000222000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000100)=0x90) [ 855.849547][ C1] not chained 80000 origins [ 855.854258][ C1] CPU: 1 PID: 1533 Comm: kworker/u4:27 Not tainted 5.7.0-rc4-syzkaller #0 [ 855.862893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.872982][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 855.878625][ C1] Call Trace: [ 855.881919][ C1] [ 855.884788][ C1] dump_stack+0x1c9/0x220 [ 855.889172][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 855.895006][ C1] ? inet_twsk_alloc+0xa8a/0xba0 [ 855.899961][ C1] ? tcp_time_wait+0xcd/0x10b0 [ 855.905004][ C1] ? tcp_fin+0x1f9/0x890 [ 855.909365][ C1] ? tcp_data_queue+0x24ce/0x9c40 [ 855.914408][ C1] ? tcp_rcv_state_process+0x5ba3/0x71c0 [ 855.920233][ C1] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 855.925246][ C1] ? tcp_v4_rcv+0x4c77/0x5040 [ 855.930150][ C1] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 855.936342][ C1] ? ip_local_deliver+0x62a/0x7c0 [ 855.941386][ C1] ? ip_rcv+0x6cf/0x750 [ 855.945553][ C1] ? process_backlog+0xf0b/0x1410 [ 855.950601][ C1] ? net_rx_action+0x786/0x1aa0 [ 855.955469][ C1] ? __do_softirq+0x311/0x83d [ 855.960274][ C1] ? do_softirq_own_stack+0x49/0x80 [ 855.965490][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 855.971504][ C1] ? ip_finish_output2+0x2115/0x2610 [ 855.977032][ C1] ? __ip_finish_output+0xaa7/0xd80 [ 855.982474][ C1] ? ip_finish_output+0x166/0x410 [ 855.987519][ C1] ? ip_output+0x593/0x680 [ 855.991953][ C1] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 855.997185][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 856.001790][ C1] ? __tcp_transmit_skb+0x4221/0x6090 [ 856.007172][ C1] ? tcp_write_xmit+0x30e1/0xb470 [ 856.012226][ C1] ? __tcp_push_pending_frames+0x124/0x4e0 [ 856.018052][ C1] ? tcp_send_fin+0x131e/0x1570 [ 856.023047][ C1] ? tcp_shutdown+0x188/0x200 [ 856.027750][ C1] ? inet_shutdown+0x342/0x5e0 [ 856.032536][ C1] ? kernel_sock_shutdown+0x9d/0xc0 [ 856.037976][ C1] ? rds_tcp_accept_one+0xe17/0x1060 [ 856.043280][ C1] ? rds_tcp_accept_worker+0x61/0x160 [ 856.048668][ C1] ? process_one_work+0x1555/0x1f40 [ 856.054056][ C1] ? worker_thread+0xef6/0x2450 [ 856.059098][ C1] ? kthread+0x4b5/0x4f0 [ 856.063354][ C1] ? ret_from_fork+0x35/0x40 [ 856.068134][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.073349][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 856.079292][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 856.085373][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.090770][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 856.096600][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 856.102879][ C1] ? __msan_get_context_state+0x9/0x20 [ 856.108352][ C1] ? __module_get+0x19/0x230 [ 856.112960][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.118691][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.124563][ C1] __msan_chain_origin+0x50/0x90 [ 856.129632][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 856.134862][ C1] tcp_time_wait+0xaca/0x10b0 [ 856.139580][ C1] tcp_fin+0x1f9/0x890 [ 856.143663][ C1] tcp_data_queue+0x24ce/0x9c40 [ 856.148574][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 856.154468][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 856.160911][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 856.166716][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 856.172525][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 856.178337][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.183537][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.188141][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.192645][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 856.198727][ C1] ? tcp_v4_rcv+0x1511/0x5040 [ 856.203409][ C1] ? tcp_filter+0xf0/0xf0 [ 856.207731][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.213196][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.218050][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 856.223215][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 856.228977][ C1] ip_rcv+0x6cf/0x750 [ 856.232982][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 856.237742][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 856.243369][ C1] process_backlog+0xf0b/0x1410 [ 856.248220][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 856.254115][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 856.259386][ C1] net_rx_action+0x786/0x1aa0 [ 856.264060][ C1] ? net_tx_action+0xc30/0xc30 [ 856.268811][ C1] __do_softirq+0x311/0x83d [ 856.273312][ C1] do_softirq_own_stack+0x49/0x80 [ 856.278317][ C1] [ 856.281246][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 856.286436][ C1] local_bh_enable+0x36/0x40 [ 856.291015][ C1] ip_finish_output2+0x2115/0x2610 [ 856.296116][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 856.301844][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 856.307826][ C1] __ip_finish_output+0xaa7/0xd80 [ 856.312847][ C1] ip_finish_output+0x166/0x410 [ 856.317688][ C1] ip_output+0x593/0x680 [ 856.321925][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 856.327196][ C1] ? ip_finish_output+0x410/0x410 [ 856.332204][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 856.337134][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 856.342663][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.347854][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.353046][ C1] ip_queue_xmit+0xcc/0xf0 [ 856.357454][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 856.362983][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 856.368187][ C1] tcp_write_xmit+0x30e1/0xb470 [ 856.373067][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 856.378692][ C1] tcp_send_fin+0x131e/0x1570 [ 856.383384][ C1] tcp_shutdown+0x188/0x200 [ 856.387877][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 856.392633][ C1] inet_shutdown+0x342/0x5e0 [ 856.397218][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 856.401886][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 856.406908][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 856.412007][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 856.417202][ C1] rds_tcp_accept_worker+0x61/0x160 [ 856.422421][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 856.427435][ C1] process_one_work+0x1555/0x1f40 [ 856.432460][ C1] worker_thread+0xef6/0x2450 [ 856.437143][ C1] kthread+0x4b5/0x4f0 [ 856.441215][ C1] ? process_one_work+0x1f40/0x1f40 [ 856.446406][ C1] ? kthread_blkcg+0xf0/0xf0 [ 856.450988][ C1] ret_from_fork+0x35/0x40 [ 856.455394][ C1] Uninit was stored to memory at: [ 856.460411][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.466115][ C1] __msan_chain_origin+0x50/0x90 [ 856.471037][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 856.476217][ C1] tcp_time_wait+0xaca/0x10b0 [ 856.480903][ C1] tcp_fin+0x1f9/0x890 [ 856.484959][ C1] tcp_data_queue+0x24ce/0x9c40 [ 856.489793][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 856.495233][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.499808][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.504360][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.509824][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.514664][ C1] ip_rcv+0x6cf/0x750 [ 856.518637][ C1] process_backlog+0xf0b/0x1410 [ 856.523469][ C1] net_rx_action+0x786/0x1aa0 [ 856.528128][ C1] __do_softirq+0x311/0x83d [ 856.532628][ C1] [ 856.534962][ C1] Uninit was stored to memory at: [ 856.539976][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.545680][ C1] __msan_chain_origin+0x50/0x90 [ 856.550775][ C1] tcp_time_wait+0xb7e/0x10b0 [ 856.555454][ C1] tcp_fin+0x1f9/0x890 [ 856.559519][ C1] tcp_data_queue+0x24ce/0x9c40 [ 856.564356][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 856.569813][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.574404][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.578894][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.584345][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.589196][ C1] ip_rcv+0x6cf/0x750 [ 856.593163][ C1] process_backlog+0xf0b/0x1410 [ 856.597995][ C1] net_rx_action+0x786/0x1aa0 [ 856.602655][ C1] __do_softirq+0x311/0x83d [ 856.607133][ C1] [ 856.609443][ C1] Uninit was stored to memory at: [ 856.614456][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.620161][ C1] __msan_chain_origin+0x50/0x90 [ 856.625081][ C1] inet_twsk_alloc+0xab6/0xba0 [ 856.629854][ C1] tcp_time_wait+0xcd/0x10b0 [ 856.634427][ C1] tcp_fin+0x1f9/0x890 [ 856.638483][ C1] tcp_data_queue+0x24ce/0x9c40 [ 856.643323][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 856.648767][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.653339][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.657831][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.663271][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.668124][ C1] ip_rcv+0x6cf/0x750 [ 856.672112][ C1] process_backlog+0xf0b/0x1410 [ 856.676946][ C1] net_rx_action+0x786/0x1aa0 [ 856.681608][ C1] __do_softirq+0x311/0x83d [ 856.686087][ C1] [ 856.688398][ C1] Uninit was stored to memory at: [ 856.693412][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.699135][ C1] __msan_chain_origin+0x50/0x90 [ 856.704079][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 856.709262][ C1] tcp_timewait_state_process+0x1628/0x1900 [ 856.715136][ C1] tcp_v4_rcv+0x1d51/0x5040 [ 856.719629][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.725089][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.729921][ C1] ip_rcv+0x6cf/0x750 [ 856.733907][ C1] process_backlog+0xf0b/0x1410 [ 856.738741][ C1] net_rx_action+0x786/0x1aa0 [ 856.743421][ C1] __do_softirq+0x311/0x83d [ 856.747899][ C1] [ 856.750232][ C1] Uninit was stored to memory at: [ 856.757172][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.762878][ C1] __msan_chain_origin+0x50/0x90 [ 856.767802][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 856.773006][ C1] tcp_time_wait+0xaca/0x10b0 [ 856.777671][ C1] tcp_rcv_state_process+0xc48/0x71c0 [ 856.783051][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.787646][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.792150][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.797599][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.802431][ C1] ip_rcv+0x6cf/0x750 [ 856.806405][ C1] process_backlog+0xf0b/0x1410 [ 856.811238][ C1] net_rx_action+0x786/0x1aa0 [ 856.815903][ C1] __do_softirq+0x311/0x83d [ 856.820475][ C1] [ 856.822784][ C1] Uninit was stored to memory at: [ 856.827810][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.833520][ C1] __msan_chain_origin+0x50/0x90 [ 856.838452][ C1] tcp_time_wait+0xb7e/0x10b0 [ 856.843117][ C1] tcp_rcv_state_process+0xc48/0x71c0 [ 856.848471][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.853050][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.857537][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.862975][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.867813][ C1] ip_rcv+0x6cf/0x750 [ 856.871777][ C1] process_backlog+0xf0b/0x1410 [ 856.876610][ C1] net_rx_action+0x786/0x1aa0 [ 856.881270][ C1] __do_softirq+0x311/0x83d [ 856.885747][ C1] [ 856.888056][ C1] Uninit was stored to memory at: [ 856.893088][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 856.898794][ C1] __msan_chain_origin+0x50/0x90 [ 856.903720][ C1] inet_twsk_alloc+0xab6/0xba0 [ 856.908491][ C1] tcp_time_wait+0xcd/0x10b0 [ 856.913068][ C1] tcp_rcv_state_process+0xc48/0x71c0 [ 856.918423][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 856.923000][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 856.927506][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 856.932967][ C1] ip_local_deliver+0x62a/0x7c0 [ 856.937842][ C1] ip_rcv+0x6cf/0x750 [ 856.941813][ C1] process_backlog+0xf0b/0x1410 [ 856.946654][ C1] net_rx_action+0x786/0x1aa0 [ 856.951316][ C1] __do_softirq+0x311/0x83d [ 856.955825][ C1] [ 856.958134][ C1] Uninit was created at: [ 856.962365][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 856.967981][ C1] kmsan_alloc_page+0xb9/0x180 [ 856.972734][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 856.978270][ C1] alloc_pages_current+0x67d/0x990 [ 856.983510][ C1] alloc_slab_page+0x122/0x1310 [ 856.988352][ C1] new_slab+0x2bc/0x1130 [ 856.992580][ C1] ___slab_alloc+0x14a3/0x2040 [ 856.997421][ C1] kmem_cache_alloc+0xb23/0xd70 [ 857.002277][ C1] inet_twsk_alloc+0x135/0xba0 [ 857.007287][ C1] tcp_time_wait+0xcd/0x10b0 [ 857.011863][ C1] tcp_fin+0x1f9/0x890 [ 857.015945][ C1] tcp_data_queue+0x24ce/0x9c40 [ 857.020781][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 857.026222][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 857.030796][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 857.035292][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 857.040735][ C1] ip_local_deliver+0x62a/0x7c0 [ 857.045567][ C1] ip_rcv+0x6cf/0x750 [ 857.049531][ C1] process_backlog+0xf0b/0x1410 [ 857.054365][ C1] net_rx_action+0x786/0x1aa0 [ 857.059032][ C1] __do_softirq+0x311/0x83d 21:02:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:02:56 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x4000000fff9) 21:02:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 21:02:56 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) 21:02:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 21:02:56 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b8050000280180001000000010000000000000000000000000000000000340002000000090000000000050004000a000000080001000000000000000500050003008c0000000b000200706f6c696379000008000100c0"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 21:02:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 858.556795][T24558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 858.615827][T24563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 858.762369][T24558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 858.774706][T24569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:02:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 21:02:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b8050000280180001000000010000000000000000000000000000000000340002000000090000000000050004000a000000080001000000000000000500050003008c0000000b000200706f6c696379000008000100c0"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 21:02:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 859.302645][T24573] net_ratelimit: 280 callbacks suppressed [ 859.302669][T24573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.317596][T24573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.433794][T24578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 859.479637][T24580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b8050000280180001000000010000000000000000000000000000000000340002000000090000000000050004000a000000080001000000000000000500050003008c0000000b000200706f6c696379000008000100c0"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 21:02:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 859.839972][T24596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 859.894132][T24602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:02:58 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b8050000280180001000000010000000000000000000000000000000000340002000000090000000000050004000a000000080001000000000000000500050003008c0000000b000200706f6c696379000008000100c0"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 21:02:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:02:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 860.432560][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 860.506065][T24618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:03:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 21:03:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:03:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:03:00 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xf0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f00000002c0)=0x4) 21:03:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0xb, @vbi}) 21:03:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:03:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0xb, @vbi}) 21:03:00 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xf0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f00000002c0)=0x4) 21:03:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0xb, @vbi}) 21:03:01 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xf0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f00000002c0)=0x4) 21:03:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0xb, @vbi}) 21:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:03:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 21:03:03 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xf0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f00000002c0)=0x4) 21:03:03 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 21:03:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6, {0xd8, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x478}}, 0x0) 21:03:03 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)=0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) 21:03:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 865.035617][T24683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:03 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)=0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) 21:03:03 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 21:03:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000000000005000300210000000c00048008000400000000000600024000"], 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:03:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6, {0xd8, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x478}}, 0x0) [ 865.472892][T24708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:03 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)=0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) 21:03:03 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 21:03:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 21:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6, {0xd8, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x478}}, 0x0) 21:03:05 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)=0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) 21:03:05 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 21:03:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 21:03:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000000000005000300210000000c00048008000400000000000600024000"], 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 866.991794][T24741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 21:03:05 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="4c00000052001f15b9d522849ac000000ae24ec88cbe55c5ac27a6c5b068afbf2cf223fcc4373a5ad94a461cdbfee9bdb9b64a74786e2a1358b9aa189dbb140a9b4a7d3569359b358451d1ec", 0x4c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99) 21:03:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 21:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6, {0xd8, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x478}}, 0x0) [ 867.359093][T24754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:03:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) [ 867.459576][T24763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 867.550270][T24762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:03:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 21:03:06 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 21:03:06 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="4c00000052001f15b9d522849ac000000ae24ec88cbe55c5ac27a6c5b068afbf2cf223fcc4373a5ad94a461cdbfee9bdb9b64a74786e2a1358b9aa189dbb140a9b4a7d3569359b358451d1ec", 0x4c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99) 21:03:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000fd0800010072737670000000000c00020000100000ac141400"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 21:03:06 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 21:03:06 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000000000005000300210000000c00048008000400000000000600024000"], 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:03:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000098}, {}]}) [ 868.500835][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 868.550065][T24796] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:06 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) [ 868.671302][T24804] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:06 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 21:03:07 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="4c00000052001f15b9d522849ac000000ae24ec88cbe55c5ac27a6c5b068afbf2cf223fcc4373a5ad94a461cdbfee9bdb9b64a74786e2a1358b9aa189dbb140a9b4a7d3569359b358451d1ec", 0x4c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99) 21:03:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000fd0800010072737670000000000c00020000100000ac141400"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 21:03:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) write(r1, &(0x7f0000000140)="240000001a005f0014f9f407000909000200800000000000000000000800020000000000", 0x24) [ 869.209603][T24820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:03:07 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000000000005000300210000000c00048008000400000000000600024000"], 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:03:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000fd0800010072737670000000000c00020000100000ac141400"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 21:03:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20008c61) accept$packet(r1, 0x0, 0x0) 21:03:07 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="4c00000052001f15b9d522849ac000000ae24ec88cbe55c5ac27a6c5b068afbf2cf223fcc4373a5ad94a461cdbfee9bdb9b64a74786e2a1358b9aa189dbb140a9b4a7d3569359b358451d1ec", 0x4c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99) 21:03:08 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 21:03:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000fd0800010072737670000000000c00020000100000ac141400"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 870.249449][T24863] __nla_validate_parse: 3 callbacks suppressed [ 870.249479][T24863] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000098}, {}]}) 21:03:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 21:03:09 executing program 2: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x8032, 0x23, 0x12}) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 21:03:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x200}}}, 0x88) add_key(0x0, 0x0, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3b) 21:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:03:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 21:03:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 21:03:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:03:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1, 0x400}, 0x1c) 21:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:03:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 21:03:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:03:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000098}, {}]}) 21:03:10 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 21:03:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 21:03:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1, 0x400}, 0x1c) 21:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:03:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:03:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1, 0x400}, 0x1c) 21:03:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:03:10 executing program 1: unshare(0x8000400) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40187542, 0x0) 21:03:10 executing program 0: personality(0xc1ce4431a8dde21e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 21:03:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:03:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000098}, {}]}) 21:03:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1, 0x400}, 0x1c) 21:03:12 executing program 0: personality(0xc1ce4431a8dde21e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 21:03:12 executing program 1: unshare(0x8000400) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40187542, 0x0) 21:03:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x0, 0x35, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 21:03:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:12 executing program 0: personality(0xc1ce4431a8dde21e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 21:03:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:12 executing program 1: unshare(0x8000400) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40187542, 0x0) 21:03:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000040)={{0x80}}) 21:03:12 executing program 0: personality(0xc1ce4431a8dde21e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 21:03:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:13 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000040)={{0x80}}) 21:03:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:03:13 executing program 1: unshare(0x8000400) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40187542, 0x0) 21:03:13 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 21:03:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0x94}) dup2(r5, r4) [ 875.255384][ T32] audit: type=1804 audit(1590526993.413:20): pid=25041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/727/file0/bus" dev="ramfs" ino=147430 res=1 [ 875.303133][ T32] audit: type=1804 audit(1590526993.453:21): pid=25041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/727/file0/bus" dev="ramfs" ino=147430 res=1 [ 875.361629][ C0] not chained 90000 origins [ 875.366168][ C0] CPU: 0 PID: 37 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 875.374396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.385939][ C0] Workqueue: krdsd rds_connect_worker [ 875.391313][ C0] Call Trace: [ 875.394594][ C0] [ 875.397451][ C0] dump_stack+0x1c9/0x220 [ 875.401789][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 875.407532][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 875.412654][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 875.420112][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.425312][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.430512][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 875.436330][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 875.442482][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 875.448339][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.453549][ C0] __msan_chain_origin+0x50/0x90 [ 875.458496][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 875.463804][ C0] tcp_conn_request+0x33d7/0x4d10 [ 875.468855][ C0] ? kmsan_task_context_state+0x47/0x90 [ 875.474412][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 875.480484][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.485694][ C0] tcp_v4_conn_request+0x19b/0x240 [ 875.490823][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 875.495857][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 875.501132][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 875.506489][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 875.512278][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.517461][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 875.523256][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 875.529315][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.534703][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 875.539298][ C0] tcp_v4_rcv+0x425c/0x5040 [ 875.543786][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 875.549860][ C0] ? tcp_filter+0xf0/0xf0 [ 875.554176][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 875.559624][ C0] ip_local_deliver+0x62a/0x7c0 [ 875.564466][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 875.569755][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 875.575382][ C0] ip_rcv+0x6cf/0x750 [ 875.579356][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 875.584110][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 875.589731][ C0] process_backlog+0xf0b/0x1410 [ 875.594573][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 875.600198][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 875.605467][ C0] net_rx_action+0x786/0x1aa0 [ 875.610140][ C0] ? net_tx_action+0xc30/0xc30 [ 875.614888][ C0] __do_softirq+0x311/0x83d [ 875.619392][ C0] do_softirq_own_stack+0x49/0x80 [ 875.624395][ C0] [ 875.627332][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 875.632520][ C0] local_bh_enable+0x36/0x40 [ 875.637097][ C0] ip_finish_output2+0x2115/0x2610 [ 875.642195][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 875.647899][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 875.653877][ C0] __ip_finish_output+0xaa7/0xd80 [ 875.658898][ C0] ip_finish_output+0x166/0x410 [ 875.663756][ C0] ip_output+0x593/0x680 [ 875.667991][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 875.673259][ C0] ? ip_finish_output+0x410/0x410 [ 875.678380][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 875.683310][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 875.688842][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.694033][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.699223][ C0] ip_queue_xmit+0xcc/0xf0 [ 875.703629][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 875.708491][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 875.713680][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.718876][ C0] tcp_connect+0x420a/0x6830 [ 875.723452][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 875.728738][ C0] tcp_v4_connect+0x21fd/0x2370 [ 875.733595][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 875.738521][ C0] __inet_stream_connect+0x2fb/0x1340 [ 875.743883][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 875.749160][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.754349][ C0] inet_stream_connect+0x101/0x180 [ 875.759468][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 875.765617][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 875.771249][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 875.776458][ C0] ? rds_tcp_state_change+0x390/0x390 [ 875.781818][ C0] rds_connect_worker+0x2a6/0x470 [ 875.786827][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 875.792880][ C0] ? rds_addr_cmp+0x200/0x200 [ 875.797547][ C0] process_one_work+0x1555/0x1f40 [ 875.802567][ C0] worker_thread+0xef6/0x2450 [ 875.807252][ C0] kthread+0x4b5/0x4f0 [ 875.811326][ C0] ? process_one_work+0x1f40/0x1f40 [ 875.816517][ C0] ? kthread_blkcg+0xf0/0xf0 [ 875.821097][ C0] ret_from_fork+0x35/0x40 [ 875.825528][ C0] Uninit was stored to memory at: [ 875.830540][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 875.836242][ C0] __msan_chain_origin+0x50/0x90 [ 875.841165][ C0] tcp_conn_request+0x1781/0x4d10 [ 875.846172][ C0] tcp_v4_conn_request+0x19b/0x240 [ 875.851275][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 875.856299][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 875.861655][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 875.866226][ C0] tcp_v4_rcv+0x425c/0x5040 [ 875.870712][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 875.876250][ C0] ip_local_deliver+0x62a/0x7c0 [ 875.881104][ C0] ip_rcv+0x6cf/0x750 [ 875.885234][ C0] process_backlog+0xf0b/0x1410 [ 875.890086][ C0] net_rx_action+0x786/0x1aa0 [ 875.894747][ C0] __do_softirq+0x311/0x83d [ 875.899228][ C0] [ 875.901536][ C0] Uninit was stored to memory at: [ 875.906548][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 875.912343][ C0] __msan_chain_origin+0x50/0x90 [ 875.917269][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 875.922544][ C0] tcp_conn_request+0x33d7/0x4d10 [ 875.927569][ C0] tcp_v4_conn_request+0x19b/0x240 [ 875.932666][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 875.937676][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 875.943032][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 875.947626][ C0] tcp_v4_rcv+0x425c/0x5040 [ 875.952112][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 875.957559][ C0] ip_local_deliver+0x62a/0x7c0 [ 875.962390][ C0] ip_rcv+0x6cf/0x750 [ 875.966358][ C0] process_backlog+0xf0b/0x1410 [ 875.971197][ C0] net_rx_action+0x786/0x1aa0 [ 875.975855][ C0] __do_softirq+0x311/0x83d [ 875.980349][ C0] [ 875.982662][ C0] Uninit was stored to memory at: [ 875.987674][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 875.993381][ C0] __msan_chain_origin+0x50/0x90 [ 875.998324][ C0] tcp_conn_request+0x1781/0x4d10 [ 876.003349][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.008472][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 876.013484][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.018930][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.023517][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.028004][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.033462][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.038314][ C0] ip_rcv+0x6cf/0x750 [ 876.042294][ C0] process_backlog+0xf0b/0x1410 [ 876.047565][ C0] net_rx_action+0x786/0x1aa0 [ 876.052225][ C0] __do_softirq+0x311/0x83d [ 876.056717][ C0] [ 876.059023][ C0] Uninit was stored to memory at: [ 876.064032][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 876.069738][ C0] __msan_chain_origin+0x50/0x90 [ 876.074661][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 876.079933][ C0] tcp_conn_request+0x33d7/0x4d10 [ 876.084959][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.090058][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 876.095068][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.100439][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.105011][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.109497][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.114938][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.119858][ C0] ip_rcv+0x6cf/0x750 [ 876.124084][ C0] process_backlog+0xf0b/0x1410 [ 876.128938][ C0] net_rx_action+0x786/0x1aa0 [ 876.133607][ C0] __do_softirq+0x311/0x83d [ 876.138085][ C0] [ 876.140397][ C0] Uninit was stored to memory at: [ 876.145408][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 876.151110][ C0] __msan_chain_origin+0x50/0x90 [ 876.156034][ C0] tcp_conn_request+0x1781/0x4d10 [ 876.161044][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.166140][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 876.171148][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.176502][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.181076][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.185562][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.191001][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.195832][ C0] ip_rcv+0x6cf/0x750 [ 876.199797][ C0] process_backlog+0xf0b/0x1410 [ 876.204630][ C0] net_rx_action+0x786/0x1aa0 [ 876.209305][ C0] __do_softirq+0x311/0x83d [ 876.213800][ C0] [ 876.216111][ C0] Uninit was stored to memory at: [ 876.221137][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 876.226842][ C0] __msan_chain_origin+0x50/0x90 [ 876.231780][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 876.237049][ C0] tcp_conn_request+0x33d7/0x4d10 [ 876.242060][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.247154][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 876.252170][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.257537][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.262111][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.266596][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.272037][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.276867][ C0] ip_rcv+0x6cf/0x750 [ 876.280832][ C0] process_backlog+0xf0b/0x1410 [ 876.285666][ C0] net_rx_action+0x786/0x1aa0 [ 876.290330][ C0] __do_softirq+0x311/0x83d [ 876.294811][ C0] [ 876.297118][ C0] Uninit was stored to memory at: [ 876.302130][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 876.307833][ C0] __msan_chain_origin+0x50/0x90 [ 876.312771][ C0] tcp_conn_request+0x1781/0x4d10 [ 876.317779][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.322875][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 876.327885][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.333252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.337824][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.342309][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.347749][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.352578][ C0] ip_rcv+0x6cf/0x750 [ 876.356543][ C0] process_backlog+0xf0b/0x1410 [ 876.361379][ C0] net_rx_action+0x786/0x1aa0 [ 876.366039][ C0] __do_softirq+0x311/0x83d [ 876.370520][ C0] [ 876.372830][ C0] Uninit was created at: [ 876.377078][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 876.382696][ C0] kmsan_alloc_page+0xb9/0x180 [ 876.387445][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 876.392977][ C0] alloc_pages_current+0x67d/0x990 [ 876.398072][ C0] alloc_slab_page+0x122/0x1310 [ 876.402920][ C0] new_slab+0x2bc/0x1130 [ 876.407145][ C0] ___slab_alloc+0x14a3/0x2040 [ 876.411912][ C0] kmem_cache_alloc+0xb23/0xd70 [ 876.416745][ C0] inet_reqsk_alloc+0xac/0x830 [ 876.421508][ C0] tcp_conn_request+0x753/0x4d10 [ 876.427391][ C0] tcp_v4_conn_request+0x19b/0x240 [ 876.432497][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 876.437854][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 876.442436][ C0] tcp_v4_rcv+0x425c/0x5040 [ 876.446923][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 876.452380][ C0] ip_local_deliver+0x62a/0x7c0 [ 876.457214][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 876.462050][ C0] ip_list_rcv+0x8eb/0x950 21:03:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x80}, 0x1c, 0x0}}], 0x2, 0x44810) 21:03:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 876.466449][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 876.472611][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 876.478835][ C0] napi_complete_done+0x2ef/0xb60 [ 876.483846][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 876.489207][ C0] virtnet_poll+0x1468/0x19f0 [ 876.493869][ C0] net_rx_action+0x786/0x1aa0 [ 876.498532][ C0] __do_softirq+0x311/0x83d 21:03:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 21:03:14 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, r1}}, 0x48) [ 876.633014][ T32] audit: type=1804 audit(1590526993.523:22): pid=25044 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/727/file0/file0/bus" dev="ramfs" ino=147436 res=1 [ 876.653933][ T32] audit: type=1804 audit(1590526993.523:23): pid=25041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/727/file0/file0/bus" dev="ramfs" ino=147436 res=1 21:03:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000040)={{0x80}}) [ 877.436612][ T32] audit: type=1804 audit(1590526995.593:24): pid=25059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/728/file0/bus" dev="ramfs" ino=149603 res=1 21:03:15 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, r1}}, 0x48) [ 877.636490][ T32] audit: type=1804 audit(1590526995.623:25): pid=25059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/728/file0/bus" dev="ramfs" ino=149603 res=1 21:03:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x80}, 0x1c, 0x0}}], 0x2, 0x44810) 21:03:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0160c200000086dd6026f52600081100fe8000000000000000000000000000bbff02000000000000000000000000000103000e22"], 0x0) 21:03:15 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000040)={{0x80}}) 21:03:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 21:03:16 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, r1}}, 0x48) [ 877.975305][ T32] audit: type=1804 audit(1590526996.133:26): pid=25076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/729/file0/bus" dev="ramfs" ino=149437 res=1 [ 878.203196][ T32] audit: type=1804 audit(1590526996.183:27): pid=25076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/729/file0/bus" dev="ramfs" ino=149437 res=1 21:03:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x14}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201}], {0x14}}, 0x50}}, 0x0) 21:03:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x80}, 0x1c, 0x0}}], 0x2, 0x44810) 21:03:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0160c200000086dd6026f52600081100fe8000000000000000000000000000bbff02000000000000000000000000000103000e22"], 0x0) 21:03:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0xc377c000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) sync() 21:03:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 21:03:18 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, r1}}, 0x48) [ 880.174588][T25099] input: syz0 as /devices/virtual/input/input17 [ 880.212548][ T32] audit: type=1804 audit(1590526998.373:28): pid=25105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/730/file0/bus" dev="ramfs" ino=151569 res=1 [ 880.236097][ T32] audit: type=1804 audit(1590526998.373:29): pid=25105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/730/file0/bus" dev="ramfs" ino=151569 res=1 21:03:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0160c200000086dd6026f52600081100fe8000000000000000000000000000bbff02000000000000000000000000000103000e22"], 0x0) 21:03:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x80}, 0x1c, 0x0}}], 0x2, 0x44810) [ 880.455366][T25106] input: syz0 as /devices/virtual/input/input18 21:03:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:18 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000007800)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 21:03:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="83", 0x1}], 0x1) 21:03:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000007800)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 21:03:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x14}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201}], {0x14}}, 0x50}}, 0x0) 21:03:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0160c200000086dd6026f52600081100fe8000000000000000000000000000bbff02000000000000000000000000000103000e22"], 0x0) 21:03:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="83", 0x1}], 0x1) 21:03:20 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 21:03:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="83", 0x1}], 0x1) 21:03:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000007800)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 21:03:20 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 21:03:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 21:03:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000007800)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 21:03:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="83", 0x1}], 0x1) 21:03:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 21:03:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x14}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201}], {0x14}}, 0x50}}, 0x0) 21:03:22 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 21:03:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "305c9d3e"}, 0x0, 0x0, @userptr}) 21:03:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 21:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) [ 884.854979][T25218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:03:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "305c9d3e"}, 0x0, 0x0, @userptr}) 21:03:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 21:03:23 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 884.992127][T25219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) [ 885.378120][T25229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:03:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 21:03:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "305c9d3e"}, 0x0, 0x0, @userptr}) 21:03:25 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x800) read$midi(r0, &(0x7f0000000040)=""/99, 0x63) 21:03:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:03:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x14}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201}], {0x14}}, 0x50}}, 0x0) [ 887.189646][T25249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:03:25 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x800) read$midi(r0, &(0x7f0000000040)=""/99, 0x63) 21:03:25 