[ 63.818177] audit: type=1800 audit(1542227542.867:25): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.837497] audit: type=1800 audit(1542227542.887:26): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.857023] audit: type=1800 audit(1542227542.907:27): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 65.160370] sshd (6675) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. 2018/11/14 20:32:38 fuzzer started 2018/11/14 20:32:44 dialing manager at 10.128.0.26:43625 2018/11/14 20:32:44 syscalls: 1 2018/11/14 20:32:44 code coverage: enabled 2018/11/14 20:32:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/14 20:32:44 setuid sandbox: enabled 2018/11/14 20:32:44 namespace sandbox: enabled 2018/11/14 20:32:44 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/14 20:32:44 fault injection: enabled 2018/11/14 20:32:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/14 20:32:44 net packed injection: enabled 2018/11/14 20:32:44 net device setup: enabled 20:35:31 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) syzkaller login: [ 252.916845] IPVS: ftp: loaded support on port[0] = 21 [ 255.417770] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.424474] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.433512] device bridge_slave_0 entered promiscuous mode [ 255.580578] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.587191] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.596096] device bridge_slave_1 entered promiscuous mode [ 255.739997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 255.885853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.335507] bond0: Enslaving bond_slave_0 as an active interface with an up link 20:35:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_emit_ethernet(0x300600, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x11, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x8035, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 256.488849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.822281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 256.829418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.129399] IPVS: ftp: loaded support on port[0] = 21 [ 257.490410] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.498907] team0: Port device team_slave_0 added [ 257.642885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.651132] team0: Port device team_slave_1 added [ 257.846543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 257.853920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.863096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.056327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 258.063707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.072856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.380104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.387976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.397442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.683203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.690910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.700157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.034819] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.041328] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.050137] device bridge_slave_0 entered promiscuous mode [ 261.106375] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.112965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.119918] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.126561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.135411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 261.202871] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.209368] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.218351] device bridge_slave_1 entered promiscuous mode [ 261.359688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 261.554223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 261.932638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.135011] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.314157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.581433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 262.604920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:35:42 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000940)={0xffffffffffffffff}) ioctl(r0, 0x3, &(0x7f0000000980)="d2402a7643d376e6995af1e43a1e9a7c00727891024e699100297aecda1ffc650a46b57b197edcf6f9008af9de6044a5a11bc80f59828d209968b2456788e968017f6419") r1 = socket$inet(0x10, 0x3, 0xc) socketpair(0x1b, 0x4, 0xac, &(0x7f0000000a00)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r3, 0x408, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = accept(r4, &(0x7f00000001c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/134, 0x86}], 0x3, &(0x7f0000000600)=""/105, 0x69, 0x10001}, 0x2000) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r7, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, &(0x7f0000000040)) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507025, 0x1000007, 0x2013, r7, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000006c0)={0x0, 0x7}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="5cbe5d043febd4da58"], &(0x7f0000000780)=0x1) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000900)={0x2, &(0x7f00000007c0)=[{}, {}]}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) [ 263.740018] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 263.748392] team0: Port device team_slave_0 added [ 264.052415] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.060507] team0: Port device team_slave_1 added [ 264.154488] IPVS: ftp: loaded support on port[0] = 21 [ 264.371060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.378307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.387424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.669297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 264.676592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.685505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.905643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.913479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.922931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.287492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.295423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.304702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.668479] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.675074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.682244] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.689135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.698280] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 268.800714] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.807408] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.816295] device bridge_slave_0 entered promiscuous mode [ 269.084020] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.090523] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.099432] device bridge_slave_1 entered promiscuous mode [ 269.348574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.532614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.623163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 270.506995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 270.728155] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 271.038369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 271.045587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.246052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 271.253301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.186843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 272.195092] team0: Port device team_slave_0 added 20:35:51 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) [ 272.536699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 272.544979] team0: Port device team_slave_1 added [ 272.603490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.879500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 272.886783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.895924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.282939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 273.290063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.299156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.639577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 273.647347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.656545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.809791] IPVS: ftp: loaded support on port[0] = 21 [ 273.998051] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 274.017108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.025067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.034452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.402984] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 275.409413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.417763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.706443] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.350610] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.357204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.364288] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.370772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.379964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 278.662338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.518938] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.525711] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.534923] device bridge_slave_0 entered promiscuous mode [ 279.960763] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.967429] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.976272] device bridge_slave_1 entered promiscuous mode [ 280.359743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.618381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 281.703136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.080423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.370226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 282.377476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.762708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 282.769840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.822628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.757457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.765738] team0: Port device team_slave_0 added 20:36:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000000), 0x3cc}}], 0x1, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) getrusage(0x4ba1d5768b0f6a3a, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x72, &(0x7f0000000180)="6d6f756e7473746174730080f25dc1bce5960755a9e5a035832eddeeabf3be24ddd816af730280113c146452d998bb9c81984b6cc7738924fd145b93e47ad45bf48659aeda42a6bc7100b258ad3dce7baf02a923c22dadf7a271200810b44b6efcfe07b942d93e81721c402d60e3e44f9b21", 0xffffffffffffffff}, 0x30) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) [ 284.134007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.142297] team0: Port device team_slave_1 added [ 284.206290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.608256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.615742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.624609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.039789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.047311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.056622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 20:36:04 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x40, 0x4) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x1ff, 0x0, 0x0, 0x6}], "", [[]]}, 0x178) [ 285.541548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 285.549531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.558824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.646648] IPVS: ftp: loaded support on port[0] = 21 20:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x50323, 0xc3a}) [ 285.896001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.902598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.910493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.973003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 285.981054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.990433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.084813] vhci_hcd: invalid port number 58 20:36:05 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80240) r1 = gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={r1, r3, r4}, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xfd, "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"}, &(0x7f0000000240)=0x105) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={r6, 0x391a}, &(0x7f00000005c0)=0x8) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x10, 0x101, 0x1}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000000c0)={r8, 0x1}, 0x8) r9 = syz_open_procfs(r2, &(0x7f0000000400)="2f65786500000000000035abe1e80d8f95f5d2968ae8c76700022de99a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r9, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)=0x98) 20:36:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_procfs(0x0, &(0x7f00000012c0)="617474722f6b651619dfff5e35610a30892889a67963726ae55bf90ec9b5fc") recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/108, 0x6c}], 0x5, &(0x7f0000000180)=""/57, 0x39, 0x2}, 0x10000) connect$packet(r1, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x100, 0x6, @random="daabf5f1cf08"}, 0x14) r3 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001300)={0x1168, 0x30, 0x803, 0x70bd28, 0x25dfdbfe, {}, [@nested={0x1098, 0x17, [@typed={0x8, 0x59, @ipv4=@multicast2}, @generic="8acf049420ca155c1ca957a4f4f5a3441a243433a315b04244eb", @typed={0x14, 0x40, @ipv6=@remote}, @typed={0x5c, 0x90, @binary="59dc2a097b2bab5d87919d6fb50bd570471a92c381a6840353cd7bd139b59061523de09e3b4e1eda0dc5a03a51a65437405ffbdd576fb10634f9af52b1e108be8072f4eaac07268271b59d0db175e7fc174eac23e36f"}, @generic="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"]}, @generic="6550ed706dba285eb0015d08c8a5dc6ee8ad93213ce16d949343b6b39a9464d130f459e39cbf111e2247bfe38b70e7fa3aa4a6651fef", @generic="d94ea184b335eb03ed62f15bd944a124be0ba788622b8fd4df1448b44934cce44ac7fe", @typed={0x0, 0x6d, @pid=r3}]}, 0xffffff13}, 0x1, 0x0, 0x0, 0x4002}, 0x20008000) [ 287.431082] 8021q: adding VLAN 0 to HW filter on device team0 20:36:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x88, 0x8, [0x0, 0x0]}) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) [ 287.819035] ip (7491) used greatest stack depth: 53168 bytes left 20:36:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r4, &(0x7f0000000100), 0xe08c) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', r5}) 20:36:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000240)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000200)={0x4}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x101600) r5 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x80000, 0x8) syz_open_dev$vcsa(&(0x7f0000001340)='/dev/vcsa#\x00', 0x7, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140091001a000102000000000000000020000000"], 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000001300)=0x9, 0x4) name_to_handle_at(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x1008, 