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:03:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "305c9d3e"}, 0x0, 0x0, @userptr}) 21:03:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:03:25 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:03:25 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x800) read$midi(r0, &(0x7f0000000040)=""/99, 0x63) [ 887.676006][T25261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.652079][ C0] not chained 100000 origins [ 889.656813][ C0] CPU: 0 PID: 1533 Comm: kworker/u4:27 Not tainted 5.7.0-rc4-syzkaller #0 [ 889.665398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.675521][ C0] Workqueue: krdsd rds_connect_worker [ 889.680971][ C0] Call Trace: [ 889.684236][ C0] [ 889.687090][ C0] dump_stack+0x1c9/0x220 [ 889.691409][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 889.697289][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 889.702387][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 889.707737][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.712924][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.718112][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 889.723920][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 889.730051][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 889.735852][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.741031][ C0] __msan_chain_origin+0x50/0x90 [ 889.745971][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 889.751245][ C0] tcp_conn_request+0x33d7/0x4d10 [ 889.756266][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 889.762312][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 889.768365][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.773556][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.778738][ C0] tcp_v4_conn_request+0x19b/0x240 [ 889.783870][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 889.788878][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 889.794160][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 889.799511][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 889.805295][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.810647][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 889.816538][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 889.822604][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.827785][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 889.832372][ C0] tcp_v4_rcv+0x425c/0x5040 [ 889.836855][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 889.842916][ C0] ? tcp_filter+0xf0/0xf0 [ 889.847338][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 889.852826][ C0] ip_local_deliver+0x62a/0x7c0 [ 889.857669][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 889.862687][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 889.868393][ C0] ip_rcv+0x6cf/0x750 [ 889.872356][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 889.877199][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 889.882816][ C0] process_backlog+0xf0b/0x1410 [ 889.887650][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 889.893281][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 889.898571][ C0] net_rx_action+0x786/0x1aa0 [ 889.903253][ C0] ? net_tx_action+0xc30/0xc30 [ 889.907995][ C0] __do_softirq+0x311/0x83d [ 889.912489][ C0] do_softirq_own_stack+0x49/0x80 [ 889.917496][ C0] [ 889.920428][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 889.925622][ C0] local_bh_enable+0x36/0x40 [ 889.930201][ C0] ip_finish_output2+0x2115/0x2610 [ 889.935301][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 889.941022][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 889.946992][ C0] __ip_finish_output+0xaa7/0xd80 [ 889.952020][ C0] ip_finish_output+0x166/0x410 [ 889.956948][ C0] ip_output+0x593/0x680 [ 889.961178][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 889.966442][ C0] ? ip_finish_output+0x410/0x410 [ 889.971444][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 889.976381][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 889.981907][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.987091][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 889.992300][ C0] ip_queue_xmit+0xcc/0xf0 [ 889.996700][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 890.001529][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 890.006711][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 890.012441][ C0] tcp_connect+0x420a/0x6830 [ 890.017026][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 890.022330][ C0] tcp_v4_connect+0x21fd/0x2370 [ 890.027259][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 890.032179][ C0] __inet_stream_connect+0x2fb/0x1340 [ 890.037530][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 890.042801][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 890.047982][ C0] inet_stream_connect+0x101/0x180 [ 890.053074][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 890.058703][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 890.064431][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 890.069624][ C0] ? rds_tcp_state_change+0x390/0x390 [ 890.075003][ C0] rds_connect_worker+0x2a6/0x470 [ 890.080015][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 890.086067][ C0] ? rds_addr_cmp+0x200/0x200 [ 890.090745][ C0] process_one_work+0x1555/0x1f40 [ 890.095774][ C0] worker_thread+0xef6/0x2450 [ 890.100477][ C0] kthread+0x4b5/0x4f0 [ 890.104657][ C0] ? process_one_work+0x1f40/0x1f40 [ 890.110212][ C0] ? kthread_blkcg+0xf0/0xf0 [ 890.114788][ C0] ret_from_fork+0x35/0x40 [ 890.119206][ C0] Uninit was stored to memory at: [ 890.124241][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.129967][ C0] __msan_chain_origin+0x50/0x90 [ 890.134905][ C0] tcp_conn_request+0x1781/0x4d10 [ 890.139929][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.145042][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.150070][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.155445][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.160550][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.165047][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.170521][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.175361][ C0] ip_rcv+0x6cf/0x750 [ 890.179846][ C0] process_backlog+0xf0b/0x1410 [ 890.184681][ C0] net_rx_action+0x786/0x1aa0 [ 890.189366][ C0] __do_softirq+0x311/0x83d [ 890.193846][ C0] [ 890.196156][ C0] Uninit was stored to memory at: [ 890.201168][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.206870][ C0] __msan_chain_origin+0x50/0x90 [ 890.211790][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 890.218207][ C0] tcp_conn_request+0x33d7/0x4d10 [ 890.223477][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.228575][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.233593][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.239486][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.244069][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.248571][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.254014][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.258915][ C0] ip_rcv+0x6cf/0x750 [ 890.262886][ C0] process_backlog+0xf0b/0x1410 [ 890.267720][ C0] net_rx_action+0x786/0x1aa0 [ 890.272378][ C0] __do_softirq+0x311/0x83d [ 890.276857][ C0] [ 890.279166][ C0] Uninit was stored to memory at: [ 890.284177][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.289879][ C0] __msan_chain_origin+0x50/0x90 [ 890.294905][ C0] tcp_conn_request+0x1781/0x4d10 [ 890.299915][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.305534][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.310547][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.315918][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.320490][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.324978][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.330438][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.335267][ C0] ip_rcv+0x6cf/0x750 [ 890.339233][ C0] process_backlog+0xf0b/0x1410 [ 890.344152][ C0] net_rx_action+0x786/0x1aa0 [ 890.348810][ C0] __do_softirq+0x311/0x83d [ 890.353289][ C0] [ 890.355600][ C0] Uninit was stored to memory at: [ 890.360628][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.366349][ C0] __msan_chain_origin+0x50/0x90 [ 890.371274][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 890.376553][ C0] tcp_conn_request+0x33d7/0x4d10 [ 890.381581][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.386696][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.391718][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.397070][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.401652][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.406145][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.411582][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.416416][ C0] ip_rcv+0x6cf/0x750 [ 890.420380][ C0] process_backlog+0xf0b/0x1410 [ 890.425213][ C0] net_rx_action+0x786/0x1aa0 [ 890.429872][ C0] __do_softirq+0x311/0x83d [ 890.434349][ C0] [ 890.436659][ C0] Uninit was stored to memory at: [ 890.441672][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.447376][ C0] __msan_chain_origin+0x50/0x90 [ 890.452295][ C0] tcp_conn_request+0x1781/0x4d10 [ 890.457302][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.462414][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.467427][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.472808][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.479379][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.483882][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.489338][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.494169][ C0] ip_rcv+0x6cf/0x750 [ 890.498138][ C0] process_backlog+0xf0b/0x1410 [ 890.502969][ C0] net_rx_action+0x786/0x1aa0 [ 890.508159][ C0] __do_softirq+0x311/0x83d [ 890.512640][ C0] [ 890.514951][ C0] Uninit was stored to memory at: [ 890.519963][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.525665][ C0] __msan_chain_origin+0x50/0x90 [ 890.530585][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 890.535862][ C0] tcp_conn_request+0x33d7/0x4d10 [ 890.540876][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.545973][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.551004][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.556375][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.560953][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.565441][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.570890][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.575852][ C0] ip_rcv+0x6cf/0x750 [ 890.579828][ C0] process_backlog+0xf0b/0x1410 [ 890.584665][ C0] net_rx_action+0x786/0x1aa0 [ 890.589420][ C0] __do_softirq+0x311/0x83d [ 890.593917][ C0] [ 890.596228][ C0] Uninit was stored to memory at: [ 890.601257][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 890.606960][ C0] __msan_chain_origin+0x50/0x90 [ 890.611884][ C0] tcp_conn_request+0x1781/0x4d10 [ 890.616890][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.621989][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 890.627000][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.632361][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.636932][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.644285][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 890.649744][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.654578][ C0] ip_rcv+0x6cf/0x750 [ 890.658556][ C0] process_backlog+0xf0b/0x1410 [ 890.663390][ C0] net_rx_action+0x786/0x1aa0 [ 890.668049][ C0] __do_softirq+0x311/0x83d [ 890.672531][ C0] [ 890.674847][ C0] Uninit was created at: [ 890.679075][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 890.684704][ C0] kmsan_alloc_page+0xb9/0x180 [ 890.689458][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 890.695003][ C0] alloc_pages_current+0x67d/0x990 [ 890.700111][ C0] alloc_slab_page+0x122/0x1310 [ 890.704943][ C0] new_slab+0x2bc/0x1130 [ 890.709184][ C0] ___slab_alloc+0x14a3/0x2040 [ 890.713931][ C0] kmem_cache_alloc+0xb23/0xd70 [ 890.718770][ C0] inet_reqsk_alloc+0xac/0x830 [ 890.723535][ C0] tcp_conn_request+0x753/0x4d10 [ 890.728476][ C0] tcp_v4_conn_request+0x19b/0x240 [ 890.733589][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 890.738952][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 890.743890][ C0] tcp_v4_rcv+0x425c/0x5040 [ 890.748378][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 21:03:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) [ 890.753833][ C0] ip_local_deliver+0x62a/0x7c0 [ 890.758668][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 890.763515][ C0] ip_list_rcv+0x8eb/0x950 [ 890.768089][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 890.774229][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 890.780457][ C0] napi_complete_done+0x2ef/0xb60 [ 890.785484][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 890.790857][ C0] virtnet_poll+0x1468/0x19f0 [ 890.795518][ C0] net_rx_action+0x786/0x1aa0 [ 890.800190][ C0] __do_softirq+0x311/0x83d 21:03:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 21:03:29 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x800) read$midi(r0, &(0x7f0000000040)=""/99, 0x63) 21:03:29 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:03:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 21:03:29 executing program 0: set_mempolicy(0x8003, &(0x7f0000000080)=0x1, 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 21:03:29 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x144, &(0x7f0000019500)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 21:03:29 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:03:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 21:03:29 executing program 0: set_mempolicy(0x8003, &(0x7f0000000080)=0x1, 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 21:03:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 21:03:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000680)="ea", 0x0}, 0x20) 21:03:32 executing program 0: set_mempolicy(0x8003, &(0x7f0000000080)=0x1, 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 21:03:32 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000680)="ea", 0x0}, 0x20) 21:03:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x144, &(0x7f0000019500)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:32 executing program 0: set_mempolicy(0x8003, &(0x7f0000000080)=0x1, 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 21:03:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000680)="ea", 0x0}, 0x20) 21:03:33 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000680)="ea", 0x0}, 0x20) 21:03:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:34 executing program 0: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:34 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000780), 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, 0x0) 21:03:34 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:34 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000780), 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, 0x0) 21:03:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x144, &(0x7f0000019500)="f7f249b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d9246a8f6542614f2f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791484f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d899f1c95252cf9032624d3901edefc7c2c507cd03e263fc024ae73f61cc464d3c2ddbf4990f7f423c4b2a463364d85a1c9cfafc570b652187c50b4ec964741d3ad636e9180a0230c51f74bc1acd6cd3ea35868cf0d67f96e5f3cf8678390625d08894fbfc9fb6169a54145e001f43fa28913b37fe7a2f7b9e909c79a0752f41dbe8867ead703552a6366ac5f7d3761e8"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x3f1}], 0x1) 21:03:35 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000780), 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, 0x0) 21:03:35 executing program 0: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:03:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0xffffffff, 0x0, 0x0, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) 21:03:36 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000780), 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180)='fuse\x00', 0x0, 0x0) 21:03:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:03:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getdents64(r1, &(0x7f0000000140)=""/125, 0xe5) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:03:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:03:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x3f1}], 0x1) 21:03:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x144, &(0x7f0000019500)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:03:39 executing program 0: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:03:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x100000001, 0x0, r0}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 21:03:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x3f1}], 0x1) 21:03:39 executing program 3: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb", 0x33}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa78411998b3c147dec313d6fa5e7c02b0d26935386694fa555bbf933034c694a2ab9dc6f26753866738d3ebefa33599b6f1dcf5fc77d37282a802d4f56eb1", 0x4e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) listen(r0, 0x800000007ff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000080)=0xb0) 21:03:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x3f1}], 0x1) 21:03:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:40 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) [ 903.513069][ C1] not chained 110000 origins [ 903.517815][ C1] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.7.0-rc4-syzkaller #0 [ 903.526180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.536242][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 903.541859][ C1] Call Trace: [ 903.545140][ C1] [ 903.547997][ C1] dump_stack+0x1c9/0x220 [ 903.552319][ C1] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 903.557089][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 903.562808][ C1] ? ip_finish_output2+0x2115/0x2610 [ 903.568076][ C1] ? __ip_finish_output+0xaa7/0xd80 [ 903.573353][ C1] ? ip_finish_output+0x166/0x410 [ 903.578369][ C1] ? ip_output+0x593/0x680 [ 903.582764][ C1] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 903.587857][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 903.592436][ C1] ? __tcp_transmit_skb+0x4221/0x6090 [ 903.597800][ C1] ? tcp_write_xmit+0x30e1/0xb470 [ 903.602814][ C1] ? __tcp_push_pending_frames+0x124/0x4e0 [ 903.608650][ C1] ? tcp_send_fin+0x131e/0x1570 [ 903.613492][ C1] ? tcp_shutdown+0x188/0x200 [ 903.618173][ C1] ? inet_shutdown+0x342/0x5e0 [ 903.622937][ C1] ? kernel_sock_shutdown+0x9d/0xc0 [ 903.628127][ C1] ? rds_tcp_accept_one+0xe17/0x1060 [ 903.633404][ C1] ? rds_tcp_accept_worker+0x61/0x160 [ 903.638760][ C1] ? process_one_work+0x1555/0x1f40 [ 903.643954][ C1] ? worker_thread+0xef6/0x2450 [ 903.648803][ C1] ? kthread+0x4b5/0x4f0 [ 903.653060][ C1] ? ret_from_fork+0x35/0x40 [ 903.657722][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.662911][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 903.668716][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 903.674772][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.679963][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 903.685760][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 903.691903][ C1] ? __msan_get_context_state+0x9/0x20 [ 903.697357][ C1] ? __module_get+0x19/0x230 [ 903.701953][ C1] ? inet_twsk_alloc+0x7bb/0xba0 [ 903.707032][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.712233][ C1] __msan_chain_origin+0x50/0x90 [ 903.717207][ C1] tcp_time_wait+0xb7e/0x10b0 [ 903.721940][ C1] tcp_fin+0x1f9/0x890 [ 903.726046][ C1] tcp_data_queue+0x24ce/0x9c40 [ 903.730899][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 903.736724][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 903.742817][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 903.748371][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 903.754179][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 903.759978][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.765163][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 903.769756][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 903.774258][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 903.780328][ C1] ? tcp_v4_rcv+0x1511/0x5040 [ 903.784991][ C1] ? tcp_filter+0xf0/0xf0 [ 903.789316][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 903.794773][ C1] ip_local_deliver+0x62a/0x7c0 [ 903.799611][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 903.804888][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 903.810522][ C1] ip_rcv+0x6cf/0x750 [ 903.814497][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 903.819246][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 903.824893][ C1] process_backlog+0xf0b/0x1410 [ 903.829746][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 903.835382][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 903.840661][ C1] net_rx_action+0x786/0x1aa0 [ 903.845327][ C1] ? net_tx_action+0xc30/0xc30 [ 903.850082][ C1] __do_softirq+0x311/0x83d [ 903.854586][ C1] do_softirq_own_stack+0x49/0x80 [ 903.859586][ C1] [ 903.862512][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 903.867691][ C1] local_bh_enable+0x36/0x40 [ 903.872274][ C1] ip_finish_output2+0x2115/0x2610 [ 903.877375][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 903.883073][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 903.889057][ C1] __ip_finish_output+0xaa7/0xd80 [ 903.894080][ C1] ip_finish_output+0x166/0x410 [ 903.898936][ C1] ip_output+0x593/0x680 [ 903.903184][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 903.908473][ C1] ? ip_finish_output+0x410/0x410 [ 903.913495][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 903.918424][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 903.923961][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.929170][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.934435][ C1] ip_queue_xmit+0xcc/0xf0 [ 903.938843][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 903.944380][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 903.949608][ C1] tcp_write_xmit+0x30e1/0xb470 [ 903.954480][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 903.960156][ C1] tcp_send_fin+0x131e/0x1570 [ 903.964830][ C1] tcp_shutdown+0x188/0x200 [ 903.969337][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 903.974138][ C1] inet_shutdown+0x342/0x5e0 [ 903.978734][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 903.983422][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 903.988461][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 903.993579][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 903.999676][ C1] rds_tcp_accept_worker+0x61/0x160 [ 904.004882][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 904.009910][ C1] process_one_work+0x1555/0x1f40 [ 904.014955][ C1] worker_thread+0xef6/0x2450 [ 904.019820][ C1] kthread+0x4b5/0x4f0 [ 904.023905][ C1] ? process_one_work+0x1f40/0x1f40 [ 904.029114][ C1] ? kthread_blkcg+0xf0/0xf0 [ 904.034003][ C1] ret_from_fork+0x35/0x40 [ 904.038426][ C1] Uninit was stored to memory at: [ 904.043443][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.049149][ C1] __msan_chain_origin+0x50/0x90 [ 904.054075][ C1] inet_twsk_alloc+0xab6/0xba0 [ 904.058826][ C1] tcp_time_wait+0xcd/0x10b0 [ 904.063428][ C1] tcp_fin+0x1f9/0x890 [ 904.067497][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.072352][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.077851][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.082442][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.086941][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.092398][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.097246][ C1] ip_rcv+0x6cf/0x750 [ 904.101255][ C1] process_backlog+0xf0b/0x1410 [ 904.106108][ C1] net_rx_action+0x786/0x1aa0 [ 904.110794][ C1] __do_softirq+0x311/0x83d [ 904.115285][ C1] [ 904.117609][ C1] Uninit was stored to memory at: [ 904.122643][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.128364][ C1] __msan_chain_origin+0x50/0x90 [ 904.133287][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 904.138497][ C1] tcp_time_wait+0xaca/0x10b0 [ 904.143173][ C1] tcp_fin+0x1f9/0x890 [ 904.147235][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.152103][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.157557][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.162134][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.166624][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.172065][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.176898][ C1] ip_rcv+0x6cf/0x750 [ 904.180887][ C1] process_backlog+0xf0b/0x1410 [ 904.185719][ C1] net_rx_action+0x786/0x1aa0 [ 904.190378][ C1] __do_softirq+0x311/0x83d [ 904.194856][ C1] [ 904.197182][ C1] Uninit was stored to memory at: [ 904.202196][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.207914][ C1] __msan_chain_origin+0x50/0x90 [ 904.212836][ C1] tcp_time_wait+0xb7e/0x10b0 [ 904.217512][ C1] tcp_fin+0x1f9/0x890 [ 904.221565][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.226403][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.232104][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.236766][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.241252][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.246701][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.251532][ C1] ip_rcv+0x6cf/0x750 [ 904.255497][ C1] process_backlog+0xf0b/0x1410 [ 904.260339][ C1] net_rx_action+0x786/0x1aa0 [ 904.265003][ C1] __do_softirq+0x311/0x83d [ 904.269483][ C1] [ 904.271792][ C1] Uninit was stored to memory at: [ 904.276806][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.282532][ C1] __msan_chain_origin+0x50/0x90 [ 904.287454][ C1] inet_twsk_alloc+0xab6/0xba0 [ 904.292200][ C1] tcp_time_wait+0xcd/0x10b0 [ 904.296772][ C1] tcp_fin+0x1f9/0x890 [ 904.300827][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.305661][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.311104][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.315682][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.320168][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.325719][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.330572][ C1] ip_rcv+0x6cf/0x750 [ 904.334540][ C1] process_backlog+0xf0b/0x1410 [ 904.339376][ C1] net_rx_action+0x786/0x1aa0 [ 904.344037][ C1] __do_softirq+0x311/0x83d [ 904.348531][ C1] [ 904.350840][ C1] Uninit was stored to memory at: [ 904.355851][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.361557][ C1] __msan_chain_origin+0x50/0x90 [ 904.366505][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 904.371686][ C1] tcp_time_wait+0xaca/0x10b0 [ 904.376434][ C1] tcp_fin+0x1f9/0x890 [ 904.380489][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.385325][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.390770][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.395381][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.399869][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.405312][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.410145][ C1] ip_rcv+0x6cf/0x750 [ 904.414110][ C1] process_backlog+0xf0b/0x1410 [ 904.418959][ C1] net_rx_action+0x786/0x1aa0 [ 904.423625][ C1] __do_softirq+0x311/0x83d [ 904.428102][ C1] [ 904.430410][ C1] Uninit was stored to memory at: [ 904.435420][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.441129][ C1] __msan_chain_origin+0x50/0x90 [ 904.446069][ C1] tcp_time_wait+0xb7e/0x10b0 [ 904.450732][ C1] tcp_fin+0x1f9/0x890 [ 904.454786][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.459623][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.465066][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.469654][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.474142][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.479582][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.484430][ C1] ip_rcv+0x6cf/0x750 [ 904.488399][ C1] process_backlog+0xf0b/0x1410 [ 904.493240][ C1] net_rx_action+0x786/0x1aa0 [ 904.497916][ C1] __do_softirq+0x311/0x83d [ 904.502411][ C1] [ 904.504720][ C1] Uninit was stored to memory at: [ 904.509731][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 904.515433][ C1] __msan_chain_origin+0x50/0x90 [ 904.520370][ C1] inet_twsk_alloc+0xab6/0xba0 [ 904.525118][ C1] tcp_time_wait+0xcd/0x10b0 [ 904.529694][ C1] tcp_fin+0x1f9/0x890 [ 904.533749][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.538588][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.544030][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.548603][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.553105][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 904.558545][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.563377][ C1] ip_rcv+0x6cf/0x750 [ 904.567359][ C1] process_backlog+0xf0b/0x1410 [ 904.572296][ C1] net_rx_action+0x786/0x1aa0 [ 904.576955][ C1] __do_softirq+0x311/0x83d [ 904.581434][ C1] [ 904.583759][ C1] Uninit was created at: [ 904.587990][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 904.593605][ C1] kmsan_alloc_page+0xb9/0x180 [ 904.598358][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 904.603898][ C1] alloc_pages_current+0x67d/0x990 [ 904.608992][ C1] alloc_slab_page+0x122/0x1310 [ 904.613833][ C1] new_slab+0x2bc/0x1130 [ 904.618061][ C1] ___slab_alloc+0x14a3/0x2040 [ 904.622832][ C1] kmem_cache_alloc+0xb23/0xd70 [ 904.627679][ C1] inet_twsk_alloc+0x135/0xba0 [ 904.632437][ C1] tcp_time_wait+0xcd/0x10b0 [ 904.637012][ C1] tcp_fin+0x1f9/0x890 [ 904.641080][ C1] tcp_data_queue+0x24ce/0x9c40 [ 904.645915][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 904.651376][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 904.655965][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 904.660468][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 21:03:42 executing program 3: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb", 0x33}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa78411998b3c147dec313d6fa5e7c02b0d26935386694fa555bbf933034c694a2ab9dc6f26753866738d3ebefa33599b6f1dcf5fc77d37282a802d4f56eb1", 0x4e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) listen(r0, 0x800000007ff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000080)=0xb0) 21:03:42 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400300000000006504000001ed00007b130800000000006c44000000000000620a00fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61622cfd9aa58f2477584b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f56e243bfa9930c63e9545e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d0d0000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a13596c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7f29e4a883a50c4786566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7d437548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde03728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000024d64d9affdd4bb275ef5dc369d08c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e078b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1bd7afe3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 21:03:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1, 0x10}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) dup2(r1, r2) 21:03:42 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) [ 904.665914][ C1] ip_local_deliver+0x62a/0x7c0 [ 904.670748][ C1] ip_rcv+0x6cf/0x750 [ 904.674731][ C1] process_backlog+0xf0b/0x1410 [ 904.679570][ C1] net_rx_action+0x786/0x1aa0 [ 904.684255][ C1] __do_softirq+0x311/0x83d 21:03:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:03:43 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) 21:03:43 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) 21:03:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 21:03:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:45 executing program 3: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb", 0x33}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa78411998b3c147dec313d6fa5e7c02b0d26935386694fa555bbf933034c694a2ab9dc6f26753866738d3ebefa33599b6f1dcf5fc77d37282a802d4f56eb1", 0x4e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) listen(r0, 0x800000007ff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000080)=0xb0) 21:03:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 21:03:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:03:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 907.440000][T25542] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 907.586917][T25550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' 21:03:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:03:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:03:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 21:03:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='G'], 0x1) shutdown(r0, 0x0) 21:03:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 908.589251][T25572] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 908.784599][T25583] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' 21:03:47 executing program 3: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb", 0x33}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa78411998b3c147dec313d6fa5e7c02b0d26935386694fa555bbf933034c694a2ab9dc6f26753866738d3ebefa33599b6f1dcf5fc77d37282a802d4f56eb1", 0x4e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) listen(r0, 0x800000007ff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000080)=0xb0) 21:03:47 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x20003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1ffffe}}) 21:03:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socket$inet6(0xa, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:03:47 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) dup2(r1, r0) 21:03:47 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:03:47 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x20003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1ffffe}}) [ 909.362727][ T32] audit: type=1800 audit(1590527027.522:30): pid=25598 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 [ 909.682078][ T32] audit: type=1800 audit(1590527027.842:31): pid=25595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15771 res=0 21:03:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:03:49 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:03:49 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x20003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1ffffe}}) 21:03:49 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) dup2(r1, r0) 21:03:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socket$inet6(0xa, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:03:49 executing program 3: unshare(0x400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x0) 21:03:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x20003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1ffffe}}) [ 911.825151][ T32] audit: type=1800 audit(1590527029.982:32): pid=25624 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 21:03:50 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:03:50 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) dup2(r1, r0) 21:03:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x805c4d65, &(0x7f0000000080)) 21:03:50 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:03:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socket$inet6(0xa, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 912.603970][ T32] audit: type=1800 audit(1590527030.762:33): pid=25648 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 21:03:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:03:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10) 21:03:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x805c4d65, &(0x7f0000000080)) 21:03:52 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) dup2(r1, r0) 21:03:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socket$inet6(0xa, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:03:52 executing program 3: unshare(0x400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x0) [ 914.962842][ T32] audit: type=1800 audit(1590527033.122:34): pid=25673 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 21:03:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10) 21:03:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x805c4d65, &(0x7f0000000080)) 21:03:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10) 21:03:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x805c4d65, &(0x7f0000000080)) 21:03:53 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:53 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) dup2(r1, r0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x2a, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, 0x0}]) [ 916.615953][ C1] not chained 120000 origins [ 916.620582][ C1] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.7.0-rc4-syzkaller #0 [ 916.628819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.638893][ C1] Workqueue: krdsd rds_connect_worker [ 916.644268][ C1] Call Trace: [ 916.647552][ C1] [ 916.650408][ C1] dump_stack+0x1c9/0x220 [ 916.654752][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 916.660481][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 916.666552][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 916.671500][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.676706][ C1] ? __should_failslab+0x1f6/0x290 [ 916.681818][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 916.686933][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 916.692746][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 916.698904][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 916.704211][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.709416][ C1] __msan_chain_origin+0x50/0x90 [ 916.714364][ C1] tcp_conn_request+0x174b/0x4d10 [ 916.719422][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 916.725489][ C1] ? cache_from_obj+0x3d5/0x6b0 [ 916.730348][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 916.736411][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.741609][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.746813][ C1] tcp_v4_conn_request+0x19b/0x240 [ 916.751937][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 916.756968][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 916.762257][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 916.767626][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 916.773412][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.778589][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 916.784390][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 916.790455][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.795638][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 916.800229][ C1] tcp_v4_rcv+0x425c/0x5040 [ 916.804792][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 916.810869][ C1] ? tcp_filter+0xf0/0xf0 [ 916.815226][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 916.820684][ C1] ip_local_deliver+0x62a/0x7c0 [ 916.825533][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 916.830547][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 916.836217][ C1] ip_rcv+0x6cf/0x750 [ 916.840194][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 916.845201][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 916.850842][ C1] process_backlog+0xf0b/0x1410 [ 916.855675][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 916.861309][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 916.866758][ C1] net_rx_action+0x786/0x1aa0 [ 916.871421][ C1] ? net_tx_action+0xc30/0xc30 [ 916.876187][ C1] __do_softirq+0x311/0x83d [ 916.880695][ C1] do_softirq_own_stack+0x49/0x80 [ 916.885733][ C1] [ 916.888662][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 916.893858][ C1] local_bh_enable+0x36/0x40 [ 916.898874][ C1] ip_finish_output2+0x2115/0x2610 [ 916.903987][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 916.909727][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 916.915728][ C1] __ip_finish_output+0xaa7/0xd80 [ 916.920772][ C1] ip_finish_output+0x166/0x410 [ 916.925634][ C1] ip_output+0x593/0x680 [ 916.929864][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 916.935141][ C1] ? ip_finish_output+0x410/0x410 [ 916.940154][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 916.945175][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 916.951231][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.956524][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.961716][ C1] ip_queue_xmit+0xcc/0xf0 [ 916.966117][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 916.970944][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 916.976140][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 916.981353][ C1] tcp_connect+0x420a/0x6830 [ 916.985950][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 916.991241][ C1] tcp_v4_connect+0x21fd/0x2370 [ 916.996092][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 917.001038][ C1] __inet_stream_connect+0x2fb/0x1340 [ 917.006427][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 917.011718][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 917.016965][ C1] inet_stream_connect+0x101/0x180 [ 917.022085][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 917.027724][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 917.033349][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 917.038526][ C1] ? rds_tcp_state_change+0x390/0x390 [ 917.043880][ C1] rds_connect_worker+0x2a6/0x470 [ 917.048896][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 917.054958][ C1] ? rds_addr_cmp+0x200/0x200 [ 917.059625][ C1] process_one_work+0x1555/0x1f40 [ 917.064651][ C1] worker_thread+0xef6/0x2450 [ 917.069317][ C1] kthread+0x4b5/0x4f0 [ 917.073575][ C1] ? process_one_work+0x1f40/0x1f40 [ 917.078767][ C1] ? kthread_blkcg+0xf0/0xf0 [ 917.083349][ C1] ret_from_fork+0x35/0x40 [ 917.087753][ C1] Uninit was stored to memory at: [ 917.092858][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.098553][ C1] __msan_chain_origin+0x50/0x90 [ 917.103471][ C1] tcp_conn_request+0x1781/0x4d10 [ 917.108471][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.113569][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.118581][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.123932][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.128500][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.133330][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.138773][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.143623][ C1] ip_rcv+0x6cf/0x750 [ 917.147644][ C1] process_backlog+0xf0b/0x1410 [ 917.152482][ C1] net_rx_action+0x786/0x1aa0 [ 917.157271][ C1] __do_softirq+0x311/0x83d [ 917.161754][ C1] [ 917.164071][ C1] Uninit was stored to memory at: [ 917.169085][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.174852][ C1] __msan_chain_origin+0x50/0x90 [ 917.179775][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 917.185063][ C1] tcp_conn_request+0x33d7/0x4d10 [ 917.190091][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.195186][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.200202][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.205582][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.210166][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.214651][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.220098][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.224938][ C1] ip_rcv+0x6cf/0x750 [ 917.229009][ C1] process_backlog+0xf0b/0x1410 [ 917.233898][ C1] net_rx_action+0x786/0x1aa0 [ 917.238756][ C1] __do_softirq+0x311/0x83d [ 917.243420][ C1] [ 917.245839][ C1] Uninit was stored to memory at: [ 917.250871][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.256846][ C1] __msan_chain_origin+0x50/0x90 [ 917.261782][ C1] tcp_conn_request+0x1781/0x4d10 [ 917.266818][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.271921][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.276937][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.282424][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.287001][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.291482][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.297809][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.302668][ C1] ip_rcv+0x6cf/0x750 [ 