0x1, "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"}, &(0x7f00000012c0), 0x1400) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "31c4b16f8b0f3b42272170774b72a927"}, 0x11, 0x1) [ 288.620113] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 20:36:08 executing program 0: r0 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x2, 0x1, 'client0\x00', 0xffffffff80000000, "7b00c62e0116e9be", "8b6d0d8f86edbd8e98677070df04cfd295331facb797b3784bba33a70c5580ae", 0x80, 0x3}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580), 0x24, 0x0) [ 290.769305] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.775973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.783075] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.789623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.798173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.805046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.620982] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.627789] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.636694] device bridge_slave_0 entered promiscuous mode [ 293.078203] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.084881] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.093679] device bridge_slave_1 entered promiscuous mode [ 293.457803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.532096] not chained 10000 origins [ 293.535962] CPU: 0 PID: 7631 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 293.543160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.552531] Call Trace: [ 293.555130] [ 293.557311] dump_stack+0x32d/0x480 [ 293.560982] ? save_stack_trace+0xc6/0x110 [ 293.565255] kmsan_internal_chain_origin+0x222/0x240 [ 293.570410] ? kmsan_internal_chain_origin+0x136/0x240 [ 293.575723] ? __msan_chain_origin+0x6d/0xb0 [ 293.580584] ? __save_stack_trace+0x8be/0xc60 [ 293.585108] ? save_stack_trace+0xc6/0x110 [ 293.589374] ? kmsan_internal_chain_origin+0x136/0x240 [ 293.594684] ? kmsan_memcpy_origins+0x13d/0x190 [ 293.599393] ? __msan_memcpy+0x6f/0x80 [ 293.603315] ? nla_put+0x20a/0x2d0 [ 293.606893] ? br_port_fill_attrs+0x366/0x1ea0 [ 293.611500] ? br_fill_ifinfo+0x10ed/0x27c0 [ 293.615845] ? br_ifinfo_notify+0x285/0x460 [ 293.620189] ? br_forward_delay_timer_expired+0x478/0x4d0 [ 293.625748] ? call_timer_fn+0x356/0x7c0 [ 293.629836] ? __run_timers+0xe95/0x1300 [ 293.633922] ? run_timer_softirq+0x55/0xa0 [ 293.638179] ? __do_softirq+0x721/0xc7f [ 293.642175] ? irq_exit+0x305/0x340 [ 293.645824] ? exiting_irq+0xe/0x10 [ 293.649479] ? smp_apic_timer_interrupt+0x64/0x90 [ 293.654357] ? apic_timer_interrupt+0xf/0x20 [ 293.658795] ? kmsan_get_shadow_origin_ptr+0xfc/0x410 [ 293.664017] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 293.669410] ? __tlb_remove_page_size+0x88/0x560 [ 293.674198] ? unmap_page_range+0x23df/0x3950 [ 293.678718] ? unmap_single_vma+0x43f/0x5e0 [ 293.683079] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.688476] ? __module_address+0x6a/0x5f0 [ 293.692751] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 293.698151] ? is_bpf_text_address+0x49e/0x4d0 [ 293.702772] ? INIT_INT+0xc/0x30 [ 293.706187] __msan_chain_origin+0x6d/0xb0 [ 293.710471] __save_stack_trace+0xaff/0xc60 [ 293.714866] save_stack_trace+0xc6/0x110 [ 293.718966] kmsan_internal_chain_origin+0x136/0x240 [ 293.724113] ? kmsan_internal_chain_origin+0x136/0x240 [ 293.729420] ? kmsan_memcpy_origins+0x13d/0x190 [ 293.734125] ? __msan_memcpy+0x6f/0x80 [ 293.738044] ? nla_put+0x20a/0x2d0 [ 293.741614] ? br_port_fill_attrs+0x366/0x1ea0 [ 293.745066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 293.746216] ? br_fill_ifinfo+0x10ed/0x27c0 [ 293.746253] ? br_ifinfo_notify+0x285/0x460 [ 293.761848] ? br_forward_delay_timer_expired+0x478/0x4d0 [ 293.767413] ? call_timer_fn+0x356/0x7c0 [ 293.771506] ? __run_timers+0xe95/0x1300 [ 293.775592] ? run_timer_softirq+0x55/0xa0 [ 293.779855] ? __do_softirq+0x721/0xc7f [ 293.783859] ? irq_exit+0x305/0x340 [ 293.787516] ? exiting_irq+0xe/0x10 [ 293.791171] ? smp_apic_timer_interrupt+0x64/0x90 [ 293.796038] ? apic_timer_interrupt+0xf/0x20 [ 293.800479] ? kmsan_get_shadow_origin_ptr+0xfc/0x410 [ 293.805699] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 293.811089] ? __tlb_remove_page_size+0x88/0x560 [ 293.815871] ? unmap_page_range+0x23df/0x3950 [ 293.820387] ? unmap_single_vma+0x43f/0x5e0 [ 293.824731] ? unmap_vmas+0x251/0x380 [ 293.828554] ? exit_mmap+0x51e/0xa10 [ 293.832290] ? __mmput+0x17a/0x700 [ 293.835862] ? mmput+0x190/0x210 [ 293.839247] ? flush_old_exec+0x1769/0x2a00 [ 293.843591] ? load_elf_binary+0x150e/0x9480 [ 293.848024] ? search_binary_handler+0x4a7/0x1050 [ 293.852894] ? __do_execve_file+0x2212/0x33d0 [ 293.857411] ? __se_sys_execve+0xec/0x110 [ 293.861586] ? __x64_sys_execve+0x4a/0x70 [ 293.865756] ? do_syscall_64+0xcf/0x110 [ 293.869758] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.875148] ? __tlb_remove_page_size+0x88/0x560 [ 293.879929] ? unmap_page_range+0x23df/0x3950 [ 293.884451] ? unmap_single_vma+0x43f/0x5e0 [ 293.888794] ? unmap_vmas+0x251/0x380 [ 293.892618] ? exit_mmap+0x51e/0xa10 [ 293.896360] ? __mmput+0x17a/0x700 [ 293.899921] ? mmput+0x190/0x210 [ 293.903314] ? flush_old_exec+0x1769/0x2a00 [ 293.907674] ? load_elf_binary+0x150e/0x9480 [ 293.912112] ? search_binary_handler+0x4a7/0x1050 [ 293.916988] ? kmsan_set_origin+0x7f/0x100 [ 293.921255] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 293.926663] kmsan_memcpy_origins+0x13d/0x190 [ 293.931202] __msan_memcpy+0x6f/0x80 [ 293.934946] nla_put+0x20a/0x2d0 [ 293.938370] br_port_fill_attrs+0x366/0x1ea0 [ 293.942829] br_fill_ifinfo+0x10ed/0x27c0 [ 293.947052] br_ifinfo_notify+0x285/0x460 [ 293.951245] br_forward_delay_timer_expired+0x478/0x4d0 [ 293.956651] call_timer_fn+0x356/0x7c0 [ 293.960577] ? br_message_age_timer_expired+0x570/0x570 [ 293.965984] __run_timers+0xe95/0x1300 [ 293.969911] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.975308] ? br_message_age_timer_expired+0x570/0x570 [ 293.980750] run_timer_softirq+0x55/0xa0 [ 293.984839] ? timers_dead_cpu+0xb70/0xb70 [ 293.989100] __do_softirq+0x721/0xc7f [ 293.992950] irq_exit+0x305/0x340 [ 293.996451] exiting_irq+0xe/0x10 [ 293.999938] smp_apic_timer_interrupt+0x64/0x90 [ 294.004634] apic_timer_interrupt+0xf/0x20 [ 294.008897] [ 294.011169] RIP: 0010:kmsan_get_shadow_origin_ptr+0xfc/0x410 [ 294.016996] Code: 90 8c 48 85 c9 74 29 48 89 c2 48 c1 ea 22 48 8b 0c d1 48 85 c9 74 19 48 c1 e8 1b 83 e0 7f 48 c1 e0 05 48 01 c1 74 09 f6 01 02 <0f> 85 dc 01 00 00 4c 89 f8 48 c1 e8 28 48 3d c9 ff ff 00 72 0f 48 [ 294.035925] RSP: 0000:ffff888135c8f1a8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 294.043663] RAX: 00000000000004a0 RBX: ffffffff8c914000 RCX: ffff88821fff14a0 [ 294.050948] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88812e530008 [ 294.058238] RBP: ffff888135c8f1d8 R08: ffff888000000000 R09: ffff888133eff23f [ 294.065526] R10: 000000ffffffffff R11: 0000000000000000 R12: ffff8881ae530008 [ 294.072816] R13: 00007f8429e00000 R14: ffffffff8c913000 R15: ffff88812e530008 [ 294.080155] __msan_metadata_ptr_for_load_4+0x10/0x20 [ 294.085385] __tlb_remove_page_size+0x88/0x560 [ 294.090011] unmap_page_range+0x23df/0x3950 [ 294.094457] unmap_single_vma+0x43f/0x5e0 [ 294.098659] unmap_vmas+0x251/0x380 [ 294.102347] exit_mmap+0x51e/0xa10 [ 294.105944] __mmput+0x17a/0x700 [ 294.109348] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 294.114758] mmput+0x190/0x210 [ 294.117987] flush_old_exec+0x1769/0x2a00 [ 294.122164] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 294.127587] load_elf_binary+0x150e/0x9480 [ 294.131890] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 294.137299] ? __msan_poison_alloca+0x1e0/0x270 [ 294.142012] ? load_elf_binary+0x4fb1/0x9480 [ 294.146452] ? kmsan_set_origin+0x7f/0x100 [ 294.150721] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 294.156121] ? load_script+0xd50/0xd50 [ 294.160037] search_binary_handler+0x4a7/0x1050 [ 294.164756] __do_execve_file+0x2212/0x33d0 [ 294.169163] __se_sys_execve+0xec/0x110 [ 294.173182] __x64_sys_execve+0x4a/0x70 [ 294.177183] do_syscall_64+0xcf/0x110 [ 294.181016] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.186225] RIP: 0033:0x455df7 [ 294.189459] Code: Bad RIP value. [ 294.192839] RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 294.200571] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455df7 [ 294.207864] RDX: 00007ffdebac1738 RSI: 0000000000a3fb00 RDI: 00000000004db3bb [ 294.215158] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 0000000000000030 [ 294.222455] R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3ff10 [ 294.229745] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 294.237053] Uninit was stored to memory at: [ 294.241407] kmsan_internal_chain_origin+0x136/0x240 [ 294.246543] __msan_chain_origin+0x6d/0xb0 [ 294.250808] __save_stack_trace+0x8be/0xc60 [ 294.255152] save_stack_trace+0xc6/0x110 [ 294.259234] kmsan_internal_chain_origin+0x136/0x240 [ 294.264373] kmsan_memcpy_origins+0x13d/0x190 [ 294.268895] __msan_memcpy+0x6f/0x80 [ 294.272639] nla_put+0x20a/0x2d0 [ 294.276028] br_port_fill_attrs+0x366/0x1ea0 [ 294.280464] br_fill_ifinfo+0x10ed/0x27c0 [ 294.284636] br_ifinfo_notify+0x285/0x460 [ 294.288817] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.294210] call_timer_fn+0x356/0x7c0 [ 294.298118] __run_timers+0xe95/0x1300 [ 294.302026] run_timer_softirq+0x55/0xa0 [ 294.306114] __do_softirq+0x721/0xc7f [ 294.309921] [ 294.311560] Uninit was stored to memory at: [ 294.315908] kmsan_internal_chain_origin+0x136/0x240 [ 294.321041] __msan_chain_origin+0x6d/0xb0 [ 294.325478] __save_stack_trace+0x8be/0xc60 [ 294.329826] save_stack_trace+0xc6/0x110 [ 294.333917] kmsan_internal_chain_origin+0x136/0x240 [ 294.339048] kmsan_memcpy_origins+0x13d/0x190 [ 294.343568] __msan_memcpy+0x6f/0x80 [ 294.347309] nla_put+0x20a/0x2d0 [ 294.350705] br_port_fill_attrs+0x366/0x1ea0 [ 294.355132] br_fill_ifinfo+0x10ed/0x27c0 [ 294.359304] br_ifinfo_notify+0x285/0x460 [ 294.363487] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.368875] call_timer_fn+0x356/0x7c0 [ 294.372786] __run_timers+0xe95/0x1300 [ 294.376703] run_timer_softirq+0x55/0xa0 [ 294.380783] __do_softirq+0x721/0xc7f [ 294.384597] [ 294.386233] Uninit was stored to memory at: [ 294.390582] kmsan_internal_chain_origin+0x136/0x240 [ 294.395709] __msan_chain_origin+0x6d/0xb0 [ 294.399964] __save_stack_trace+0x8be/0xc60 [ 294.404304] save_stack_trace+0xc6/0x110 [ 294.408407] kmsan_internal_chain_origin+0x136/0x240 [ 294.413533] kmsan_memcpy_origins+0x13d/0x190 [ 294.418052] __msan_memcpy+0x6f/0x80 [ 294.421791] nla_put+0x20a/0x2d0 [ 294.425182] br_port_fill_attrs+0x366/0x1ea0 [ 294.429608] br_fill_ifinfo+0x10ed/0x27c0 [ 294.433773] br_ifinfo_notify+0x285/0x460 [ 294.437967] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.443363] call_timer_fn+0x356/0x7c0 [ 294.447270] __run_timers+0xe95/0x1300 [ 294.451174] run_timer_softirq+0x55/0xa0 [ 294.455258] __do_softirq+0x721/0xc7f [ 294.459063] [ 294.460699] Uninit was stored to memory at: [ 294.465043] kmsan_internal_chain_origin+0x136/0x240 [ 294.470175] __msan_chain_origin+0x6d/0xb0 [ 294.474455] __save_stack_trace+0x8be/0xc60 [ 294.478799] save_stack_trace+0xc6/0x110 [ 294.482883] kmsan_internal_chain_origin+0x136/0x240 [ 294.488012] kmsan_memcpy_origins+0x13d/0x190 [ 294.492533] __msan_memcpy+0x6f/0x80 [ 294.496273] nla_put+0x20a/0x2d0 [ 294.499667] br_port_fill_attrs+0x366/0x1ea0 [ 294.504102] br_fill_ifinfo+0x10ed/0x27c0 [ 294.508273] br_ifinfo_notify+0x285/0x460 [ 294.512454] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.517845] call_timer_fn+0x356/0x7c0 [ 294.521758] __run_timers+0xe95/0x1300 [ 294.525677] run_timer_softirq+0x55/0xa0 [ 294.529758] __do_softirq+0x721/0xc7f [ 294.533565] [ 294.535209] Uninit was stored to memory at: [ 294.539050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.539556] kmsan_internal_chain_origin+0x136/0x240 [ 294.539593] __msan_chain_origin+0x6d/0xb0 [ 294.556530] __save_stack_trace+0x8be/0xc60 [ 294.560889] save_stack_trace+0xc6/0x110 [ 294.564981] kmsan_internal_chain_origin+0x136/0x240 [ 294.570108] kmsan_memcpy_origins+0x13d/0x190 [ 294.574631] __msan_memcpy+0x6f/0x80 [ 294.578765] nla_put+0x20a/0x2d0 [ 294.582153] br_port_fill_attrs+0x366/0x1ea0 [ 294.586587] br_fill_ifinfo+0x10ed/0x27c0 [ 294.590754] br_ifinfo_notify+0x285/0x460 [ 294.594933] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.600324] call_timer_fn+0x356/0x7c0 [ 294.604245] __run_timers+0xe95/0x1300 [ 294.608149] run_timer_softirq+0x55/0xa0 [ 294.612235] __do_softirq+0x721/0xc7f [ 294.616042] [ 294.617680] Uninit was stored to memory at: [ 294.622029] kmsan_internal_chain_origin+0x136/0x240 [ 294.627162] __msan_chain_origin+0x6d/0xb0 [ 294.631417] __save_stack_trace+0x8be/0xc60 [ 294.635765] save_stack_trace+0xc6/0x110 [ 294.639855] kmsan_internal_chain_origin+0x136/0x240 [ 294.644979] kmsan_memcpy_origins+0x13d/0x190 [ 294.649498] __msan_memcpy+0x6f/0x80 [ 294.653233] nla_put+0x20a/0x2d0 [ 294.656628] br_port_fill_attrs+0x366/0x1ea0 [ 294.661056] br_fill_ifinfo+0x10ed/0x27c0 [ 294.665222] br_ifinfo_notify+0x285/0x460 [ 294.669456] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.674848] call_timer_fn+0x356/0x7c0 [ 294.678759] __run_timers+0xe95/0x1300 [ 294.682671] run_timer_softirq+0x55/0xa0 [ 294.686751] __do_softirq+0x721/0xc7f [ 294.690555] [ 294.692192] Uninit was stored to memory at: [ 294.696537] kmsan_internal_chain_origin+0x136/0x240 [ 294.701665] __msan_chain_origin+0x6d/0xb0 [ 294.705926] __save_stack_trace+0x8be/0xc60 [ 294.710537] save_stack_trace+0xc6/0x110 [ 294.714620] kmsan_internal_chain_origin+0x136/0x240 [ 294.719744] kmsan_memcpy_origins+0x13d/0x190 [ 294.724259] __msan_memcpy+0x6f/0x80 [ 294.728006] nla_put+0x20a/0x2d0 [ 294.731387] br_port_fill_attrs+0x366/0x1ea0 [ 294.735815] br_fill_ifinfo+0x10ed/0x27c0 [ 294.739983] br_ifinfo_notify+0x285/0x460 [ 294.744155] br_forward_delay_timer_expired+0x478/0x4d0 [ 294.749544] call_timer_fn+0x356/0x7c0 [ 294.753469] __run_timers+0xe95/0x1300 [ 294.757389] run_timer_softirq+0x55/0xa0 [ 294.761477] __do_softirq+0x721/0xc7f [ 294.765286] [ 294.766931] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 294.774298] Variable was created at: [ 294.778047] __local_bh_enable_ip+0x46/0x260 [ 294.782488] local_bh_enable+0x36/0x40 [ 294.851667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.203645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.221809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 295.229016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.552747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 295.559877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.520499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.595181] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 296.603432] team0: Port device team_slave_0 added [ 296.897540] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 296.906104] team0: Port device team_slave_1 added [ 297.181166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 297.188675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.197687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.483882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 297.511741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.520821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 20:36:16 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000a2c0)=[{{&(0x7f0000002b00)=@un=@abs, 0x80, &(0x7f0000001940)=[{&(0x7f0000000040)=""/120, 0x78}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/220, 0xdc}], 0x4, &(0x7f0000002c40)=""/69, 0x45}}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f0000007440)}}, {{&(0x7f00000074c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000007700)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000007840)=""/149, 0x95}}], 0x4, 0x0, &(0x7f000000a500)={0x0, r1+10000000}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001700)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/138, 0x8a}}, {{&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/119, 0x77}}, {{&(0x7f0000000580)=@l2, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000000280)=""/101, 0x65}}], 0x3, 0x0, &(0x7f00000017c0)={0x0, r2+10000000}) [ 297.782925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 297.790568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.799755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.813210] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 297.862842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.870823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.939525] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 297.947316] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 297.973829] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 297.997018] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.011127] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.055363] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.064681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 298.072466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.081507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.102764] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.133593] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.167321] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.175667] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 298.783157] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.756480] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.763082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.770047] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.776713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.785351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 300.792407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.165227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.924272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 304.731664] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 304.738278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.746391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:36:24 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000a40)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e21}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000e40)="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", 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) r1 = memfd_create(&(0x7f0000000900)="73970ddb08df8c656c667b7070703070707031236d643573756d00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000180)='&', 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x80000004) [ 305.633412] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.372745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.900982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:36:28 executing program 3: getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0xee00]) setgid(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)) getdents(r1, &(0x7f0000000200)=""/68, 0x20000244) [ 309.027563] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 309.041155] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 309.387026] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.393451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.401176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.700321] 8021q: adding VLAN 0 to HW filter on device team0 20:36:30 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="a2184c4608ff0103ffff00000000000002003e00b1000000a4031e00380000008102"], 0x22) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000980)="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") write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 20:36:30 executing program 0: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8040, 0x20) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x7) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 20:36:30 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x400000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4b) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x8, 0x8200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="e73b6612f5bea9e9901d02ae5f951e189869ecca83affb877979df18d74871b0be759a61438b0cf80dcac4f01559ee900e3375d3099bc84f506652e7ef6f4415a8c4309fca02765042fdafefd7b0302255bee8783e6555e1fd0623c0864a26f90a21a45068231b4c1300cf2cc06f", &(0x7f0000000100)=""/44}, 0x18) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000001c0)=""/107, &(0x7f0000000240)=0x6b) r1 = socket$inet6(0xa, 0x4, 0x1000) r2 = semget(0x0, 0x3, 0xa) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', 'vboxnet1,,\'{-\x00'}, &(0x7f0000000300)=""/137, 0x89) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast1}}, 0x8001, 0xfffffffffffffff9, 0xdf, "b6f9bdd90003e71763ce899bf3cd0a3c56aab9dce61454cc9264d72184f3876d3ed323e01baf49214a203537849904ac5d1e63d7ddfd9f8dfdf383748f59ff6f3d956654e4c3ca216c9ce58b09c0ed15"}, 0xd8) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0xb, @pix_mp={0x7fff, 0x27d1, 0x34725f52, 0x7, 0xc, [{0x8000, 0x1}, {0xf3, 0x100000000}, {0x3, 0x40}, {0x2, 0x1}, {0x0, 0xfffffffffffffff8}, {0x6b, 0x2}, {0x88, 0xffffffffffffffa2}, {0x5c6, 0x20}], 0x9, 0xffffffff, 0x7}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000005c0)={0x100, 0x6, 0x7fff}, 0xc) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000600)={0xff, 0x3, 0x6}) ioctl$KVM_NMI(r0, 0xae9a) r3 = request_key(&(0x7f0000000640)='encrypted\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)='/dev/midi#\x00', 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r3, 0xf4) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000700)) seccomp(0x0, 0x1, &(0x7f0000000780)={0x6, &(0x7f0000000740)=[{0x0, 0x0, 0x800, 0x9}, {0xed, 0xffffffff, 0x4, 0x6}, {0x8, 0xfffffffffffffffc, 0x0, 0x6}, {0x8, 0x8, 0x0, 0xffffffff}, {0x7, 0x6, 0x81, 0x3}, {0x5, 0x2, 0x4, 0x5}]}) socket$can_bcm(0x1d, 0x2, 0x2) flock(r1, 0x4) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000900)=""/81) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000980), &(0x7f00000009c0)=0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)={0xb, 0x4, 0x81, 0x10001, 0x20, 0x1, 0x6}, 0x2c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000ac0)={r5, 0x2, 0x795, 0x7, 0x800, 0x9}, 0x14) seccomp(0x1, 0x0, &(0x7f0000000b80)={0x9, &(0x7f0000000b00)=[{0x0, 0x1, 0x0, 0x9}, {0x5, 0x6, 0x7fff, 0x6}, {0x6, 0xcf, 0x100, 0x715}, {0x2, 0xfffffffffffffffd, 0x6}, {0x3, 0x9, 0x800, 0x6}, {0x0, 0x1, 0xfffffffffffffff7, 0x1f}, {0x5, 0x8000, 0x3ff, 0xfffffffffffffffd}, {0x2, 0x9906, 0x9, 0x3}, {0x7, 0x7, 0x3, 0xf114}]}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000bc0)={r5, 0xfffffffffffffff9, 0x30}, 0xc) 20:36:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000400)=0x4, 0x4) 20:36:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff000000000000000000000000050009003d0000000a00000000000000000000000000000000000000f900000000000000000000000200010000000000000007070000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) 20:36:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000480)) getdents(r0, &(0x7f0000000200)=""/68, 0x20000244) getdents(r0, &(0x7f0000000280)=""/232, 0xe8) 20:36:30 executing program 3: 20:36:31 executing program 0: 20:36:31 executing program 2: 20:36:31 executing program 3: 20:36:31 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="a2184c4608ff0103ffff00000000000002003e00b1000000a4031e00380000008102"], 0x22) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000980)="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") write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 20:36:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d03010000000000950000000000000071260000000000006706000002000000bf25000000000000620500000e0000007365000000000000bf540000000000000704000004faff003d4301000000000095000000000000005d54090000000000bf250000000000000f04000000000000070500000e000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf25000000000000070500000e0000001f6500000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 20:36:31 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x22040, 0x0) 20:36:31 executing program 3: [ 313.312976] IPVS: ftp: loaded support on port[0] = 21 [ 314.629767] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.636350] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.644612] device bridge_slave_0 entered promiscuous mode [ 314.725686] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.732453] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.740146] device bridge_slave_1 entered promiscuous mode [ 314.818756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 314.897758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 315.137216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 315.223736] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 315.307875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 315.314917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.395455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 315.402528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.643617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 315.651229] team0: Port device team_slave_0 added [ 315.730306] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 315.738044] team0: Port device team_slave_1 added [ 315.817001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.900058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.980094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 315.987638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.997110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.071705] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 316.079160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.088602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.974879] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.981315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.988388] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.994862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.003229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 317.322195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.231423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.533048] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 320.832154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 320.838445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.846529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.147040] 8021q: adding VLAN 0 to HW filter on device team0 20:36:42 executing program 5: 20:36:42 executing program 1: 20:36:42 executing program 2: 20:36:42 executing program 4: 20:36:42 executing program 0: 20:36:42 executing program 3: 20:36:42 executing program 1: 20:36:42 executing program 2: 20:36:42 executing program 5: 20:36:42 executing program 3: 20:36:42 executing program 0: 20:36:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x1c4) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:42 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) 20:36:42 executing program 1: 20:36:43 executing program 5: [ 323.953482] hrtimer: interrupt took 57246 ns 20:36:43 executing program 3: 20:36:43 executing program 0: 20:36:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b6, 0x40000000000000) 20:36:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) recvmmsg(r1, &(0x7f0000000000), 0x4000074, 0x0, 0x0) 20:36:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000180), 0x100000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:36:44 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=ANY=[]) pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000540)='./file0\x00') chroot(&(0x7f0000000200)='./file1\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 20:36:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt6_stats\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x2b6, 0x40000000000000) 20:36:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x1c4) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:44 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x2, 0x24011, r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:36:44 executing program 3: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000340)='threaded\x00', 0xffffffc5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x6fb) 20:36:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r1, r1, &(0x7f00000001c0), 0x6fb) [ 325.603452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:36:45 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000180), 0x100000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:36:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240)=""/170, 0xaa, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000740)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) getgroups(0x0, &(0x7f0000000bc0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:36:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x1c4) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:45 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14}, 0x14) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x6, 0x5}) 20:36:50 executing program 0: 20:36:50 executing program 5: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) 20:36:50 executing program 1: 20:36:50 executing program 3: 20:36:50 executing program 2: 20:36:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x1c4) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:50 executing program 3: 20:36:50 executing program 0: 20:36:51 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:51 executing program 5: syz_emit_ethernet(0x437, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) 20:36:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d02402b6285717070") r1 = socket$inet(0x10, 0x100000803, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006fc0), 0x400000000000058, 0x0, 0x0) 20:36:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x334) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x0, @loopback, [0x80100013, 0x0, 0x0, 0x28e8000000000000]}, 0x10) 20:36:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001080)={'broute\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) ioctl(r0, 0x8916, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 332.586911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.636353] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 332.644437] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 332.723881] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 332.762867] netlink: 'syz-executor1': attribute type 29 has an invalid length. 