917.306636][ C1] process_backlog+0xf0b/0x1410 [ 917.311558][ C1] net_rx_action+0x786/0x1aa0 [ 917.316211][ C1] __do_softirq+0x311/0x83d [ 917.320688][ C1] [ 917.323002][ C1] Uninit was stored to memory at: [ 917.328007][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.333879][ C1] __msan_chain_origin+0x50/0x90 [ 917.338803][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 917.344089][ C1] tcp_conn_request+0x33d7/0x4d10 [ 917.349202][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.354303][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.359318][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.364685][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.369263][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.373770][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.379300][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.384136][ C1] ip_rcv+0x6cf/0x750 [ 917.388097][ C1] process_backlog+0xf0b/0x1410 [ 917.392935][ C1] net_rx_action+0x786/0x1aa0 [ 917.397789][ C1] __do_softirq+0x311/0x83d [ 917.402269][ C1] [ 917.404590][ C1] Uninit was stored to memory at: [ 917.409600][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.415306][ C1] __msan_chain_origin+0x50/0x90 [ 917.420240][ C1] tcp_conn_request+0x1781/0x4d10 [ 917.425261][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.430367][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.435380][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.440737][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.445311][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.449786][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.455216][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.460045][ C1] ip_rcv+0x6cf/0x750 [ 917.464010][ C1] process_backlog+0xf0b/0x1410 [ 917.468836][ C1] net_rx_action+0x786/0x1aa0 [ 917.473488][ C1] __do_softirq+0x311/0x83d [ 917.477958][ C1] [ 917.480267][ C1] Uninit was stored to memory at: [ 917.485282][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.490979][ C1] __msan_chain_origin+0x50/0x90 [ 917.495927][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 917.501199][ C1] tcp_conn_request+0x33d7/0x4d10 [ 917.506222][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.511323][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.516338][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.521691][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.526266][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.530743][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.536190][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.541025][ C1] ip_rcv+0x6cf/0x750 [ 917.544992][ C1] process_backlog+0xf0b/0x1410 [ 917.549816][ C1] net_rx_action+0x786/0x1aa0 [ 917.554482][ C1] __do_softirq+0x311/0x83d [ 917.558959][ C1] [ 917.561274][ C1] Uninit was stored to memory at: [ 917.566299][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 917.572004][ C1] __msan_chain_origin+0x50/0x90 [ 917.576928][ C1] tcp_conn_request+0x1781/0x4d10 [ 917.581946][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.587041][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 917.592039][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.597399][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.601974][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.606459][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.611894][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.616718][ C1] ip_rcv+0x6cf/0x750 [ 917.620686][ C1] process_backlog+0xf0b/0x1410 [ 917.625520][ C1] net_rx_action+0x786/0x1aa0 [ 917.630169][ C1] __do_softirq+0x311/0x83d [ 917.634644][ C1] [ 917.636962][ C1] Uninit was created at: [ 917.641203][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 917.646817][ C1] kmsan_alloc_page+0xb9/0x180 [ 917.651556][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 917.657088][ C1] alloc_pages_current+0x67d/0x990 [ 917.662205][ C1] alloc_slab_page+0x122/0x1310 [ 917.667030][ C1] new_slab+0x2bc/0x1130 [ 917.671268][ C1] ___slab_alloc+0x14a3/0x2040 [ 917.676004][ C1] kmem_cache_alloc+0xb23/0xd70 [ 917.680839][ C1] inet_reqsk_alloc+0xac/0x830 [ 917.685610][ C1] tcp_conn_request+0x753/0x4d10 [ 917.690525][ C1] tcp_v4_conn_request+0x19b/0x240 [ 917.695629][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 917.700996][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 917.705575][ C1] tcp_v4_rcv+0x425c/0x5040 [ 917.710063][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 917.715508][ C1] ip_local_deliver+0x62a/0x7c0 [ 917.720350][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 917.725192][ C1] ip_list_rcv+0x8eb/0x950 [ 917.729594][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 917.735749][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 917.741987][ C1] napi_complete_done+0x2ef/0xb60 [ 917.747014][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 917.752361][ C1] virtnet_poll+0x1468/0x19f0 [ 917.757053][ C1] net_rx_action+0x786/0x1aa0 [ 917.761723][ C1] __do_softirq+0x311/0x83d 21:03:56 executing program 3: unshare(0x400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x0) 21:03:56 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10) 21:03:56 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:56 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) dup2(r1, r0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x2a, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, 0x0}]) 21:03:56 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) dup2(r1, r0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x2a, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, 0x0}]) 21:03:56 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:56 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:56 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:56 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) dup2(r1, r0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x2a, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, 0x0}]) 21:03:56 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:57 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:58 executing program 3: unshare(0x400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x0) 21:03:59 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:59 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2000000000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x80084503, &(0x7f0000ffcffc)) 21:03:59 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000100)=""/219, 0xdb}], 0x2) 21:03:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80045530, &(0x7f0000001500)=""/4094) 21:03:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7403200800000000000000101013c5811039e1577ecce66fd792bbf0e5bf7ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e4ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x5487ecb07d3d00a3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 21:03:59 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000100)=""/219, 0xdb}], 0x2) 21:03:59 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80045530, &(0x7f0000001500)=""/4094) 21:03:59 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2000000000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x80084503, &(0x7f0000ffcffc)) 21:03:59 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000100)=""/219, 0xdb}], 0x2) 21:03:59 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) dup3(r0, r1, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 21:03:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80045530, &(0x7f0000001500)=""/4094) 21:03:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2000000000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x80084503, &(0x7f0000ffcffc)) 21:03:59 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 21:03:59 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000100)=""/219, 0xdb}], 0x2) 21:04:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7403200800000000000000101013c5811039e1577ecce66fd792bbf0e5bf7ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e4ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x5487ecb07d3d00a3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 21:04:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80045530, &(0x7f0000001500)=""/4094) 21:04:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001701000004000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) 21:04:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000a0001006261736963000000400002003c000300380001000c000100736b6265646974"], 0x70}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:04:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2000000000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x80084503, &(0x7f0000ffcffc)) 21:04:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) [ 922.938816][T25807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 922.982305][T25808] tap0: tun_chr_ioctl cmd 2147767506 [ 923.007490][T25814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.089114][T25819] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:01 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_delete(0x0) [ 923.134443][T25818] tap0: tun_chr_ioctl cmd 2147767506 [ 923.207619][T25829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.281607][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 21:04:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 21:04:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 21:04:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000a0001006261736963000000400002003c000300380001000c000100736b6265646974"], 0x70}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 923.617753][T25842] tap0: tun_chr_ioctl cmd 2147767506 [ 923.644905][T25847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.725269][T25848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 923.776299][T25856] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7403200800000000000000101013c5811039e1577ecce66fd792bbf0e5bf7ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e4ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x5487ecb07d3d00a3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 21:04:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 21:04:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 21:04:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000a0001006261736963000000400002003c000300380001000c000100736b6265646974"], 0x70}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:04:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 21:04:02 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_delete(0x0) [ 924.750173][T25881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 924.812066][T25892] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 924.862304][T25882] tap0: tun_chr_ioctl cmd 2147767506 21:04:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 21:04:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 21:04:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 21:04:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000a0001006261736963000000400002003c000300380001000c000100736b6265646974"], 0x70}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 925.220125][T25906] tap0: tun_chr_ioctl cmd 2147767506 21:04:03 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000090a000000000000000000000000000008000f400000000014000000110001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000180001080000000263300a148020000001040005d828e7590c"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:04:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='illinois\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x5, 0x1, 0x14, 0x8, 0x18, "fbc51d37ce0839853b8d1faf6b67bf20de436df47c7f5fdf"}, 0x21, 0x0) [ 925.616869][T25927] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 925.625424][T25927] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:04:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7403200800000000000000101013c5811039e1577ecce66fd792bbf0e5bf7ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e4ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x5487ecb07d3d00a3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 21:04:04 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_delete(0x0) 21:04:04 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x11c03}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 21:04:04 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 21:04:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000090a000000000000000000000000000008000f400000000014000000110001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000180001080000000263300a148020000001040005d828e7590c"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:04:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='illinois\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x5, 0x1, 0x14, 0x8, 0x18, "fbc51d37ce0839853b8d1faf6b67bf20de436df47c7f5fdf"}, 0x21, 0x0) [ 926.696005][T25948] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 926.704502][T25948] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:04:04 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x11c03}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 21:04:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='illinois\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x5, 0x1, 0x14, 0x8, 0x18, "fbc51d37ce0839853b8d1faf6b67bf20de436df47c7f5fdf"}, 0x21, 0x0) 21:04:05 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 21:04:05 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000090a000000000000000000000000000008000f400000000014000000110001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000180001080000000263300a148020000001040005d828e7590c"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:04:05 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x11c03}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 21:04:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='illinois\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x5, 0x1, 0x14, 0x8, 0x18, "fbc51d37ce0839853b8d1faf6b67bf20de436df47c7f5fdf"}, 0x21, 0x0) [ 927.155074][T25962] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 927.164162][T25962] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:04:06 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_delete(0x0) 21:04:06 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 21:04:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000090a000000000000000000000000000008000f400000000014000000110001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000180001080000000263300a148020000001040005d828e7590c"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:04:06 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x11c03}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 21:04:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00)\x009'], 0x24}}, 0x0) 21:04:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) [ 928.362114][T25981] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 928.370611][T25981] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 928.378744][T25981] __nla_validate_parse: 7 callbacks suppressed [ 928.378773][T25981] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 928.438964][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:06 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 928.556701][T25994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x33) r2 = getpid() kcmp(r0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:04:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2c020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 21:04:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x33) r2 = getpid() kcmp(r0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:04:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00)\x009'], 0x24}}, 0x0) 21:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0xfffffffffffffffd, 0x1bd) [ 929.024271][T26011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2c020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 21:04:07 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x33) r2 = getpid() kcmp(r0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0xfffffffffffffffd, 0x1bd) 21:04:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 21:04:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00)\x009'], 0x24}}, 0x0) [ 929.505861][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0xfffffffffffffffd, 0x1bd) 21:04:08 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x33) r2 = getpid() kcmp(r0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:04:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2c020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 21:04:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 21:04:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00)\x009'], 0x24}}, 0x0) [ 930.167809][T26124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 21:04:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0xfffffffffffffffd, 0x1bd) 21:04:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2c020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 21:04:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 21:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newtfilter={0x78, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x48, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x19}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}]}}]}, 0x78}}, 0x0) [ 930.893358][T26181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 931.036478][T26187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 21:04:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 21:04:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newtfilter={0x78, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x48, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x19}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}]}}]}, 0x78}}, 0x0) 21:04:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 931.611452][T26233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 21:04:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 21:04:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff62000007003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x7c}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:04:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newtfilter={0x78, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x48, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x19}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}]}}]}, 0x78}}, 0x0) [ 932.042771][T26248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 932.983141][ C0] not chained 130000 origins [ 932.987766][ C0] CPU: 0 PID: 1458 Comm: kworker/u4:26 Not tainted 5.7.0-rc4-syzkaller #0 [ 932.996258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.006672][ C0] Workqueue: krdsd rds_connect_worker [ 933.012043][ C0] Call Trace: [ 933.015321][ C0] [ 933.018176][ C0] dump_stack+0x1c9/0x220 [ 933.022525][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 933.028253][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 933.033373][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 933.038743][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.043946][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.049226][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 933.055038][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 933.061187][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 933.066994][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.072278][ C0] __msan_chain_origin+0x50/0x90 [ 933.077222][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 933.082528][ C0] tcp_conn_request+0x33d7/0x4d10 [ 933.087582][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 933.093654][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 933.099726][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.105056][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.105078][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.105157][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.120447][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 933.126423][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.131786][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 933.137582][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.142767][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 933.148572][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 933.154627][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.159815][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.164394][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.168882][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 933.174959][ C0] ? tcp_filter+0xf0/0xf0 [ 933.179273][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.184726][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.189568][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 933.194576][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 933.200189][ C0] ip_rcv+0x6cf/0x750 [ 933.204160][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 933.208908][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 933.214521][ C0] process_backlog+0xf0b/0x1410 [ 933.219362][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 933.225071][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 933.230338][ C0] net_rx_action+0x786/0x1aa0 [ 933.235007][ C0] ? net_tx_action+0xc30/0xc30 [ 933.240106][ C0] __do_softirq+0x311/0x83d [ 933.244604][ C0] do_softirq_own_stack+0x49/0x80 [ 933.249606][ C0] [ 933.252534][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 933.257720][ C0] local_bh_enable+0x36/0x40 [ 933.262294][ C0] ip_finish_output2+0x2115/0x2610 [ 933.267391][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 933.273094][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 933.279069][ C0] __ip_finish_output+0xaa7/0xd80 [ 933.284085][ C0] ip_finish_output+0x166/0x410 [ 933.288922][ C0] ip_output+0x593/0x680 [ 933.293154][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 933.298421][ C0] ? ip_finish_output+0x410/0x410 [ 933.303428][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 933.308351][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 933.313882][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.319071][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.324256][ C0] ip_queue_xmit+0xcc/0xf0 [ 933.328658][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 933.333496][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 933.338684][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.343877][ C0] tcp_connect+0x420a/0x6830 [ 933.348456][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 933.353757][ C0] tcp_v4_connect+0x21fd/0x2370 [ 933.358621][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 933.363549][ C0] __inet_stream_connect+0x2fb/0x1340 [ 933.368905][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 933.374179][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.379365][ C0] inet_stream_connect+0x101/0x180 [ 933.384463][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 933.390082][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 933.395716][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 933.401507][ C0] ? rds_tcp_state_change+0x390/0x390 [ 933.406862][ C0] rds_connect_worker+0x2a6/0x470 [ 933.411881][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 933.417936][ C0] ? rds_addr_cmp+0x200/0x200 [ 933.422607][ C0] process_one_work+0x1555/0x1f40 [ 933.427643][ C0] worker_thread+0xef6/0x2450 [ 933.432324][ C0] kthread+0x4b5/0x4f0 [ 933.436395][ C0] ? process_one_work+0x1f40/0x1f40 [ 933.441586][ C0] ? kthread_blkcg+0xf0/0xf0 [ 933.446166][ C0] ret_from_fork+0x35/0x40 [ 933.450569][ C0] Uninit was stored to memory at: [ 933.455581][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.461281][ C0] __msan_chain_origin+0x50/0x90 [ 933.466216][ C0] tcp_conn_request+0x1781/0x4d10 [ 933.471237][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.476332][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.481343][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.486714][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.491323][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.495810][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.501250][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.506083][ C0] ip_rcv+0x6cf/0x750 [ 933.510050][ C0] process_backlog+0xf0b/0x1410 [ 933.514883][ C0] net_rx_action+0x786/0x1aa0 [ 933.519543][ C0] __do_softirq+0x311/0x83d [ 933.524029][ C0] [ 933.526348][ C0] Uninit was stored to memory at: [ 933.531374][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.537082][ C0] __msan_chain_origin+0x50/0x90 [ 933.542008][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 933.547275][ C0] tcp_conn_request+0x33d7/0x4d10 [ 933.552280][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.557373][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.562387][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.567739][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.572312][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.576809][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.582248][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.587075][ C0] ip_rcv+0x6cf/0x750 [ 933.591040][ C0] process_backlog+0xf0b/0x1410 [ 933.595871][ C0] net_rx_action+0x786/0x1aa0 [ 933.600530][ C0] __do_softirq+0x311/0x83d [ 933.605008][ C0] [ 933.607316][ C0] Uninit was stored to memory at: [ 933.612325][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.618028][ C0] __msan_chain_origin+0x50/0x90 [ 933.622948][ C0] tcp_conn_request+0x1781/0x4d10 [ 933.628041][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.633134][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.638141][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.643495][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.648079][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.652576][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.658019][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.662856][ C0] ip_rcv+0x6cf/0x750 [ 933.666820][ C0] process_backlog+0xf0b/0x1410 [ 933.671656][ C0] net_rx_action+0x786/0x1aa0 [ 933.676321][ C0] __do_softirq+0x311/0x83d [ 933.680798][ C0] [ 933.683107][ C0] Uninit was stored to memory at: [ 933.688116][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.693816][ C0] __msan_chain_origin+0x50/0x90 [ 933.698737][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 933.704002][ C0] tcp_conn_request+0x33d7/0x4d10 [ 933.709010][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.714104][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.719128][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.724482][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.729058][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.733544][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.738984][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.743815][ C0] ip_rcv+0x6cf/0x750 [ 933.747778][ C0] process_backlog+0xf0b/0x1410 [ 933.752610][ C0] net_rx_action+0x786/0x1aa0 [ 933.757268][ C0] __do_softirq+0x311/0x83d [ 933.761746][ C0] [ 933.764053][ C0] Uninit was stored to memory at: [ 933.769071][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.774771][ C0] __msan_chain_origin+0x50/0x90 [ 933.779691][ C0] tcp_conn_request+0x1781/0x4d10 [ 933.784695][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.789790][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.794811][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.800177][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.804748][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.809238][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.814682][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.819513][ C0] ip_rcv+0x6cf/0x750 [ 933.823586][ C0] process_backlog+0xf0b/0x1410 [ 933.828419][ C0] net_rx_action+0x786/0x1aa0 [ 933.833079][ C0] __do_softirq+0x311/0x83d [ 933.837554][ C0] [ 933.839863][ C0] Uninit was stored to memory at: [ 933.844872][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.850573][ C0] __msan_chain_origin+0x50/0x90 [ 933.855493][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 933.860770][ C0] tcp_conn_request+0x33d7/0x4d10 [ 933.865775][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.870873][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.875881][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.881235][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.885804][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.890314][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.895754][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.900594][ C0] ip_rcv+0x6cf/0x750 [ 933.904571][ C0] process_backlog+0xf0b/0x1410 [ 933.909403][ C0] net_rx_action+0x786/0x1aa0 [ 933.914062][ C0] __do_softirq+0x311/0x83d [ 933.918538][ C0] [ 933.920848][ C0] Uninit was stored to memory at: [ 933.925859][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 933.931572][ C0] __msan_chain_origin+0x50/0x90 [ 933.936504][ C0] tcp_conn_request+0x1781/0x4d10 [ 933.941511][ C0] tcp_v4_conn_request+0x19b/0x240 [ 933.946610][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 933.951617][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 933.956968][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 933.961559][ C0] tcp_v4_rcv+0x425c/0x5040 [ 933.966061][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 933.971681][ C0] ip_local_deliver+0x62a/0x7c0 [ 933.976513][ C0] ip_rcv+0x6cf/0x750 [ 933.980480][ C0] process_backlog+0xf0b/0x1410 [ 933.985310][ C0] net_rx_action+0x786/0x1aa0 [ 933.989968][ C0] __do_softirq+0x311/0x83d [ 933.994446][ C0] [ 933.996775][ C0] Uninit was created at: [ 934.001005][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 934.006618][ C0] kmsan_alloc_page+0xb9/0x180 [ 934.011375][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 934.016905][ C0] alloc_pages_current+0x67d/0x990 [ 934.021996][ C0] alloc_slab_page+0x122/0x1310 [ 934.026826][ C0] new_slab+0x2bc/0x1130 [ 934.031047][ C0] ___slab_alloc+0x14a3/0x2040 [ 934.035790][ C0] kmem_cache_alloc+0xb23/0xd70 [ 934.040625][ C0] inet_reqsk_alloc+0xac/0x830 [ 934.045385][ C0] tcp_conn_request+0x753/0x4d10 [ 934.050310][ C0] tcp_v4_conn_request+0x19b/0x240 [ 934.055578][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 934.060928][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 934.065496][ C0] tcp_v4_rcv+0x425c/0x5040 [ 934.069977][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 934.075429][ C0] ip_local_deliver+0x62a/0x7c0 [ 934.080259][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 934.085095][ C0] ip_list_rcv+0x8eb/0x950 [ 934.089504][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 934.095641][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 934.101885][ C0] napi_complete_done+0x2ef/0xb60 [ 934.106892][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 934.112246][ C0] virtnet_poll+0x1468/0x19f0 [ 934.116919][ C0] net_rx_action+0x786/0x1aa0 [ 934.121583][ C0] __do_softirq+0x311/0x83d 21:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newtfilter={0x78, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x48, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x19}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}]}}]}, 0x78}}, 0x0) 21:04:12 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff62000007003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x7c}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:04:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 21:04:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000300)={0x60, 0x10, &(0x7f00000004c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x109002) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7257, "a6c54fdf218b79d8275d25fd85df781c1f6e6999049a6a47ef874f72c7c30605", 0x5, 0x100, 0x3, 0x8, 0x2, 0x4, 0xfffff800, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readahead(r4, 0x401, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macsec0\x00', {}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x509280) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x12) 21:04:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$clear(0x7, 0xfffffffffffffffa) 21:04:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x80041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x8b, 0x7d, 0x0, {{0x0, 0x76, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15, '/dev/bus/usb/00#/00#\x00', 0x25, ':wlan1wlan1posix_acl_access-\xb6[system$', 0x9, 'cpu.stat\x00'}}}, 0x8b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) [ 934.571287][T26284] __nla_validate_parse: 2 callbacks suppressed [ 934.571319][T26284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 934.603666][T26286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 21:04:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x80041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x8b, 0x7d, 0x0, {{0x0, 0x76, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15, '/dev/bus/usb/00#/00#\x00', 0x25, ':wlan1wlan1posix_acl_access-\xb6[system$', 0x9, 'cpu.stat\x00'}}}, 0x8b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) 21:04:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$clear(0x7, 0xfffffffffffffffa) 21:04:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff62000007003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x7c}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:04:13 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 21:04:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) [ 935.245059][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:15 executing program 3: r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 21:04:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$clear(0x7, 0xfffffffffffffffa) 21:04:15 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 21:04:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x80041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x8b, 0x7d, 0x0, {{0x0, 0x76, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15, '/dev/bus/usb/00#/00#\x00', 0x25, ':wlan1wlan1posix_acl_access-\xb6[system$', 0x9, 'cpu.stat\x00'}}}, 0x8b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) 21:04:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 21:04:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff62000007003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x7c}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 937.396109][T26346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:15 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 21:04:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x80041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x8b, 0x7d, 0x0, {{0x0, 0x76, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15, '/dev/bus/usb/00#/00#\x00', 0x25, ':wlan1wlan1posix_acl_access-\xb6[system$', 0x9, 'cpu.stat\x00'}}}, 0x8b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) 21:04:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 21:04:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$clear(0x7, 0xfffffffffffffffa) 21:04:16 executing program 4: unshare(0x20040600) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 21:04:16 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 21:04:16 executing program 3: r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 21:04:16 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x8) 21:04:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 21:04:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 21:04:16 executing program 4: move_pages(0x0, 0x242, &(0x7f0000000080), 0x0, 0xfffffffffffffffd, 0x0) 21:04:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000001100)=""/4082, 0xff2) 21:04:17 executing program 4: move_pages(0x0, 0x242, &(0x7f0000000080), 0x0, 0xfffffffffffffffd, 0x0) 21:04:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x8) 21:04:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000001100)=""/4082, 0xff2) 21:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 21:04:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x8) 21:04:17 executing program 4: move_pages(0x0, 0x242, &(0x7f0000000080), 0x0, 0xfffffffffffffffd, 0x0) 21:04:18 executing program 3: r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 21:04:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000001100)=""/4082, 0xff2) 21:04:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 21:04:18 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 21:04:18 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x8) 21:04:18 executing program 4: move_pages(0x0, 0x242, &(0x7f0000000080), 0x0, 0xfffffffffffffffd, 0x0) [ 940.450853][T26419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 940.468257][T26419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.478897][T26419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:04:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000001100)=""/4082, 0xff2) 21:04:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="26000000130047f10701c1b00ef90000078f7ed79f0b5ef239077f57a088b4d11ca21a16ea26", 0x26) unshare(0x20600) mmap(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x1, 0x31, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000f95fd7)={0x0, 0x0, 0x0}, 0x0) 21:04:19 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 940.954555][T26430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 940.971325][T26430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.979417][T26430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:04:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "4d8d84be0d53d83a09a09d570f4e51bb"}) [ 941.158188][ C1] sd 0:0:1:0: [sg0] tag#3220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.168815][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB: Test Unit Ready [ 941.175675][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.185562][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.195421][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.205330][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.215193][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.225059][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.234937][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.244816][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.254691][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.264572][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.274439][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.284296][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.294164][ C1] sd 0:0:1:0: [sg0] tag#3220 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 21:04:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) [ 941.842390][ C0] sd 0:0:1:0: [sg0] tag#3228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.853036][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB: Test Unit Ready [ 941.859805][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.869689][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.879437][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.889353][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.899217][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.909071][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.918935][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.928791][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.938737][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.948629][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.958488][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.968302][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.978127][ C0] sd 0:0:1:0: [sg0] tag#3228 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:21 executing program 3: r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 21:04:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "4d8d84be0d53d83a09a09d570f4e51bb"}) 21:04:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 21:04:21 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 21:04:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 21:04:21 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 943.366305][ C1] sd 0:0:1:0: [sg0] tag#3229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 943.376974][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB: Test Unit Ready [ 943.383787][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.393758][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.403641][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.413511][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.423376][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.433244][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.443128][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.453002][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.462816][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.472640][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.482456][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.492251][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.502029][ C1] sd 0:0:1:0: [sg0] tag#3229 CDB[c0]: 00 00 00 00 00 00 00 00 [ 943.550265][T26473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 943.567824][T26473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 943.577467][T26473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:04:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "4d8d84be0d53d83a09a09d570f4e51bb"}) 21:04:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 21:04:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "4d8d84be0d53d83a09a09d570f4e51bb"}) 21:04:22 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:04:22 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:04:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 944.415663][ C0] sd 0:0:1:0: [sg0] tag#3230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 944.416101][ C1] sd 0:0:1:0: [sg0] tag#3231 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 944.426283][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB: Test Unit Ready [ 944.436795][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB: Test Unit Ready [ 944.443342][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.449869][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.459601][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.469252][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.478875][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.488527][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.498223][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.507897][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.517615][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.527290][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.536967][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.546613][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.556278][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.565953][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.575635][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.585303][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.594975][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.604634][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.614302][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.623961][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.633623][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.643300][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.653225][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.662894][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.672568][ C0] sd 0:0:1:0: [sg0] tag#3230 CDB[c0]: 00 00 00 00 00 00 00 00 [ 944.682232][ C1] sd 0:0:1:0: [sg0] tag#3231 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 21:04:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x14, 0x0, 0x4, 0x8009, 0x4}, 0x3c) 21:04:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 21:04:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 21:04:24 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:04:24 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 946.663992][ C0] sd 0:0:1:0: [sg0] tag#3245 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 946.674638][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB: Test Unit Ready [ 