20:36:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 332.770845] netlink: 'syz-executor1': attribute type 29 has an invalid length. 20:36:51 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) [ 332.893946] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 332.981996] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 333.041576] netlink: 'syz-executor1': attribute type 29 has an invalid length. 20:36:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/217) [ 333.081803] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 333.090451] netlink: 'syz-executor1': attribute type 29 has an invalid length. 20:36:52 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000240)='\x00') 20:36:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket(0x80000000000000a, 0x2, 0x0) unshare(0x400) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040), 0x4) 20:36:52 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 20:36:52 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, "62707130f300"}, 0xfffffffffffffe2b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a4c000240316295717070") clock_gettime(0x0, &(0x7f0000000100)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000140)="b4fb5b1caef4a9da31238cf5c953b7ae8fa0d3e0f85c12aef20d757c22f527721ef031826885879b723f37c290251ab95490c92c") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), 0x14) getuid() fstat(0xffffffffffffffff, &(0x7f0000000280)) 20:36:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x5e, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0xfffffffffffffffd, 0x0) 20:36:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[], 0x0) eventfd2(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:36:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}}, 0xf0}}, 0x0) socket$inet6(0xa, 0x803, 0xfba) r1 = socket$inet6(0xa, 0x80000, 0x400) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) r3 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2000) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000140)=0x10001) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:53 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') 20:36:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0x0) 20:36:53 executing program 0: 20:36:54 executing program 3: 20:36:54 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000300)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r1, &(0x7f0000000540)}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10040, 0x0) 20:36:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfd536f727706f722) 20:36:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 20:36:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000001640)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x40, 0x921b527a62bfdc30) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) setns(0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x3c0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc40) 20:36:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:54 executing program 2: 20:36:54 executing program 5: [ 336.043128] not chained 20000 origins [ 336.047004] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc2+ #85 [ 336.053771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.063143] Call Trace: [ 336.065764] dump_stack+0x32d/0x480 [ 336.069447] kmsan_internal_chain_origin+0x222/0x240 [ 336.074598] ? kmsan_internal_chain_origin+0x136/0x240 [ 336.079903] ? __msan_chain_origin+0x6d/0xb0 [ 336.084346] ? __save_stack_trace+0x8be/0xc60 [ 336.088862] ? save_stack_trace+0xc6/0x110 [ 336.093122] ? kmsan_internal_chain_origin+0x136/0x240 [ 336.098441] ? kmsan_memcpy_origins+0x13d/0x190 [ 336.103137] ? __msan_memcpy+0x6f/0x80 [ 336.107049] ? pskb_expand_head+0x436/0x1d20 [ 336.111480] ? skb_shift+0xce2/0x2d10 [ 336.115304] ? tcp_sacktag_walk+0x2156/0x29d0 [ 336.119836] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 336.124960] ? tcp_ack+0x2888/0xa010 [ 336.128693] ? tcp_rcv_established+0xf7e/0x2940 [ 336.133383] ? tcp_v4_do_rcv+0x686/0xd80 [ 336.137466] ? tcp_v4_rcv+0x5a13/0x6520 [ 336.141465] ? ip_local_deliver_finish+0x8d8/0xff0 [ 336.146430] ? ip_local_deliver+0x44b/0x510 [ 336.150778] ? ip_rcv+0x6b6/0x740 [ 336.154255] ? process_backlog+0x82b/0x11e0 [ 336.158600] ? net_rx_action+0x98f/0x1d50 [ 336.162771] ? __do_softirq+0x721/0xc7f [ 336.166770] ? run_ksoftirqd+0x37/0x60 [ 336.170680] ? smpboot_thread_fn+0x69c/0xb30 [ 336.175113] ? kthread+0x5e7/0x620 [ 336.178672] ? ret_from_fork+0x35/0x40 [ 336.182595] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 336.188072] ? in_task_stack+0x12c/0x210 [ 336.192168] ? task_kmsan_context_state+0x51/0x90 [ 336.197037] ? __msan_get_context_state+0x9/0x20 [ 336.201820] ? __kernel_text_address+0x19/0x350 [ 336.206508] ? ret_from_fork+0x35/0x40 [ 336.210445] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 336.215927] ? in_task_stack+0x12c/0x210 [ 336.220030] __msan_chain_origin+0x6d/0xb0 [ 336.224302] ? pskb_expand_head+0x436/0x1d20 [ 336.228748] __save_stack_trace+0x8be/0xc60 [ 336.233101] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 336.238525] ? pskb_expand_head+0x436/0x1d20 [ 336.242966] save_stack_trace+0xc6/0x110 [ 336.247063] kmsan_internal_chain_origin+0x136/0x240 [ 336.252186] ? run_ksoftirqd+0x37/0x60 [ 336.256112] ? kmsan_internal_chain_origin+0x136/0x240 [ 336.261422] ? kmsan_memcpy_origins+0x13d/0x190 [ 336.266116] ? __msan_memcpy+0x6f/0x80 [ 336.270029] ? pskb_expand_head+0x436/0x1d20 [ 336.274458] ? skb_shift+0xce2/0x2d10 [ 336.278286] ? tcp_sacktag_walk+0x2156/0x29d0 [ 336.282818] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 336.287958] ? tcp_ack+0x2888/0xa010 [ 336.291701] ? tcp_rcv_established+0xf7e/0x2940 [ 336.296393] ? tcp_v4_do_rcv+0x686/0xd80 [ 336.300486] ? tcp_v4_rcv+0x5a13/0x6520 [ 336.304483] ? ip_local_deliver_finish+0x8d8/0xff0 [ 336.309441] ? ip_local_deliver+0x44b/0x510 [ 336.313782] ? ip_rcv+0x6b6/0x740 [ 336.317264] ? process_backlog+0x82b/0x11e0 [ 336.321607] ? net_rx_action+0x98f/0x1d50 [ 336.325790] ? __do_softirq+0x721/0xc7f [ 336.329786] ? run_ksoftirqd+0x37/0x60 [ 336.333698] ? smpboot_thread_fn+0x69c/0xb30 [ 336.338155] ? kthread+0x5e7/0x620 [ 336.341718] ? ret_from_fork+0x35/0x40 [ 336.345667] ? __msan_get_context_state+0x9/0x20 [ 336.350446] ? INIT_INT+0xc/0x30 [ 336.353838] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 336.359267] kmsan_memcpy_origins+0x13d/0x190 [ 336.363805] __msan_memcpy+0x6f/0x80 [ 336.367551] pskb_expand_head+0x436/0x1d20 [ 336.371847] skb_shift+0xce2/0x2d10 [ 336.375549] tcp_sacktag_walk+0x2156/0x29d0 [ 336.379945] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.384958] tcp_ack+0x2888/0xa010 [ 336.388522] ? tcp_parse_options+0xbe/0x1cf0 [ 336.392968] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 336.398448] ? tcp_parse_options+0x1c55/0x1cf0 [ 336.403147] tcp_rcv_established+0xf7e/0x2940 [ 336.407680] ? __msan_get_context_state+0x9/0x20 [ 336.407722] tcp_v4_do_rcv+0x686/0xd80 [ 336.407762] tcp_v4_rcv+0x5a13/0x6520 [ 336.407860] ? tcp_filter+0x260/0x260 [ 336.407884] ip_local_deliver_finish+0x8d8/0xff0 [ 336.407916] ? nf_hook_slow+0x36f/0x3d0 [ 336.407954] ip_local_deliver+0x44b/0x510 [ 336.407993] ? ip_local_deliver+0x510/0x510 [ 336.408014] ? ip_call_ra_chain+0x7a0/0x7a0 [ 336.408039] ip_rcv+0x6b6/0x740 [ 336.408075] ? ip_rcv_core+0x1370/0x1370 [ 336.408106] process_backlog+0x82b/0x11e0 [ 336.408129] ? __msan_poison_alloca+0x1e0/0x270 [ 336.408160] ? ip_local_deliver_finish+0xff0/0xff0 [ 336.408205] ? rps_trigger_softirq+0x2e0/0x2e0 [ 336.408231] net_rx_action+0x98f/0x1d50 [ 336.408288] ? net_tx_action+0xf20/0xf20 [ 336.408322] __do_softirq+0x721/0xc7f [ 336.408366] ? ksoftirqd_should_run+0x50/0x50 [ 336.408392] run_ksoftirqd+0x37/0x60 [ 336.408423] smpboot_thread_fn+0x69c/0xb30 [ 336.408473] kthread+0x5e7/0x620 [ 336.408496] ? cpu_report_death+0x4a0/0x4a0 [ 336.408535] ? INIT_BOOL+0x30/0x30 [ 336.408560] ret_from_fork+0x35/0x40 [ 336.408594] Uninit was stored to memory at: [ 336.408617] kmsan_internal_chain_origin+0x136/0x240 [ 336.408638] __msan_chain_origin+0x6d/0xb0 [ 336.408659] __save_stack_trace+0x8be/0xc60 [ 336.408679] save_stack_trace+0xc6/0x110 [ 336.408700] kmsan_internal_chain_origin+0x136/0x240 [ 336.408720] kmsan_memcpy_origins+0x13d/0x190 [ 336.408740] __msan_memcpy+0x6f/0x80 [ 336.408763] pskb_expand_head+0x436/0x1d20 [ 336.408780] skb_shift+0xce2/0x2d10 [ 336.408799] tcp_sacktag_walk+0x2156/0x29d0 [ 336.408817] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.408834] tcp_ack+0x2888/0xa010 [ 336.408852] tcp_rcv_established+0xf7e/0x2940 [ 336.408871] tcp_v4_do_rcv+0x686/0xd80 [ 336.408891] tcp_v4_rcv+0x5a13/0x6520 [ 336.408909] ip_local_deliver_finish+0x8d8/0xff0 [ 336.408927] ip_local_deliver+0x44b/0x510 [ 336.408944] ip_rcv+0x6b6/0x740 [ 336.408964] process_backlog+0x82b/0x11e0 [ 336.408984] net_rx_action+0x98f/0x1d50 [ 336.409003] __do_softirq+0x721/0xc7f [ 336.409010] [ 336.409019] Uninit was stored to memory at: [ 336.409040] kmsan_internal_chain_origin+0x136/0x240 [ 336.409061] __msan_chain_origin+0x6d/0xb0 [ 336.409081] __save_stack_trace+0x8be/0xc60 [ 336.409100] save_stack_trace+0xc6/0x110 [ 336.409121] kmsan_internal_chain_origin+0x136/0x240 [ 336.409141] kmsan_memcpy_origins+0x13d/0x190 [ 336.409161] __msan_memcpy+0x6f/0x80 [ 336.409183] pskb_expand_head+0x436/0x1d20 [ 336.409200] skb_shift+0xce2/0x2d10 [ 336.409218] tcp_sacktag_walk+0x2156/0x29d0 [ 336.409237] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.409254] tcp_ack+0x2888/0xa010 [ 336.409272] tcp_rcv_established+0xf7e/0x2940 [ 336.409291] tcp_v4_do_rcv+0x686/0xd80 [ 336.409310] tcp_v4_rcv+0x5a13/0x6520 [ 336.409339] ip_local_deliver_finish+0x8d8/0xff0 [ 336.409357] ip_local_deliver+0x44b/0x510 [ 336.409392] ip_rcv+0x6b6/0x740 [ 336.686554] process_backlog+0x82b/0x11e0 [ 336.690722] net_rx_action+0x98f/0x1d50 [ 336.694716] __do_softirq+0x721/0xc7f [ 336.698521] [ 336.700162] Uninit was stored to memory at: [ 336.704510] kmsan_internal_chain_origin+0x136/0x240 [ 336.709906] __msan_chain_origin+0x6d/0xb0 [ 336.714155] __save_stack_trace+0x8be/0xc60 [ 336.718496] save_stack_trace+0xc6/0x110 [ 336.722581] kmsan_internal_chain_origin+0x136/0x240 [ 336.727704] kmsan_memcpy_origins+0x13d/0x190 [ 336.732225] __msan_memcpy+0x6f/0x80 [ 336.735963] pskb_expand_head+0x436/0x1d20 [ 336.740218] skb_shift+0xce2/0x2d10 [ 336.743863] tcp_sacktag_walk+0x2156/0x29d0 [ 336.748209] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.753158] tcp_ack+0x2888/0xa010 [ 336.756721] tcp_rcv_established+0xf7e/0x2940 [ 336.761239] tcp_v4_do_rcv+0x686/0xd80 [ 336.765143] tcp_v4_rcv+0x5a13/0x6520 [ 336.768961] ip_local_deliver_finish+0x8d8/0xff0 [ 336.773739] ip_local_deliver+0x44b/0x510 [ 336.777914] ip_rcv+0x6b6/0x740 [ 336.781213] process_backlog+0x82b/0x11e0 [ 336.785391] net_rx_action+0x98f/0x1d50 [ 336.789389] __do_softirq+0x721/0xc7f [ 336.793201] [ 336.794841] Uninit was stored to memory at: [ 336.799185] kmsan_internal_chain_origin+0x136/0x240 [ 336.804310] __msan_chain_origin+0x6d/0xb0 [ 336.808578] __save_stack_trace+0x8be/0xc60 [ 336.812917] save_stack_trace+0xc6/0x110 [ 336.816999] kmsan_internal_chain_origin+0x136/0x240 [ 336.822126] kmsan_memcpy_origins+0x13d/0x190 [ 336.826640] __msan_memcpy+0x6f/0x80 [ 336.830383] pskb_expand_head+0x436/0x1d20 [ 336.834645] skb_shift+0xce2/0x2d10 [ 336.838290] tcp_sacktag_walk+0x2156/0x29d0 [ 336.842639] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.847584] tcp_ack+0x2888/0xa010 [ 336.851143] tcp_rcv_established+0xf7e/0x2940 [ 336.855663] tcp_v4_do_rcv+0x686/0xd80 [ 336.859573] tcp_v4_rcv+0x5a13/0x6520 [ 336.863397] ip_local_deliver_finish+0x8d8/0xff0 [ 336.868179] ip_local_deliver+0x44b/0x510 [ 336.872352] ip_rcv+0x6b6/0x740 [ 336.875651] process_backlog+0x82b/0x11e0 [ 336.879818] net_rx_action+0x98f/0x1d50 [ 336.883810] __do_softirq+0x721/0xc7f [ 336.887620] [ 336.889257] Uninit was stored to memory at: [ 336.893606] kmsan_internal_chain_origin+0x136/0x240 [ 336.898735] __msan_chain_origin+0x6d/0xb0 [ 336.902988] __save_stack_trace+0x8be/0xc60 [ 336.907337] save_stack_trace+0xc6/0x110 [ 336.911429] kmsan_internal_chain_origin+0x136/0x240 [ 336.916554] kmsan_memcpy_origins+0x13d/0x190 [ 336.921069] __msan_memcpy+0x6f/0x80 [ 336.924811] pskb_expand_head+0x436/0x1d20 [ 336.929079] skb_shift+0xce2/0x2d10 [ 336.932735] tcp_sacktag_walk+0x2156/0x29d0 [ 336.937107] tcp_sacktag_write_queue+0x2805/0x4630 [ 336.942079] tcp_ack+0x2888/0xa010 [ 336.945648] tcp_rcv_established+0xf7e/0x2940 [ 336.950173] tcp_v4_do_rcv+0x686/0xd80 [ 336.954086] tcp_v4_rcv+0x5a13/0x6520 [ 336.957915] ip_local_deliver_finish+0x8d8/0xff0 [ 336.962698] ip_local_deliver+0x44b/0x510 [ 336.966862] ip_rcv+0x6b6/0x740 [ 336.970167] process_backlog+0x82b/0x11e0 [ 336.974344] net_rx_action+0x98f/0x1d50 [ 336.978347] __do_softirq+0x721/0xc7f [ 336.982153] [ 336.983788] Uninit was stored to memory at: [ 336.988139] kmsan_internal_chain_origin+0x136/0x240 20:36:56 executing program 5: [ 336.993280] __msan_chain_origin+0x6d/0xb0 [ 336.997549] __save_stack_trace+0x8be/0xc60 [ 337.001889] save_stack_trace+0xc6/0x110 [ 337.005977] kmsan_internal_chain_origin+0x136/0x240 [ 337.011101] kmsan_memcpy_origins+0x13d/0x190 [ 337.015620] __msan_memcpy+0x6f/0x80 [ 337.019367] pskb_expand_head+0x436/0x1d20 [ 337.023619] skb_shift+0xce2/0x2d10 [ 337.027271] tcp_sacktag_walk+0x2156/0x29d0 [ 337.031627] tcp_sacktag_write_queue+0x2805/0x4630 [ 337.036581] tcp_ack+0x2888/0xa010 [ 337.040166] tcp_rcv_established+0xf7e/0x2940 20:36:56 executing program 3: [ 337.044706] tcp_v4_do_rcv+0x686/0xd80 [ 337.048617] tcp_v4_rcv+0x5a13/0x6520 [ 337.052450] ip_local_deliver_finish+0x8d8/0xff0 [ 337.057280] ip_local_deliver+0x44b/0x510 [ 337.061469] ip_rcv+0x6b6/0x740 [ 337.064775] process_backlog+0x82b/0x11e0 [ 337.068952] net_rx_action+0x98f/0x1d50 [ 337.072953] __do_softirq+0x721/0xc7f [ 337.076762] [ 337.078398] Uninit was stored to memory at: [ 337.082755] kmsan_internal_chain_origin+0x136/0x240 [ 337.087877] __msan_chain_origin+0x6d/0xb0 [ 337.092129] __save_stack_trace+0x8be/0xc60 [ 337.096464] save_stack_trace+0xc6/0x110 [ 337.100546] kmsan_internal_chain_origin+0x136/0x240 [ 337.105667] kmsan_memcpy_origins+0x13d/0x190 [ 337.110175] __msan_memcpy+0x6f/0x80 [ 337.113911] pskb_expand_head+0x436/0x1d20 [ 337.118159] skb_shift+0xce2/0x2d10 [ 337.121807] tcp_sacktag_walk+0x2156/0x29d0 [ 337.126147] tcp_sacktag_write_queue+0x2805/0x4630 [ 337.131091] tcp_ack+0x2888/0xa010 [ 337.134647] tcp_rcv_established+0xf7e/0x2940 [ 337.139155] tcp_v4_do_rcv+0x686/0xd80 [ 337.143060] tcp_v4_rcv+0x5a13/0x6520 [ 337.146878] ip_local_deliver_finish+0x8d8/0xff0 [ 337.151649] ip_local_deliver+0x44b/0x510 [ 337.155810] ip_rcv+0x6b6/0x740 [ 337.159106] process_backlog+0x82b/0x11e0 [ 337.163268] net_rx_action+0x98f/0x1d50 [ 337.167254] __do_softirq+0x721/0xc7f [ 337.171061] [ 337.172731] Local variable description: ----v.addr.i.i.i@ipv4_conntrack_local [ 337.180011] Variable was created at: [ 337.183744] ipv4_conntrack_local+0x75/0x470 [ 337.188174] nf_hook_slow+0x15c/0x3d0 20:36:56 executing program 2: 20:36:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:56 executing program 0: [ 337.516902] not chained 30000 origins [ 337.520760] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc2+ #85 [ 337.527533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.536915] Call Trace: [ 337.539533] dump_stack+0x32d/0x480 [ 337.543211] kmsan_internal_chain_origin+0x222/0x240 [ 