946.681447][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.691352][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.701201][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.711196][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.721108][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.730965][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.740865][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.747961][T26525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 946.750686][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.750783][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.766110][T26525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 946.767748][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.779984][T26525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 946.784700][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.811390][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.821243][ C0] sd 0:0:1:0: [sg0] tag#3245 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) [ 947.267465][T26538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 947.284254][T26538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 947.292344][T26538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 947.309142][ C0] sd 0:0:1:0: [sg0] tag#3246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 947.319843][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB: Test Unit Ready [ 947.326632][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.336507][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.346366][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.356263][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.366137][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.375998][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.385889][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.395822][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.405751][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:04:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0xffffffff, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x20}, {@in=@dev, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0x0, 0xffffffff}, {}, {}, 0x20000, 0x0, 0xa, 0x4, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 947.415789][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.425661][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.435493][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.445409][ C0] sd 0:0:1:0: [sg0] tag#3246 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:25 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1a, {0xa, 0x0, 0x0, @loopback}}, 0x24) 21:04:25 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 947.955434][ C0] sd 0:0:1:0: [sg0] tag#3247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 947.966152][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB: Test Unit Ready [ 947.972920][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.982813][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.992737][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.002680][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.012579][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.022491][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.032378][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.042276][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.052186][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.062085][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.071964][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.081847][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.091877][ C0] sd 0:0:1:0: [sg0] tag#3247 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:26 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1a, {0xa, 0x0, 0x0, @loopback}}, 0x24) 21:04:26 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x4) 21:04:26 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1a, {0xa, 0x0, 0x0, @loopback}}, 0x24) [ 949.259379][ C1] not chained 140000 origins [ 949.264011][ C1] CPU: 1 PID: 671 Comm: kworker/u4:15 Not tainted 5.7.0-rc4-syzkaller #0 [ 949.272414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.282479][ C1] Workqueue: krdsd rds_connect_worker [ 949.287846][ C1] Call Trace: [ 949.291128][ C1] [ 949.293981][ C1] dump_stack+0x1c9/0x220 [ 949.298316][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 949.304043][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 949.310115][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 949.315055][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.320261][ C1] ? __should_failslab+0x1f6/0x290 [ 949.325376][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 949.330489][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 949.336286][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 949.342439][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 949.347723][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.352910][ C1] __msan_chain_origin+0x50/0x90 [ 949.357837][ C1] tcp_conn_request+0x174b/0x4d10 [ 949.362891][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 949.368953][ C1] ? cache_from_obj+0x3d5/0x6b0 [ 949.373801][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 949.379864][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.385051][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.390250][ C1] tcp_v4_conn_request+0x19b/0x240 [ 949.395351][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 949.400365][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 949.405637][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 949.410993][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 949.416783][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.421966][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 949.427762][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 949.433817][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.439049][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 949.443633][ C1] tcp_v4_rcv+0x425c/0x5040 [ 949.448136][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 949.454223][ C1] ? tcp_filter+0xf0/0xf0 [ 949.458535][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 949.463986][ C1] ip_local_deliver+0x62a/0x7c0 [ 949.468981][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 949.473991][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 949.479622][ C1] ip_rcv+0x6cf/0x750 [ 949.483609][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 949.488377][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 949.494023][ C1] process_backlog+0xf0b/0x1410 [ 949.498866][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 949.504493][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 949.509764][ C1] net_rx_action+0x786/0x1aa0 [ 949.514442][ C1] ? net_tx_action+0xc30/0xc30 [ 949.519193][ C1] __do_softirq+0x311/0x83d [ 949.523694][ C1] do_softirq_own_stack+0x49/0x80 [ 949.528708][ C1] [ 949.531637][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 949.536826][ C1] local_bh_enable+0x36/0x40 [ 949.541401][ C1] ip_finish_output2+0x2115/0x2610 [ 949.546511][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 949.552217][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 949.558205][ C1] __ip_finish_output+0xaa7/0xd80 [ 949.563233][ C1] ip_finish_output+0x166/0x410 [ 949.568071][ C1] ip_output+0x593/0x680 [ 949.572308][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 949.577586][ C1] ? ip_finish_output+0x410/0x410 [ 949.582595][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 949.587528][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 949.593076][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.598278][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.603639][ C1] ip_queue_xmit+0xcc/0xf0 [ 949.608044][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 949.612980][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 949.618170][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.623366][ C1] tcp_connect+0x420a/0x6830 [ 949.627944][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 949.633316][ C1] tcp_v4_connect+0x21fd/0x2370 [ 949.638180][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 949.643125][ C1] __inet_stream_connect+0x2fb/0x1340 [ 949.648489][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 949.653766][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.658953][ C1] inet_stream_connect+0x101/0x180 [ 949.664054][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 949.669676][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 949.675305][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 949.680492][ C1] ? rds_tcp_state_change+0x390/0x390 [ 949.685853][ C1] rds_connect_worker+0x2a6/0x470 [ 949.690864][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 949.696925][ C1] ? rds_addr_cmp+0x200/0x200 [ 949.701586][ C1] process_one_work+0x1555/0x1f40 [ 949.706611][ C1] worker_thread+0xef6/0x2450 [ 949.711292][ C1] kthread+0x4b5/0x4f0 [ 949.715346][ C1] ? process_one_work+0x1f40/0x1f40 [ 949.720536][ C1] ? kthread_blkcg+0xf0/0xf0 [ 949.725113][ C1] ret_from_fork+0x35/0x40 [ 949.729514][ C1] Uninit was stored to memory at: [ 949.734536][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 949.740239][ C1] __msan_chain_origin+0x50/0x90 [ 949.745160][ C1] tcp_conn_request+0x1781/0x4d10 [ 949.750168][ C1] tcp_v4_conn_request+0x19b/0x240 [ 949.755264][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 949.760277][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 949.765637][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 949.770207][ C1] tcp_v4_rcv+0x425c/0x5040 [ 949.774707][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 949.780146][ C1] ip_local_deliver+0x62a/0x7c0 [ 949.785078][ C1] ip_rcv+0x6cf/0x750 [ 949.789044][ C1] process_backlog+0xf0b/0x1410 [ 949.793878][ C1] net_rx_action+0x786/0x1aa0 [ 949.798558][ C1] __do_softirq+0x311/0x83d [ 949.803037][ C1] [ 949.805346][ C1] Uninit was stored to memory at: [ 949.810357][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 949.816060][ C1] __msan_chain_origin+0x50/0x90 [ 949.820981][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 949.826251][ C1] tcp_conn_request+0x33d7/0x4d10 [ 949.831273][ C1] tcp_v4_conn_request+0x19b/0x240 [ 949.836387][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 949.841399][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 949.846754][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 949.851326][ C1] tcp_v4_rcv+0x425c/0x5040 [ 949.855811][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 949.861263][ C1] ip_local_deliver+0x62a/0x7c0 [ 949.866104][ C1] ip_rcv+0x6cf/0x750 [ 949.870070][ C1] process_backlog+0xf0b/0x1410 [ 949.874913][ C1] net_rx_action+0x786/0x1aa0 [ 949.879576][ C1] __do_softirq+0x311/0x83d [ 949.884065][ C1] [ 949.886371][ C1] Uninit was stored to memory at: [ 949.891385][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 949.897527][ C1] __msan_chain_origin+0x50/0x90 [ 949.902625][ C1] tcp_conn_request+0x1781/0x4d10 [ 949.907643][ C1] tcp_v4_conn_request+0x19b/0x240 [ 949.912740][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 949.917748][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 949.923103][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 949.927678][ C1] tcp_v4_rcv+0x425c/0x5040 [ 949.932165][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 949.937608][ C1] ip_local_deliver+0x62a/0x7c0 [ 949.942443][ C1] ip_rcv+0x6cf/0x750 [ 949.946423][ C1] process_backlog+0xf0b/0x1410 [ 949.951275][ C1] net_rx_action+0x786/0x1aa0 [ 949.955963][ C1] __do_softirq+0x311/0x83d [ 949.960446][ C1] [ 949.962761][ C1] Uninit was stored to memory at: [ 949.967790][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 949.974205][ C1] __msan_chain_origin+0x50/0x90 [ 949.979223][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 949.984501][ C1] tcp_conn_request+0x33d7/0x4d10 [ 949.989544][ C1] tcp_v4_conn_request+0x19b/0x240 [ 949.994643][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 949.999655][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 950.005010][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 950.009593][ C1] tcp_v4_rcv+0x425c/0x5040 [ 950.014080][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 950.019522][ C1] ip_local_deliver+0x62a/0x7c0 [ 950.024367][ C1] ip_rcv+0x6cf/0x750 [ 950.028332][ C1] process_backlog+0xf0b/0x1410 [ 950.033167][ C1] net_rx_action+0x786/0x1aa0 [ 950.037827][ C1] __do_softirq+0x311/0x83d [ 950.042305][ C1] [ 950.044700][ C1] Uninit was stored to memory at: [ 950.049712][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 950.055415][ C1] __msan_chain_origin+0x50/0x90 [ 950.060337][ C1] tcp_conn_request+0x1781/0x4d10 [ 950.065348][ C1] tcp_v4_conn_request+0x19b/0x240 [ 950.070444][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 950.075451][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 950.080826][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 950.085407][ C1] tcp_v4_rcv+0x425c/0x5040 [ 950.089895][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 950.095342][ C1] ip_local_deliver+0x62a/0x7c0 [ 950.100174][ C1] ip_rcv+0x6cf/0x750 [ 950.104660][ C1] process_backlog+0xf0b/0x1410 [ 950.109505][ C1] net_rx_action+0x786/0x1aa0 [ 950.115640][ C1] __do_softirq+0x311/0x83d [ 950.120127][ C1] [ 950.122435][ C1] Uninit was stored to memory at: [ 950.127456][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 950.133187][ C1] __msan_chain_origin+0x50/0x90 [ 950.138123][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 950.143416][ C1] tcp_conn_request+0x33d7/0x4d10 [ 950.148437][ C1] tcp_v4_conn_request+0x19b/0x240 [ 950.153534][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 950.158544][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 950.163896][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 950.168469][ C1] tcp_v4_rcv+0x425c/0x5040 [ 950.172960][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 950.178400][ C1] ip_local_deliver+0x62a/0x7c0 [ 950.183246][ C1] ip_rcv+0x6cf/0x750 [ 950.187232][ C1] process_backlog+0xf0b/0x1410 [ 950.192065][ C1] net_rx_action+0x786/0x1aa0 [ 950.196725][ C1] __do_softirq+0x311/0x83d [ 950.201201][ C1] [ 950.203508][ C1] Uninit was stored to memory at: [ 950.208535][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 950.214240][ C1] __msan_chain_origin+0x50/0x90 [ 950.219163][ C1] tcp_conn_request+0x1781/0x4d10 [ 950.224182][ C1] tcp_v4_conn_request+0x19b/0x240 [ 950.229276][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 950.234298][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 950.239652][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 950.244224][ C1] tcp_v4_rcv+0x425c/0x5040 [ 950.248713][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 950.254253][ C1] ip_local_deliver+0x62a/0x7c0 [ 950.259084][ C1] ip_rcv+0x6cf/0x750 [ 950.263046][ C1] process_backlog+0xf0b/0x1410 [ 950.267877][ C1] net_rx_action+0x786/0x1aa0 [ 950.272537][ C1] __do_softirq+0x311/0x83d [ 950.277014][ C1] [ 950.279336][ C1] Uninit was created at: [ 950.283572][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 950.289185][ C1] kmsan_alloc_page+0xb9/0x180 [ 950.293949][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 950.299479][ C1] alloc_pages_current+0x67d/0x990 [ 950.304582][ C1] alloc_slab_page+0x122/0x1310 [ 950.309425][ C1] new_slab+0x2bc/0x1130 [ 950.313660][ C1] ___slab_alloc+0x14a3/0x2040 [ 950.318422][ C1] kmem_cache_alloc+0xb23/0xd70 [ 950.323258][ C1] inet_reqsk_alloc+0xac/0x830 [ 950.328005][ C1] tcp_conn_request+0x753/0x4d10 [ 950.332923][ C1] tcp_v4_conn_request+0x19b/0x240 [ 950.338027][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 950.343384][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 950.347955][ C1] tcp_v4_rcv+0x425c/0x5040 [ 950.352441][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 950.357881][ C1] ip_local_deliver+0x62a/0x7c0 [ 950.362731][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 950.367597][ C1] ip_list_rcv+0x8eb/0x950 [ 950.372109][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 950.378309][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 950.384554][ C1] napi_complete_done+0x2ef/0xb60 [ 950.389571][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 950.394926][ C1] virtnet_poll+0x1468/0x19f0 [ 950.399595][ C1] net_rx_action+0x786/0x1aa0 [ 950.404258][ C1] __do_softirq+0x311/0x83d 21:04:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x14, 0x0, 0x4, 0x8009, 0x4}, 0x3c) 21:04:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:04:29 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x4) 21:04:29 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d40000001900190500000002200000ff02ff"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x6ffe0, 0x0) 21:04:29 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1a, {0xa, 0x0, 0x0, @loopback}}, 0x24) 21:04:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000180)) 21:04:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:04:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) lstat(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) [ 952.041375][T26580] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:30 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x4) 21:04:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000180)) 21:04:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:04:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000180)) 21:04:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x14, 0x0, 0x4, 0x8009, 0x4}, 0x3c) 21:04:31 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x4) 21:04:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:04:31 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d40000001900190500000002200000ff02ff"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x6ffe0, 0x0) 21:04:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000180)) 21:04:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff0f}, {&(0x7f00000003c0)=""/102385, 0xfffffffffffffc25}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x118, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 21:04:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, 0x0, 0x0) [ 953.963562][T26614] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev}, {@in6=@loopback, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 21:04:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r1, 0xfffffff7fffffffb, 0x3) 21:04:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, 0x0, 0x0) 21:04:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev}, {@in6=@loopback, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 21:04:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev}, {@in6=@loopback, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 21:04:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x14, 0x0, 0x4, 0x8009, 0x4}, 0x3c) 21:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, 0x0, 0x0) 21:04:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r1, 0xfffffff7fffffffb, 0x3) 21:04:33 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d40000001900190500000002200000ff02ff"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x6ffe0, 0x0) 21:04:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev}, {@in6=@loopback, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 955.053781][T26649] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000003c0)={@flat=@weak_handle={0x70742a85}, @fd={0x73622a85}, @flat=@weak_handle={0x73682a85}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 21:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, 0x0, 0x0) 21:04:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002480)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="65350600050000001c0012800c0001006d6163766c616e000c00028008000100080000000a000500040000000000000008000a00", @ANYRES32], 0x50}}, 0x0) 21:04:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r1, 0xfffffff7fffffffb, 0x3) 21:04:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f20a000000572501000000170100"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xffffffff, 0xffd, 0x0, 0x0, 0x0, "a5d97a4fd68712ec78a42d29d31d8127580679"}) write(r1, &(0x7f0000000040)="92", 0x1) 21:04:35 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d40000001900190500000002200000ff02ff"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x6ffe0, 0x0) [ 956.999432][T26671] binder: BINDER_SET_CONTEXT_MGR already set [ 957.006387][T26671] binder: 26670:26671 ioctl 40046207 0 returned -16 [ 957.029706][T26675] binder: BINDER_SET_CONTEXT_MGR already set [ 957.036026][T26675] binder: 26670:26675 ioctl 40046207 0 returned -16 [ 957.068376][T26679] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 957.085501][T26679] device gretap0 entered promiscuous mode 21:04:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000003c0)={@flat=@weak_handle={0x70742a85}, @fd={0x73622a85}, @flat=@weak_handle={0x73682a85}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) [ 957.215834][T26679] device gretap0 left promiscuous mode 21:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 21:04:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r1, 0xfffffff7fffffffb, 0x3) 21:04:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000003c0)={@flat=@weak_handle={0x70742a85}, @fd={0x73622a85}, @flat=@weak_handle={0x73682a85}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 21:04:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f00000003c0)={@flat=@weak_handle={0x70742a85}, @fd={0x73622a85}, @flat=@weak_handle={0x73682a85}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) [ 957.907575][T26703] binder: BINDER_SET_CONTEXT_MGR already set [ 957.913895][T26703] binder: 26702:26703 ioctl 40046207 0 returned -16 21:04:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x0) [ 958.090977][T26683] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 21:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) 21:04:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x0) 21:04:36 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x10004) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x10000) 21:04:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 21:04:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060006000000e900000000000000000000001400020000000000000000000000df"], 0x40}}, 0x0) 21:04:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) dup2(r2, r0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 21:04:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) 21:04:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x0) 21:04:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x40184150, 0x0) 21:04:37 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x10004) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x10000) 21:04:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x0) 21:04:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) 21:04:38 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x10004) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x10000) 21:04:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) dup2(r2, r0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 21:04:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x40184150, 0x0) 21:04:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) 21:04:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060006000000e900000000000000000000001400020000000000000000000000df"], 0x40}}, 0x0) 21:04:38 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r4, r0) 21:04:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) dup2(r2, r0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 21:04:38 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x10004) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x10000) 21:04:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x40184150, 0x0) 21:04:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x804}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:04:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) dup2(r2, r0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 21:04:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x804}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:04:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x40184150, 0x0) 21:04:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0xfffffffffffffaf9, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:04:39 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r4, r0) 21:04:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\xd7\xa4\xaa\xb3U\x19\xd4\xd6\xdf0Im\x8f:m\xd9\x17\xb6\xd4\xfe\xb6Z\xeb9b\x14\x8b\xa20r\xa2\x14\xbdS\v\'\f\xaa\xfd\x99p9\x1e\xcfY\b\x15\x8c\fS# \x7f\xfe\xd4\xb7\xc6\x93\xaf7 \xf78\"~\x8308go!\x1e\xb5a\xb6\xb0\xf4O\x8a\xcf\xb5H\xb3\x90\x04\'>\xf2\xfch\xa0)v\x14\xe0\xc1<<\xca\x06\x18\x98y\xb5f\rZ\x1eo\x9a\x1fWi\x10x\x1b\xe6\a\x1d\xff\xfc\xd6\xce&\xc9\v^\x0e\t\xc5\xcd\x0e\xfa\xd3\xf8\x01i\x95\xe0\xdc\x89\x91^R\x9f3\xa03v\x91>#p\xc8\xab\x99\xa7\xb4w\xaa{5\xb2\xcb\x1dZ\xcd\x80n6`\xf6\xddY\xd9\xaf\xe1\xec\b\f\x11\x06\x00\x00\x00[m\x98n\xc4\xf9\xb82S\xf7\xfc\x81;\xe6./\xcbT\x1b(H\xf7)5\xe1\xbeR\xe5\xb5\xa4\xabgK\x96\xe9\x9c\x97\x18\xdf\x9et\xa9\xca\x06\b\x95\x82\xf5\xcfaD\xbce\x86\x9b\x9d\xd2\x00'/256, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x3000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc7409b13ac86043a, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') 21:04:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060006000000e900000000000000000000001400020000000000000000000000df"], 0x40}}, 0x0) 21:04:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x804}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:04:40 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x7ffffff7) 21:04:40 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r4, r0) 21:04:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\xd7\xa4\xaa\xb3U\x19\xd4\xd6\xdf0Im\x8f:m\xd9\x17\xb6\xd4\xfe\xb6Z\xeb9b\x14\x8b\xa20r\xa2\x14\xbdS\v\'\f\xaa\xfd\x99p9\x1e\xcfY\b\x15\x8c\fS# \x7f\xfe\xd4\xb7\xc6\x93\xaf7 \xf78\"~\x8308go!\x1e\xb5a\xb6\xb0\xf4O\x8a\xcf\xb5H\xb3\x90\x04\'>\xf2\xfch\xa0)v\x14\xe0\xc1<<\xca\x06\x18\x98y\xb5f\rZ\x1eo\x9a\x1fWi\x10x\x1b\xe6\a\x1d\xff\xfc\xd6\xce&\xc9\v^\x0e\t\xc5\xcd\x0e\xfa\xd3\xf8\x01i\x95\xe0\xdc\x89\x91^R\x9f3\xa03v\x91>#p\xc8\xab\x99\xa7\xb4w\xaa{5\xb2\xcb\x1dZ\xcd\x80n6`\xf6\xddY\xd9\xaf\xe1\xec\b\f\x11\x06\x00\x00\x00[m\x98n\xc4\xf9\xb82S\xf7\xfc\x81;\xe6./\xcbT\x1b(H\xf7)5\xe1\xbeR\xe5\xb5\xa4\xabgK\x96\xe9\x9c\x97\x18\xdf\x9et\xa9\xca\x06\b\x95\x82\xf5\xcfaD\xbce\x86\x9b\x9d\xd2\x00'/256, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x3000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc7409b13ac86043a, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') 21:04:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0xfffffffffffffaf9, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:04:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x804}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:04:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\xd7\xa4\xaa\xb3U\x19\xd4\xd6\xdf0Im\x8f:m\xd9\x17\xb6\xd4\xfe\xb6Z\xeb9b\x14\x8b\xa20r\xa2\x14\xbdS\v\'\f\xaa\xfd\x99p9\x1e\xcfY\b\x15\x8c\fS# \x7f\xfe\xd4\xb7\xc6\x93\xaf7 \xf78\"~\x8308go!\x1e\xb5a\xb6\xb0\xf4O\x8a\xcf\xb5H\xb3\x90\x04\'>\xf2\xfch\xa0)v\x14\xe0\xc1<<\xca\x06\x18\x98y\xb5f\rZ\x1eo\x9a\x1fWi\x10x\x1b\xe6\a\x1d\xff\xfc\xd6\xce&\xc9\v^\x0e\t\xc5\xcd\x0e\xfa\xd3\xf8\x01i\x95\xe0\xdc\x89\x91^R\x9f3\xa03v\x91>#p\xc8\xab\x99\xa7\xb4w\xaa{5\xb2\xcb\x1dZ\xcd\x80n6`\xf6\xddY\xd9\xaf\xe1\xec\b\f\x11\x06\x00\x00\x00[m\x98n\xc4\xf9\xb82S\xf7\xfc\x81;\xe6./\xcbT\x1b(H\xf7)5\xe1\xbeR\xe5\xb5\xa4\xabgK\x96\xe9\x9c\x97\x18\xdf\x9et\xa9\xca\x06\b\x95\x82\xf5\xcfaD\xbce\x86\x9b\x9d\xd2\x00'/256, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x3000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc7409b13ac86043a, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') 21:04:40 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x7ffffff7) 21:04:40 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r4, r0) 21:04:40 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) dup(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 21:04:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\xd7\xa4\xaa\xb3U\x19\xd4\xd6\xdf0Im\x8f:m\xd9\x17\xb6\xd4\xfe\xb6Z\xeb9b\x14\x8b\xa20r\xa2\x14\xbdS\v\'\f\xaa\xfd\x99p9\x1e\xcfY\b\x15\x8c\fS# \x7f\xfe\xd4\xb7\xc6\x93\xaf7 \xf78\"~\x8308go!\x1e\xb5a\xb6\xb0\xf4O\x8a\xcf\xb5H\xb3\x90\x04\'>\xf2\xfch\xa0)v\x14\xe0\xc1<<\xca\x06\x18\x98y\xb5f\rZ\x1eo\x9a\x1fWi\x10x\x1b\xe6\a\x1d\xff\xfc\xd6\xce&\xc9\v^\x0e\t\xc5\xcd\x0e\xfa\xd3\xf8\x01i\x95\xe0\xdc\x89\x91^R\x9f3\xa03v\x91>#p\xc8\xab\x99\xa7\xb4w\xaa{5\xb2\xcb\x1dZ\xcd\x80n6`\xf6\xddY\xd9\xaf\xe1\xec\b\f\x11\x06\x00\x00\x00[m\x98n\xc4\xf9\xb82S\xf7\xfc\x81;\xe6./\xcbT\x1b(H\xf7)5\xe1\xbeR\xe5\xb5\xa4\xabgK\x96\xe9\x9c\x97\x18\xdf\x9et\xa9\xca\x06\b\x95\x82\xf5\xcfaD\xbce\x86\x9b\x9d\xd2\x00'/256, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x3000005, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc7409b13ac86043a, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') 21:04:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060006000000e900000000000000000000001400020000000000000000000000df"], 0x40}}, 0x0) 21:04:42 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x7ffffff7) 21:04:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0xfffffffffffffaf9, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:04:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delsa={0x34, 0x11, 0x121, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) 21:04:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 21:04:42 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xa3\xba\xe5\xf4\x97\xac\xaf*\xff\x00'/23, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fd"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000), 0x4) 21:04:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f0000000000)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)) 21:04:42 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xa3\xba\xe5\xf4\x97\xac\xaf*\xff\x00'/23, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fd"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000), 0x4) 21:04:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delsa={0x34, 0x11, 0x121, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) 21:04:42 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x7ffffff7) 21:04:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f0000000000)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)) 21:04:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delsa={0x34, 0x11, 0x121, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) [ 965.163797][ C0] not chained 150000 origins [ 965.168430][ C0] CPU: 0 PID: 37 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 965.176665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.186735][ C0] Workqueue: krdsd rds_connect_worker [ 965.192101][ C0] Call Trace: [ 965.195379][ C0] [ 965.198239][ C0] dump_stack+0x1c9/0x220 [ 965.202581][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 965.208303][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 965.214374][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 965.219321][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.224524][ C0] ? __should_failslab+0x1f6/0x290 [ 965.229644][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 965.234756][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.240571][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 965.246731][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 965.252028][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.257231][ C0] __msan_chain_origin+0x50/0x90 [ 965.262176][ C0] tcp_conn_request+0x174b/0x4d10 [ 965.267228][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 965.273296][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 965.278146][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 965.284212][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.289410][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.294615][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.299731][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.304762][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 965.310050][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.315422][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.321229][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.326425][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.332238][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 965.338312][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.343515][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 965.348237][ C0] tcp_v4_rcv+0x425c/0x5040 [ 965.352750][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 965.358844][ C0] ? tcp_filter+0xf0/0xf0 [ 965.363170][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 965.368632][ C0] ip_local_deliver+0x62a/0x7c0 [ 965.373491][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 965.378517][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 965.384145][ C0] ip_rcv+0x6cf/0x750 [ 965.388132][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 965.392892][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 965.398522][ C0] process_backlog+0xf0b/0x1410 [ 965.403377][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 965.409982][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 965.418390][ C0] net_rx_action+0x786/0x1aa0 [ 965.423080][ C0] ? net_tx_action+0xc30/0xc30 [ 965.427841][ C0] __do_softirq+0x311/0x83d [ 965.432359][ C0] do_softirq_own_stack+0x49/0x80 [ 965.437549][ C0] [ 965.440495][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 965.445706][ C0] local_bh_enable+0x36/0x40 [ 965.450298][ C0] ip_finish_output2+0x2115/0x2610 [ 965.455411][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 965.461139][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 965.467136][ C0] __ip_finish_output+0xaa7/0xd80 [ 965.472173][ C0] ip_finish_output+0x166/0x410 [ 965.477029][ C0] ip_output+0x593/0x680 [ 965.481282][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 965.486576][ C0] ? ip_finish_output+0x410/0x410 [ 965.491608][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 965.496561][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 965.502112][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.507329][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.512534][ C0] ip_queue_xmit+0xcc/0xf0 [ 965.516956][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 965.521812][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 965.527025][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.532239][ C0] tcp_connect+0x420a/0x6830 [ 965.536837][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 965.542147][ C0] tcp_v4_connect+0x21fd/0x2370 [ 965.547027][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 965.551969][ C0] __inet_stream_connect+0x2fb/0x1340 [ 965.557350][ C0] ? __local_bh_enable_ip+0x97/0x1d0 21:04:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f0000000000)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)) 21:04:43 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xa3\xba\xe5\xf4\x97\xac\xaf*\xff\x00'/23, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fd"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000), 0x4) 21:04:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x482, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 21:04:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delsa={0x34, 0x11, 0x121, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) 21:04:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0xfffffffffffffaf9, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 965.562644][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.567855][ C0] inet_stream_connect+0x101/0x180 [ 965.572983][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 965.578625][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 965.584377][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 965.589579][ C0] ? rds_tcp_state_change+0x390/0x390 [ 965.594954][ C0] rds_connect_worker+0x2a6/0x470 [ 965.600013][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 965.606093][ C0] ? rds_addr_cmp+0x200/0x200 [ 965.610778][ C0] process_one_work+0x1555/0x1f40 [ 965.615835][ C0] worker_thread+0xef6/0x2450 [ 965.620538][ C0] kthread+0x4b5/0x4f0 [ 965.624609][ C0] ? process_one_work+0x1f40/0x1f40 [ 965.629811][ C0] ? kthread_blkcg+0xf0/0xf0 [ 965.634409][ C0] ret_from_fork+0x35/0x40 [ 965.638847][ C0] Uninit was stored to memory at: [ 965.643877][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.649591][ C0] __msan_chain_origin+0x50/0x90 [ 965.654541][ C0] tcp_conn_request+0x1781/0x4d10 [ 965.659563][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.664669][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.669685][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.675043][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 965.679615][ C0] tcp_v4_rcv+0x425c/0x5040 [ 965.684120][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 965.689568][ C0] ip_local_deliver+0x62a/0x7c0 [ 965.694397][ C0] ip_rcv+0x6cf/0x750 [ 965.698360][ C0] process_backlog+0xf0b/0x1410 [ 965.703190][ C0] net_rx_action+0x786/0x1aa0 [ 965.707850][ C0] __do_softirq+0x311/0x83d [ 965.719186][ C0] [ 965.721508][ C0] Uninit was stored to memory at: [ 965.726520][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.732247][ C0] __msan_chain_origin+0x50/0x90 [ 965.737168][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 965.742439][ C0] tcp_conn_request+0x33d7/0x4d10 [ 965.747453][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.752551][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.757580][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.762948][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 965.767524][ C0] tcp_v4_rcv+0x425c/0x5040 [ 965.772008][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 965.777469][ C0] ip_local_deliver+0x62a/0x7c0 [ 965.782314][ C0] ip_rcv+0x6cf/0x750 [ 965.786279][ C0] process_backlog+0xf0b/0x1410 [ 965.791113][ C0] net_rx_action+0x786/0x1aa0 [ 965.795772][ C0] __do_softirq+0x311/0x83d [ 965.800260][ C0] [ 965.802566][ C0] Uninit was stored to memory at: [ 965.807581][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.813298][ C0] __msan_chain_origin+0x50/0x90 [ 965.818221][ C0] tcp_conn_request+0x1781/0x4d10 [ 965.823226][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.828322][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.833331][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.838685][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 965.843260][ C0] tcp_v4_rcv+0x425c/0x5040 [ 965.847746][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 965.853185][ C0] ip_local_deliver+0x62a/0x7c0 [ 965.858025][ C0] ip_rcv+0x6cf/0x750 [ 965.861999][ C0] process_backlog+0xf0b/0x1410 [ 965.866833][ C0] net_rx_action+0x786/0x1aa0 [ 965.871493][ C0] __do_softirq+0x311/0x83d [ 965.875971][ C0] [ 965.878276][ C0] Uninit was stored to memory at: [ 965.883286][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.888987][ C0] __msan_chain_origin+0x50/0x90 [ 965.893907][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 965.899175][ C0] tcp_conn_request+0x33d7/0x4d10 [ 965.904179][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.909275][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.914282][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.919636][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 965.924222][ C0] tcp_v4_rcv+0x425c/0x5040 [ 965.928727][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 965.934190][ C0] ip_local_deliver+0x62a/0x7c0 [ 965.939047][ C0] ip_rcv+0x6cf/0x750 [ 965.943012][ C0] process_backlog+0xf0b/0x1410 [ 965.947849][ C0] net_rx_action+0x786/0x1aa0 [ 965.952508][ C0] __do_softirq+0x311/0x83d [ 965.956985][ C0] [ 965.959298][ C0] Uninit was stored to memory at: [ 965.964312][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.970038][ C0] __msan_chain_origin+0x50/0x90 [ 965.974966][ C0] tcp_conn_request+0x1781/0x4d10 [ 965.979984][ C0] tcp_v4_conn_request+0x19b/0x240 [ 965.985077][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 965.990084][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 965.995435][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 966.000006][ C0] tcp_v4_rcv+0x425c/0x5040 [ 966.004493][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 966.009943][ C0] ip_local_deliver+0x62a/0x7c0 [ 966.014788][ C0] ip_rcv+0x6cf/0x750 [ 966.018754][ C0] process_backlog+0xf0b/0x1410 [ 966.023585][ C0] net_rx_action+0x786/0x1aa0 [ 966.028241][ C0] __do_softirq+0x311/0x83d [ 966.032718][ C0] [ 966.035035][ C0] Uninit was stored to memory at: [ 966.040045][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 966.045750][ C0] __msan_chain_origin+0x50/0x90 [ 966.050671][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 966.055952][ C0] tcp_conn_request+0x33d7/0x4d10 [ 966.060971][ C0] tcp_v4_conn_request+0x19b/0x240 [ 966.066067][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 966.071075][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 966.076440][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 966.081012][ C0] tcp_v4_rcv+0x425c/0x5040 [ 966.085498][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 966.090940][ C0] ip_local_deliver+0x62a/0x7c0 [ 966.097369][ C0] ip_rcv+0x6cf/0x750 [ 966.101348][ C0] process_backlog+0xf0b/0x1410 [ 966.106195][ C0] net_rx_action+0x786/0x1aa0 [ 966.110867][ C0] __do_softirq+0x311/0x83d [ 966.116480][ C0] [ 966.118788][ C0] Uninit was stored to memory at: [ 966.123800][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 966.129508][ C0] __msan_chain_origin+0x50/0x90 [ 966.134451][ C0] tcp_conn_request+0x1781/0x4d10 [ 966.139463][ C0] tcp_v4_conn_request+0x19b/0x240 [ 966.144577][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 966.149606][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 966.154970][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 966.159543][ C0] tcp_v4_rcv+0x425c/0x5040 [ 966.164043][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 966.172261][ C0] ip_local_deliver+0x62a/0x7c0 [ 966.177093][ C0] ip_rcv+0x6cf/0x750 [ 966.181059][ C0] process_backlog+0xf0b/0x1410 [ 966.185979][ C0] net_rx_action+0x786/0x1aa0 [ 966.190641][ C0] __do_softirq+0x311/0x83d [ 966.195118][ C0] [ 966.197426][ C0] Uninit was created at: [ 966.201654][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 966.207269][ C0] kmsan_alloc_page+0xb9/0x180 [ 966.212018][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 966.217551][ C0] alloc_pages_current+0x67d/0x990 [ 966.222646][ C0] alloc_slab_page+0x122/0x1310 [ 966.227488][ C0] new_slab+0x2bc/0x1130 [ 966.231714][ C0] ___slab_alloc+0x14a3/0x2040 [ 966.236461][ C0] kmem_cache_alloc+0xb23/0xd70 [ 966.241297][ C0] inet_reqsk_alloc+0xac/0x830 [ 966.246050][ C0] tcp_conn_request+0x753/0x4d10 [ 966.250975][ C0] tcp_v4_conn_request+0x19b/0x240 [ 966.256070][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 966.261422][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 966.265991][ C0] tcp_v4_rcv+0x425c/0x5040 [ 966.270487][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 966.275929][ C0] ip_local_deliver+0x62a/0x7c0 [ 966.280772][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 966.285602][ C0] ip_list_rcv+0x8eb/0x950 [ 966.290000][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 966.296150][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 966.302388][ C0] napi_complete_done+0x2ef/0xb60 [ 966.307397][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 966.312753][ C0] virtnet_poll+0x1468/0x19f0 [ 966.317411][ C0] net_rx_action+0x786/0x1aa0 [ 966.322068][ C0] __do_softirq+0x311/0x83d 21:04:44 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, 0x0) 21:04:44 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xa3\xba\xe5\xf4\x97\xac\xaf*\xff\x00'/23, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fd"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000), 0x4) 21:04:44 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6"], 0x14f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000600000000000200", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="10000200000000002000050000000000"], 0x5c, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002240)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x78, 0x40841}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000dc0)="829985fc182cd53fba6546592ed910ac43d9c9d43f1d6c", 0x17}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="ee690ca3e8ebddefdec76c9be42e39b5716387160a7b7dc298fce40059990cc1d58fa48ed7c95faa7eb0f8fc2b3047570d2dce2b4a4315c913fb958c75f529238f1ab1a429332fd0c17000ee1429219ea4e6a35d4e35ba8714de71a19456cf77525706954ee9dd06581887c732ee2b3d62922db6de26dd290b73cb21b3f5fa631ee899c2a6e28844535286be9f966c088c7fca193028da98e939560e5b7f00ad57", 0xa1}, {&(0x7f0000001ec0)="b3d72e03c7016c52e2cb65c7c389977a3f96d2cead69d010186f461d83eb7fbb5d43473bec1df06db605de7e452f15f7c334f9aaafc3e610fa9227bb6e997fb2521d1e15a39a7ee66b8530b31118480e475d6dd15288fe1d027760ff56", 0x5d}, {&(0x7f0000001f80)="0ff4677cd6b4f502f4f960d75f03e8cadd074e22e4839f85f5140177f725116f51c7db6981a66b72636af4128d67d7223b6cad3f1d018808e71e8275c93f36934e7d4fa6cf9ef136fbe9d52e0aefe03602e2b70d26759904fbc6b5d28ffb39075fc6596bfddcc089cbcc733415a39ed83ac7", 0x72}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}], 0x60, 0x40}], 0x3, 0x1) setregid(r7, 0xee00) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x2, {{0x2, 0x3, 0x3, 0x1, 0x0, 0x0, {0x1, 0x400, 0x3, 0xffffffff, 0x8, 0x1, 0x6, 0x5, 0x5, 0x8000, 0x0, 0xee01, r7, 0x3, 0x10001}}, {0x0, 0x1}}}, 0xa0) sendto$inet(r1, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) [ 966.795837][ C1] sd 0:0:1:0: [sg0] tag#3251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 966.806552][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB: Test Unit Ready [ 966.813294][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.823119][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.832943][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.842777][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.852586][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.862379][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.872177][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.882090][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:04:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f0000000000)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)) [ 966.891857][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.901792][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.911649][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.921518][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 966.931387][ C1] sd 0:0:1:0: [sg0] tag#3251 CDB[c0]: 00 00 00 00 00 00 00 00 [ 967.092670][ C1] sd 0:0:1:0: [sg0] tag#3252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 967.103373][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB: Test Unit Ready [ 967.110082][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.120016][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.129973][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.139915][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.149861][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.159816][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.169765][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.179660][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.189546][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.199596][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.209558][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.219514][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.229458][ C1] sd 0:0:1:0: [sg0] tag#3252 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:45 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1ce86b4f"}, 0x0, 0x0, @planes=0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e00000000000000000a00000018000000140002"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21:04:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 21:04:45 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6"], 0x14f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000600000000000200", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="10000200000000002000050000000000"], 0x5c, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002240)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x78, 0x40841}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000dc0)="829985fc182cd53fba6546592ed910ac43d9c9d43f1d6c", 0x17}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="ee690ca3e8ebddefdec76c9be42e39b5716387160a7b7dc298fce40059990cc1d58fa48ed7c95faa7eb0f8fc2b3047570d2dce2b4a4315c913fb958c75f529238f1ab1a429332fd0c17000ee1429219ea4e6a35d4e35ba8714de71a19456cf77525706954ee9dd06581887c732ee2b3d62922db6de26dd290b73cb21b3f5fa631ee899c2a6e28844535286be9f966c088c7fca193028da98e939560e5b7f00ad57", 0xa1}, {&(0x7f0000001ec0)="b3d72e03c7016c52e2cb65c7c389977a3f96d2cead69d010186f461d83eb7fbb5d43473bec1df06db605de7e452f15f7c334f9aaafc3e610fa9227bb6e997fb2521d1e15a39a7ee66b8530b31118480e475d6dd15288fe1d027760ff56", 0x5d}, {&(0x7f0000001f80)="0ff4677cd6b4f502f4f960d75f03e8cadd074e22e4839f85f5140177f725116f51c7db6981a66b72636af4128d67d7223b6cad3f1d018808e71e8275c93f36934e7d4fa6cf9ef136fbe9d52e0aefe03602e2b70d26759904fbc6b5d28ffb39075fc6596bfddcc089cbcc733415a39ed83ac7", 0x72}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}], 0x60, 0x40}], 0x3, 0x1) setregid(r7, 0xee00) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x2, {{0x2, 0x3, 0x3, 0x1, 0x0, 0x0, {0x1, 0x400, 0x3, 0xffffffff, 0x8, 0x1, 0x6, 0x5, 0x5, 0x8000, 0x0, 0xee01, r7, 0x3, 0x10001}}, {0x0, 0x1}}}, 0xa0) sendto$inet(r1, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) [ 967.706414][ C1] sd 0:0:1:0: [sg0] tag#3253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 967.718236][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB: Test Unit Ready [ 967.725106][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.735190][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.747665][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.757571][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.767428][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.777318][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.787130][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.796937][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:04:46 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1ce86b4f"}, 0x0, 0x0, @planes=0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e00000000000000000a00000018000000140002"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 967.806752][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.816786][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.826627][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.836495][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.846326][ C1] sd 0:0:1:0: [sg0] tag#3253 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="35ff012a0259", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x6c}}, 0x0) 21:04:46 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6"], 0x14f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000600000000000200", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="10000200000000002000050000000000"], 0x5c, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002240)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x78, 0x40841}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000dc0)="829985fc182cd53fba6546592ed910ac43d9c9d43f1d6c", 0x17}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="ee690ca3e8ebddefdec76c9be42e39b5716387160a7b7dc298fce40059990cc1d58fa48ed7c95faa7eb0f8fc2b3047570d2dce2b4a4315c913fb958c75f529238f1ab1a429332fd0c17000ee1429219ea4e6a35d4e35ba8714de71a19456cf77525706954ee9dd06581887c732ee2b3d62922db6de26dd290b73cb21b3f5fa631ee899c2a6e28844535286be9f966c088c7fca193028da98e939560e5b7f00ad57", 0xa1}, {&(0x7f0000001ec0)="b3d72e03c7016c52e2cb65c7c389977a3f96d2cead69d010186f461d83eb7fbb5d43473bec1df06db605de7e452f15f7c334f9aaafc3e610fa9227bb6e997fb2521d1e15a39a7ee66b8530b31118480e475d6dd15288fe1d027760ff56", 0x5d}, {&(0x7f0000001f80)="0ff4677cd6b4f502f4f960d75f03e8cadd074e22e4839f85f5140177f725116f51c7db6981a66b72636af4128d67d7223b6cad3f1d018808e71e8275c93f36934e7d4fa6cf9ef136fbe9d52e0aefe03602e2b70d26759904fbc6b5d28ffb39075fc6596bfddcc089cbcc733415a39ed83ac7", 0x72}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}], 0x60, 0x40}], 0x3, 0x1) setregid(r7, 0xee00) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x2, {{0x2, 0x3, 0x3, 0x1, 0x0, 0x0, {0x1, 0x400, 0x3, 0xffffffff, 0x8, 0x1, 0x6, 0x5, 0x5, 0x8000, 0x0, 0xee01, r7, 0x3, 0x10001}}, {0x0, 0x1}}}, 0xa0) sendto$inet(r1, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) [ 968.718871][ C0] sd 0:0:1:0: [sg0] tag#3254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 968.729538][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB: Test Unit Ready [ 968.736273][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.746115][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.755960][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.765790][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.775655][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.785508][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.795359][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.805207][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.815068][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.824922][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.834770][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.844593][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.854418][ C0] sd 0:0:1:0: [sg0] tag#3254 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:47 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, 0x0) 21:04:47 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1ce86b4f"}, 0x0, 0x0, @planes=0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e00000000000000000a00000018000000140002"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21:04:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:47 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6"], 0x14f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000600000000000200", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="10000200000000002000050000000000"], 0x5c, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002240)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x78, 0x40841}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000dc0)="829985fc182cd53fba6546592ed910ac43d9c9d43f1d6c", 0x17}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="ee690ca3e8ebddefdec76c9be42e39b5716387160a7b7dc298fce40059990cc1d58fa48ed7c95faa7eb0f8fc2b3047570d2dce2b4a4315c913fb958c75f529238f1ab1a429332fd0c17000ee1429219ea4e6a35d4e35ba8714de71a19456cf77525706954ee9dd06581887c732ee2b3d62922db6de26dd290b73cb21b3f5fa631ee899c2a6e28844535286be9f966c088c7fca193028da98e939560e5b7f00ad57", 0xa1}, {&(0x7f0000001ec0)="b3d72e03c7016c52e2cb65c7c389977a3f96d2cead69d010186f461d83eb7fbb5d43473bec1df06db605de7e452f15f7c334f9aaafc3e610fa9227bb6e997fb2521d1e15a39a7ee66b8530b31118480e475d6dd15288fe1d027760ff56", 0x5d}, {&(0x7f0000001f80)="0ff4677cd6b4f502f4f960d75f03e8cadd074e22e4839f85f5140177f725116f51c7db6981a66b72636af4128d67d7223b6cad3f1d018808e71e8275c93f36934e7d4fa6cf9ef136fbe9d52e0aefe03602e2b70d26759904fbc6b5d28ffb39075fc6596bfddcc089cbcc733415a39ed83ac7", 0x72}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}], 0x60, 0x40}], 0x3, 0x1) setregid(r7, 0xee00) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x2, {{0x2, 0x3, 0x3, 0x1, 0x0, 0x0, {0x1, 0x400, 0x3, 0xffffffff, 0x8, 0x1, 0x6, 0x5, 0x5, 0x8000, 0x0, 0xee01, r7, 0x3, 0x10001}}, {0x0, 0x1}}}, 0xa0) sendto$inet(r1, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) 21:04:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="35ff012a0259", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 969.867154][ C1] sd 0:0:1:0: [sg0] tag#3255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 969.877908][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB: Test Unit Ready [ 969.884658][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.894577][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.904437][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.914338][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.924204][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.934090][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.943994][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.953959][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.963845][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.973726][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.983565][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.993388][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.003198][ C1] sd 0:0:1:0: [sg0] tag#3255 CDB[c0]: 00 00 00 00 00 00 00 00 21:04:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:48 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1ce86b4f"}, 0x0, 0x0, @planes=0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e00000000000000000a00000018000000140002"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21:04:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="35ff012a0259", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x6c}}, 0x0) 21:04:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) 21:04:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x3) 21:04:51 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, 0x0) 21:04:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="35ff012a0259", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x6c}}, 0x0) 21:04:51 executing program 2: socket$phonet(0x23, 0x2, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x210) 21:04:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x3) 21:04:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:04:51 executing program 2: socket$phonet(0x23, 0x2, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x210) [ 973.247885][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:04:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x3) 21:04:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x8}, 0x0) 21:04:51 executing program 2: socket$phonet(0x23, 0x2, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x210) [ 973.466483][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 973.476886][T27013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:04:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 973.650294][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x3) [ 973.975284][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:04:53 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, 0x0) 21:04:53 executing program 2: socket$phonet(0x23, 0x2, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x210) 21:04:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x8}, 0x0) 21:04:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:04:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 975.176028][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 975.289293][T27077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x8}, 0x0) 21:04:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 975.493431][T27099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 975.614578][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:04:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:04:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:04:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x8}, 0x0) [ 975.893644][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:04:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 21:04:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:55 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:04:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 21:04:55 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xc00}], 0x2, 0x0) 21:04:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 21:04:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 21:04:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:04:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 21:04:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 21:04:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 21:04:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 979.324489][T27198] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:04:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) [ 979.439236][T27201] __nla_validate_parse: 3 callbacks suppressed [ 979.439268][T27201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:04:57 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 979.580330][T27201] bond5: (slave bridge10): making interface the new active one [ 979.593245][T27201] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 979.612140][T27225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 979.624287][T27225] bond0: (slave bond5): Enslaving as an active interface with an up link [ 979.656567][ T1533] bond5: (slave bridge10): link status definitely down, disabling slave [ 979.665949][ T1533] bond5: now running without any active interface! [ 979.837578][T27201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 979.879650][T27198] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:04:58 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 980.580779][T27276] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 980.595849][T27276] CPU: 0 PID: 27276 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 980.604598][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.614711][T27276] Call Trace: [ 980.618093][T27276] dump_stack+0x1c9/0x220 [ 980.622524][T27276] warn_alloc+0x4cc/0x680 [ 980.626962][T27276] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 980.632864][T27276] __alloc_pages_nodemask+0x5aa6/0x5dc0 [ 980.638521][T27276] ? kmsan_set_origin_checked+0x95/0xf0 [ 980.644204][T27276] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 980.650351][T27276] ? cpuset_nodemask_valid_mems_allowed+0x5a/0xc0 [ 980.656875][T27276] alloc_pages_current+0x67d/0x990 [ 980.662075][T27276] ion_page_pool_alloc+0x6db/0x830 [ 980.667262][T27276] ? kmsan_get_metadata+0x11d/0x180 [ 980.672567][T27276] ion_system_heap_allocate+0x45f/0x13f0 [ 980.678305][T27276] ? ion_system_contig_heap_create+0x210/0x210 [ 980.684554][T27276] ion_ioctl+0x79d/0x1fc0 [ 980.689008][T27276] ? debug_shrink_set+0x220/0x220 [ 980.694110][T27276] __se_sys_ioctl+0x2e9/0x410 [ 980.698885][T27276] __x64_sys_ioctl+0x4a/0x70 [ 980.703559][T27276] do_syscall_64+0xb8/0x160 [ 980.708158][T27276] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 980.714104][T27276] RIP: 0033:0x45ca29 [ 980.718081][T27276] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.737757][T27276] RSP: 002b:00007f63a29a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.746253][T27276] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 980.754289][T27276] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 980.762323][T27276] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 980.770348][T27276] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 980.778384][T27276] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f63a29a86d4 [ 980.803313][T27276] Mem-Info: [ 980.806606][T27276] active_anon:125386 inactive_anon:4837 isolated_anon:0 [ 980.806606][T27276] active_file:9180 inactive_file:56036 isolated_file:32 [ 980.806606][T27276] unevictable:0 dirty:82 writeback:0 unstable:0 [ 980.806606][T27276] slab_reclaimable:5901 slab_unreclaimable:27247 [ 980.806606][T27276] mapped:60821 shmem:5049 pagetables:4360 bounce:0 [ 980.806606][T27276] free:182403 free_pcp:336 free_cma:0 [ 980.844808][T27276] Node 0 active_anon:489576kB inactive_anon:19220kB active_file:37360kB inactive_file:220308kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:243280kB dirty:140kB writeback:0kB shmem:20036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 518144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 980.878749][T27276] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.907926][T27276] lowmem_reserve[]: 0 996 1224 1224 [ 980.913362][T27276] Node 0 DMA32 free:43324kB min:42412kB low:53012kB high:63612kB reserved_highatomic:0KB active_anon:477420kB inactive_anon:32kB active_file:4168kB inactive_file:218136kB unevictable:0kB writepending:128kB present:3129332kB managed:1019904kB mlocked:0kB kernel_stack:1120kB pagetables:6064kB bounce:0kB free_pcp:1480kB local_pcp:0kB free_cma:0kB [ 980.945827][T27276] lowmem_reserve[]: 0 0 228 228 [ 980.950777][T27276] Node 0 Normal free:24040kB min:24044kB low:26468kB high:28892kB reserved_highatomic:0KB active_anon:12064kB inactive_anon:19188kB active_file:33200kB inactive_file:2396kB unevictable:0kB writepending:12kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:3396kB pagetables:3020kB bounce:0kB free_pcp:320kB local_pcp:0kB free_cma:0kB [ 980.983285][T27276] lowmem_reserve[]: 0 0 0 0 [ 980.987890][T27276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 980.999988][T27276] Node 0 DMA32: 521*4kB (UME) 317*8kB (UME) 104*16kB (UME) 144*32kB (UME) 30*64kB (ME) 23*128kB (UME) 9*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 1*2048kB (M) 4*4096kB (M) = 44172kB [ 981.018209][T27276] Node 0 Normal: 662*4kB (UME) 471*8kB (UME) 283*16kB (UME) 156*32kB (UME) 71*64kB (UME) 30*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24576kB [ 981.034749][T27276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.044509][T27276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.054009][T27276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.063770][T27276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.073256][T27276] 46191 total pagecache pages [ 981.077979][T27276] 0 pages in swap cache [ 981.082351][T27276] Swap cache stats: add 0, delete 0, find 0/0 [ 981.088459][T27276] Free swap = 0kB [ 981.092377][T27276] Total swap = 0kB [ 981.096139][T27276] 1965979 pages RAM [ 981.099977][T27276] 0 pages HighMem/MovableOnly [ 981.104839][T27276] 1423249 pages reserved [ 981.109110][T27276] 0 pages cma reserved 21:05:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xc00}], 0x2, 0x0) 21:05:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x40007, 0x1b, 0x0, 0x5f}}) 21:05:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:00 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:05:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 982.356276][T27294] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 982.501506][T27295] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 982.607713][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 982.637656][T27336] bond5: (slave bridge1): making interface the new active one 21:05:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xc00}], 0x2, 0x0) [ 982.650525][T27336] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 982.676326][T27324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 982.688175][T27324] bond0: (slave bond7): Enslaving as an active interface with an up link [ 982.707792][T27340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 982.719840][T27340] bond0: (slave bond5): Enslaving as an active interface with an up link [ 982.730391][ T671] bond5: (slave bridge1): link status definitely down, disabling slave [ 982.738870][ T671] bond5: now running without any active interface! 21:05:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x40007, 0x1b, 0x0, 0x5f}}) 21:05:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x40007, 0x1b, 0x0, 0x5f}}) 21:05:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 983.188459][T27382] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 983.287575][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 983.317885][T27416] bond8: (slave bridge12): making interface the new active one [ 983.330621][T27416] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 983.363176][T27417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 983.375360][T27417] bond0: (slave bond8): Enslaving as an active interface with an up link [ 983.392175][ T671] bond8: (slave bridge12): link status definitely down, disabling slave [ 983.400811][ T671] bond8: now running without any active interface! 21:05:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x40007, 0x1b, 0x0, 0x5f}}) [ 983.576431][T27421] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 983.594737][ C1] not chained 160000 origins [ 983.599371][ C1] CPU: 1 PID: 37 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 983.607605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.617674][ C1] Workqueue: krdsd rds_connect_worker [ 983.623045][ C1] Call Trace: [ 983.626324][ C1] [ 983.629181][ C1] dump_stack+0x1c9/0x220 [ 983.633523][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 983.639247][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 983.645338][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 983.650277][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.655483][ C1] ? __should_failslab+0x1f6/0x290 [ 983.660608][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 983.665712][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 983.671506][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 983.677645][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 983.682925][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.688109][ C1] __msan_chain_origin+0x50/0x90 [ 983.693036][ C1] tcp_conn_request+0x1781/0x4d10 [ 983.698073][ C1] ? kmsan_task_context_state+0x47/0x90 [ 983.703717][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.708901][ C1] tcp_v4_conn_request+0x19b/0x240 [ 983.714017][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 983.719117][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 983.724388][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 983.729744][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 983.735540][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.740736][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 983.746533][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 983.752590][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.757775][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 983.762355][ C1] tcp_v4_rcv+0x425c/0x5040 [ 983.766862][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 983.772937][ C1] ? tcp_filter+0xf0/0xf0 [ 983.777252][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 983.782716][ C1] ip_local_deliver+0x62a/0x7c0 [ 983.787559][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 983.792587][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 983.798202][ C1] ip_rcv+0x6cf/0x750 [ 983.802171][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 983.806917][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 983.812544][ C1] process_backlog+0xf0b/0x1410 [ 983.817388][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 983.823098][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 983.828715][ C1] net_rx_action+0x786/0x1aa0 [ 983.833733][ C1] ? net_tx_action+0xc30/0xc30 [ 983.838482][ C1] __do_softirq+0x311/0x83d [ 983.843067][ C1] do_softirq_own_stack+0x49/0x80 [ 983.848067][ C1] [ 983.850996][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 983.856186][ C1] local_bh_enable+0x36/0x40 [ 983.860758][ C1] ip_finish_output2+0x2115/0x2610 [ 983.865854][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 983.871566][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 983.877553][ C1] __ip_finish_output+0xaa7/0xd80 [ 983.882576][ C1] ip_finish_output+0x166/0x410 [ 983.887424][ C1] ip_output+0x593/0x680 [ 983.891663][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 983.896951][ C1] ? ip_finish_output+0x410/0x410 [ 983.901961][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 983.906923][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 983.912460][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.917756][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.922953][ C1] ip_queue_xmit+0xcc/0xf0 [ 983.927360][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 983.932198][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 983.937405][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.942610][ C1] tcp_connect+0x420a/0x6830 [ 983.947197][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 983.952484][ C1] tcp_v4_connect+0x21fd/0x2370 [ 983.957346][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 983.962315][ C1] __inet_stream_connect+0x2fb/0x1340 [ 983.967694][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 983.973006][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.978199][ C1] inet_stream_connect+0x101/0x180 [ 983.983299][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 983.988918][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 983.994555][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 983.999738][ C1] ? rds_tcp_state_change+0x390/0x390 [ 984.005093][ C1] rds_connect_worker+0x2a6/0x470 [ 984.010106][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 984.016170][ C1] ? rds_addr_cmp+0x200/0x200 [ 984.020845][ C1] process_one_work+0x1555/0x1f40 [ 984.025877][ C1] worker_thread+0xef6/0x2450 [ 984.030555][ C1] kthread+0x4b5/0x4f0 [ 984.034608][ C1] ? process_one_work+0x1f40/0x1f40 [ 984.039797][ C1] ? kthread_blkcg+0xf0/0xf0 [ 984.044375][ C1] ret_from_fork+0x35/0x40 [ 984.048777][ C1] Uninit was stored to memory at: [ 984.053787][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.059490][ C1] __msan_chain_origin+0x50/0x90 [ 984.064413][ C1] tcp_conn_request+0x1781/0x4d10 [ 984.069419][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.074514][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.079522][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.084879][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.089453][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.093943][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.099384][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.104217][ C1] ip_rcv+0x6cf/0x750 [ 984.108181][ C1] process_backlog+0xf0b/0x1410 [ 984.113015][ C1] net_rx_action+0x786/0x1aa0 [ 984.117686][ C1] __do_softirq+0x311/0x83d [ 984.122172][ C1] [ 984.124480][ C1] Uninit was stored to memory at: [ 984.129509][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.135227][ C1] __msan_chain_origin+0x50/0x90 [ 984.140155][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 984.145451][ C1] tcp_conn_request+0x33d7/0x4d10 [ 984.150478][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.155585][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.160604][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.165960][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.170534][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.175193][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.180630][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.185462][ C1] ip_rcv+0x6cf/0x750 [ 984.189427][ C1] process_backlog+0xf0b/0x1410 [ 984.194264][ C1] net_rx_action+0x786/0x1aa0 [ 984.198920][ C1] __do_softirq+0x311/0x83d [ 984.203397][ C1] [ 984.205705][ C1] Uninit was stored to memory at: [ 984.210715][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.216416][ C1] __msan_chain_origin+0x50/0x90 [ 984.221336][ C1] tcp_conn_request+0x1781/0x4d10 [ 984.226339][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.231433][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.236452][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.241809][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.246379][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.250862][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.256301][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.261132][ C1] ip_rcv+0x6cf/0x750 [ 984.265095][ C1] process_backlog+0xf0b/0x1410 [ 984.270011][ C1] net_rx_action+0x786/0x1aa0 [ 984.274689][ C1] __do_softirq+0x311/0x83d [ 984.279165][ C1] [ 984.281471][ C1] Uninit was stored to memory at: [ 984.286479][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.292181][ C1] __msan_chain_origin+0x50/0x90 [ 984.297099][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 984.302366][ C1] tcp_conn_request+0x33d7/0x4d10 [ 984.307371][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.312466][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.317498][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.322852][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.327422][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.331905][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.337354][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.342184][ C1] ip_rcv+0x6cf/0x750 [ 984.346148][ C1] process_backlog+0xf0b/0x1410 [ 984.350977][ C1] net_rx_action+0x786/0x1aa0 [ 984.355637][ C1] __do_softirq+0x311/0x83d [ 984.360114][ C1] [ 984.362421][ C1] Uninit was stored to memory at: [ 984.367428][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.373218][ C1] __msan_chain_origin+0x50/0x90 [ 984.378139][ C1] tcp_conn_request+0x1781/0x4d10 [ 984.383144][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.388237][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.393245][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.398598][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.403169][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.407650][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.413104][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.417933][ C1] ip_rcv+0x6cf/0x750 [ 984.421898][ C1] process_backlog+0xf0b/0x1410 [ 984.426729][ C1] net_rx_action+0x786/0x1aa0 [ 984.431388][ C1] __do_softirq+0x311/0x83d [ 984.435865][ C1] [ 984.438173][ C1] Uninit was stored to memory at: [ 984.443187][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.448900][ C1] __msan_chain_origin+0x50/0x90 [ 984.453822][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 984.459089][ C1] tcp_conn_request+0x33d7/0x4d10 [ 984.464095][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.469189][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.474283][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.479637][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.484208][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.488693][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.494132][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.498967][ C1] ip_rcv+0x6cf/0x750 [ 984.502933][ C1] process_backlog+0xf0b/0x1410 [ 984.507762][ C1] net_rx_action+0x786/0x1aa0 [ 984.512426][ C1] __do_softirq+0x311/0x83d [ 984.516915][ C1] [ 984.519221][ C1] Uninit was stored to memory at: [ 984.524230][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 984.529939][ C1] __msan_chain_origin+0x50/0x90 [ 984.534862][ C1] tcp_conn_request+0x1781/0x4d10 [ 984.539875][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.544968][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.549978][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.555330][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.559901][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.564404][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.569844][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.574674][ C1] ip_rcv+0x6cf/0x750 [ 984.578637][ C1] process_backlog+0xf0b/0x1410 [ 984.583479][ C1] net_rx_action+0x786/0x1aa0 [ 984.588134][ C1] __do_softirq+0x311/0x83d [ 984.592613][ C1] [ 984.594917][ C1] Uninit was created at: [ 984.599143][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 984.604755][ C1] kmsan_alloc_page+0xb9/0x180 [ 984.609500][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 984.615029][ C1] alloc_pages_current+0x67d/0x990 [ 984.620122][ C1] alloc_slab_page+0x122/0x1310 [ 984.624953][ C1] new_slab+0x2bc/0x1130 [ 984.629187][ C1] ___slab_alloc+0x14a3/0x2040 [ 984.633932][ C1] kmem_cache_alloc+0xb23/0xd70 [ 984.638764][ C1] inet_reqsk_alloc+0xac/0x830 [ 984.643513][ C1] tcp_conn_request+0x753/0x4d10 [ 984.648441][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.653536][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 984.658918][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.663501][ C1] tcp_v4_rcv+0x425c/0x5040 [ 984.667984][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.674376][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.679204][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 984.684043][ C1] ip_list_rcv+0x8eb/0x950 [ 984.688446][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 984.694582][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 984.700807][ C1] napi_complete_done+0x2ef/0xb60 [ 984.705837][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 984.711191][ C1] virtnet_poll+0x1468/0x19f0 [ 984.715862][ C1] net_rx_action+0x786/0x1aa0 [ 984.720519][ C1] __do_softirq+0x311/0x83d 21:05:02 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 984.842671][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 984.871815][T27423] bond6: (slave bridge2): making interface the new active one [ 984.884373][T27423] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 984.907684][T27425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 984.919932][T27425] bond0: (slave bond6): Enslaving as an active interface with an up link [ 984.934725][ T333] bond6: (slave bridge2): link status definitely down, disabling slave [ 984.943348][ T333] bond6: now running without any active interface! 21:05:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfe08) read(r1, &(0x7f0000000380)=""/225, 0xfffffd0d) 21:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300feffffff0004000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 985.405133][T27466] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:05:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 985.523357][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 985.679418][T27471] bond9: (slave bridge13): making interface the new active one [ 985.692411][T27471] bond9: (slave bridge13): Enslaving as an active interface with an up link [ 985.717171][T27504] 8021q: adding VLAN 0 to HW filter on device bond9 [ 985.729055][T27504] bond0: (slave bond9): Enslaving as an active interface with an up link [ 985.750017][ T333] bond9: (slave bridge13): link status definitely down, disabling slave [ 985.758640][ T333] bond9: now running without any active interface! [ 985.832876][T27510] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 986.029208][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.058078][T27511] bond7: (slave bridge3): making interface the new active one [ 986.071021][T27511] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 986.094293][T27514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 986.153137][T27514] bond0: (slave bond7): Enslaving as an active interface with an up link [ 986.164460][ T1533] bond7: (slave bridge3): link status definitely down, disabling slave [ 986.172990][ T1533] bond7: now running without any active interface! 