337.548369] ? kmsan_set_origin+0x7f/0x100 [ 337.552659] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 337.558074] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 337.563572] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 337.569057] ? in_task_stack+0x12c/0x210 [ 337.573154] ? task_kmsan_context_state+0x51/0x90 [ 337.578382] ? __msan_get_context_state+0x9/0x20 [ 337.583175] ? __kernel_text_address+0x19/0x350 [ 337.587867] ? ret_from_fork+0x35/0x40 [ 337.591790] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 337.597277] ? in_task_stack+0x12c/0x210 [ 337.601403] __msan_chain_origin+0x6d/0xb0 [ 337.605682] ? net_rx_action+0x98f/0x1d50 [ 337.609869] __save_stack_trace+0x8be/0xc60 [ 337.614259] ? net_rx_action+0x98f/0x1d50 [ 337.618450] save_stack_trace+0xc6/0x110 [ 337.622553] kmsan_internal_chain_origin+0x136/0x240 [ 337.627677] ? run_ksoftirqd+0x37/0x60 [ 337.631606] ? kmsan_internal_chain_origin+0x136/0x240 [ 337.636912] ? kmsan_memcpy_origins+0x13d/0x190 [ 337.641603] ? __msan_memcpy+0x6f/0x80 [ 337.645542] ? pskb_expand_head+0x436/0x1d20 [ 337.649980] ? skb_shift+0xce2/0x2d10 [ 337.653805] ? tcp_sacktag_walk+0x2156/0x29d0 [ 337.658345] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 337.663472] ? tcp_ack+0x2888/0xa010 [ 337.667204] ? tcp_rcv_established+0xf7e/0x2940 [ 337.671906] ? tcp_v4_do_rcv+0x686/0xd80 [ 337.675990] ? tcp_v4_rcv+0x5a13/0x6520 [ 337.679997] ? ip_local_deliver_finish+0x8d8/0xff0 [ 337.684949] ? ip_local_deliver+0x44b/0x510 [ 337.689299] ? ip_rcv+0x6b6/0x740 [ 337.692795] ? process_backlog+0x82b/0x11e0 [ 337.697150] ? net_rx_action+0x98f/0x1d50 [ 337.701333] ? __do_softirq+0x721/0xc7f [ 337.705343] ? run_ksoftirqd+0x37/0x60 [ 337.709260] ? smpboot_thread_fn+0x69c/0xb30 [ 337.713713] ? kthread+0x5e7/0x620 [ 337.717278] ? ret_from_fork+0x35/0x40 [ 337.721233] ? __msan_get_context_state+0x9/0x20 [ 337.726015] ? INIT_INT+0xc/0x30 [ 337.729420] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 337.734832] kmsan_memcpy_origins+0x13d/0x190 [ 337.739378] __msan_memcpy+0x6f/0x80 [ 337.743132] pskb_expand_head+0x436/0x1d20 [ 337.747435] skb_shift+0xce2/0x2d10 [ 337.751134] tcp_sacktag_walk+0x2156/0x29d0 [ 337.755525] tcp_sacktag_write_queue+0x2805/0x4630 [ 337.760535] tcp_ack+0x2888/0xa010 [ 337.764098] ? tcp_parse_options+0xbe/0x1cf0 [ 337.768539] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 337.774007] ? tcp_parse_options+0x1c55/0x1cf0 [ 337.778697] tcp_rcv_established+0xf7e/0x2940 [ 337.783228] ? __msan_get_context_state+0x9/0x20 [ 337.788020] tcp_v4_do_rcv+0x686/0xd80 [ 337.791945] tcp_v4_rcv+0x5a13/0x6520 [ 337.795841] ? tcp_filter+0x260/0x260 [ 337.799664] ip_local_deliver_finish+0x8d8/0xff0 [ 337.804453] ? nf_hook_slow+0x36f/0x3d0 [ 337.808468] ip_local_deliver+0x44b/0x510 [ 337.812652] ? ip_local_deliver+0x510/0x510 [ 337.816989] ? ip_call_ra_chain+0x7a0/0x7a0 [ 337.821342] ip_rcv+0x6b6/0x740 [ 337.824659] ? ip_rcv_core+0x1370/0x1370 [ 337.828750] process_backlog+0x82b/0x11e0 [ 337.832926] ? __msan_poison_alloca+0x1e0/0x270 [ 337.837627] ? ip_local_deliver_finish+0xff0/0xff0 [ 337.842598] ? rps_trigger_softirq+0x2e0/0x2e0 [ 337.847200] net_rx_action+0x98f/0x1d50 [ 337.851228] ? net_tx_action+0xf20/0xf20 [ 337.855324] __do_softirq+0x721/0xc7f [ 337.859164] ? ksoftirqd_should_run+0x50/0x50 [ 337.863681] run_ksoftirqd+0x37/0x60 [ 337.867426] smpboot_thread_fn+0x69c/0xb30 [ 337.871708] kthread+0x5e7/0x620 [ 337.875093] ? cpu_report_death+0x4a0/0x4a0 [ 337.879454] ? INIT_BOOL+0x30/0x30 [ 337.883023] ret_from_fork+0x35/0x40 [ 337.886763] Uninit was stored to memory at: [ 337.891105] kmsan_internal_chain_origin+0x136/0x240 [ 337.896225] __msan_chain_origin+0x6d/0xb0 [ 337.900475] __save_stack_trace+0x8be/0xc60 [ 337.904810] save_stack_trace+0xc6/0x110 [ 337.908891] kmsan_internal_chain_origin+0x136/0x240 [ 337.914009] kmsan_memcpy_origins+0x13d/0x190 [ 337.918521] __msan_memcpy+0x6f/0x80 [ 337.922253] pskb_expand_head+0x436/0x1d20 [ 337.926505] skb_shift+0xce2/0x2d10 [ 337.930152] tcp_sacktag_walk+0x2156/0x29d0 [ 337.934486] tcp_sacktag_write_queue+0x2805/0x4630 [ 337.939438] tcp_ack+0x2888/0xa010 [ 337.942992] tcp_rcv_established+0xf7e/0x2940 [ 337.947504] tcp_v4_do_rcv+0x686/0xd80 [ 337.951409] tcp_v4_rcv+0x5a13/0x6520 [ 337.955230] ip_local_deliver_finish+0x8d8/0xff0 [ 337.960030] ip_local_deliver+0x44b/0x510 [ 337.964194] ip_rcv+0x6b6/0x740 [ 337.967495] process_backlog+0x82b/0x11e0 [ 337.971662] net_rx_action+0x98f/0x1d50 [ 337.975654] __do_softirq+0x721/0xc7f [ 337.979455] [ 337.981090] Uninit was stored to memory at: [ 337.985441] kmsan_internal_chain_origin+0x136/0x240 [ 337.990565] __msan_chain_origin+0x6d/0xb0 [ 337.994820] __save_stack_trace+0x8be/0xc60 [ 337.999153] save_stack_trace+0xc6/0x110 [ 338.003232] kmsan_internal_chain_origin+0x136/0x240 [ 338.008357] kmsan_memcpy_origins+0x13d/0x190 [ 338.012882] __msan_memcpy+0x6f/0x80 [ 338.016616] pskb_expand_head+0x436/0x1d20 [ 338.020863] skb_shift+0xce2/0x2d10 [ 338.024507] tcp_sacktag_walk+0x2156/0x29d0 [ 338.028847] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.033789] tcp_ack+0x2888/0xa010 [ 338.037349] tcp_rcv_established+0xf7e/0x2940 [ 338.041858] tcp_v4_do_rcv+0x686/0xd80 [ 338.045762] tcp_v4_rcv+0x5a13/0x6520 [ 338.049580] ip_local_deliver_finish+0x8d8/0xff0 [ 338.054359] ip_local_deliver+0x44b/0x510 [ 338.058521] ip_rcv+0x6b6/0x740 [ 338.061827] process_backlog+0x82b/0x11e0 [ 338.065994] net_rx_action+0x98f/0x1d50 [ 338.069984] __do_softirq+0x721/0xc7f [ 338.073785] [ 338.075426] Uninit was stored to memory at: [ 338.079783] kmsan_internal_chain_origin+0x136/0x240 [ 338.084906] __msan_chain_origin+0x6d/0xb0 [ 338.089162] __save_stack_trace+0x8be/0xc60 [ 338.093504] save_stack_trace+0xc6/0x110 [ 338.097581] kmsan_internal_chain_origin+0x136/0x240 [ 338.102699] kmsan_memcpy_origins+0x13d/0x190 [ 338.107213] __msan_memcpy+0x6f/0x80 [ 338.110947] pskb_expand_head+0x436/0x1d20 [ 338.115195] skb_shift+0xce2/0x2d10 [ 338.118842] tcp_sacktag_walk+0x2156/0x29d0 [ 338.123179] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.128119] tcp_ack+0x2888/0xa010 [ 338.131673] tcp_rcv_established+0xf7e/0x2940 [ 338.136185] tcp_v4_do_rcv+0x686/0xd80 [ 338.140092] tcp_v4_rcv+0x5a13/0x6520 [ 338.143931] ip_local_deliver_finish+0x8d8/0xff0 [ 338.148701] ip_local_deliver+0x44b/0x510 [ 338.152865] ip_rcv+0x6b6/0x740 [ 338.156161] process_backlog+0x82b/0x11e0 [ 338.160330] net_rx_action+0x98f/0x1d50 [ 338.164333] __do_softirq+0x721/0xc7f [ 338.168140] [ 338.169771] Uninit was stored to memory at: [ 338.174113] kmsan_internal_chain_origin+0x136/0x240 [ 338.179233] __msan_chain_origin+0x6d/0xb0 [ 338.183487] __save_stack_trace+0x8be/0xc60 [ 338.187821] save_stack_trace+0xc6/0x110 [ 338.191902] kmsan_internal_chain_origin+0x136/0x240 [ 338.197026] kmsan_memcpy_origins+0x13d/0x190 [ 338.201536] __msan_memcpy+0x6f/0x80 [ 338.205270] pskb_expand_head+0x436/0x1d20 [ 338.209523] skb_shift+0xce2/0x2d10 [ 338.213168] tcp_sacktag_walk+0x2156/0x29d0 [ 338.217503] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.222451] tcp_ack+0x2888/0xa010 [ 338.226002] tcp_rcv_established+0xf7e/0x2940 [ 338.230511] tcp_v4_do_rcv+0x686/0xd80 [ 338.234411] tcp_v4_rcv+0x5a13/0x6520 [ 338.238241] ip_local_deliver_finish+0x8d8/0xff0 [ 338.243009] ip_local_deliver+0x44b/0x510 [ 338.247173] ip_rcv+0x6b6/0x740 [ 338.250472] process_backlog+0x82b/0x11e0 [ 338.254636] net_rx_action+0x98f/0x1d50 [ 338.258624] __do_softirq+0x721/0xc7f [ 338.262431] [ 338.264067] Uninit was stored to memory at: [ 338.268407] kmsan_internal_chain_origin+0x136/0x240 [ 338.273535] __msan_chain_origin+0x6d/0xb0 [ 338.277787] __save_stack_trace+0x8be/0xc60 [ 338.282122] save_stack_trace+0xc6/0x110 [ 338.286197] kmsan_internal_chain_origin+0x136/0x240 [ 338.291325] kmsan_memcpy_origins+0x13d/0x190 [ 338.295842] __msan_memcpy+0x6f/0x80 [ 338.299576] pskb_expand_head+0x436/0x1d20 [ 338.303829] skb_shift+0xce2/0x2d10 [ 338.307478] tcp_sacktag_walk+0x2156/0x29d0 [ 338.311828] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.316781] tcp_ack+0x2888/0xa010 [ 338.320346] tcp_rcv_established+0xf7e/0x2940 [ 338.324859] tcp_v4_do_rcv+0x686/0xd80 [ 338.328763] tcp_v4_rcv+0x5a13/0x6520 [ 338.332581] ip_local_deliver_finish+0x8d8/0xff0 [ 338.337359] ip_local_deliver+0x44b/0x510 [ 338.341521] ip_rcv+0x6b6/0x740 [ 338.344820] process_backlog+0x82b/0x11e0 [ 338.348980] net_rx_action+0x98f/0x1d50 [ 338.352970] __do_softirq+0x721/0xc7f [ 338.356773] [ 338.358408] Uninit was stored to memory at: [ 338.362766] kmsan_internal_chain_origin+0x136/0x240 [ 338.367887] __msan_chain_origin+0x6d/0xb0 [ 338.372137] __save_stack_trace+0x8be/0xc60 [ 338.376477] save_stack_trace+0xc6/0x110 [ 338.380556] kmsan_internal_chain_origin+0x136/0x240 [ 338.385674] kmsan_memcpy_origins+0x13d/0x190 [ 338.390188] __msan_memcpy+0x6f/0x80 [ 338.393919] pskb_expand_head+0x436/0x1d20 [ 338.398172] skb_shift+0xce2/0x2d10 [ 338.401810] tcp_sacktag_walk+0x2156/0x29d0 [ 338.406152] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.411116] tcp_ack+0x2888/0xa010 [ 338.414700] tcp_rcv_established+0xf7e/0x2940 [ 338.419227] tcp_v4_do_rcv+0x686/0xd80 [ 338.423134] tcp_v4_rcv+0x5a13/0x6520 [ 338.426954] ip_local_deliver_finish+0x8d8/0xff0 [ 338.431728] ip_local_deliver+0x44b/0x510 [ 338.435888] ip_rcv+0x6b6/0x740 [ 338.439182] process_backlog+0x82b/0x11e0 [ 338.443350] net_rx_action+0x98f/0x1d50 [ 338.447350] __do_softirq+0x721/0xc7f [ 338.451152] [ 338.452790] Uninit was stored to memory at: [ 338.457133] kmsan_internal_chain_origin+0x136/0x240 [ 338.462252] __msan_chain_origin+0x6d/0xb0 [ 338.466507] __save_stack_trace+0x8be/0xc60 [ 338.470846] save_stack_trace+0xc6/0x110 [ 338.474923] kmsan_internal_chain_origin+0x136/0x240 [ 338.480046] kmsan_memcpy_origins+0x13d/0x190 [ 338.484556] __msan_memcpy+0x6f/0x80 [ 338.488290] pskb_expand_head+0x436/0x1d20 [ 338.492549] skb_shift+0xce2/0x2d10 [ 338.496194] tcp_sacktag_walk+0x2156/0x29d0 [ 338.500539] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.505495] tcp_ack+0x2888/0xa010 [ 338.509065] tcp_rcv_established+0xf7e/0x2940 [ 338.513582] tcp_v4_do_rcv+0x686/0xd80 [ 338.517485] tcp_v4_rcv+0x5a13/0x6520 [ 338.521302] ip_local_deliver_finish+0x8d8/0xff0 [ 338.526087] ip_local_deliver+0x44b/0x510 [ 338.530247] ip_rcv+0x6b6/0x740 [ 338.533544] process_backlog+0x82b/0x11e0 [ 338.537724] net_rx_action+0x98f/0x1d50 [ 338.541716] __do_softirq+0x721/0xc7f [ 338.545534] [ 338.547169] Local variable description: ----v.addr.i.i.i@ipv4_conntrack_local [ 338.554446] Variable was created at: [ 338.558178] ipv4_conntrack_local+0x75/0x470 [ 338.562607] nf_hook_slow+0x15c/0x3d0 20:36:57 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 338.574915] not chained 40000 origins [ 338.578759] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0-rc2+ #85 [ 338.585532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.594899] Call Trace: [ 338.597517] dump_stack+0x32d/0x480 [ 338.601187] kmsan_internal_chain_origin+0x222/0x240 [ 338.606336] ? kmsan_set_origin+0x7f/0x100 [ 338.610612] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 338.616015] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 338.621505] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 338.626991] ? in_task_stack+0x12c/0x210 [ 338.631088] ? task_kmsan_context_state+0x51/0x90 [ 338.635964] ? __msan_get_context_state+0x9/0x20 [ 338.640747] ? __kernel_text_address+0x19/0x350 [ 338.645442] ? ret_from_fork+0x35/0x40 [ 338.649376] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 338.654861] ? in_task_stack+0x12c/0x210 [ 338.658966] __msan_chain_origin+0x6d/0xb0 [ 338.663229] ? tcp_sacktag_walk+0x2156/0x29d0 [ 338.667754] __save_stack_trace+0x8be/0xc60 [ 338.672136] ? tcp_sacktag_walk+0x2156/0x29d0 [ 338.676668] save_stack_trace+0xc6/0x110 [ 338.680766] kmsan_internal_chain_origin+0x136/0x240 [ 338.685894] ? run_ksoftirqd+0x37/0x60 [ 338.689820] ? kmsan_internal_chain_origin+0x136/0x240 [ 338.695121] ? kmsan_memcpy_origins+0x13d/0x190 [ 338.699808] ? __msan_memcpy+0x6f/0x80 [ 338.703719] ? pskb_expand_head+0x436/0x1d20 [ 338.708145] ? skb_shift+0xce2/0x2d10 [ 338.712245] ? tcp_sacktag_walk+0x2156/0x29d0 [ 338.716763] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 338.721903] ? tcp_ack+0x2888/0xa010 [ 338.725639] ? tcp_rcv_established+0xf7e/0x2940 [ 338.730336] ? tcp_v4_do_rcv+0x686/0xd80 [ 338.734433] ? tcp_v4_rcv+0x5a13/0x6520 [ 338.738439] ? ip_local_deliver_finish+0x8d8/0xff0 [ 338.743389] ? ip_local_deliver+0x44b/0x510 [ 338.747736] ? ip_rcv+0x6b6/0x740 [ 338.751212] ? process_backlog+0x82b/0x11e0 [ 338.755559] ? net_rx_action+0x98f/0x1d50 [ 338.759732] ? __do_softirq+0x721/0xc7f [ 338.763728] ? run_ksoftirqd+0x37/0x60 [ 338.767640] ? smpboot_thread_fn+0x69c/0xb30 [ 338.772071] ? kthread+0x5e7/0x620 [ 338.775637] ? ret_from_fork+0x35/0x40 [ 338.779579] ? __msan_get_context_state+0x9/0x20 [ 338.784367] ? INIT_INT+0xc/0x30 [ 338.787758] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 338.793171] kmsan_memcpy_origins+0x13d/0x190 [ 338.797727] __msan_memcpy+0x6f/0x80 [ 338.801489] pskb_expand_head+0x436/0x1d20 [ 338.805784] skb_shift+0xce2/0x2d10 [ 338.809488] tcp_sacktag_walk+0x2156/0x29d0 [ 338.813884] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.818900] tcp_ack+0x2888/0xa010 20:36:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @loopback}}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000940)={0x7d, 0x7d, 0x0, {{0x0, 0x5f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, "", 0xc, '+*}vboxnet0!', 0x1d, '/selinux/avc/cache_threshold\x00', 0x3, 'syz'}, 0x9, 'poly1305\x00'}}, 0x7d) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) [ 338.822462] ? tcp_parse_options+0xbe/0x1cf0 [ 338.826905] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 338.832376] ? tcp_parse_options+0x1c55/0x1cf0 [ 338.837072] tcp_rcv_established+0xf7e/0x2940 [ 338.841617] ? __msan_get_context_state+0x9/0x20 [ 338.846428] tcp_v4_do_rcv+0x686/0xd80 [ 338.850376] tcp_v4_rcv+0x5a13/0x6520 [ 338.854298] ? tcp_filter+0x260/0x260 [ 338.858135] ip_local_deliver_finish+0x8d8/0xff0 [ 338.862927] ? nf_hook_slow+0x36f/0x3d0 [ 338.866943] ip_local_deliver+0x44b/0x510 [ 338.871138] ? ip_local_deliver+0x510/0x510 [ 338.875486] ? ip_call_ra_chain+0x7a0/0x7a0 [ 338.879834] ip_rcv+0x6b6/0x740 [ 338.883154] ? ip_rcv_core+0x1370/0x1370 [ 338.887250] process_backlog+0x82b/0x11e0 [ 338.891431] ? __msan_poison_alloca+0x1e0/0x270 [ 338.896138] ? ip_local_deliver_finish+0xff0/0xff0 [ 338.901110] ? rps_trigger_softirq+0x2e0/0x2e0 [ 338.905733] net_rx_action+0x98f/0x1d50 [ 338.909767] ? net_tx_action+0xf20/0xf20 [ 338.913853] __do_softirq+0x721/0xc7f [ 338.917695] ? ksoftirqd_should_run+0x50/0x50 [ 338.922215] run_ksoftirqd+0x37/0x60 [ 338.925956] smpboot_thread_fn+0x69c/0xb30 [ 338.930239] kthread+0x5e7/0x620 [ 338.933631] ? cpu_report_death+0x4a0/0x4a0 [ 338.937993] ? INIT_BOOL+0x30/0x30 [ 338.941558] ret_from_fork+0x35/0x40 [ 338.945301] Uninit was stored to memory at: [ 338.949654] kmsan_internal_chain_origin+0x136/0x240 [ 338.954793] __msan_chain_origin+0x6d/0xb0 [ 338.959054] __save_stack_trace+0x8be/0xc60 [ 338.963395] save_stack_trace+0xc6/0x110 [ 338.967480] kmsan_internal_chain_origin+0x136/0x240 [ 338.972607] kmsan_memcpy_origins+0x13d/0x190 [ 338.977120] __msan_memcpy+0x6f/0x80 [ 338.980859] pskb_expand_head+0x436/0x1d20 [ 338.985111] skb_shift+0xce2/0x2d10 [ 338.988755] tcp_sacktag_walk+0x2156/0x29d0 [ 338.993100] tcp_sacktag_write_queue+0x2805/0x4630 [ 338.998054] tcp_ack+0x2888/0xa010 [ 339.001609] tcp_rcv_established+0xf7e/0x2940 [ 339.006125] tcp_v4_do_rcv+0x686/0xd80 [ 339.010032] tcp_v4_rcv+0x5a13/0x6520 [ 339.013853] ip_local_deliver_finish+0x8d8/0xff0 [ 339.018628] ip_local_deliver+0x44b/0x510 [ 339.022792] ip_rcv+0x6b6/0x740 [ 339.026095] process_backlog+0x82b/0x11e0 [ 339.030267] net_rx_action+0x98f/0x1d50 [ 339.034271] __do_softirq+0x721/0xc7f [ 339.038084] [ 339.039720] Uninit was stored to memory at: [ 339.044068] kmsan_internal_chain_origin+0x136/0x240 [ 339.049196] __msan_chain_origin+0x6d/0xb0 [ 339.053457] __save_stack_trace+0x8be/0xc60 [ 339.057796] save_stack_trace+0xc6/0x110 [ 339.061881] kmsan_internal_chain_origin+0x136/0x240 [ 339.067007] kmsan_memcpy_origins+0x13d/0x190 [ 339.071525] __msan_memcpy+0x6f/0x80 [ 339.075267] pskb_expand_head+0x436/0x1d20 [ 339.079530] skb_shift+0xce2/0x2d10 [ 339.083178] tcp_sacktag_walk+0x2156/0x29d0 [ 339.087524] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.092477] tcp_ack+0x2888/0xa010 [ 339.096037] tcp_rcv_established+0xf7e/0x2940 [ 339.100557] tcp_v4_do_rcv+0x686/0xd80 [ 339.104461] tcp_v4_rcv+0x5a13/0x6520 [ 339.108282] ip_local_deliver_finish+0x8d8/0xff0 [ 339.113067] ip_local_deliver+0x44b/0x510 [ 339.117231] ip_rcv+0x6b6/0x740 [ 339.120533] process_backlog+0x82b/0x11e0 [ 339.124701] net_rx_action+0x98f/0x1d50 [ 339.128697] __do_softirq+0x721/0xc7f [ 339.132501] [ 339.134140] Uninit was stored to memory at: [ 339.138483] kmsan_internal_chain_origin+0x136/0x240 [ 339.143608] __msan_chain_origin+0x6d/0xb0 [ 339.147866] __save_stack_trace+0x8be/0xc60 [ 339.152207] save_stack_trace+0xc6/0x110 [ 339.156292] kmsan_internal_chain_origin+0x136/0x240 [ 339.161437] kmsan_memcpy_origins+0x13d/0x190 [ 339.165956] __msan_memcpy+0x6f/0x80 [ 339.169696] pskb_expand_head+0x436/0x1d20 [ 339.173948] skb_shift+0xce2/0x2d10 [ 339.177592] tcp_sacktag_walk+0x2156/0x29d0 [ 339.181933] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.186878] tcp_ack+0x2888/0xa010 [ 339.190439] tcp_rcv_established+0xf7e/0x2940 [ 339.194954] tcp_v4_do_rcv+0x686/0xd80 [ 339.198863] tcp_v4_rcv+0x5a13/0x6520 [ 339.202685] ip_local_deliver_finish+0x8d8/0xff0 [ 339.207462] ip_local_deliver+0x44b/0x510 [ 339.211624] ip_rcv+0x6b6/0x740 [ 339.214927] process_backlog+0x82b/0x11e0 [ 339.219094] net_rx_action+0x98f/0x1d50 [ 339.223091] __do_softirq+0x721/0xc7f [ 339.226901] [ 339.228541] Uninit was stored to memory at: [ 339.232880] kmsan_internal_chain_origin+0x136/0x240 [ 339.232901] __msan_chain_origin+0x6d/0xb0 [ 339.232922] __save_stack_trace+0x8be/0xc60 [ 339.232941] save_stack_trace+0xc6/0x110 [ 339.232961] kmsan_internal_chain_origin+0x136/0x240 [ 339.232981] kmsan_memcpy_origins+0x13d/0x190 [ 339.233000] __msan_memcpy+0x6f/0x80 [ 339.233022] pskb_expand_head+0x436/0x1d20 [ 339.233041] skb_shift+0xce2/0x2d10 [ 339.233059] tcp_sacktag_walk+0x2156/0x29d0 [ 339.233077] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.233094] tcp_ack+0x2888/0xa010 [ 339.233111] tcp_rcv_established+0xf7e/0x2940 [ 339.233131] tcp_v4_do_rcv+0x686/0xd80 [ 339.233149] tcp_v4_rcv+0x5a13/0x6520 [ 339.233168] ip_local_deliver_finish+0x8d8/0xff0 [ 339.233185] ip_local_deliver+0x44b/0x510 [ 339.233202] ip_rcv+0x6b6/0x740 [ 339.233222] process_backlog+0x82b/0x11e0 [ 339.233241] net_rx_action+0x98f/0x1d50 [ 339.233260] __do_softirq+0x721/0xc7f [ 339.233267] [ 339.233275] Uninit was stored to memory at: [ 339.233296] kmsan_internal_chain_origin+0x136/0x240 [ 339.233324] __msan_chain_origin+0x6d/0xb0 [ 339.233344] __save_stack_trace+0x8be/0xc60 [ 339.233363] save_stack_trace+0xc6/0x110 [ 339.233383] kmsan_internal_chain_origin+0x136/0x240 [ 339.233403] kmsan_memcpy_origins+0x13d/0x190 [ 339.233428] __msan_memcpy+0x6f/0x80 [ 339.233449] pskb_expand_head+0x436/0x1d20 [ 339.233466] skb_shift+0xce2/0x2d10 [ 339.233484] tcp_sacktag_walk+0x2156/0x29d0 [ 339.233502] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.233519] tcp_ack+0x2888/0xa010 [ 339.233536] tcp_rcv_established+0xf7e/0x2940 [ 339.233554] tcp_v4_do_rcv+0x686/0xd80 [ 339.233573] tcp_v4_rcv+0x5a13/0x6520 [ 339.233591] ip_local_deliver_finish+0x8d8/0xff0 [ 339.233608] ip_local_deliver+0x44b/0x510 [ 339.233626] ip_rcv+0x6b6/0x740 [ 339.233645] process_backlog+0x82b/0x11e0 [ 339.233665] net_rx_action+0x98f/0x1d50 [ 339.233683] __do_softirq+0x721/0xc7f [ 339.233690] [ 339.233698] Uninit was stored to memory at: [ 339.233718] kmsan_internal_chain_origin+0x136/0x240 [ 339.233738] __msan_chain_origin+0x6d/0xb0 [ 339.233758] __save_stack_trace+0x8be/0xc60 [ 339.233777] save_stack_trace+0xc6/0x110 [ 339.233797] kmsan_internal_chain_origin+0x136/0x240 [ 339.233817] kmsan_memcpy_origins+0x13d/0x190 [ 339.233836] __msan_memcpy+0x6f/0x80 [ 339.233857] pskb_expand_head+0x436/0x1d20 [ 339.233874] skb_shift+0xce2/0x2d10 [ 339.233892] tcp_sacktag_walk+0x2156/0x29d0 [ 339.233910] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.233926] tcp_ack+0x2888/0xa010 [ 339.233944] tcp_rcv_established+0xf7e/0x2940 [ 339.233962] tcp_v4_do_rcv+0x686/0xd80 [ 339.233980] tcp_v4_rcv+0x5a13/0x6520 [ 339.233998] ip_local_deliver_finish+0x8d8/0xff0 [ 339.234016] ip_local_deliver+0x44b/0x510 [ 339.234032] ip_rcv+0x6b6/0x740 [ 339.234052] process_backlog+0x82b/0x11e0 [ 339.234071] net_rx_action+0x98f/0x1d50 [ 339.234089] __do_softirq+0x721/0xc7f [ 339.234096] [ 339.234104] Uninit was stored to memory at: [ 339.234124] kmsan_internal_chain_origin+0x136/0x240 [ 339.234144] __msan_chain_origin+0x6d/0xb0 [ 339.234163] __save_stack_trace+0x8be/0xc60 [ 339.234183] save_stack_trace+0xc6/0x110 [ 339.234203] kmsan_internal_chain_origin+0x136/0x240 [ 339.234223] kmsan_memcpy_origins+0x13d/0x190 [ 339.234242] __msan_memcpy+0x6f/0x80 [ 339.234263] pskb_expand_head+0x436/0x1d20 [ 339.234280] skb_shift+0xce2/0x2d10 [ 339.234298] tcp_sacktag_walk+0x2156/0x29d0 [ 339.234325] tcp_sacktag_write_queue+0x2805/0x4630 [ 339.234342] tcp_ack+0x2888/0xa010 [ 339.234359] tcp_rcv_established+0xf7e/0x2940 [ 339.234396] tcp_v4_do_rcv+0x686/0xd80 [ 339.575966] tcp_v4_rcv+0x5a13/0x6520 [ 339.580233] ip_local_deliver_finish+0x8d8/0xff0 [ 339.585006] ip_local_deliver+0x44b/0x510 [ 339.589169] ip_rcv+0x6b6/0x740 [ 339.592471] process_backlog+0x82b/0x11e0 [ 339.596641] net_rx_action+0x98f/0x1d50 [ 339.600635] __do_softirq+0x721/0xc7f [ 339.604441] [ 339.606086] Local variable description: ----v.addr.i.i.i@ipv4_conntrack_local [ 339.613367] Variable was created at: [ 339.617109] ipv4_conntrack_local+0x75/0x470 [ 339.621538] nf_hook_slow+0x15c/0x3d0 20:36:58 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) 20:36:59 executing program 1: 20:36:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 20:36:59 executing program 2: 20:36:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:59 executing program 5: 20:36:59 executing program 2: 20:36:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:36:59 executing program 5: 20:36:59 executing program 1: 20:36:59 executing program 2: [ 340.970032] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 340.981504] clocksource: 'acpi_pm' wd_now: d4950b wd_last: 17b5ee mask: ffffff [ 340.990982] clocksource: 'tsc' cs_now: bc0c5c6c50 cs_last: ba324f35c2 mask: ffffffffffffffff [ 341.001664] tsc: Marking TSC unstable due to clocksource watchdog [ 341.022392] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 341.031258] sched_clock: Marking unstable (341080579138, -58211259)<-(341145429824, -123060708) [ 341.116723] clocksource: Switched to clocksource acpi_pm 20:37:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") clone(0x900, 0x0, 0xfffffffffffffffe, &(0x7f0000001200), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'ovf\x00'}, 0x2c) 20:37:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6}) 20:37:00 executing program 3: 20:37:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) 20:37:00 executing program 5: clone(0x106, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f6465762f6d64300045fe4e9c610dac071d43d558247b7068debca49d5dafc9acff292dfd0f6f70907907cb12f6878d2f8d1de6fa3692147694c5b06cb19f7c7381f014178fb961937ddfcec810b330669252c7bfcbe311adbcf1be916816791f719e744e42bf3d2cdf9a72c9f4"], &(0x7f0000000040)='.', &(0x7f0000000180)='xfs\x00', 0x3d4, 0x0) 20:37:00 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 20:37:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 20:37:00 executing program 5: 20:37:01 executing program 2: 20:37:01 executing program 0: 20:37:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000177, 0x0) 20:37:01 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000045040400010000000404000001000000b7030000000400006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x9f, &(0x7f0000000280)="43037f632e7592319135dad4e437", &(0x7f0000000380)=""/159}, 0x28) 20:37:01 executing program 3: 20:37:01 executing program 2: 20:37:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:01 executing program 3: 20:37:01 executing program 0: 20:37:02 executing program 2: 20:37:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:02 executing program 0: 20:37:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 343.603683] binder: 8794 RLIMIT_NICE not set [ 343.671566] binder: release 8793:8797 transaction 2 out, still active [ 343.678450] binder: undelivered TRANSACTION_COMPLETE [ 343.678968] binder: 8794 RLIMIT_NICE not set 20:37:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000177, 0x0) 20:37:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) socket$inet6(0xa, 0x80000, 0x400) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:02 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nl=@kern={0x10, 0x9, 0x8000000000000000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="5500000018007f7000fe01b2a4a280930a600080fea8430291000000390009002300fbff010000000d0005000be9ffffffffc68b65082314e9030b9d566885b16732009b84e7b1df136ef75af90000000000000000", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001180), &(0x7f00000011c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001900)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001a00)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000002040), &(0x7f0000002080)=0x14) 20:37:02 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) 20:37:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 343.713720] binder_alloc: binder_alloc_mmap_handler: 8793 20010000-20013000 already mapped failed -16 [ 343.735088] binder: 8797 RLIMIT_NICE not set [ 343.741171] binder: BINDER_SET_CONTEXT_MGR already set [ 343.746856] binder: 8793:8794 ioctl 40046207 0 returned -16 [ 343.753943] binder_alloc: 8793: binder_alloc_buf, no vma [ 343.759738] binder: 8793:8797 transaction failed 29189/-3, size 0-0 line 2973 [ 343.800900] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.808826] binder: release 8793:8794 transaction 2 in, still active [ 343.815847] binder: send failed reply for transaction 2, target dead [ 343.899158] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.906120] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.913072] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.919851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.926750] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.933668] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.940448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.947667] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.954600] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.961401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.968306] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:37:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0x4}]}, 0x28}}, 0x0) 20:37:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) [ 344.195443] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 20:37:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) socket$inet6(0xa, 0x80000, 0x400) socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000061100500000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 20:37:03 executing program 3: 20:37:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 20:37:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) socket$inet6(0xa, 0x803, 0xfba) socket$inet6(0xa, 0x80000, 0x400) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:04 executing program 0: 20:37:04 executing program 3: 20:37:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:04 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003, 0x6c00000000000000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f5900fe01b2a4a280930a600800ffa84302910000082d00090023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 20:37:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@newpolicy={0xb8, 0x13, 0x31, 0x0, 0x0, {{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 20:37:04 executing program 2: 20:37:04 executing program 5: 20:37:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) socket$inet6(0xa, 0x803, 0xfba) socket$inet6(0xa, 0x80000, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 345.662437] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. [ 345.671182] IPv6: Can't replace route, no match found 20:37:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:05 executing program 0: 20:37:05 executing program 5: 20:37:05 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003, 0x6c00000000000000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f5900fe01b2a4a280930a600800ffa84302910000082d00090023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 20:37:05 executing program 2: 20:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) socket$inet6(0xa, 0x803, 0xfba) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:05 executing program 0: 20:37:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:05 executing program 5: [ 346.422097] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. [ 346.430723] IPv6: Can't replace route, no match found 20:37:05 executing program 2: 20:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:05 executing program 0: 20:37:05 executing program 3: 20:37:05 executing program 5: 20:37:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:06 executing program 2: 20:37:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df77c002c00fe800000000000000000000088001b65af6000000000000000000000000000aa0000000004019078000087ae00ca8345e6931da1104b5396351f3357ba901b4319b734d4f324e6b81c98c9e50f"], &(0x7f0000000000)) 20:37:06 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x3, 0x0, 0x3}) 20:37:06 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f00000002c0)=""/169, 0xa9) 20:37:06 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x801, 0x0) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000001c0)={0x5, 0x0, 0x7}) sysfs$1(0x1, &(0x7f00000000c0)='\x00') syz_emit_ethernet(0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)) keyctl$revoke(0x3, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:37:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) 20:37:06 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @empty, @remote, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 20:37:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x801, 0x0) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 348.014966] *** Guest State *** [ 348.018695] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 348.028063] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 