21:05:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfe08) read(r1, &(0x7f0000000380)=""/225, 0xfffffd0d) 21:05:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xc00}], 0x2, 0x0) 21:05:05 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x38, &(0x7f0000000140)}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:05:05 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x11}, {&(0x7f0000000180)="5306c1c1f3f210f8aebd789e882fd32cbfa9cdae5bb8c950025eef76b289af9a0e749d0a4cccafb51f8b69943ef2cc6df4129096d83f3bc74286d38171ad17d15ff9b637aa6b6ba721d744c7ad8c3780bf67019eb9774f19dbe1db91859d20eb63106e0f1f9ed0d2fcb336f498810060a0ea60612bab368ac62e3dd762f455913d7553c294001b37d42cf1c7c2d8cae77267693b372d2d7d346bc68ea3dff1cdcd9f663722659a1a2c0a15a6577ad6cfa522b52a63fed0c83751345520a52d2e00df54a413d36d20e93646c480e39649e6ec3a9d668e93e38ac5b89f5bf122459fd45665015af84f319148123c89c286dd551e559c9c7a0007", 0xf9}], 0x2) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x40000000000007f, 0x40000022, 0x0) 21:05:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfe08) read(r1, &(0x7f0000000380)=""/225, 0xfffffd0d) 21:05:05 executing program 0: timerfd_settime(0xffffffffffffffff, 0x3acf775f0a3c2206, &(0x7f0000000140), 0x0) 21:05:05 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x11}, {&(0x7f0000000180)="5306c1c1f3f210f8aebd789e882fd32cbfa9cdae5bb8c950025eef76b289af9a0e749d0a4cccafb51f8b69943ef2cc6df4129096d83f3bc74286d38171ad17d15ff9b637aa6b6ba721d744c7ad8c3780bf67019eb9774f19dbe1db91859d20eb63106e0f1f9ed0d2fcb336f498810060a0ea60612bab368ac62e3dd762f455913d7553c294001b37d42cf1c7c2d8cae77267693b372d2d7d346bc68ea3dff1cdcd9f663722659a1a2c0a15a6577ad6cfa522b52a63fed0c83751345520a52d2e00df54a413d36d20e93646c480e39649e6ec3a9d668e93e38ac5b89f5bf122459fd45665015af84f319148123c89c286dd551e559c9c7a0007", 0xf9}], 0x2) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x40000000000007f, 0x40000022, 0x0) 21:05:06 executing program 0: timerfd_settime(0xffffffffffffffff, 0x3acf775f0a3c2206, &(0x7f0000000140), 0x0) 21:05:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfe08) read(r1, &(0x7f0000000380)=""/225, 0xfffffd0d) 21:05:06 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x38, &(0x7f0000000140)}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:05:06 executing program 0: timerfd_settime(0xffffffffffffffff, 0x3acf775f0a3c2206, &(0x7f0000000140), 0x0) 21:05:07 executing program 5: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r0}, &(0x7f0000000100)=""/84, 0x54, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) 21:05:07 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x11}, {&(0x7f0000000180)="5306c1c1f3f210f8aebd789e882fd32cbfa9cdae5bb8c950025eef76b289af9a0e749d0a4cccafb51f8b69943ef2cc6df4129096d83f3bc74286d38171ad17d15ff9b637aa6b6ba721d744c7ad8c3780bf67019eb9774f19dbe1db91859d20eb63106e0f1f9ed0d2fcb336f498810060a0ea60612bab368ac62e3dd762f455913d7553c294001b37d42cf1c7c2d8cae77267693b372d2d7d346bc68ea3dff1cdcd9f663722659a1a2c0a15a6577ad6cfa522b52a63fed0c83751345520a52d2e00df54a413d36d20e93646c480e39649e6ec3a9d668e93e38ac5b89f5bf122459fd45665015af84f319148123c89c286dd551e559c9c7a0007", 0xf9}], 0x2) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x40000000000007f, 0x40000022, 0x0) 21:05:08 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x38, &(0x7f0000000140)}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:05:08 executing program 0: timerfd_settime(0xffffffffffffffff, 0x3acf775f0a3c2206, &(0x7f0000000140), 0x0) 21:05:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe4, 0x0) 21:05:08 executing program 5: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r0}, &(0x7f0000000100)=""/84, 0x54, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) 21:05:08 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x11}, {&(0x7f0000000180)="5306c1c1f3f210f8aebd789e882fd32cbfa9cdae5bb8c950025eef76b289af9a0e749d0a4cccafb51f8b69943ef2cc6df4129096d83f3bc74286d38171ad17d15ff9b637aa6b6ba721d744c7ad8c3780bf67019eb9774f19dbe1db91859d20eb63106e0f1f9ed0d2fcb336f498810060a0ea60612bab368ac62e3dd762f455913d7553c294001b37d42cf1c7c2d8cae77267693b372d2d7d346bc68ea3dff1cdcd9f663722659a1a2c0a15a6577ad6cfa522b52a63fed0c83751345520a52d2e00df54a413d36d20e93646c480e39649e6ec3a9d668e93e38ac5b89f5bf122459fd45665015af84f319148123c89c286dd551e559c9c7a0007", 0xf9}], 0x2) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x40000000000007f, 0x40000022, 0x0) 21:05:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) [ 990.183254][T27635] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 21:05:08 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xe0, 0x13, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@typed={0x8}, @typed={0x8}, @typed={0x8}, @generic="2fa6eedb8653a1c75efed95f03b8d15e427b68c90f97ee5df2c44d6ef878a4930e787df8cab5c5123244f0a29dd3a2209bc71bb789762348a31e0d91f57a2e1426cf85bd1ee983450f0b35b28b0034d524170e296fd596eb4dacf64764fdd447e0e37c94106342020a62d60a7826b47ea9015ed77468e0269318ea1db488656fb2c0000c05c265d698e4dd32cfc7a5ba5803e89be03e3f7b1b1b55e5ec953b2d65b1afb2cc6ad61adb2dbe2b06d16ddb2f"]}, 0xe0}}, 0x0) 21:05:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x82000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000300)="94a4b04e04000000000000002b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 21:05:08 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x38, &(0x7f0000000140)}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 21:05:08 executing program 5: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r0}, &(0x7f0000000100)=""/84, 0x54, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) 21:05:08 executing program 5: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r0}, &(0x7f0000000100)=""/84, 0x54, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}}) 21:05:08 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xe0, 0x13, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@typed={0x8}, @typed={0x8}, @typed={0x8}, @generic="2fa6eedb8653a1c75efed95f03b8d15e427b68c90f97ee5df2c44d6ef878a4930e787df8cab5c5123244f0a29dd3a2209bc71bb789762348a31e0d91f57a2e1426cf85bd1ee983450f0b35b28b0034d524170e296fd596eb4dacf64764fdd447e0e37c94106342020a62d60a7826b47ea9015ed77468e0269318ea1db488656fb2c0000c05c265d698e4dd32cfc7a5ba5803e89be03e3f7b1b1b55e5ec953b2d65b1afb2cc6ad61adb2dbe2b06d16ddb2f"]}, 0xe0}}, 0x0) 21:05:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 21:05:09 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xe0, 0x13, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@typed={0x8}, @typed={0x8}, @typed={0x8}, @generic="2fa6eedb8653a1c75efed95f03b8d15e427b68c90f97ee5df2c44d6ef878a4930e787df8cab5c5123244f0a29dd3a2209bc71bb789762348a31e0d91f57a2e1426cf85bd1ee983450f0b35b28b0034d524170e296fd596eb4dacf64764fdd447e0e37c94106342020a62d60a7826b47ea9015ed77468e0269318ea1db488656fb2c0000c05c265d698e4dd32cfc7a5ba5803e89be03e3f7b1b1b55e5ec953b2d65b1afb2cc6ad61adb2dbe2b06d16ddb2f"]}, 0xe0}}, 0x0) 21:05:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe4, 0x0) 21:05:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 21:05:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77682a85}, @fd={0x73682a85}, @flat=@handle}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) [ 991.365646][T27675] binder: BINDER_SET_CONTEXT_MGR already set [ 991.371911][T27675] binder: 27671:27675 ioctl 40046207 0 returned -16 [ 991.393365][T27677] binder: BINDER_SET_CONTEXT_MGR already set [ 991.399443][T27677] binder: 27671:27677 ioctl 40046207 0 returned -16 [ 991.432343][T27678] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 992.556892][T27688] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 992.567928][T27688] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:05:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) 21:05:10 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xe0, 0x13, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@typed={0x8}, @typed={0x8}, @typed={0x8}, @generic="2fa6eedb8653a1c75efed95f03b8d15e427b68c90f97ee5df2c44d6ef878a4930e787df8cab5c5123244f0a29dd3a2209bc71bb789762348a31e0d91f57a2e1426cf85bd1ee983450f0b35b28b0034d524170e296fd596eb4dacf64764fdd447e0e37c94106342020a62d60a7826b47ea9015ed77468e0269318ea1db488656fb2c0000c05c265d698e4dd32cfc7a5ba5803e89be03e3f7b1b1b55e5ec953b2d65b1afb2cc6ad61adb2dbe2b06d16ddb2f"]}, 0xe0}}, 0x0) [ 992.915261][T27694] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 992.926210][T27694] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:05:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x1c1a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x800) 21:05:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 21:05:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77682a85}, @fd={0x73682a85}, @flat=@handle}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 21:05:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe4, 0x0) 21:05:11 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0xc0042, 0xb45f0d6ee7facc1b) sendfile(r1, r0, 0x0, 0x283) 21:05:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) [ 993.652860][T27709] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 21:05:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77682a85}, @fd={0x73682a85}, @flat=@handle}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 21:05:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 21:05:11 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0xc0042, 0xb45f0d6ee7facc1b) sendfile(r1, r0, 0x0, 0x283) 21:05:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c, 0xa, 0xffc2, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) 21:05:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77682a85}, @fd={0x73682a85}, @flat=@handle}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 21:05:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x1c1a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x800) 21:05:12 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0xc0042, 0xb45f0d6ee7facc1b) sendfile(r1, r0, 0x0, 0x283) 21:05:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c, 0xa, 0xffc2, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) 21:05:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe4, 0x0) 21:05:12 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0xc0042, 0xb45f0d6ee7facc1b) sendfile(r1, r0, 0x0, 0x283) 21:05:12 executing program 5: fanotify_mark(0xffffffffffffffff, 0x30, 0x0, 0xffffffffffffffff, 0x0) [ 994.815023][T27739] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 995.000188][T27741] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 995.011265][T27741] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:05:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) 21:05:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x1c1a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x800) 21:05:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c, 0xa, 0xffc2, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) 21:05:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c, 0xa, 0xffc2, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) 21:05:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x1c1a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x800) 21:05:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x6e1, 0x0) ioctl(r0, 0xffffffb0, &(0x7f0000000000)) [ 996.947929][T27810] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 996.958964][T27810] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:05:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x6e1, 0x0) ioctl(r0, 0xffffffb0, &(0x7f0000000000)) 21:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x6e1, 0x0) ioctl(r0, 0xffffffb0, &(0x7f0000000000)) 21:05:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) write$evdev(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:05:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) close(r1) 21:05:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x6e1, 0x0) ioctl(r0, 0xffffffb0, &(0x7f0000000000)) 21:05:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)="91", 0x1}, 0x0]) 21:05:16 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25010000000a000900aaaaaaaaaabb0000080006", @ANYRES32=0x0, @ANYBLOB="0a00000000001000000bca"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000000700fff64017db9820000000000000d423ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d23822c013286344c03948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80819a277d9079cc4cb5e0ab17b299b81f2d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f333396d74c92fad7e34bd5522400cc36c2442eac2d224609abe062060800000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a0e786b6d985f7f04533da93f7b0ee0ceb0e80600cff8ca2996e518e3e69051f6d243e0e9b2be17f9ebfeb82ee2469fb39bdbb2768d25f19600002dc045421b94d878d0d9c2a5c74633b6cd8ae563734d4f1089a687a135308e49ce058c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f71d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643dbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f7bc830a34b0beb233e0e40d89147bc67990d3b754ca3b88608f2ea4b1fcd7c5325bc49c0db6a83686a87853ebc969b7b127029041a37a4786119e66ee408f33afc7e7df4fd5f861d000000005c334bdc4c599cc52ab46ae956987b494fbf0430d762e7fd554cef7b2401ed846e5e9b76694f86fc"], 0x259) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000800) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x1, 0x51424752, 0x10001, 0x800, 0x2, @stepwise={{0x6, 0x6}, {0xf660}, {0x0, 0x8}}}) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) 21:05:16 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) 21:05:16 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 21:05:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) [ 998.278452][ C0] sd 0:0:1:0: [sg0] tag#3211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.289154][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB: Test Unit Ready [ 998.295963][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.305826][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.315715][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.326698][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.336580][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.346443][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.356297][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.366144][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.375997][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.385860][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.395740][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.405772][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.415640][ C0] sd 0:0:1:0: [sg0] tag#3211 CDB[c0]: 00 00 00 00 00 00 00 00 [ 998.451730][T27891] IPVS: ftp: loaded support on port[0] = 21 [ 998.971497][ C0] sd 0:0:1:0: [sg0] tag#3212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.982241][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB: Test Unit Ready [ 998.988900][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 998.998810][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.008669][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.018529][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.028382][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.038239][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.048084][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.057931][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.067776][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.077609][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.087464][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.097306][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 999.107110][ C0] sd 0:0:1:0: [sg0] tag#3212 CDB[c0]: 00 00 00 00 00 00 00 00 [ 999.561972][ T333] tipc: TX() has been purged, node left! [ 999.703252][ C0] not chained 170000 origins [ 999.707881][ C0] CPU: 0 PID: 19802 Comm: kworker/u4:3 Not tainted 5.7.0-rc4-syzkaller #0 [ 999.716376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.726440][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 999.732065][ C0] Call Trace: [ 999.735342][ C0] [ 999.738194][ C0] dump_stack+0x1c9/0x220 [ 999.742527][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 999.748245][ C0] ? inet_twsk_alloc+0xa8a/0xba0 [ 999.753178][ C0] ? tcp_time_wait+0xcd/0x10b0 [ 999.757935][ C0] ? tcp_fin+0x1f9/0x890 [ 999.762175][ C0] ? tcp_data_queue+0x24ce/0x9c40 [ 999.767198][ C0] ? tcp_rcv_state_process+0x5ba3/0x71c0 [ 999.772857][ C0] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 999.777616][ C0] ? tcp_v4_rcv+0x4c77/0x5040 [ 999.782286][ C0] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 999.787917][ C0] ? ip_local_deliver+0x62a/0x7c0 [ 999.792938][ C0] ? ip_rcv+0x6cf/0x750 [ 999.797093][ C0] ? process_backlog+0xf0b/0x1410 [ 999.802113][ C0] ? net_rx_action+0x786/0x1aa0 [ 999.806956][ C0] ? __do_softirq+0x311/0x83d [ 999.811638][ C0] ? do_softirq_own_stack+0x49/0x80 [ 999.816837][ C0] ? kmsan_internal_chain_origin+0x30/0x130 [ 999.822724][ C0] ? ip_finish_output2+0x2115/0x2610 [ 999.828002][ C0] ? __ip_finish_output+0xaa7/0xd80 [ 999.833193][ C0] ? ip_finish_output+0x166/0x410 [ 999.838209][ C0] ? ip_output+0x593/0x680 [ 999.842621][ C0] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 999.847729][ C0] ? ip_queue_xmit+0xcc/0xf0 [ 999.852315][ C0] ? __tcp_transmit_skb+0x4221/0x6090 [ 999.857680][ C0] ? tcp_write_xmit+0x30e1/0xb470 [ 999.862697][ C0] ? __tcp_push_pending_frames+0x124/0x4e0 [ 999.868585][ C0] ? tcp_send_fin+0x131e/0x1570 [ 999.873438][ C0] ? tcp_shutdown+0x188/0x200 [ 999.878115][ C0] ? inet_shutdown+0x342/0x5e0 [ 999.882874][ C0] ? kernel_sock_shutdown+0x9d/0xc0 [ 999.888075][ C0] ? rds_tcp_accept_one+0xe17/0x1060 [ 999.893363][ C0] ? rds_tcp_accept_worker+0x61/0x160 [ 999.898733][ C0] ? process_one_work+0x1555/0x1f40 [ 999.903930][ C0] ? worker_thread+0xef6/0x2450 [ 999.908787][ C0] ? kthread+0x4b5/0x4f0 [ 999.913034][ C0] ? ret_from_fork+0x35/0x40 [ 999.917621][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 999.922821][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 999.928628][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 999.934703][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 999.939996][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 999.945842][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 999.952009][ C0] ? __msan_get_context_state+0x9/0x20 [ 999.957476][ C0] ? __module_get+0x19/0x230 [ 999.962068][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 999.967269][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 999.972476][ C0] __msan_chain_origin+0x50/0x90 [ 999.977424][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 999.982631][ C0] tcp_time_wait+0xaca/0x10b0 [ 999.987322][ C0] tcp_fin+0x1f9/0x890 [ 999.991396][ C0] tcp_data_queue+0x24ce/0x9c40 [ 999.996258][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1000.002065][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1000.008185][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.013651][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1000.019547][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1000.025535][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1000.030735][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.035337][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.039842][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1000.045931][ C0] ? tcp_v4_rcv+0x1511/0x5040 [ 1000.050613][ C0] ? tcp_filter+0xf0/0xf0 [ 1000.054942][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.060410][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.065294][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 1000.070316][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 1000.075948][ C0] ip_rcv+0x6cf/0x750 [ 1000.079956][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 1000.084728][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1000.090365][ C0] process_backlog+0xf0b/0x1410 [ 1000.095232][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1000.100876][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1000.106159][ C0] net_rx_action+0x786/0x1aa0 [ 1000.110862][ C0] ? net_tx_action+0xc30/0xc30 [ 1000.115640][ C0] __do_softirq+0x311/0x83d [ 1000.120167][ C0] do_softirq_own_stack+0x49/0x80 [ 1000.125186][ C0] [ 1000.128132][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1000.133345][ C0] local_bh_enable+0x36/0x40 [ 1000.137933][ C0] ip_finish_output2+0x2115/0x2610 [ 1000.143046][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 1000.148771][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 1000.154780][ C0] __ip_finish_output+0xaa7/0xd80 [ 1000.159826][ C0] ip_finish_output+0x166/0x410 [ 1000.164687][ C0] ip_output+0x593/0x680 [ 1000.168939][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 1000.174227][ C0] ? ip_finish_output+0x410/0x410 [ 1000.179253][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 1000.184195][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1000.189833][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1000.195039][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1000.200245][ C0] ip_queue_xmit+0xcc/0xf0 [ 1000.204669][ C0] ? tcp_v6_send_response+0x2920/0x2920 [ 1000.210213][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 1000.215436][ C0] tcp_write_xmit+0x30e1/0xb470 [ 1000.220343][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 1000.225987][ C0] tcp_send_fin+0x131e/0x1570 [ 1000.230676][ C0] tcp_shutdown+0x188/0x200 [ 1000.235180][ C0] ? tcp_set_state+0x9d0/0x9d0 [ 1000.239943][ C0] inet_shutdown+0x342/0x5e0 [ 1000.244806][ C0] ? inet_recvmsg+0x7d0/0x7d0 [ 1000.249479][ C0] kernel_sock_shutdown+0x9d/0xc0 [ 1000.254513][ C0] rds_tcp_accept_one+0xe17/0x1060 [ 1000.259625][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1000.264940][ C0] rds_tcp_accept_worker+0x61/0x160 [ 1000.270155][ C0] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 1000.275194][ C0] process_one_work+0x1555/0x1f40 [ 1000.280237][ C0] worker_thread+0xef6/0x2450 [ 1000.284942][ C0] kthread+0x4b5/0x4f0 [ 1000.289311][ C0] ? process_one_work+0x1f40/0x1f40 [ 1000.294606][ C0] ? kthread_blkcg+0xf0/0xf0 [ 1000.299199][ C0] ret_from_fork+0x35/0x40 [ 1000.303621][ C0] Uninit was stored to memory at: [ 1000.308646][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.314887][ C0] __msan_chain_origin+0x50/0x90 [ 1000.319824][ C0] inet_twsk_alloc+0xab6/0xba0 [ 1000.324583][ C0] tcp_time_wait+0xcd/0x10b0 [ 1000.329198][ C0] tcp_fin+0x1f9/0x890 [ 1000.333267][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.338122][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.343577][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.348161][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.354919][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.360375][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.365219][ C0] ip_rcv+0x6cf/0x750 [ 1000.369200][ C0] process_backlog+0xf0b/0x1410 [ 1000.374055][ C0] net_rx_action+0x786/0x1aa0 [ 1000.378730][ C0] __do_softirq+0x311/0x83d [ 1000.383220][ C0] [ 1000.385541][ C0] Uninit was stored to memory at: [ 1000.390570][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.396292][ C0] __msan_chain_origin+0x50/0x90 [ 1000.401228][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 1000.406429][ C0] tcp_time_wait+0xaca/0x10b0 [ 1000.411113][ C0] tcp_fin+0x1f9/0x890 [ 1000.415184][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.420034][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.425489][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.430071][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.434578][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.440036][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.444879][ C0] ip_rcv+0x6cf/0x750 [ 1000.448853][ C0] process_backlog+0xf0b/0x1410 [ 1000.453699][ C0] net_rx_action+0x786/0x1aa0 [ 1000.458378][ C0] __do_softirq+0x311/0x83d [ 1000.463039][ C0] [ 1000.465354][ C0] Uninit was stored to memory at: [ 1000.470385][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.476101][ C0] __msan_chain_origin+0x50/0x90 [ 1000.481032][ C0] tcp_time_wait+0xb7e/0x10b0 [ 1000.485832][ C0] tcp_fin+0x1f9/0x890 [ 1000.489901][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.494748][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.500203][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.504797][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.509295][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.514749][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.519592][ C0] ip_rcv+0x6cf/0x750 [ 1000.523569][ C0] process_backlog+0xf0b/0x1410 [ 1000.528409][ C0] net_rx_action+0x786/0x1aa0 [ 1000.533079][ C0] __do_softirq+0x311/0x83d [ 1000.537565][ C0] [ 1000.539879][ C0] Uninit was stored to memory at: [ 1000.544905][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.550626][ C0] __msan_chain_origin+0x50/0x90 [ 1000.555562][ C0] inet_twsk_alloc+0xab6/0xba0 [ 1000.560319][ C0] tcp_time_wait+0xcd/0x10b0 [ 1000.564905][ C0] tcp_fin+0x1f9/0x890 [ 1000.568970][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.573819][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.579270][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.583855][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.588353][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.593810][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.598654][ C0] ip_rcv+0x6cf/0x750 [ 1000.602630][ C0] process_backlog+0xf0b/0x1410 [ 1000.607475][ C0] net_rx_action+0x786/0x1aa0 [ 1000.612146][ C0] __do_softirq+0x311/0x83d [ 1000.616630][ C0] [ 1000.618944][ C0] Uninit was stored to memory at: [ 1000.623970][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.629685][ C0] __msan_chain_origin+0x50/0x90 [ 1000.634618][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 1000.640244][ C0] tcp_time_wait+0xaca/0x10b0 [ 1000.644919][ C0] tcp_fin+0x1f9/0x890 [ 1000.649097][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.653945][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.659398][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.664072][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.668568][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.674022][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.678865][ C0] ip_rcv+0x6cf/0x750 [ 1000.682841][ C0] process_backlog+0xf0b/0x1410 [ 1000.687686][ C0] net_rx_action+0x786/0x1aa0 [ 1000.692355][ C0] __do_softirq+0x311/0x83d [ 1000.696846][ C0] [ 1000.699163][ C0] Uninit was stored to memory at: [ 1000.704190][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.709905][ C0] __msan_chain_origin+0x50/0x90 [ 1000.714840][ C0] tcp_time_wait+0xb7e/0x10b0 [ 1000.720388][ C0] tcp_fin+0x1f9/0x890 [ 1000.724453][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.729302][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.734759][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.739345][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.743849][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.749308][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.754158][ C0] ip_rcv+0x6cf/0x750 [ 1000.758143][ C0] process_backlog+0xf0b/0x1410 [ 1000.763062][ C0] net_rx_action+0x786/0x1aa0 [ 1000.767733][ C0] __do_softirq+0x311/0x83d [ 1000.772220][ C0] [ 1000.774539][ C0] Uninit was stored to memory at: [ 1000.779565][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1000.785287][ C0] __msan_chain_origin+0x50/0x90 [ 1000.790219][ C0] inet_twsk_alloc+0xab6/0xba0 [ 1000.794984][ C0] tcp_time_wait+0xcd/0x10b0 [ 1000.799570][ C0] tcp_fin+0x1f9/0x890 [ 1000.803636][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.808484][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.813944][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.818530][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.823026][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.828476][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.833316][ C0] ip_rcv+0x6cf/0x750 [ 1000.837295][ C0] process_backlog+0xf0b/0x1410 [ 1000.843532][ C0] net_rx_action+0x786/0x1aa0 [ 1000.848207][ C0] __do_softirq+0x311/0x83d [ 1000.852694][ C0] [ 1000.855023][ C0] Uninit was created at: [ 1000.859259][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1000.864885][ C0] kmsan_alloc_page+0xb9/0x180 [ 1000.869648][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1000.875191][ C0] alloc_pages_current+0x67d/0x990 [ 1000.880298][ C0] alloc_slab_page+0x122/0x1310 [ 1000.885143][ C0] new_slab+0x2bc/0x1130 [ 1000.889386][ C0] ___slab_alloc+0x14a3/0x2040 [ 1000.894142][ C0] kmem_cache_alloc+0xb23/0xd70 [ 1000.898990][ C0] inet_twsk_alloc+0x135/0xba0 [ 1000.903747][ C0] tcp_time_wait+0xcd/0x10b0 [ 1000.908329][ C0] tcp_fin+0x1f9/0x890 [ 1000.912398][ C0] tcp_data_queue+0x24ce/0x9c40 [ 1000.917244][ C0] tcp_rcv_state_process+0x5ba3/0x71c0 [ 1000.922697][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1000.927278][ C0] tcp_v4_rcv+0x4c77/0x5040 [ 1000.931811][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1000.937267][ C0] ip_local_deliver+0x62a/0x7c0 [ 1000.942112][ C0] ip_rcv+0x6cf/0x750 [ 1000.946087][ C0] process_backlog+0xf0b/0x1410 [ 1000.950937][ C0] net_rx_action+0x786/0x1aa0 [ 1000.955613][ C0] __do_softirq+0x311/0x83d 21:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:20 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1, 0x0, 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x31, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200085}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 21:05:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 21:05:20 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) 21:05:20 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25010000000a000900aaaaaaaaaabb0000080006", @ANYRES32=0x0, @ANYBLOB="0a00000000001000000bca"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000800) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x1, 0x51424752, 0x10001, 0x800, 0x2, @stepwise={{0x6, 0x6}, {0xf660}, {0x0, 0x8}}}) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) 21:05:20 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x60, &(0x7f00000001c0)={0x77359400}) [ 1002.540254][ C1] sd 0:0:1:0: [sg0] tag#3213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1002.551152][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB: Test Unit Ready [ 1002.557918][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.567741][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.577565][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.587456][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.597280][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.607103][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.616938][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.626769][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.636577][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.646408][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.656318][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.666239][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1002.676056][ C1] sd 0:0:1:0: [sg0] tag#3213 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:20 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x60, &(0x7f00000001c0)={0x77359400}) [ 1002.779292][T27962] IPVS: ftp: loaded support on port[0] = 21 21:05:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:21 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x60, &(0x7f00000001c0)={0x77359400}) 21:05:21 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25010000000a000900aaaaaaaaaabb0000080006", @ANYRES32=0x0, @ANYBLOB="0a00000000001000000bca"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000000700fff64017db9820000000000000d423ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d23822c013286344c03948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80819a277d9079cc4cb5e0ab17b299b81f2d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f333396d74c92fad7e34bd5522400cc36c2442eac2d224609abe062060800000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a0e786b6d985f7f04533da93f7b0ee0ceb0e80600cff8ca2996e518e3e69051f6d243e0e9b2be17f9ebfeb82ee2469fb39bdbb2768d25f19600002dc045421b94d878d0d9c2a5c74633b6cd8ae563734d4f1089a687a135308e49ce058c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f71d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643dbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f7bc830a34b0beb233e0e40d89147bc67990d3b754ca3b88608f2ea4b1fcd7c5325bc49c0db6a83686a87853ebc969b7b127029041a37a4786119e66ee408f33afc7e7df4fd5f861d000000005c334bdc4c599cc52ab46ae956987b494fbf0430d762e7fd554cef7b2401ed846e5e9b76694f86fc"], 0x259) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000800) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x1, 0x51424752, 0x10001, 0x800, 0x2, @stepwise={{0x6, 0x6}, {0xf660}, {0x0, 0x8}}}) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) 21:05:21 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) 21:05:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) [ 1003.668962][ C1] sd 0:0:1:0: [sg0] tag#3214 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1003.679571][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB: Test Unit Ready [ 1003.686288][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.696095][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.705916][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.715746][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.725562][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.735487][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.745300][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.755112][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.764957][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.774763][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.784586][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.794497][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.804822][ C1] sd 0:0:1:0: [sg0] tag#3214 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1003.912150][T28012] IPVS: ftp: loaded support on port[0] = 21 [ 1004.744497][ T333] tipc: TX() has been purged, node left! [ 1004.892263][ T333] tipc: TX() has been purged, node left! 21:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:23 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x60, &(0x7f00000001c0)={0x77359400}) 21:05:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 21:05:23 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25010000000a000900aaaaaaaaaabb0000080006", @ANYRES32=0x0, @ANYBLOB="0a00000000001000000bca"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000800) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x1, 0x51424752, 0x10001, 0x800, 0x2, @stepwise={{0x6, 0x6}, {0xf660}, {0x0, 0x8}}}) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) 21:05:23 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) [ 1005.809664][ C0] sd 0:0:1:0: [sg0] tag#3215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1005.820454][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB: Test Unit Ready [ 1005.827317][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.837444][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.847331][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.857183][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.867038][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.877079][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.886934][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.896782][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.906899][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.916758][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.926610][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.936575][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.946527][ C0] sd 0:0:1:0: [sg0] tag#3215 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:24 executing program 1: syz_emit_ethernet(0x138, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x0, 0x18, "935c191de6807ada00ea310966a29ff17f5e8106ee5d580029301c27dc1c2ef6b823f62f41cc3314f16c3cba29637ac491c3c184d6e4f91e98435c8ce3a385e6580fdc40c85b661eededed7be259b6be71012829d939dd33688d36be5495357aa72a0aa25faaf0b7e142a5f2efa5405afc24d5597e4be19a2bf4d0509b885ccbd44c249705052a5bb2509174d2047c54173b4ab8f10cfaa624e265e5c01ea6d23aedda17d3553b93540f133d3caa0aa7bbb52b78c15f0b0a74409331f0a78b31f60f"}, {0x0, 0x5, "c2d642aa83cac052f7914c709b81eafa8807fc1dd6d88d540c028677a27f6958b9b4b0b621fb88b0"}]}}}}}}, 0x0) [ 1006.146951][T28069] IPVS: ftp: loaded support on port[0] = 21 21:05:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) 21:05:24 executing program 1: syz_emit_ethernet(0x138, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x0, 0x18, "935c191de6807ada00ea310966a29ff17f5e8106ee5d580029301c27dc1c2ef6b823f62f41cc3314f16c3cba29637ac491c3c184d6e4f91e98435c8ce3a385e6580fdc40c85b661eededed7be259b6be71012829d939dd33688d36be5495357aa72a0aa25faaf0b7e142a5f2efa5405afc24d5597e4be19a2bf4d0509b885ccbd44c249705052a5bb2509174d2047c54173b4ab8f10cfaa624e265e5c01ea6d23aedda17d3553b93540f133d3caa0aa7bbb52b78c15f0b0a74409331f0a78b31f60f"}, {0x0, 0x5, "c2d642aa83cac052f7914c709b81eafa8807fc1dd6d88d540c028677a27f6958b9b4b0b621fb88b0"}]}}}}}}, 0x0) 21:05:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) 21:05:24 executing program 4: unshare(0x40600) syncfs(0xffffffffffffffff) 21:05:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:05:26 executing program 1: syz_emit_ethernet(0x138, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x0, 0x18, "935c191de6807ada00ea310966a29ff17f5e8106ee5d580029301c27dc1c2ef6b823f62f41cc3314f16c3cba29637ac491c3c184d6e4f91e98435c8ce3a385e6580fdc40c85b661eededed7be259b6be71012829d939dd33688d36be5495357aa72a0aa25faaf0b7e142a5f2efa5405afc24d5597e4be19a2bf4d0509b885ccbd44c249705052a5bb2509174d2047c54173b4ab8f10cfaa624e265e5c01ea6d23aedda17d3553b93540f133d3caa0aa7bbb52b78c15f0b0a74409331f0a78b31f60f"}, {0x0, 0x5, "c2d642aa83cac052f7914c709b81eafa8807fc1dd6d88d540c028677a27f6958b9b4b0b621fb88b0"}]}}}}}}, 0x0) 21:05:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) 21:05:26 executing program 4: unshare(0x40600) syncfs(0xffffffffffffffff) 21:05:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x300}]}]}]}}]}, 0x44}}, 0x0) 21:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600008000000a000072000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb0000000000000000000000007f00000100000000000000000000000005000500008000000a"], 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1008.279126][T28134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) 21:05:26 executing program 1: syz_emit_ethernet(0x138, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x0, 0x18, "935c191de6807ada00ea310966a29ff17f5e8106ee5d580029301c27dc1c2ef6b823f62f41cc3314f16c3cba29637ac491c3c184d6e4f91e98435c8ce3a385e6580fdc40c85b661eededed7be259b6be71012829d939dd33688d36be5495357aa72a0aa25faaf0b7e142a5f2efa5405afc24d5597e4be19a2bf4d0509b885ccbd44c249705052a5bb2509174d2047c54173b4ab8f10cfaa624e265e5c01ea6d23aedda17d3553b93540f133d3caa0aa7bbb52b78c15f0b0a74409331f0a78b31f60f"}, {0x0, 0x5, "c2d642aa83cac052f7914c709b81eafa8807fc1dd6d88d540c028677a27f6958b9b4b0b621fb88b0"}]}}}}}}, 0x0) 21:05:26 executing program 4: unshare(0x40600) syncfs(0xffffffffffffffff) [ 1008.467155][T28143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600008000000a000072000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb0000000000000000000000007f00000100000000000000000000000005000500008000000a"], 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:05:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x300}]}]}]}}]}, 0x44}}, 0x0) [ 1008.735243][ T333] tipc: TX() has been purged, node left! 21:05:27 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) [ 1008.951720][T28155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, &(0x7f0000001240)=""/224}) 21:05:29 executing program 4: unshare(0x40600) syncfs(0xffffffffffffffff) 21:05:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600008000000a000072000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb0000000000000000000000007f00000100000000000000000000000005000500008000000a"], 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:05:29 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) 21:05:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x300}]}]}]}}]}, 0x44}}, 0x0) 21:05:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) [ 1011.375423][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:29 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) 21:05:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 21:05:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, &(0x7f0000001240)=""/224}) 21:05:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600008000000a000072000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb0000000000000000000000007f00000100000000000000000000000005000500008000000a"], 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:05:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x300}]}]}]}}]}, 0x44}}, 0x0) [ 1011.713048][T28196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:30 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) [ 1011.916500][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, &(0x7f0000001240)=""/224}) 21:05:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 21:05:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 21:05:30 executing program 5: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r1, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) [ 1012.324222][T28221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) 21:05:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, &(0x7f0000001240)=""/224}) 21:05:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 21:05:31 executing program 5: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 21:05:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r1, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) [ 1013.559441][T28253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:31 executing program 0: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r1, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) 21:05:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 21:05:32 executing program 5: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 21:05:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) [ 1014.048401][T28274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1014.188048][ C1] not chained 180000 origins [ 1014.192679][ C1] CPU: 1 PID: 1458 Comm: kworker/u4:26 Not tainted 5.7.0-rc4-syzkaller #0 [ 1014.201158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.211206][ C1] Workqueue: krdsd rds_connect_worker [ 1014.216557][ C1] Call Trace: [ 1014.219824][ C1] [ 1014.222665][ C1] dump_stack+0x1c9/0x220 [ 1014.226988][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1014.232713][ C1] ? xfrm_lookup_route+0x2c1/0x370 [ 1014.237818][ C1] ? ip_route_output_flow+0x35a/0x3d0 [ 1014.243173][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.248357][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.253544][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1014.259339][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1014.265518][ C1] ? tcp_select_initial_window+0x60d/0x6c0 [ 1014.271320][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.276516][ C1] __msan_chain_origin+0x50/0x90 [ 1014.281452][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1014.286747][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1014.291776][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1014.297830][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.303011][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.308196][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.313299][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.318318][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 1014.323590][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1014.328945][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1014.334736][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.339928][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1014.345722][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1014.351778][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.357053][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1014.361646][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1014.366147][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1014.372224][ C1] ? tcp_filter+0xf0/0xf0 [ 1014.376536][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1014.381984][ C1] ip_local_deliver+0x62a/0x7c0 [ 1014.386835][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 1014.391846][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 1014.397460][ C1] ip_rcv+0x6cf/0x750 [ 1014.401434][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 1014.406181][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 1014.411803][ C1] process_backlog+0xf0b/0x1410 [ 1014.416643][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 1014.422267][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1014.427534][ C1] net_rx_action+0x786/0x1aa0 [ 1014.432214][ C1] ? net_tx_action+0xc30/0xc30 [ 1014.436972][ C1] __do_softirq+0x311/0x83d [ 1014.441482][ C1] do_softirq_own_stack+0x49/0x80 [ 1014.446497][ C1] [ 1014.449426][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1014.454626][ C1] local_bh_enable+0x36/0x40 [ 1014.459203][ C1] ip_finish_output2+0x2115/0x2610 [ 1014.464304][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 1014.470006][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 1014.476156][ C1] __ip_finish_output+0xaa7/0xd80 [ 1014.481176][ C1] ip_finish_output+0x166/0x410 [ 1014.486016][ C1] ip_output+0x593/0x680 [ 1014.490257][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 1014.495559][ C1] ? ip_finish_output+0x410/0x410 [ 1014.500568][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 1014.505492][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1014.511037][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.516235][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.521680][ C1] ip_queue_xmit+0xcc/0xf0 [ 1014.526084][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 1014.530921][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 1014.536206][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.542877][ C1] tcp_connect+0x420a/0x6830 [ 1014.547453][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 1014.552739][ C1] tcp_v4_connect+0x21fd/0x2370 [ 1014.557602][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 1014.562613][ C1] __inet_stream_connect+0x2fb/0x1340 [ 1014.567976][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 1014.573263][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.578450][ C1] inet_stream_connect+0x101/0x180 [ 1014.583550][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 1014.589172][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 1014.594803][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1014.600023][ C1] ? rds_tcp_state_change+0x390/0x390 [ 1014.605902][ C1] rds_connect_worker+0x2a6/0x470 [ 1014.610913][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1014.616979][ C1] ? rds_addr_cmp+0x200/0x200 [ 1014.621639][ C1] process_one_work+0x1555/0x1f40 [ 1014.626662][ C1] worker_thread+0xef6/0x2450 [ 1014.631339][ C1] kthread+0x4b5/0x4f0 [ 1014.635391][ C1] ? process_one_work+0x1f40/0x1f40 [ 1014.640577][ C1] ? kthread_blkcg+0xf0/0xf0 [ 1014.645155][ C1] ret_from_fork+0x35/0x40 [ 1014.649557][ C1] Uninit was stored to memory at: [ 1014.654569][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1014.660367][ C1] __msan_chain_origin+0x50/0x90 [ 1014.665294][ C1] tcp_conn_request+0x1781/0x4d10 [ 1014.670300][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.675402][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.680409][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1014.685760][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1014.690338][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1014.694825][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1014.700643][ C1] ip_local_deliver+0x62a/0x7c0 [ 1014.705484][ C1] ip_rcv+0x6cf/0x750 [ 1014.709471][ C1] process_backlog+0xf0b/0x1410 [ 1014.714308][ C1] net_rx_action+0x786/0x1aa0 [ 1014.719058][ C1] __do_softirq+0x311/0x83d [ 1014.723896][ C1] [ 1014.726205][ C1] Uninit was stored to memory at: [ 1014.731226][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1014.736931][ C1] __msan_chain_origin+0x50/0x90 [ 1014.741855][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1014.747126][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1014.752226][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.757323][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.762331][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1014.767685][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1014.772268][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1014.776751][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1014.782192][ C1] ip_local_deliver+0x62a/0x7c0 [ 1014.787027][ C1] ip_rcv+0x6cf/0x750 [ 1014.791005][ C1] process_backlog+0xf0b/0x1410 [ 1014.795842][ C1] net_rx_action+0x786/0x1aa0 [ 1014.800856][ C1] __do_softirq+0x311/0x83d [ 1014.805421][ C1] [ 1014.807728][ C1] Uninit was stored to memory at: [ 1014.812739][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1014.818441][ C1] __msan_chain_origin+0x50/0x90 [ 1014.823363][ C1] tcp_conn_request+0x1781/0x4d10 [ 1014.828384][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.833479][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.838493][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1014.843849][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1014.848421][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1014.853165][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1014.858605][ C1] ip_local_deliver+0x62a/0x7c0 [ 1014.863435][ C1] ip_rcv+0x6cf/0x750 [ 1014.867431][ C1] process_backlog+0xf0b/0x1410 [ 1014.872261][ C1] net_rx_action+0x786/0x1aa0 [ 1014.876918][ C1] __do_softirq+0x311/0x83d [ 1014.881396][ C1] [ 1014.883703][ C1] Uninit was stored to memory at: [ 1014.888726][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1014.894524][ C1] __msan_chain_origin+0x50/0x90 [ 1014.899443][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1014.904798][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1014.909802][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.914990][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.920130][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1014.925483][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1014.930053][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1014.934543][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1014.939981][ C1] ip_local_deliver+0x62a/0x7c0 [ 1014.944817][ C1] ip_rcv+0x6cf/0x750 [ 1014.948788][ C1] process_backlog+0xf0b/0x1410 [ 1014.953620][ C1] net_rx_action+0x786/0x1aa0 [ 1014.958289][ C1] __do_softirq+0x311/0x83d [ 1014.962799][ C1] [ 1014.965115][ C1] Uninit was stored to memory at: [ 1014.970226][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1014.975932][ C1] __msan_chain_origin+0x50/0x90 [ 1014.980856][ C1] tcp_conn_request+0x1781/0x4d10 [ 1014.985863][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1014.990956][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1014.995964][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1015.001316][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1015.005889][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1015.010371][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1015.015822][ C1] ip_local_deliver+0x62a/0x7c0 [ 1015.020652][ C1] ip_rcv+0x6cf/0x750 [ 1015.024615][ C1] process_backlog+0xf0b/0x1410 [ 1015.029445][ C1] net_rx_action+0x786/0x1aa0 [ 1015.034102][ C1] __do_softirq+0x311/0x83d [ 1015.038589][ C1] [ 1015.040895][ C1] Uninit was stored to memory at: [ 1015.045905][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1015.051614][ C1] __msan_chain_origin+0x50/0x90 [ 1015.056535][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1015.061815][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1015.066822][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1015.071932][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1015.076954][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1015.082329][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1015.086904][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1015.091390][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1015.096829][ C1] ip_local_deliver+0x62a/0x7c0 [ 1015.101662][ C1] ip_rcv+0x6cf/0x750 [ 1015.105625][ C1] process_backlog+0xf0b/0x1410 [ 1015.110466][ C1] net_rx_action+0x786/0x1aa0 [ 1015.115124][ C1] __do_softirq+0x311/0x83d [ 1015.119604][ C1] [ 1015.122020][ C1] Uninit was stored to memory at: [ 1015.127054][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1015.132764][ C1] __msan_chain_origin+0x50/0x90 [ 1015.137696][ C1] tcp_conn_request+0x1781/0x4d10 [ 1015.142704][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1015.147797][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1015.152812][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1015.158166][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1015.162736][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1015.167220][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1015.172659][ C1] ip_local_deliver+0x62a/0x7c0 [ 1015.177499][ C1] ip_rcv+0x6cf/0x750 [ 1015.181461][ C1] process_backlog+0xf0b/0x1410 [ 1015.186293][ C1] net_rx_action+0x786/0x1aa0 [ 1015.190951][ C1] __do_softirq+0x311/0x83d [ 1015.195430][ C1] [ 1015.197735][ C1] Uninit was created at: [ 1015.201963][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1015.207577][ C1] kmsan_alloc_page+0xb9/0x180 [ 1015.212337][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1015.217870][ C1] alloc_pages_current+0x67d/0x990 [ 1015.222974][ C1] alloc_slab_page+0x122/0x1310 [ 1015.227821][ C1] new_slab+0x2bc/0x1130 [ 1015.232047][ C1] ___slab_alloc+0x14a3/0x2040 [ 1015.236795][ C1] kmem_cache_alloc+0xb23/0xd70 [ 1015.241729][ C1] inet_reqsk_alloc+0xac/0x830 [ 1015.246477][ C1] tcp_conn_request+0x753/0x4d10 [ 1015.251405][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1015.256514][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1015.261868][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1015.266442][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1015.270924][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1015.276367][ C1] ip_local_deliver+0x62a/0x7c0 [ 1015.281212][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 1015.286057][ C1] ip_list_rcv+0x8eb/0x950 [ 1015.290469][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 1015.296627][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 1015.302863][ C1] napi_complete_done+0x2ef/0xb60 [ 1015.307874][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 1015.313229][ C1] virtnet_poll+0x1468/0x19f0 [ 1015.317886][ C1] net_rx_action+0x786/0x1aa0 [ 1015.322547][ C1] __do_softirq+0x311/0x83d 21:05:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) close(r0) 21:05:35 executing program 0: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r1, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) 21:05:35 executing program 5: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:35 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 21:05:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x7, &(0x7f000025e000), &(0x7f0000a8a000)=0x4) 21:05:35 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 21:05:35 executing program 0: unshare(0x2040400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000000000)) 21:05:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x26}, [@ldst={0x4, 0x2, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 21:05:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b00000000004a6f5003ffbf104363e4e1bf38e558c3238fb3eacb2217c2f63c59c02fe18e41c07f36e7c4836cb9c120d996110076ab8e219dc96942c9610c5d9c78e2a1057e4a7cda7530782d"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) 21:05:35 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local}, 0x10) 21:05:35 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 21:05:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001fc0)=""/241, 0xf1}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:05:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x26}, [@ldst={0x4, 0x2, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 21:05:37 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 21:05:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 21:05:37 executing program 0: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x26}, [@ldst={0x4, 0x2, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 21:05:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac163", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 21:05:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000ac0)="1e70316e003634548119b9aed28bc0d236551b10c8c51435fe0295ca618da4b201185c4d2ca14adc7812190b6518f4b0d70dee6d808513e335d03f7dde4a2424fa89e7872492e10dcb2c058764ff43075a96ddb35961b55b5d1a1740db23742086f75f7c26de446b5bdfc6d8e1e1093b9a7aba83badadebbfe82186c3c6d5e0f65680342c4913bc9a3181fb4cb1e56c410842a48c00c3da5dabc6288af3ebe5f86", 0xa1}, {&(0x7f0000000f80)="13f39a8bc653f46659312b9c3fd07f12d1deca5f8935c7b28934a50b53f63844aa7e849c25b478dd1d4c503ac97871e051d66a6445ee9e71126f317762e43140b48a5975cacf5327a686085102edf8bcd5db68d7f59e562e6418dd5ce31c451bd6b971a6301c274e10c9f34a7bcc91", 0x6f}], 0x2}, 0x0) 21:05:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x26}, [@ldst={0x4, 0x2, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 21:05:38 executing program 0: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:38 executing program 4: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 21:05:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:39 executing program 0: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:39 executing program 4: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:40 executing program 4: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 21:05:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x100) 21:05:40 executing program 0: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_sctp(0x2, 0x0, 0x84) chdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x28120002) 21:05:40 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 21:05:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 21:05:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x100) 21:05:42 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x14b) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000000180", 0x5ac}], 0x1}, 0x0) 21:05:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4) 21:05:42 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8b474fc30be2", @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ed310d", 0x0, 0x3a, 0x0, @remote, @private1}}}}, 0x0) 21:05:42 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 21:05:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x75, &(0x7f0000000140)="f7f258480aa4ce20e779e70076cc036a2a160500000032a56f7259e480249950f34c6aa172903acab906712ebb70cef20d94de765aa586d65a3d7f022e4c14f1bdd7d464e9931470000000002f997905d398eef68310ec46b654cd8f9c032f1078c135c760ca5232f285d288f2fb01819502f5fa6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:05:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x100) 21:05:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4) 21:05:42 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x14b) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000000180", 0x5ac}], 0x1}, 0x0) 21:05:42 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 21:05:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x100) 21:05:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 21:05:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4) 21:05:44 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x14b) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000000180", 0x5ac}], 0x1}, 0x0) 21:05:44 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 21:05:44 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x37) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffee2, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a280930206030000000001000000003900090035004068060000001900157a02000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000140), 0xf8, 0x0) 21:05:44 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x10, 0x0, 0x8001) 21:05:45 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x10, 0x0, 0x8001) 21:05:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x75, &(0x7f0000000140)="f7f258480aa4ce20e779e70076cc036a2a160500000032a56f7259e480249950f34c6aa172903acab906712ebb70cef20d94de765aa586d65a3d7f022e4c14f1bdd7d464e9931470000000002f997905d398eef68310ec46b654cd8f9c032f1078c135c760ca5232f285d288f2fb01819502f5fa6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:05:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4) 21:05:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xfaa4, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) 21:05:45 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x14b) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000000180", 0x5ac}], 0x1}, 0x0) 21:05:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) close(r2) 21:05:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xfaa4, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) 21:05:45 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x10, 0x0, 0x8001) 21:05:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x80108907, 0x0) 21:05:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 21:05:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x80108907, 0x0) 21:05:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xfaa4, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) 21:05:46 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x10, 0x0, 0x8001) [ 1028.090104][T28594] input: syz1 as /devices/virtual/input/input19 [ 1028.220076][T28594] input: syz1 as /devices/virtual/input/input20 [ 1029.191798][ C0] not chained 190000 origins [ 1029.196445][ C0] CPU: 0 PID: 37 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1029.204693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.214889][ C0] Workqueue: krdsd rds_connect_worker [ 1029.220378][ C0] Call Trace: [ 1029.223686][ C0] [ 1029.226651][ C0] dump_stack+0x1c9/0x220 [ 1029.231017][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1029.236986][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1029.243682][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 1029.248842][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.254367][ C0] ? __should_failslab+0x1f6/0x290 [ 1029.259584][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 1029.264803][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1029.270724][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 1029.277003][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 1029.282503][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.287761][ C0] __msan_chain_origin+0x50/0x90 [ 1029.292750][ C0] tcp_conn_request+0x1781/0x4d10 [ 1029.297970][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1029.304231][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 1029.309106][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1029.315192][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.320547][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.325782][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1029.330920][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1029.336382][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 1029.341694][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1029.347091][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1029.352918][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.358303][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1029.364132][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1029.370415][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.375620][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1029.380286][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1029.384790][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1029.390880][ C0] ? tcp_filter+0xf0/0xf0 [ 1029.395212][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1029.400744][ C0] ip_local_deliver+0x62a/0x7c0 [ 1029.405605][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 1029.410711][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 1029.416488][ C0] ip_rcv+0x6cf/0x750 [ 1029.420476][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 1029.425397][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1029.431031][ C0] process_backlog+0xf0b/0x1410 [ 1029.436375][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1029.442011][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1029.447293][ C0] net_rx_action+0x786/0x1aa0 [ 1029.452004][ C0] ? net_tx_action+0xc30/0xc30 [ 1029.457206][ C0] __do_softirq+0x311/0x83d [ 1029.462007][ C0] do_softirq_own_stack+0x49/0x80 [ 1029.467221][ C0] [ 1029.470187][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1029.475383][ C0] local_bh_enable+0x36/0x40 [ 1029.480140][ C0] ip_finish_output2+0x2115/0x2610 [ 1029.485250][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 1029.491025][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 1029.497017][ C0] __ip_finish_output+0xaa7/0xd80 [ 1029.502139][ C0] ip_finish_output+0x166/0x410 [ 1029.507115][ C0] ip_output+0x593/0x680 [ 1029.511361][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 1029.516640][ C0] ? ip_finish_output+0x410/0x410 [ 1029.521895][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 1029.526918][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1029.532738][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.538833][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.544159][ C0] ip_queue_xmit+0xcc/0xf0 [ 1029.548593][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 1029.553529][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 1029.558824][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.564199][ C0] tcp_connect+0x420a/0x6830 [ 1029.568786][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1029.574426][ C0] tcp_v4_connect+0x21fd/0x2370 [ 1029.579300][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 1029.584423][ C0] __inet_stream_connect+0x2fb/0x1340 [ 1029.589803][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 1029.595166][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.600672][ C0] inet_stream_connect+0x101/0x180 [ 1029.606085][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 1029.611725][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 1029.617377][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1029.622854][ C0] ? rds_tcp_state_change+0x390/0x390 [ 1029.628583][ C0] rds_connect_worker+0x2a6/0x470 [ 1029.634466][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1029.640632][ C0] ? rds_addr_cmp+0x200/0x200 [ 1029.645386][ C0] process_one_work+0x1555/0x1f40 [ 1029.650428][ C0] worker_thread+0xef6/0x2450 [ 1029.655259][ C0] kthread+0x4b5/0x4f0 [ 1029.659373][ C0] ? process_one_work+0x1f40/0x1f40 [ 1029.664711][ C0] ? kthread_blkcg+0xf0/0xf0 [ 1029.669522][ C0] ret_from_fork+0x35/0x40 [ 1029.674119][ C0] Uninit was stored to memory at: [ 1029.679147][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1029.684903][ C0] __msan_chain_origin+0x50/0x90 [ 1029.689835][ C0] tcp_conn_request+0x1781/0x4d10 [ 1029.694852][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1029.699958][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1029.704976][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1029.710342][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1029.714924][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1029.719505][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1029.724957][ C0] ip_local_deliver+0x62a/0x7c0 [ 1029.729803][ C0] ip_rcv+0x6cf/0x750 [ 1029.733777][ C0] process_backlog+0xf0b/0x1410 [ 1029.738624][ C0] net_rx_action+0x786/0x1aa0 [ 1029.743297][ C0] __do_softirq+0x311/0x83d [ 1029.747788][ C0] [ 1029.750111][ C0] Uninit was stored to memory at: [ 1029.755220][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1029.760954][ C0] __msan_chain_origin+0x50/0x90 [ 1029.766090][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1029.771416][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1029.776523][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1029.781705][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1029.786862][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1029.792233][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1029.796927][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1029.801497][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1029.807039][ C0] ip_local_deliver+0x62a/0x7c0 [ 1029.811878][ C0] ip_rcv+0x6cf/0x750 [ 1029.815941][ C0] process_backlog+0xf0b/0x1410 [ 1029.820815][ C0] net_rx_action+0x786/0x1aa0 [ 1029.825688][ C0] __do_softirq+0x311/0x83d [ 1029.830174][ C0] [ 1029.832584][ C0] Uninit was stored to memory at: [ 1029.837607][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1029.843320][ C0] __msan_chain_origin+0x50/0x90 [ 1029.848412][ C0] tcp_conn_request+0x1781/0x4d10 [ 1029.853582][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1029.858775][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1029.863794][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1029.869160][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1029.873745][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1029.878241][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1029.883691][ C0] ip_local_deliver+0x62a/0x7c0 [ 1029.888579][ C0] ip_rcv+0x6cf/0x750 [ 1029.892645][ C0] process_backlog+0xf0b/0x1410 [ 1029.897492][ C0] net_rx_action+0x786/0x1aa0 [ 1029.902165][ C0] __do_softirq+0x311/0x83d [ 1029.906655][ C0] [ 1029.908977][ C0] Uninit was stored to memory at: [ 1029.914001][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1029.919723][ C0] __msan_chain_origin+0x50/0x90 [ 1029.924782][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1029.930136][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1029.935475][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1029.940690][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1029.945926][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1029.951413][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1029.956238][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1029.960735][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1029.966299][ C0] ip_local_deliver+0x62a/0x7c0 [ 1029.971230][ C0] ip_rcv+0x6cf/0x750 [ 1029.975369][ C0] process_backlog+0xf0b/0x1410 [ 1029.980228][ C0] net_rx_action+0x786/0x1aa0 [ 1029.985169][ C0] __do_softirq+0x311/0x83d [ 1029.989735][ C0] [ 1029.992057][ C0] Uninit was stored to memory at: [ 1029.997083][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1030.002799][ C0] __msan_chain_origin+0x50/0x90 [ 1030.007794][ C0] tcp_conn_request+0x1781/0x4d10 [ 1030.012894][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1030.018163][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1030.023244][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1030.028615][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1030.033634][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1030.038276][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1030.043727][ C0] ip_local_deliver+0x62a/0x7c0 [ 1030.048617][ C0] ip_rcv+0x6cf/0x750 [ 1030.052810][ C0] process_backlog+0xf0b/0x1410 [ 1030.057666][ C0] net_rx_action+0x786/0x1aa0 [ 1030.062341][ C0] __do_softirq+0x311/0x83d [ 1030.066831][ C0] [ 1030.069152][ C0] Uninit was stored to memory at: [ 1030.074174][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1030.080102][ C0] __msan_chain_origin+0x50/0x90 [ 1030.085375][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1030.090655][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1030.095680][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1030.100876][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1030.105969][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1030.111388][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1030.115971][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1030.120637][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1030.126098][ C0] ip_local_deliver+0x62a/0x7c0 [ 1030.131527][ C0] ip_rcv+0x6cf/0x750 [ 1030.135817][ C0] process_backlog+0xf0b/0x1410 [ 1030.140806][ C0] net_rx_action+0x786/0x1aa0 [ 1030.145574][ C0] __do_softirq+0x311/0x83d [ 1030.150134][ C0] [ 1030.152592][ C0] Uninit was stored to memory at: [ 1030.157621][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1030.163337][ C0] __msan_chain_origin+0x50/0x90 [ 1030.168362][ C0] tcp_conn_request+0x1781/0x4d10 [ 1030.173434][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1030.178637][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1030.183749][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1030.189114][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1030.193775][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1030.198273][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1030.203779][ C0] ip_local_deliver+0x62a/0x7c0 [ 1030.208717][ C0] ip_rcv+0x6cf/0x750 [ 1030.212694][ C0] process_backlog+0xf0b/0x1410 [ 1030.217544][ C0] net_rx_action+0x786/0x1aa0 [ 1030.222310][ C0] __do_softirq+0x311/0x83d [ 1030.226797][ C0] [ 1030.229204][ C0] Uninit was created at: [ 1030.233787][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1030.239416][ C0] kmsan_alloc_page+0xb9/0x180 [ 1030.244173][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1030.249756][ C0] alloc_pages_current+0x67d/0x990 [ 1030.254862][ C0] alloc_slab_page+0x122/0x1310 [ 1030.259722][ C0] new_slab+0x2bc/0x1130 [ 1030.264046][ C0] ___slab_alloc+0x14a3/0x2040 [ 1030.268811][ C0] kmem_cache_alloc+0xb23/0xd70 [ 1030.273786][ C0] inet_reqsk_alloc+0xac/0x830 [ 1030.278546][ C0] tcp_conn_request+0x753/0x4d10 [ 1030.283476][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1030.288687][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1030.294052][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1030.298757][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1030.303252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1030.308800][ C0] ip_local_deliver+0x62a/0x7c0 [ 1030.313642][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 1030.318488][ C0] ip_list_rcv+0x8eb/0x950 [ 1030.323048][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 1030.329281][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 1030.335712][ C0] napi_complete_done+0x2ef/0xb60 [ 1030.340733][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 1030.346145][ C0] virtnet_poll+0x1468/0x19f0 [ 1030.350820][ C0] net_rx_action+0x786/0x1aa0 [ 1030.355533][ C0] __do_softirq+0x311/0x83d 21:05:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x75, &(0x7f0000000140)="f7f258480aa4ce20e779e70076cc036a2a160500000032a56f7259e480249950f34c6aa172903acab906712ebb70cef20d94de765aa586d65a3d7f022e4c14f1bdd7d464e9931470000000002f997905d398eef68310ec46b654cd8f9c032f1078c135c760ca5232f285d288f2fb01819502f5fa6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:05:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x80108907, 0x0) 21:05:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xfaa4, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) 21:05:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 1030.799156][T28631] input: syz1 as /devices/virtual/input/input21 21:05:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) close(r2) 21:05:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) socket$inet(0x2, 0x80001, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21:05:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x80108907, 0x0) 21:05:50 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x1e00}) 21:05:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 1032.136220][T28656] input: syz1 as /devices/virtual/input/input22 21:05:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x34) 21:05:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) socket$inet(0x2, 0x80001, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21:05:50 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x1e00}) 21:05:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x75, &(0x7f0000000140)="f7f258480aa4ce20e779e70076cc036a2a160500000032a56f7259e480249950f34c6aa172903acab906712ebb70cef20d94de765aa586d65a3d7f022e4c14f1bdd7d464e9931470000000002f997905d398eef68310ec46b654cd8f9c032f1078c135c760ca5232f285d288f2fb01819502f5fa6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:05:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 21:05:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x34) 21:05:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) socket$inet(0x2, 0x80001, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 1034.058188][T28692] input: syz1 as /devices/virtual/input/input23 21:05:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) close(r2) 21:05:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x34) 21:05:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000140)=[@acquire, @request_death={0x400c630e, 0x0, 0xfdfdffff}, @clear_death], 0x0, 0x717000, 0x0}) 21:05:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)) socket$inet(0x2, 0x80001, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21:05:53 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x1e00}) 21:05:53 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x1e00}) 21:05:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) 21:05:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39}, 0x34) 21:05:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) close(r2) 21:05:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000140)=[@acquire, @request_death={0x400c630e, 0x0, 0xfdfdffff}, @clear_death], 0x0, 0x717000, 0x0}) 21:05:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x0, 0xa, 0x7, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 21:05:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 21:05:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) 21:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) [ 1037.159909][T28736] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:05:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000140)=[@acquire, @request_death={0x400c630e, 0x0, 0xfdfdffff}, @clear_death], 0x0, 0x717000, 0x0}) 21:05:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x0, 0xa, 0x7, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 21:05:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 21:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) 21:05:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) [ 1037.563387][T28750] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:05:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000140)=[@acquire, @request_death={0x400c630e, 0x0, 0xfdfdffff}, @clear_death], 0x0, 0x717000, 0x0}) 21:05:56 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 21:05:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x0, 0xa, 0x7, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 21:05:56 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) 21:05:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r1) 21:05:56 executing program 3: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)) [ 1038.812199][T28774] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:05:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb17b55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ad"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:05:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x0, 0xa, 0x7, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 21:05:57 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 21:05:57 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$char_usb(r2, &(0x7f0000000300)=""/33, 0x21) [ 1039.191510][T28788] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:05:57 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb17b55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ad"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:05:57 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$char_usb(r2, &(0x7f0000000300)=""/33, 0x21) 21:05:57 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:57 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1039.783796][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb17b55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ad"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1039.948170][T28820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:58 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:59 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 21:05:59 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$char_usb(r2, &(0x7f0000000300)=""/33, 0x21) 21:05:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:05:59 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:59 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb17b55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ad"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1041.015791][T28853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:59 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) 21:05:59 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$char_usb(r2, &(0x7f0000000300)=""/33, 0x21) 21:05:59 executing program 1: timerfd_create(0x9, 0x0) 21:05:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1041.505650][T28875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:05:59 executing program 1: timerfd_create(0x9, 0x0) 21:05:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 21:06:00 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 21:06:00 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000001240)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="e1a28ee60000000000000200080048c973c08d5f38ed5ef2cb096e186b8dc998256c", 0x2e}], 0x1}, 0x0) 21:06:00 executing program 2: chroot(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = clone3(&(0x7f0000001680)={0x288c1c00, 0x0, 0x0, 0x0, {0x80000000}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='wlan0%(\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00') lseek(r4, 0x2, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x3f, 0x9f95, 0x3, 0x1001, 0x51}) dup(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pwrite64(r6, &(0x7f00000002c0)="add2925968a3c6b2881dfca0f8c1fec6d2073618cb8627e15894311a498b823a574faeceed1a78c068fb05175a9d482527245e2231e29f4a3575d2f580168e1187deb2809281e4d4ee5529ec78c3908814d400000000", 0x56, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400203) r8 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'ipvlan1\x00'}) 21:06:00 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:06:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 21:06:00 executing program 1: timerfd_create(0x9, 0x0) [ 1042.300569][T28894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 21:06:00 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000001240)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="e1a28ee60000000000000200080048c973c08d5f38ed5ef2cb096e186b8dc998256c", 0x2e}], 0x1}, 0x0) 21:06:00 executing program 1: timerfd_create(0x9, 0x0) 21:06:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x2, 0x4, 0x3f8, 0x0, 0x110, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @empty, @local, 0x1, 0xfffffffe}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@arp={@dev, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'vcan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xaa) 21:06:01 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000001240)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="e1a28ee60000000000000200080048c973c08d5f38ed5ef2cb096e186b8dc998256c", 0x2e}], 0x1}, 0x0) 21:06:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:02 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 21:06:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 21:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x2, 0x4, 0x3f8, 0x0, 0x110, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @empty, @local, 0x1, 0xfffffffe}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@arp={@dev, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'vcan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xaa) 21:06:02 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000001240)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="e1a28ee60000000000000200080048c973c08d5f38ed5ef2cb096e186b8dc998256c", 0x2e}], 0x1}, 0x0) 21:06:02 executing program 2: chroot(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = clone3(&(0x7f0000001680)={0x288c1c00, 0x0, 0x0, 0x0, {0x80000000}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='wlan0%(\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00') lseek(r4, 0x2, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x3f, 0x9f95, 0x3, 0x1001, 0x51}) dup(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pwrite64(r6, &(0x7f00000002c0)="add2925968a3c6b2881dfca0f8c1fec6d2073618cb8627e15894311a498b823a574faeceed1a78c068fb05175a9d482527245e2231e29f4a3575d2f580168e1187deb2809281e4d4ee5529ec78c3908814d400000000", 0x56, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400203) r8 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'ipvlan1\x00'}) 21:06:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x2, 0x4, 0x3f8, 0x0, 0x110, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @empty, @local, 0x1, 0xfffffffe}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@arp={@dev, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'vcan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xaa) 21:06:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000080)=0x8) 21:06:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:02 executing program 2: chroot(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = clone3(&(0x7f0000001680)={0x288c1c00, 0x0, 0x0, 0x0, {0x80000000}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='wlan0%(\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00') lseek(r4, 0x2, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x3f, 0x9f95, 0x3, 0x1001, 0x51}) dup(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pwrite64(r6, &(0x7f00000002c0)="add2925968a3c6b2881dfca0f8c1fec6d2073618cb8627e15894311a498b823a574faeceed1a78c068fb05175a9d482527245e2231e29f4a3575d2f580168e1187deb2809281e4d4ee5529ec78c3908814d400000000", 0x56, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400203) r8 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'ipvlan1\x00'}) 21:06:02 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 21:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x2, 0x4, 0x3f8, 0x0, 0x110, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @empty, @local, 0x1, 0xfffffffe}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@arp={@dev, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'vcan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xaa) [ 1044.791180][ C1] not chained 200000 origins [ 1044.795823][ C1] CPU: 1 PID: 19802 Comm: kworker/u4:3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1044.804314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.814380][ C1] Workqueue: krdsd rds_connect_worker [ 1044.819749][ C1] Call Trace: [ 1044.823035][ C1] [ 1044.825895][ C1] dump_stack+0x1c9/0x220 [ 1044.830234][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1044.835963][ C1] ? xfrm_lookup_route+0x2c1/0x370 [ 1044.841088][ C1] ? ip_route_output_flow+0x35a/0x3d0 [ 1044.846462][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.851664][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.856868][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1044.862688][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1044.868849][ C1] ? tcp_select_initial_window+0x60d/0x6c0 [ 1044.874673][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.879879][ C1] __msan_chain_origin+0x50/0x90 [ 1044.884822][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1044.890130][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1044.895186][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1044.900735][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.905945][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1044.911064][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1044.916093][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 1044.921386][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1044.926759][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1044.932565][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.937769][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1044.943581][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1044.949654][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1044.954854][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1044.959458][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1044.963975][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1044.970074][ C1] ? tcp_filter+0xf0/0xf0 [ 1044.974411][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1044.979887][ C1] ip_local_deliver+0x62a/0x7c0 [ 1044.984749][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 1044.989774][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 1044.995405][ C1] ip_rcv+0x6cf/0x750 [ 1044.999394][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 1045.004156][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 1045.009775][ C1] process_backlog+0xf0b/0x1410 [ 1045.014885][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 1045.020514][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1045.025787][ C1] net_rx_action+0x786/0x1aa0 [ 1045.030465][ C1] ? net_tx_action+0xc30/0xc30 [ 1045.035748][ C1] __do_softirq+0x311/0x83d [ 1045.040338][ C1] do_softirq_own_stack+0x49/0x80 [ 1045.045341][ C1] [ 1045.048277][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1045.053464][ C1] local_bh_enable+0x36/0x40 [ 1045.058041][ C1] ip_finish_output2+0x2115/0x2610 [ 1045.063136][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 1045.068848][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 1045.074829][ C1] __ip_finish_output+0xaa7/0xd80 [ 1045.079868][ C1] ip_finish_output+0x166/0x410 [ 1045.084711][ C1] ip_output+0x593/0x680 [ 1045.088968][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 1045.094324][ C1] ? ip_finish_output+0x410/0x410 [ 1045.099332][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 1045.104258][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1045.109789][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1045.114977][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1045.120180][ C1] ip_queue_xmit+0xcc/0xf0 [ 1045.124594][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 1045.129539][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 1045.134756][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1045.139991][ C1] tcp_connect+0x420a/0x6830 [ 1045.144581][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 1045.149889][ C1] tcp_v4_connect+0x21fd/0x2370 [ 1045.154749][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 1045.159677][ C1] __inet_stream_connect+0x2fb/0x1340 [ 1045.165047][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 1045.171130][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1045.176322][ C1] inet_stream_connect+0x101/0x180 [ 1045.181422][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 1045.187045][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 1045.192672][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 1045.197880][ C1] ? rds_tcp_state_change+0x390/0x390 [ 1045.203240][ C1] rds_connect_worker+0x2a6/0x470 [ 1045.208257][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1045.214321][ C1] ? rds_addr_cmp+0x200/0x200 [ 1045.218986][ C1] process_one_work+0x1555/0x1f40 [ 1045.224011][ C1] worker_thread+0xef6/0x2450 [ 1045.228689][ C1] kthread+0x4b5/0x4f0 [ 1045.232741][ C1] ? process_one_work+0x1f40/0x1f40 [ 1045.237930][ C1] ? kthread_blkcg+0xf0/0xf0 [ 1045.242506][ C1] ret_from_fork+0x35/0x40 [ 1045.246919][ C1] Uninit was stored to memory at: [ 1045.251937][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.257641][ C1] __msan_chain_origin+0x50/0x90 [ 1045.262566][ C1] tcp_conn_request+0x1781/0x4d10 [ 1045.267573][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.272670][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.277678][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.283032][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.287619][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.292104][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.297548][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.302395][ C1] ip_rcv+0x6cf/0x750 [ 1045.306369][ C1] process_backlog+0xf0b/0x1410 [ 1045.311217][ C1] net_rx_action+0x786/0x1aa0 [ 1045.315896][ C1] __do_softirq+0x311/0x83d [ 1045.320375][ C1] [ 1045.322695][ C1] Uninit was stored to memory at: [ 1045.327711][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.333417][ C1] __msan_chain_origin+0x50/0x90 [ 1045.338342][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1045.343614][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1045.348622][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.353717][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.358843][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.364227][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.368810][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.373313][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.378763][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.383609][ C1] ip_rcv+0x6cf/0x750 [ 1045.387588][ C1] process_backlog+0xf0b/0x1410 [ 1045.392421][ C1] net_rx_action+0x786/0x1aa0 [ 1045.397095][ C1] __do_softirq+0x311/0x83d [ 1045.401572][ C1] [ 1045.403880][ C1] Uninit was stored to memory at: [ 1045.408893][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.414771][ C1] __msan_chain_origin+0x50/0x90 [ 1045.419698][ C1] tcp_conn_request+0x1781/0x4d10 [ 1045.424711][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.429809][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.434829][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.440184][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.444765][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.449282][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.454726][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.459559][ C1] ip_rcv+0x6cf/0x750 [ 1045.463525][ C1] process_backlog+0xf0b/0x1410 [ 1045.468358][ C1] net_rx_action+0x786/0x1aa0 [ 1045.473020][ C1] __do_softirq+0x311/0x83d [ 1045.477511][ C1] [ 1045.479820][ C1] Uninit was stored to memory at: [ 1045.484834][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.490539][ C1] __msan_chain_origin+0x50/0x90 [ 