348.037422] CR3 = 0x0000000000000000 [ 348.041353] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 348.047669] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 348.053990] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 348.060899] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 348.069247] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 348.077614] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 348.085934] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 348.094269] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 348.102627] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 348.110809] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 348.119167] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 348.127508] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 348.135833] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 348.144159] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 348.150781] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 348.158586] Interruptibility = 00000000 ActivityState = 00000000 [ 348.165139] *** Host State *** [ 348.168550] RIP = 0xffffffff812cf768 RSP = 0xffff88811a84f378 [ 348.174920] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 348.181549] FSBase=00007fe0bd898700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 348.189699] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 348.195922] CR0=0000000080050033 CR3=0000000120258000 CR4=00000000001426e0 [ 348.203302] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260 20:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 348.210187] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 348.216622] *** Control State *** [ 348.220304] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 348.227314] EntryControls=0000d1ff ExitControls=002fefff [ 348.233092] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 348.240251] VMEntry: intr_info=80000003 errcode=00000000 ilen=00000000 [ 348.247378] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 348.254366] reason=80000021 qualification=0000000000000000 [ 348.260910] IDTVectoring: info=00000000 errcode=00000000 [ 348.266707] TSC Offset = 0xffffff403f5d6a14 [ 348.271237] EPT pointer = 0x000000011a49a01e 20:37:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000380)={'gre0\x00', @ifru_data=&(0x7f0000000000)="2f744f759cab863b752973d62e9b27127f0e5d78287e33eeea74fd35e0e5bfa8"}) 20:37:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x0) 20:37:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x801, 0x0) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f00000068c0), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffff57, 0x20008011, &(0x7f00000001c0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000440), 0x3, &(0x7f0000000480)=""/4096, 0x1000}, 0x1) 20:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 348.706785] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable [ 348.745054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:37:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8) 20:37:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000008c0)={0x0, 0x7c1a, 0xbff036ebd6ee8e8c}, &(0x7f0000000540)=0x3c7) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000840)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000380), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 20:37:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000900)) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000840)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r0, r1, &(0x7f0000000380), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x24}}, 0x0) syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x40, 0x100) 20:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:08 executing program 5: 20:37:08 executing program 0: 20:37:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:08 executing program 5: 20:37:09 executing program 3: 20:37:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:09 executing program 2: 20:37:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:09 executing program 0: 20:37:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)) 20:37:09 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f00000002c0)=""/169, 0xa9) 20:37:09 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000800), 0x24, 0x2) 20:37:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 350.743392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.750353] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.757509] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.764443] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.771233] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.778259] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.785194] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:37:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4107, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x18], [], @remote}}]}]}, 0x2c}}, 0x0) mknod(&(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x3}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000ae2000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200002000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x3, &(0x7f0000000540), 0x0) 20:37:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000072c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 350.792124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.798935] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.805865] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.812795] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:37:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 351.103399] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 20:37:10 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000780)="bd21aa5f1d3684f4b5f8de04bd2a215a4b7e8e2854d1a6f100a92b921c9f2ed09fc9b18930007ff926813e1a4abd5338ec4e923fddb2ea6a6df008dead3d7a08653fc9c2ad174e638c0ed7ec1ddae1e37864c009c8c2047b5d079c801760c437b9aa2d37", &(0x7f0000000200)}}, &(0x7f0000000840)) timer_gettime(0x0, &(0x7f0000002080)) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)="2f67726f3c23fb57e6460f1f4ba4cb3a9cd12dcea440d899c22c652b3a471bdd000000fef6e02e2be389de133945a385bd81099e6a350900a6b3fa9ea899c26266a84ac991b47162000040b1f9d8082418803299f00dabfa91b7b98c0e0bfd3c518096ab7cae77", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="05000800040000000000000001000000000000000600000000000000437365f91356a3fe070000000000000000000096b50910f75dd2af3fa08502fc736d6d9a623e4568468eae000200000000000000000600000000d7e500006689cda31ef4c55b462c8f3b2dcbb3c799f53c04c15927c28c2220513cb15c0dde9591b7522287eb30202292adcdfcd0de48f3531ef6b49fb613c6241f3d7916eaa385843189a2ba4094a2bef4bae0697815b77e761d253d4154b10acb052cc3730dde201d323da3f8b607cbf535a5ad7f63c5f33c9933f0a8d04f69000000000000000000000000000000"]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000440)=0x3) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 20:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:10 executing program 0: 20:37:10 executing program 3: 20:37:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:10 executing program 0: seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0), 0x0) 20:37:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 20:37:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f74637000d3ed6275b9cd9e121a768cf60d1bca232868eee33b2153a31b4f4b66bb76a968096fde77285c4338ab8a64de4b7a124c7c15941719f73933f2f056361d49ac8a936d0c9d7b0663e5f17d42aa78c92c55b992fb0d2640ccffff48e4cb699bad8eb3a1e06a277a5a80f4edba4da84b465323f98ae897376b994cbe530accb6ab3b9b6d7da442637fb92e6e5566ef8051c2d9079a31382d16f983394d12529a98530341dff284da6879f4c6150001fb98954ea171e2bb867b996cef3b02bd") preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 20:37:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 352.185077] kauditd_printk_skb: 3 callbacks suppressed [ 352.185116] audit: type=1326 audit(1542227831.234:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x50000 [ 352.313878] audit: type=1326 audit(1542227831.274:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.335668] audit: type=1326 audit(1542227831.274:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.357103] audit: type=1326 audit(1542227831.274:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.378581] audit: type=1326 audit(1542227831.274:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.399958] audit: type=1326 audit(1542227831.274:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.421344] audit: type=1326 audit(1542227831.274:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.442750] audit: type=1326 audit(1542227831.274:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 20:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 352.464094] audit: type=1326 audit(1542227831.274:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 352.485467] audit: type=1326 audit(1542227831.274:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9033 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 20:37:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) listen(0xffffffffffffffff, 0xffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)) sendto$inet(r0, &(0x7f00000006c0)="b3", 0x1, 0x0, &(0x7f00000007c0)={0x2, 0x4e20, @remote}, 0x10) shutdown(r0, 0x1) 20:37:12 executing program 0: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") prctl$intptr(0x20000001d, 0xfffffffffffffeca) prctl$getreaper(0x10400000000001e, &(0x7f00000001c0)) 20:37:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:12 executing program 2: 20:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:12 executing program 3: 20:37:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:12 executing program 0: 20:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) 20:37:31 executing program 3: 20:37:31 executing program 2: 20:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:31 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000500)=[{}, {r0}], 0x2, 0xffff) [ 372.377271] kauditd_printk_skb: 6 callbacks suppressed [ 372.377322] audit: type=1326 audit(1542227851.424:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9088 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 20:37:31 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x2f6, 0x24008010, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x3f, 0x0) 20:37:31 executing program 3: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x20000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000540), &(0x7f0000000240), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 20:37:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 372.799521] not chained 50000 origins [ 372.801900] CPU: 1 PID: 9098 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #85 [ 372.801900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.813305] Call Trace: [ 372.813305] dump_stack+0x32d/0x480 [ 372.813305] kmsan_internal_chain_origin+0x222/0x240 [ 372.813305] ? save_stack_trace+0xc6/0x110 [ 372.813305] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 372.813305] ? kmsan_internal_chain_origin+0x90/0x240 [ 372.813305] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 372.813305] ? is_bpf_text_address+0x49e/0x4d0 [ 372.813305] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 372.813305] ? in_task_stack+0x12c/0x210 [ 372.813305] __msan_chain_origin+0x6d/0xb0 [ 372.813305] ? tcp_send_synack+0x7a3/0x18f0 [ 372.813305] __save_stack_trace+0x8be/0xc60 [ 372.813305] ? tcp_send_synack+0x7a3/0x18f0 [ 372.813305] save_stack_trace+0xc6/0x110 [ 372.813305] kmsan_internal_chain_origin+0x136/0x240 [ 372.813305] ? do_syscall_64+0xcf/0x110 [ 372.813305] ? kmsan_internal_chain_origin+0x136/0x240 [ 372.813305] ? kmsan_memcpy_origins+0x13d/0x190 [ 372.813305] ? __msan_memcpy+0x6f/0x80 [ 372.813305] ? skb_copy_bits+0x1d2/0xc90 [ 372.813305] ? skb_copy+0x56c/0xba0 [ 372.813305] ? tcp_send_synack+0x7a3/0x18f0 [ 372.813305] ? tcp_rcv_state_process+0x275d/0x6c60 [ 372.813305] ? tcp_v6_do_rcv+0x112b/0x21b0 [ 372.813305] ? __release_sock+0x32d/0x750 [ 372.813305] ? release_sock+0x99/0x2a0 [ 372.813305] ? __inet_stream_connect+0xdff/0x15d0 [ 372.813305] ? tcp_sendmsg_locked+0x6655/0x6c30 [ 372.813305] ? tcp_sendmsg+0xb2/0x100 [ 372.813305] ? inet_sendmsg+0x4e9/0x800 [ 372.813305] ? __sys_sendto+0x940/0xb80 [ 372.813305] ? __se_sys_sendto+0x107/0x130 [ 372.813305] ? __x64_sys_sendto+0x6e/0x90 [ 372.813305] ? do_syscall_64+0xcf/0x110 [ 372.813305] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 372.813305] ? __msan_get_context_state+0x9/0x20 [ 372.813305] ? INIT_INT+0xc/0x30 [ 372.813305] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 372.813305] ? __msan_get_context_state+0x9/0x20 [ 372.813305] kmsan_memcpy_origins+0x13d/0x190 [ 372.813305] __msan_memcpy+0x6f/0x80 [ 372.813305] skb_copy_bits+0x1d2/0xc90 [ 372.813305] skb_copy+0x56c/0xba0 [ 372.813305] tcp_send_synack+0x7a3/0x18f0 [ 372.813305] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 372.813305] tcp_rcv_state_process+0x275d/0x6c60 [ 372.813305] ? tcp_connect+0x544e/0x6220 [ 372.813305] tcp_v6_do_rcv+0x112b/0x21b0 [ 372.813305] ? tcp_v6_destroy_sock+0x60/0x60 [ 372.813305] __release_sock+0x32d/0x750 [ 372.813305] release_sock+0x99/0x2a0 20:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 372.813305] __inet_stream_connect+0xdff/0x15d0 [ 372.813305] ? wait_woken+0x5b0/0x5b0 [ 372.813305] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.058297] ? aa_label_sk_perm+0xda/0x960 [ 373.058297] ? kmsan_set_origin+0x7f/0x100 [ 373.058297] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 373.058297] ? __msan_poison_alloca+0x1e0/0x270 [ 373.058297] ? __local_bh_enable_ip+0x46/0x260 [ 373.058297] ? __msan_poison_alloca+0x1e0/0x270 [ 373.058297] tcp_sendmsg+0xb2/0x100 [ 373.058297] ? tcp_sendmsg_locked+0x6c30/0x6c30 [ 373.058297] inet_sendmsg+0x4e9/0x800 [ 373.058297] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 373.058297] ? security_socket_sendmsg+0x1bd/0x200 [ 373.058297] ? inet_getname+0x490/0x490 [ 373.058297] __sys_sendto+0x940/0xb80 [ 373.058297] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 373.058297] ? prepare_exit_to_usermode+0x182/0x4c0 [ 373.058297] __se_sys_sendto+0x107/0x130 [ 373.058297] __x64_sys_sendto+0x6e/0x90 [ 373.058297] do_syscall_64+0xcf/0x110 [ 373.058297] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.058297] RIP: 0033:0x457569 [ 373.058297] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.058297] RSP: 002b:00007fe0bd897c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.176192] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 373.176192] RDX: 00000000000002f6 RSI: 0000000020000100 RDI: 0000000000000005 [ 373.176192] RBP: 000000000072bf00 R08: 0000000020b63fe4 R09: 000000000000001c [ 373.176192] R10: 0000000024008010 R11: 0000000000000246 R12: 00007fe0bd8986d4 [ 373.176192] R13: 00000000004c3c1d R14: 00000000004d5e98 R15: 00000000ffffffff [ 373.176192] Uninit was stored to memory at: [ 373.176192] kmsan_internal_chain_origin+0x136/0x240 [ 373.176192] __msan_chain_origin+0x6d/0xb0 [ 373.176192] __save_stack_trace+0x8be/0xc60 [ 373.176192] save_stack_trace+0xc6/0x110 [ 373.176192] kmsan_internal_chain_origin+0x136/0x240 [ 373.176192] kmsan_memcpy_origins+0x13d/0x190 [ 373.176192] __msan_memcpy+0x6f/0x80 20:37:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 