1045.495462][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1045.500738][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1045.505743][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.510839][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.515848][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.521203][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.525773][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.530259][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.535697][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.540529][ C1] ip_rcv+0x6cf/0x750 [ 1045.544496][ C1] process_backlog+0xf0b/0x1410 [ 1045.549326][ C1] net_rx_action+0x786/0x1aa0 [ 1045.553986][ C1] __do_softirq+0x311/0x83d [ 1045.558466][ C1] [ 1045.560774][ C1] Uninit was stored to memory at: [ 1045.565785][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.571486][ C1] __msan_chain_origin+0x50/0x90 [ 1045.576407][ C1] tcp_conn_request+0x1781/0x4d10 [ 1045.581425][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.586523][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.591533][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.596885][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.601457][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.605940][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.611376][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.616208][ C1] ip_rcv+0x6cf/0x750 [ 1045.620171][ C1] process_backlog+0xf0b/0x1410 [ 1045.625183][ C1] net_rx_action+0x786/0x1aa0 [ 1045.629841][ C1] __do_softirq+0x311/0x83d [ 1045.634327][ C1] [ 1045.636640][ C1] Uninit was stored to memory at: [ 1045.641649][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.647349][ C1] __msan_chain_origin+0x50/0x90 [ 1045.652267][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 1045.657537][ C1] tcp_conn_request+0x33d7/0x4d10 [ 1045.662543][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.667641][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.672648][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.678011][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.682584][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.687069][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.692527][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.697358][ C1] ip_rcv+0x6cf/0x750 [ 1045.701470][ C1] process_backlog+0xf0b/0x1410 [ 1045.706306][ C1] net_rx_action+0x786/0x1aa0 [ 1045.710973][ C1] __do_softirq+0x311/0x83d [ 1045.715449][ C1] [ 1045.717755][ C1] Uninit was stored to memory at: [ 1045.722770][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1045.728473][ C1] __msan_chain_origin+0x50/0x90 [ 1045.733400][ C1] tcp_conn_request+0x1781/0x4d10 [ 1045.738409][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.743520][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 1045.748540][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.753893][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.758465][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.762950][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.768388][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.773218][ C1] ip_rcv+0x6cf/0x750 [ 1045.777181][ C1] process_backlog+0xf0b/0x1410 [ 1045.782013][ C1] net_rx_action+0x786/0x1aa0 [ 1045.786689][ C1] __do_softirq+0x311/0x83d [ 1045.791171][ C1] [ 1045.793481][ C1] Uninit was created at: [ 1045.797718][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1045.803347][ C1] kmsan_alloc_page+0xb9/0x180 [ 1045.808108][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1045.813642][ C1] alloc_pages_current+0x67d/0x990 [ 1045.818744][ C1] alloc_slab_page+0x122/0x1310 [ 1045.823578][ C1] new_slab+0x2bc/0x1130 [ 1045.827803][ C1] ___slab_alloc+0x14a3/0x2040 [ 1045.832548][ C1] kmem_cache_alloc+0xb23/0xd70 [ 1045.837385][ C1] inet_reqsk_alloc+0xac/0x830 [ 1045.842138][ C1] tcp_conn_request+0x753/0x4d10 [ 1045.847059][ C1] tcp_v4_conn_request+0x19b/0x240 [ 1045.852155][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 1045.857509][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 1045.862085][ C1] tcp_v4_rcv+0x425c/0x5040 [ 1045.866573][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1045.872014][ C1] ip_local_deliver+0x62a/0x7c0 [ 1045.876861][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 1045.881712][ C1] ip_list_rcv+0x8eb/0x950 [ 1045.886121][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 1045.892273][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 1045.898497][ C1] napi_complete_done+0x2ef/0xb60 [ 1045.903510][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 1045.908868][ C1] virtnet_poll+0x1468/0x19f0 [ 1045.913540][ C1] net_rx_action+0x786/0x1aa0 [ 1045.918201][ C1] __do_softirq+0x311/0x83d 21:06:06 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 21:06:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000080)=0x8) 21:06:06 executing program 2: chroot(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = clone3(&(0x7f0000001680)={0x288c1c00, 0x0, 0x0, 0x0, {0x80000000}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='wlan0%(\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00') lseek(r4, 0x2, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x3f, 0x9f95, 0x3, 0x1001, 0x51}) dup(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pwrite64(r6, &(0x7f00000002c0)="add2925968a3c6b2881dfca0f8c1fec6d2073618cb8627e15894311a498b823a574faeceed1a78c068fb05175a9d482527245e2231e29f4a3575d2f580168e1187deb2809281e4d4ee5529ec78c3908814d400000000", 0x56, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400203) r8 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'ipvlan1\x00'}) 21:06:06 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:06:06 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 21:06:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000080)=0x8) 21:06:07 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311021f9f660fcf065b05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 21:06:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 21:06:07 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1049.124758][T29025] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1049.133100][T29025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:07 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311021f9f660fcf065b05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) [ 1049.286986][T29034] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1049.298395][T29034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000080)=0x8) 21:06:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 21:06:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:06:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x2}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 21:06:09 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311021f9f660fcf065b05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 21:06:09 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 21:06:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045518, &(0x7f0000000100)=0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x1) [ 1051.374298][T29067] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1051.382734][T29067] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:09 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311021f9f660fcf065b05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 21:06:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x2}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 21:06:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 21:06:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1051.678002][T29080] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1051.686698][T29080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x23000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 21:06:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 21:06:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x2}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) [ 1052.029307][T29094] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1052.038075][T29094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x23000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 21:06:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x2}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 21:06:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401000000000006f, 0xa0081) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x101, 0x0, 0x10, 0x0, 0x0}) 21:06:10 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 21:06:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045518, &(0x7f0000000100)=0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x1) 21:06:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:11 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x23000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 21:06:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) dup3(r5, r2, 0x0) 21:06:11 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x23000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 21:06:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) dup3(r5, r2, 0x0) 21:06:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:12 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) dup3(r5, r2, 0x0) 21:06:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045518, &(0x7f0000000100)=0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x1) 21:06:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) dup3(r5, r2, 0x0) 21:06:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) 21:06:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) 21:06:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0xfb7d, 0x28120001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x1008, 0x28120001) 21:06:13 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:06:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) 21:06:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b8008000100060000001400028010000100000008"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1055.984522][T29207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.139442][T29215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045518, &(0x7f0000000100)=0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x1) 21:06:14 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:06:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) 21:06:14 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r1 = memfd_create(&(0x7f0000000040)='vboxnet1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='R'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='k'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000000)) 21:06:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) 21:06:14 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x149c01, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0, 0x2}, {&(0x7f0000000400)='s', 0x1}], 0x2) [ 1056.700822][T29231] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:06:15 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r1 = memfd_create(&(0x7f0000000040)='vboxnet1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='R'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='k'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000000)) 21:06:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x40}]}}}]}, 0x40}}, 0x0) 21:06:15 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:06:15 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x149c01, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0, 0x2}, {&(0x7f0000000400)='s', 0x1}], 0x2) 21:06:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x40}]}}}]}, 0x40}}, 0x0) 21:06:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) [ 1057.320449][T29281] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:06:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) 21:06:16 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r1 = memfd_create(&(0x7f0000000040)='vboxnet1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='R'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='k'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000000)) 21:06:16 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:06:16 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x149c01, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0, 0x2}, {&(0x7f0000000400)='s', 0x1}], 0x2) 21:06:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x40}]}}}]}, 0x40}}, 0x0) 21:06:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1058.399884][T29325] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:06:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') ioctl$FICLONE(r0, 0x40049409, r1) 21:06:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x40}]}}}]}, 0x40}}, 0x0) 21:06:16 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r1 = memfd_create(&(0x7f0000000040)='vboxnet1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='R'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='k'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000000)) 21:06:17 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x149c01, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0, 0x2}, {&(0x7f0000000400)='s', 0x1}], 0x2) 21:06:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) 21:06:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) [ 1059.032186][T29379] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:06:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') ioctl$FICLONE(r0, 0x40049409, r1) 21:06:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:06:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') ioctl$FICLONE(r0, 0x40049409, r1) 21:06:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) 21:06:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) [ 1060.219559][ C0] not chained 210000 origins [ 1060.224193][ C0] CPU: 0 PID: 19802 Comm: kworker/u4:3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1060.232689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.242757][ C0] Workqueue: krdsd rds_connect_worker [ 1060.248122][ C0] Call Trace: [ 1060.251392][ C0] [ 1060.254235][ C0] dump_stack+0x1c9/0x220 [ 1060.258561][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1060.264273][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 1060.269377][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 1060.274730][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.279914][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.285097][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1060.290909][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1060.297054][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 1060.302849][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.308045][ C0] __msan_chain_origin+0x50/0x90 [ 1060.312982][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1060.318279][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1060.323320][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1060.329373][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1060.335434][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.340618][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.345818][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1060.350922][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1060.355933][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 1060.361206][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1060.366648][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1060.372479][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.377663][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1060.383454][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1060.389523][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.394711][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1060.399293][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1060.403782][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1060.409860][ C0] ? tcp_filter+0xf0/0xf0 [ 1060.414192][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1060.419646][ C0] ip_local_deliver+0x62a/0x7c0 [ 1060.424486][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 1060.429502][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 1060.435118][ C0] ip_rcv+0x6cf/0x750 [ 1060.439089][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 1060.443850][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1060.449473][ C0] process_backlog+0xf0b/0x1410 [ 1060.454311][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 1060.459936][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1060.465203][ C0] net_rx_action+0x786/0x1aa0 [ 1060.469883][ C0] ? net_tx_action+0xc30/0xc30 [ 1060.474632][ C0] __do_softirq+0x311/0x83d [ 1060.479387][ C0] do_softirq_own_stack+0x49/0x80 [ 1060.484389][ C0] [ 1060.487318][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1060.492502][ C0] local_bh_enable+0x36/0x40 [ 1060.497077][ C0] ip_finish_output2+0x2115/0x2610 [ 1060.502171][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 1060.507875][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 1060.513857][ C0] __ip_finish_output+0xaa7/0xd80 [ 1060.518882][ C0] ip_finish_output+0x166/0x410 [ 1060.523824][ C0] ip_output+0x593/0x680 [ 1060.528073][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 1060.533358][ C0] ? ip_finish_output+0x410/0x410 [ 1060.538374][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 1060.543305][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1060.548839][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.554028][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.559222][ C0] ip_queue_xmit+0xcc/0xf0 [ 1060.563624][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 1060.568459][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 1060.573647][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.578878][ C0] tcp_connect+0x420a/0x6830 [ 1060.583456][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1060.588743][ C0] tcp_v4_connect+0x21fd/0x2370 [ 1060.593594][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 1060.598520][ C0] __inet_stream_connect+0x2fb/0x1340 [ 1060.603884][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 1060.609169][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.614356][ C0] inet_stream_connect+0x101/0x180 [ 1060.619466][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 1060.625085][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 1060.630705][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 1060.635895][ C0] ? rds_tcp_state_change+0x390/0x390 [ 1060.641249][ C0] rds_connect_worker+0x2a6/0x470 [ 1060.646272][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1060.652324][ C0] ? rds_addr_cmp+0x200/0x200 [ 1060.656998][ C0] process_one_work+0x1555/0x1f40 [ 1060.662019][ C0] worker_thread+0xef6/0x2450 [ 1060.666699][ C0] kthread+0x4b5/0x4f0 [ 1060.670751][ C0] ? process_one_work+0x1f40/0x1f40 [ 1060.675942][ C0] ? kthread_blkcg+0xf0/0xf0 [ 1060.680522][ C0] ret_from_fork+0x35/0x40 [ 1060.684925][ C0] Uninit was stored to memory at: [ 1060.690031][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1060.695732][ C0] __msan_chain_origin+0x50/0x90 [ 1060.700739][ C0] tcp_conn_request+0x1781/0x4d10 [ 1060.705746][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1060.710968][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1060.715992][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1060.721343][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1060.725913][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1060.730399][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1060.735844][ C0] ip_local_deliver+0x62a/0x7c0 [ 1060.740673][ C0] ip_rcv+0x6cf/0x750 [ 1060.744639][ C0] process_backlog+0xf0b/0x1410 [ 1060.749470][ C0] net_rx_action+0x786/0x1aa0 [ 1060.754143][ C0] __do_softirq+0x311/0x83d [ 1060.758621][ C0] [ 1060.760926][ C0] Uninit was stored to memory at: [ 1060.765937][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1060.771638][ C0] __msan_chain_origin+0x50/0x90 [ 1060.776559][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1060.781841][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1060.786855][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1060.791970][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1060.796978][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1060.802334][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1060.806904][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1060.811388][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1060.816827][ C0] ip_local_deliver+0x62a/0x7c0 [ 1060.821661][ C0] ip_rcv+0x6cf/0x750 [ 1060.825642][ C0] process_backlog+0xf0b/0x1410 [ 1060.830474][ C0] net_rx_action+0x786/0x1aa0 [ 1060.835143][ C0] __do_softirq+0x311/0x83d [ 1060.839632][ C0] [ 1060.841957][ C0] Uninit was stored to memory at: [ 1060.846982][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1060.852695][ C0] __msan_chain_origin+0x50/0x90 [ 1060.857614][ C0] tcp_conn_request+0x1781/0x4d10 [ 1060.862617][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1060.867716][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1060.872723][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1060.878074][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1060.882647][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1060.887149][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1060.892786][ C0] ip_local_deliver+0x62a/0x7c0 [ 1060.897622][ C0] ip_rcv+0x6cf/0x750 [ 1060.901590][ C0] process_backlog+0xf0b/0x1410 [ 1060.906427][ C0] net_rx_action+0x786/0x1aa0 [ 1060.911091][ C0] __do_softirq+0x311/0x83d [ 1060.915567][ C0] [ 1060.917877][ C0] Uninit was stored to memory at: [ 1060.922889][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1060.928593][ C0] __msan_chain_origin+0x50/0x90 [ 1060.933514][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1060.938797][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1060.943814][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1060.948921][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1060.953943][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1060.959298][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1060.964043][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1060.968527][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1060.973979][ C0] ip_local_deliver+0x62a/0x7c0 [ 1060.978820][ C0] ip_rcv+0x6cf/0x750 [ 1060.982787][ C0] process_backlog+0xf0b/0x1410 [ 1060.988485][ C0] net_rx_action+0x786/0x1aa0 [ 1060.993145][ C0] __do_softirq+0x311/0x83d [ 1060.997622][ C0] [ 1060.999928][ C0] Uninit was stored to memory at: [ 1061.004947][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1061.010660][ C0] __msan_chain_origin+0x50/0x90 [ 1061.015593][ C0] tcp_conn_request+0x1781/0x4d10 [ 1061.020600][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1061.025705][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1061.030709][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1061.036062][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1061.040629][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1061.045127][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1061.050578][ C0] ip_local_deliver+0x62a/0x7c0 [ 1061.055408][ C0] ip_rcv+0x6cf/0x750 [ 1061.059372][ C0] process_backlog+0xf0b/0x1410 [ 1061.064201][ C0] net_rx_action+0x786/0x1aa0 [ 1061.068863][ C0] __do_softirq+0x311/0x83d [ 1061.073338][ C0] [ 1061.075658][ C0] Uninit was stored to memory at: [ 1061.080673][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1061.086389][ C0] __msan_chain_origin+0x50/0x90 [ 1061.091309][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 1061.096576][ C0] tcp_conn_request+0x33d7/0x4d10 [ 1061.101580][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1061.106675][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1061.111681][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1061.117045][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1061.121615][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1061.126098][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1061.131536][ C0] ip_local_deliver+0x62a/0x7c0 [ 1061.136365][ C0] ip_rcv+0x6cf/0x750 [ 1061.140328][ C0] process_backlog+0xf0b/0x1410 [ 1061.145159][ C0] net_rx_action+0x786/0x1aa0 [ 1061.149818][ C0] __do_softirq+0x311/0x83d [ 1061.154295][ C0] [ 1061.156601][ C0] Uninit was stored to memory at: [ 1061.161612][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1061.167316][ C0] __msan_chain_origin+0x50/0x90 [ 1061.172238][ C0] tcp_conn_request+0x1781/0x4d10 [ 1061.177243][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1061.182352][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 1061.187361][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1061.192715][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1061.197287][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1061.201771][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1061.207209][ C0] ip_local_deliver+0x62a/0x7c0 [ 1061.212038][ C0] ip_rcv+0x6cf/0x750 [ 1061.216002][ C0] process_backlog+0xf0b/0x1410 [ 1061.220832][ C0] net_rx_action+0x786/0x1aa0 [ 1061.225490][ C0] __do_softirq+0x311/0x83d [ 1061.229975][ C0] [ 1061.232280][ C0] Uninit was created at: [ 1061.236522][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1061.242134][ C0] kmsan_alloc_page+0xb9/0x180 [ 1061.246883][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1061.252411][ C0] alloc_pages_current+0x67d/0x990 [ 1061.257517][ C0] alloc_slab_page+0x122/0x1310 [ 1061.262349][ C0] new_slab+0x2bc/0x1130 [ 1061.266573][ C0] ___slab_alloc+0x14a3/0x2040 [ 1061.271315][ C0] kmem_cache_alloc+0xb23/0xd70 [ 1061.276157][ C0] inet_reqsk_alloc+0xac/0x830 [ 1061.280901][ C0] tcp_conn_request+0x753/0x4d10 [ 1061.285844][ C0] tcp_v4_conn_request+0x19b/0x240 [ 1061.290940][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 1061.296291][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 1061.300868][ C0] tcp_v4_rcv+0x425c/0x5040 [ 1061.305354][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 1061.310795][ C0] ip_local_deliver+0x62a/0x7c0 [ 1061.315626][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 1061.320457][ C0] ip_list_rcv+0x8eb/0x950 [ 1061.324855][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 1061.330995][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 1061.337216][ C0] napi_complete_done+0x2ef/0xb60 [ 1061.342222][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 1061.347575][ C0] virtnet_poll+0x1468/0x19f0 [ 1061.352232][ C0] net_rx_action+0x786/0x1aa0 [ 1061.356910][ C0] __do_softirq+0x311/0x83d 21:06:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:20 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 21:06:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:06:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') ioctl$FICLONE(r0, 0x40049409, r1) 21:06:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) 21:06:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) 21:06:21 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 21:06:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) 21:06:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000040)='m'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @request_death, @clear_death], 0x0, 0x719000, 0x0}) 21:06:21 executing program 5: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x9, 0x3ff}, 0xc) 21:06:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:06:21 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 21:06:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:23 executing program 5: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x9, 0x3ff}, 0xc) 21:06:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e"], 0x44}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:06:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:06:23 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000008640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@private0={0xfc, 0x0, [], 0x1}, 0xd}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000004, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendto$packet(r2, &(0x7f00000002c0)="f4", 0x1, 0x57, 0x0, 0x0) 21:06:23 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') [ 1065.587536][T29502] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:06:23 executing program 5: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x9, 0x3ff}, 0xc) 21:06:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 1065.757610][T29506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:06:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 21:06:24 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000008640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@private0={0xfc, 0x0, [], 0x1}, 0xd}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000004, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendto$packet(r2, &(0x7f00000002c0)="f4", 0x1, 0x57, 0x0, 0x0) [ 1065.991175][T29512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1066.023475][T29514] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 21:06:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e"], 0x44}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:06:24 executing program 5: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x9, 0x3ff}, 0xc) [ 1066.173033][T29519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1066.262977][T29521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:06:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 21:06:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 21:06:25 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000008640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@private0={0xfc, 0x0, [], 0x1}, 0xd}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000004, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendto$packet(r2, &(0x7f00000002c0)="f4", 0x1, 0x57, 0x0, 0x0) 21:06:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e"], 0x44}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:06:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 1067.717267][T29547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1067.768854][T29549] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1067.779420][T29552] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1067.837874][T29553] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:06:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 21:06:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 21:06:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 21:06:26 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000008640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@private0={0xfc, 0x0, [], 0x1}, 0xd}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000004, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendto$packet(r2, &(0x7f00000002c0)="f4", 0x1, 0x57, 0x0, 0x0) 21:06:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e"], 0x44}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1068.151304][T29560] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1068.172449][T29561] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1068.245361][T29564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 1068.331113][T29568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1068.521908][T29572] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 21:06:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 21:06:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 21:06:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2400000052001f0014f9f4070009040002004a1050a127fd3ca8ba94db66e3de82840800", 0x24) 21:06:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x3, &(0x7f0000000080)={0x7f, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac141439, @remote}, "00006371ae9b1c01"}}}}}, 0x0) 21:06:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c000000005800020054000200380001000b00010073696d706c6500002400028005000300000000001800020000000000000000000000000000000700000000000400060018000200090001006373756d"], 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:06:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x20) [ 1069.010375][T29588] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1069.032212][T29587] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:27 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 21:06:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2400000052001f0014f9f4070009040002004a1050a127fd3ca8ba94db66e3de82840800", 0x24) 21:06:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) 21:06:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 21:06:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c000000005800020054000200380001000b00010073696d706c6500002400028005000300000000001800020000000000000000000000000000000700000000000400060018000200090001006373756d"], 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:06:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="663c27bc337600363900ae47a825", 0xe}], 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:06:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2400000052001f0014f9f4070009040002004a1050a127fd3ca8ba94db66e3de82840800", 0x24) 21:06:28 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 21:06:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c000000005800020054000200380001000b00010073696d706c6500002400028005000300000000001800020000000000000000000000000000000700000000000400060018000200090001006373756d"], 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:06:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) 21:06:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2400000052001f0014f9f4070009040002004a1050a127fd3ca8ba94db66e3de82840800", 0x24) [ 1070.599115][T29745] __nla_validate_parse: 12 callbacks suppressed [ 1070.599146][T29745] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x20) 21:06:29 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 21:06:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c000000005800020054000200380001000b00010073696d706c6500002400028005000300000000001800020000000000000000000000000000000700000000000400060018000200090001006373756d"], 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:06:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 21:06:29 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) [ 1071.148138][T29757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 1071.202341][T29800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="663c27bc337600363900ae47a825", 0xe}], 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:06:31 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 21:06:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) 21:06:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50}, {0x80000006, 0x0, 0x0, 0x1}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_delroute={0x1c}, 0x1c}}, 0x0) 21:06:31 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 21:06:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x20) 21:06:31 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 21:06:32 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) dup2(r3, r0) 21:06:32 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00006cc000/0x1000)=nil, 0x1000, 0xd) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21:06:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x40, r1, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, "210ab2ff0d839e06c9b72ff37f2e113d75816bace2770500f9d52d12f2122d3e540dbd673f36"}]}, 0x40}}, 0x0) 21:06:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50}, {0x80000006, 0x0, 0x0, 0x1}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_delroute={0x1c}, 0x1c}}, 0x0) 21:06:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x40, r1, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, "210ab2ff0d839e06c9b72ff37f2e113d75816bace2770500f9d52d12f2122d3e540dbd673f36"}]}, 0x40}}, 0x0) [ 1074.443603][T29875] ===================================================== [ 1074.450587][T29875] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 [ 1074.458140][T29875] CPU: 1 PID: 29875 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1074.466813][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.476875][T29875] Call Trace: [ 1074.480183][T29875] dump_stack+0x1c9/0x220 [ 1074.484541][T29875] kmsan_report+0xf7/0x1e0 [ 1074.489150][T29875] __msan_warning+0x58/0xa0 [ 1074.493664][T29875] bpf_skb_load_helper_8+0xe0/0x290 [ 1074.498875][T29875] ___bpf_prog_run+0x214d/0x97a0 [ 1074.503825][T29875] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1074.509905][T29875] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 1074.515555][T29875] __bpf_prog_run32+0x101/0x170 [ 1074.520429][T29875] ? kmsan_get_metadata+0x4f/0x180 [ 1074.525551][T29875] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.531366][T29875] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1074.536493][T29875] packet_rcv+0x70f/0x2160 [ 1074.540942][T29875] ? packet_sock_destruct+0x1e0/0x1e0 [ 1074.546324][T29875] dev_queue_xmit_nit+0x1199/0x1270 [ 1074.551556][T29875] dev_hard_start_xmit+0x20f/0xab0 [ 1074.556686][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1074.561902][T29875] __dev_queue_xmit+0x2f8d/0x3b20 [ 1074.566935][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1074.572162][T29875] ? skb_clone+0x404/0x5d0 [ 1074.576589][T29875] dev_queue_xmit+0x4b/0x60 [ 1074.581108][T29875] netlink_deliver_tap+0x9d4/0xea0 [ 1074.586229][T29875] ? __netlink_lookup+0x8b9/0x980 [ 1074.591267][T29875] ? kmsan_set_origin_checked+0x95/0xf0 [ 1074.596826][T29875] netlink_unicast+0xe87/0x1100 [ 1074.601706][T29875] netlink_sendmsg+0x1246/0x14d0 [ 1074.606666][T29875] ? netlink_getsockopt+0x1440/0x1440 [ 1074.612045][T29875] ____sys_sendmsg+0x12b6/0x1350 [ 1074.617010][T29875] __sys_sendmsg+0x623/0x750 [ 1074.621628][T29875] ? kmsan_copy_to_user+0x81/0x90 [ 1074.626744][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1074.631956][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1074.637173][T29875] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.642998][T29875] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1074.649074][T29875] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1074.654815][T29875] __se_sys_sendmsg+0x97/0xb0 [ 1074.659511][T29875] __x64_sys_sendmsg+0x4a/0x70 [ 1074.664289][T29875] do_syscall_64+0xb8/0x160 [ 1074.668807][T29875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1074.674697][T29875] RIP: 0033:0x45ca29 [ 1074.678689][T29875] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1074.698297][T29875] RSP: 002b:00007f9c08688c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.706715][T29875] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 1074.714694][T29875] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1074.722670][T29875] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1074.730650][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1074.738804][T29875] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f9c086896d4 [ 1074.746792][T29875] [ 1074.749125][T29875] Uninit was stored to memory at: [ 1074.754164][T29875] kmsan_internal_chain_origin+0xad/0x130 [ 1074.759907][T29875] __msan_chain_origin+0x50/0x90 [ 1074.764864][T29875] ___bpf_prog_run+0x6cbe/0x97a0 [ 1074.769811][T29875] __bpf_prog_run32+0x101/0x170 [ 1074.774666][T29875] packet_rcv+0x70f/0x2160 [ 1074.779074][T29875] dev_queue_xmit_nit+0x1199/0x1270 [ 1074.784260][T29875] dev_hard_start_xmit+0x20f/0xab0 [ 1074.789357][T29875] __dev_queue_xmit+0x2f8d/0x3b20 [ 1074.794453][T29875] dev_queue_xmit+0x4b/0x60 [ 1074.798956][T29875] netlink_deliver_tap+0x9d4/0xea0 [ 1074.804050][T29875] netlink_unicast+0xe87/0x1100 [ 1074.808888][T29875] netlink_sendmsg+0x1246/0x14d0 [ 1074.813807][T29875] ____sys_sendmsg+0x12b6/0x1350 [ 1074.818729][T29875] __sys_sendmsg+0x623/0x750 [ 1074.823304][T29875] __se_sys_sendmsg+0x97/0xb0 [ 1074.827975][T29875] __x64_sys_sendmsg+0x4a/0x70 [ 1074.832723][T29875] do_syscall_64+0xb8/0x160 [ 1074.837220][T29875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1074.843088][T29875] [ 1074.845395][T29875] Uninit was stored to memory at: [ 1074.850407][T29875] kmsan_internal_chain_origin+0xad/0x130 [ 1074.857943][T29875] __msan_chain_origin+0x50/0x90 [ 1074.862950][T29875] ___bpf_prog_run+0x6c64/0x97a0 [ 1074.868046][T29875] __bpf_prog_run32+0x101/0x170 [ 1074.872911][T29875] packet_rcv+0x70f/0x2160 [ 1074.878285][T29875] dev_queue_xmit_nit+0x1199/0x1270 [ 1074.883660][T29875] dev_hard_start_xmit+0x20f/0xab0 [ 1074.888764][T29875] __dev_queue_xmit+0x2f8d/0x3b20 [ 1074.893781][T29875] dev_queue_xmit+0x4b/0x60 [ 1074.898300][T29875] netlink_deliver_tap+0x9d4/0xea0 [ 1074.903411][T29875] netlink_unicast+0xe87/0x1100 [ 1074.908254][T29875] netlink_sendmsg+0x1246/0x14d0 [ 1074.913175][T29875] ____sys_sendmsg+0x12b6/0x1350 [ 1074.918109][T29875] __sys_sendmsg+0x623/0x750 [ 1074.922696][T29875] __se_sys_sendmsg+0x97/0xb0 [ 1074.927443][T29875] __x64_sys_sendmsg+0x4a/0x70 [ 1074.932190][T29875] do_syscall_64+0xb8/0x160 [ 1074.936700][T29875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1074.942590][T29875] [ 1074.944899][T29875] Local variable ----regs@__bpf_prog_run32 created at: [ 1074.951728][T29875] __bpf_prog_run32+0x87/0x170 [ 1074.956475][T29875] __bpf_prog_run32+0x87/0x170 [ 1074.961212][T29875] ===================================================== [ 1074.968124][T29875] Disabling lock debugging due to kernel taint [ 1074.974288][T29875] Kernel panic - not syncing: panic_on_warn set ... [ 1074.980876][T29875] CPU: 1 PID: 29875 Comm: syz-executor.4 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 1074.990929][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.000981][T29875] Call Trace: [ 1075.004268][T29875] dump_stack+0x1c9/0x220 [ 1075.008587][T29875] panic+0x3d5/0xc3e [ 1075.012486][T29875] kmsan_report+0x1df/0x1e0 [ 1075.016981][T29875] __msan_warning+0x58/0xa0 [ 1075.021471][T29875] bpf_skb_load_helper_8+0xe0/0x290 [ 1075.026668][T29875] ___bpf_prog_run+0x214d/0x97a0 [ 1075.031601][T29875] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.037657][T29875] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 1075.043389][T29875] __bpf_prog_run32+0x101/0x170 [ 1075.048233][T29875] ? kmsan_get_metadata+0x4f/0x180 [ 1075.053332][T29875] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1075.059123][T29875] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1075.064244][T29875] packet_rcv+0x70f/0x2160 [ 1075.068668][T29875] ? packet_sock_destruct+0x1e0/0x1e0 [ 1075.074024][T29875] dev_queue_xmit_nit+0x1199/0x1270 [ 1075.079253][T29875] dev_hard_start_xmit+0x20f/0xab0 [ 1075.084376][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1075.089673][T29875] __dev_queue_xmit+0x2f8d/0x3b20 [ 1075.094686][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1075.100021][T29875] ? skb_clone+0x404/0x5d0 [ 1075.104432][T29875] dev_queue_xmit+0x4b/0x60 [ 1075.108931][T29875] netlink_deliver_tap+0x9d4/0xea0 [ 1075.114028][T29875] ? __netlink_lookup+0x8b9/0x980 [ 1075.119044][T29875] ? kmsan_set_origin_checked+0x95/0xf0 [ 1075.124585][T29875] netlink_unicast+0xe87/0x1100 [ 1075.129447][T29875] netlink_sendmsg+0x1246/0x14d0 [ 1075.134381][T29875] ? netlink_getsockopt+0x1440/0x1440 [ 1075.139743][T29875] ____sys_sendmsg+0x12b6/0x1350 [ 1075.144699][T29875] __sys_sendmsg+0x623/0x750 [ 1075.149401][T29875] ? kmsan_copy_to_user+0x81/0x90 [ 1075.154432][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1075.159625][T29875] ? kmsan_get_metadata+0x11d/0x180 [ 1075.164811][T29875] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1075.170818][T29875] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1075.176887][T29875] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1075.182609][T29875] __se_sys_sendmsg+0x97/0xb0 [ 1075.187293][T29875] __x64_sys_sendmsg+0x4a/0x70 [ 1075.192058][T29875] do_syscall_64+0xb8/0x160 [ 1075.196726][T29875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.202620][T29875] RIP: 0033:0x45ca29 [ 1075.206589][T29875] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1075.226367][T29875] RSP: 002b:00007f9c08688c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.234780][T29875] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 1075.242737][T29875] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1075.250692][T29875] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1075.258648][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1075.266690][T29875] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f9c086896d4 [ 1075.275925][T29875] Kernel Offset: 0xa200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1075.287453][T29875] Rebooting in 86400 seconds..