373.248572] skb_copy_bits+0x1d2/0xc90 [ 373.248572] skb_copy+0x56c/0xba0 [ 373.248572] tcp_send_synack+0x7a3/0x18f0 [ 373.248572] tcp_rcv_state_process+0x275d/0x6c60 [ 373.263134] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.263134] __release_sock+0x32d/0x750 [ 373.263134] release_sock+0x99/0x2a0 [ 373.263134] __inet_stream_connect+0xdff/0x15d0 [ 373.263134] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.263134] tcp_sendmsg+0xb2/0x100 [ 373.263134] inet_sendmsg+0x4e9/0x800 [ 373.263134] __sys_sendto+0x940/0xb80 [ 373.263134] __se_sys_sendto+0x107/0x130 [ 373.263134] __x64_sys_sendto+0x6e/0x90 [ 373.263134] do_syscall_64+0xcf/0x110 [ 373.263134] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.312073] [ 373.312073] Uninit was stored to memory at: [ 373.312073] kmsan_internal_chain_origin+0x136/0x240 [ 373.312073] __msan_chain_origin+0x6d/0xb0 [ 373.312073] __save_stack_trace+0x8be/0xc60 [ 373.312073] save_stack_trace+0xc6/0x110 [ 373.312073] kmsan_internal_chain_origin+0x136/0x240 [ 373.312073] kmsan_memcpy_origins+0x13d/0x190 [ 373.312073] __msan_memcpy+0x6f/0x80 [ 373.312073] skb_copy_bits+0x1d2/0xc90 [ 373.312073] skb_copy+0x56c/0xba0 [ 373.312073] tcp_send_synack+0x7a3/0x18f0 [ 373.312073] tcp_rcv_state_process+0x275d/0x6c60 [ 373.312073] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.312073] __release_sock+0x32d/0x750 [ 373.377329] release_sock+0x99/0x2a0 [ 373.377329] __inet_stream_connect+0xdff/0x15d0 [ 373.377329] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.377329] tcp_sendmsg+0xb2/0x100 [ 373.377329] inet_sendmsg+0x4e9/0x800 [ 373.377329] __sys_sendto+0x940/0xb80 [ 373.377329] __se_sys_sendto+0x107/0x130 [ 373.377329] __x64_sys_sendto+0x6e/0x90 [ 373.377329] do_syscall_64+0xcf/0x110 [ 373.377329] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.377329] [ 373.377329] Uninit was stored to memory at: [ 373.377329] kmsan_internal_chain_origin+0x136/0x240 [ 373.377329] __msan_chain_origin+0x6d/0xb0 [ 373.377329] __save_stack_trace+0x8be/0xc60 [ 373.377329] save_stack_trace+0xc6/0x110 [ 373.377329] kmsan_internal_chain_origin+0x136/0x240 [ 373.377329] kmsan_memcpy_origins+0x13d/0x190 [ 373.377329] __msan_memcpy+0x6f/0x80 [ 373.377329] skb_copy_bits+0x1d2/0xc90 [ 373.377329] skb_copy+0x56c/0xba0 [ 373.377329] tcp_send_synack+0x7a3/0x18f0 [ 373.377329] tcp_rcv_state_process+0x275d/0x6c60 [ 373.469186] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.469186] __release_sock+0x32d/0x750 [ 373.469186] release_sock+0x99/0x2a0 [ 373.469186] __inet_stream_connect+0xdff/0x15d0 [ 373.469186] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.469186] tcp_sendmsg+0xb2/0x100 [ 373.469186] inet_sendmsg+0x4e9/0x800 [ 373.469186] __sys_sendto+0x940/0xb80 [ 373.469186] __se_sys_sendto+0x107/0x130 [ 373.469186] __x64_sys_sendto+0x6e/0x90 [ 373.469186] do_syscall_64+0xcf/0x110 [ 373.469186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.469186] [ 373.469186] Uninit was stored to memory at: [ 373.469186] kmsan_internal_chain_origin+0x136/0x240 [ 373.469186] __msan_chain_origin+0x6d/0xb0 [ 373.469186] __save_stack_trace+0x8be/0xc60 [ 373.469186] save_stack_trace+0xc6/0x110 [ 373.469186] kmsan_internal_chain_origin+0x136/0x240 [ 373.549839] kmsan_memcpy_origins+0x13d/0x190 [ 373.549839] __msan_memcpy+0x6f/0x80 [ 373.549839] skb_copy_bits+0x1d2/0xc90 [ 373.549839] skb_copy+0x56c/0xba0 [ 373.549839] tcp_send_synack+0x7a3/0x18f0 [ 373.549839] tcp_rcv_state_process+0x275d/0x6c60 [ 373.549839] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.549839] __release_sock+0x32d/0x750 [ 373.549839] release_sock+0x99/0x2a0 [ 373.549839] __inet_stream_connect+0xdff/0x15d0 [ 373.549839] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.549839] tcp_sendmsg+0xb2/0x100 [ 373.549839] inet_sendmsg+0x4e9/0x800 [ 373.549839] __sys_sendto+0x940/0xb80 [ 373.549839] __se_sys_sendto+0x107/0x130 [ 373.549839] __x64_sys_sendto+0x6e/0x90 [ 373.549839] do_syscall_64+0xcf/0x110 [ 373.549839] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.549839] [ 373.549839] Uninit was stored to memory at: [ 373.549839] kmsan_internal_chain_origin+0x136/0x240 [ 373.549839] __msan_chain_origin+0x6d/0xb0 [ 373.549839] __save_stack_trace+0x8be/0xc60 [ 373.549839] save_stack_trace+0xc6/0x110 [ 373.549839] kmsan_internal_chain_origin+0x136/0x240 [ 373.549839] kmsan_memcpy_origins+0x13d/0x190 [ 373.549839] __msan_memcpy+0x6f/0x80 [ 373.549839] skb_copy_bits+0x1d2/0xc90 [ 373.549839] skb_copy+0x56c/0xba0 [ 373.549839] tcp_send_synack+0x7a3/0x18f0 [ 373.549839] tcp_rcv_state_process+0x275d/0x6c60 [ 373.678523] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.678523] __release_sock+0x32d/0x750 [ 373.678523] release_sock+0x99/0x2a0 [ 373.689797] __inet_stream_connect+0xdff/0x15d0 [ 373.693248] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.693248] tcp_sendmsg+0xb2/0x100 [ 373.693248] inet_sendmsg+0x4e9/0x800 [ 373.693248] __sys_sendto+0x940/0xb80 [ 373.693248] __se_sys_sendto+0x107/0x130 [ 373.693248] __x64_sys_sendto+0x6e/0x90 [ 373.693248] do_syscall_64+0xcf/0x110 [ 373.720810] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.724426] [ 373.724426] Uninit was stored to memory at: [ 373.724426] kmsan_internal_chain_origin+0x136/0x240 [ 373.724426] __msan_chain_origin+0x6d/0xb0 [ 373.724426] __save_stack_trace+0x8be/0xc60 [ 373.724426] save_stack_trace+0xc6/0x110 [ 373.724426] kmsan_internal_chain_origin+0x136/0x240 [ 373.724426] kmsan_memcpy_origins+0x13d/0x190 [ 373.724426] __msan_memcpy+0x6f/0x80 [ 373.724426] skb_copy_bits+0x1d2/0xc90 [ 373.724426] skb_copy+0x56c/0xba0 [ 373.724426] tcp_send_synack+0x7a3/0x18f0 [ 373.724426] tcp_rcv_state_process+0x275d/0x6c60 [ 373.724426] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.724426] __release_sock+0x32d/0x750 [ 373.724426] release_sock+0x99/0x2a0 [ 373.724426] __inet_stream_connect+0xdff/0x15d0 [ 373.724426] tcp_sendmsg_locked+0x6655/0x6c30 20:37:32 executing program 5: 20:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x0, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) 20:37:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) [ 373.724426] tcp_sendmsg+0xb2/0x100 [ 373.724426] inet_sendmsg+0x4e9/0x800 [ 373.724426] __sys_sendto+0x940/0xb80 [ 373.724426] __se_sys_sendto+0x107/0x130 [ 373.724426] __x64_sys_sendto+0x6e/0x90 [ 373.724426] do_syscall_64+0xcf/0x110 [ 373.724426] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.724426] [ 373.724426] Uninit was stored to memory at: [ 373.724426] kmsan_internal_chain_origin+0x136/0x240 [ 373.724426] __msan_chain_origin+0x6d/0xb0 [ 373.724426] __save_stack_trace+0x8be/0xc60 [ 373.724426] save_stack_trace+0xc6/0x110 [ 373.724426] kmsan_internal_chain_origin+0x136/0x240 [ 373.724426] kmsan_memcpy_origins+0x13d/0x190 [ 373.724426] __msan_memcpy+0x6f/0x80 [ 373.724426] skb_copy_bits+0x1d2/0xc90 [ 373.724426] skb_copy+0x56c/0xba0 [ 373.873633] tcp_send_synack+0x7a3/0x18f0 [ 373.873633] tcp_rcv_state_process+0x275d/0x6c60 [ 373.873633] tcp_v6_do_rcv+0x112b/0x21b0 [ 373.873633] __release_sock+0x32d/0x750 [ 373.873633] release_sock+0x99/0x2a0 [ 373.873633] __inet_stream_connect+0xdff/0x15d0 [ 373.901788] tcp_sendmsg_locked+0x6655/0x6c30 [ 373.901788] tcp_sendmsg+0xb2/0x100 [ 373.901788] inet_sendmsg+0x4e9/0x800 [ 373.901788] __sys_sendto+0x940/0xb80 [ 373.901788] __se_sys_sendto+0x107/0x130 [ 373.901788] __x64_sys_sendto+0x6e/0x90 [ 373.901788] do_syscall_64+0xcf/0x110 [ 373.901788] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.901788] [ 373.901788] Local variable description: ----state.i.i@ip6_finish_output2 [ 373.901788] Variable was created at: [ 373.901788] ip6_finish_output2+0x87/0x22d0 [ 373.901788] ip6_finish_output+0xc13/0xca0 20:37:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1}, 0x8) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x40, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x7c, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40400, 0x0) flock(r1, 0x8) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'ipddp0\x00', 0x3ff}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) semget(0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a"}], 0x392, 0x0, &(0x7f00000000c0), 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, &(0x7f0000000200)=[@dstype3={0x7, 0xe}], 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:37:33 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 374.527920] *** Guest State *** [ 374.531421] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 374.540762] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 374.549821] CR3 = 0x0000000000000000 [ 374.553718] RSP = 0x0000000000000f80 RIP = 0x0000000000000014 [ 374.559752] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 374.565929] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 374.572813] CS: sel=0x0023, attr=0x000fb, limit=0x0000ffff, base=0x0000000000000000 [ 374.581294] DS: sel=0x002b, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.589570] SS: sel=0x002b, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.597760] ES: sel=0x002b, attr=0x000ff, limit=0x0000ffff, base=0x0000000000000000 [ 374.606019] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.614219] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.622513] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 374.630567] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 374.638832] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 374.647026] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 374.655294] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 374.661800] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 374.669745] Interruptibility = 00000000 ActivityState = 00000000 [ 374.676250] *** Host State *** [ 374.679499] RIP = 0xffffffff812cf768 RSP = 0xffff88811f36f378 [ 374.685741] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 374.692393] FSBase=00007f39d6544700 GSBase=ffff88821fc00000 TRBase=fffffe0000003000 [ 374.700235] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 374.706358] CR0=0000000080050033 CR3=000000011af86000 CR4=00000000001426f0 [ 374.713900] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8b001260 [ 374.720592] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 374.726875] *** Control State *** [ 374.730398] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 374.737287] EntryControls=0000d1ff ExitControls=002fefff [ 374.742962] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 374.749949] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 374.756878] VMExit: intr_info=00000000 errcode=00000000 ilen=00000007 [ 374.763603] reason=80000021 qualification=0000000000000000 [ 374.769977] IDTVectoring: info=00000000 errcode=00000000 [ 374.775719] TSC Offset = 0xffffff320b2f5f10 [ 374.780106] EPT pointer = 0x000000011d9aa01e [ 374.842871] *** Guest State *** [ 374.846232] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 374.855464] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 374.864525] CR3 = 0x0000000000000000 [ 374.868308] RSP = 0x0000000000000f80 RIP = 0x0000000000000014 [ 374.874526] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 374.880570] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 374.887577] CS: sel=0x0023, attr=0x000fb, limit=0x0000ffff, base=0x0000000000000000 [ 374.895718] DS: sel=0x002b, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.904015] SS: sel=0x002b, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.912234] ES: sel=0x002b, attr=0x000ff, limit=0x0000ffff, base=0x0000000000000000 [ 374.920271] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.928613] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 374.936809] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 374.945060] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 374.953254] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 374.961290] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 374.969574] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 374.976436] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 374.984115] Interruptibility = 00000000 ActivityState = 00000000 [ 374.990396] *** Host State *** [ 374.993850] RIP = 0xffffffff812cf768 RSP = 0xffff88812d66f378 [ 374.999911] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 375.006584] FSBase=00007f39d6502700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 375.014573] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 375.020518] CR0=0000000080050033 CR3=000000011af86000 CR4=00000000001426e0 [ 375.027782] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260 [ 375.034674] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 375.040745] *** Control State *** [ 375.044443] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 375.051191] EntryControls=0000d1ff ExitControls=002fefff [ 375.057002] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 375.064141] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 375.070860] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 375.077714] reason=80000021 qualification=0000000000000000 [ 375.084263] IDTVectoring: info=00000000 errcode=00000000 [ 375.089781] TSC Offset = 0xffffff320b305b96 [ 375.094358] EPT pointer = 0x000000011d9aa01e 20:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x100000000}, 0x28, 0x0) 20:37:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='E'], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x0) 20:37:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x0, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:34 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0xfffffffffffffe63}, 0x14) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0x2322) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x6, 0x5}) 20:37:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x0, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$inet6(0xa, 0x80000, 0x400) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r1, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x10001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:35 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28}, 0xffffffdf) close(r1) r2 = memfd_create(&(0x7f0000000000)="3a00f799a234256c9f957cf3cd7a9f2385cb3b3e57337761a9d9683d2290bfb4d96da46372079bef2e440c9926a9122d27826127c1bc374c0afa25d7889890a1", 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) write$FUSE_LK(r1, &(0x7f0000000140)={0x28, 0xffffffffffffffda, 0x0, {{0x10001, 0x2, 0x1, r3}}}, 0x28) splice(r0, 0x0, r1, &(0x7f0000000080), 0x400000400003, 0x2) 20:37:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet6(0xa, 0x80000, 0x7, &(0x7f0000000000)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@allocspi={0x22c, 0x16, 0x100, 0x70bd2a, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@remote, 0x4e20, 0x6, 0x4e20, 0x0, 0x2, 0x80, 0xa0, 0x33, r4, r5}, {@in=@rand_addr=0x8, 0x4d6}, @in=@remote, {0x9, 0x0, 0x7fffffff, 0x1, 0x3, 0xffffffffffffffff, 0xf50e, 0x7ff}, {0x5, 0x100000001, 0x77, 0x4}, {0x6, 0x4, 0x7}, 0x70bd2b, 0x34ff, 0xa, 0x3, 0x5, 0x20}, 0x9, 0x8000}, [@user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x2}}, @algo_auth_trunc={0x100, 0x14, {{'cmac(seed)\x00'}, 0x590, 0x140, "b53ecb20d9d1aec849f2805a9b7e7075b284fa8aff46da76a726a12cd6350e9d0976a1a746b788767b07831a198489b01c5ea4fa8c07fa50a72e39f3350ac9703cfd2b7c9a4aaf1a52d639f0c18b292c49decc26bfd7175f6ffa2ca4b2551dfbc260dc6c7c0caf0c83beb8419aaf57295463e9604e6b9e37fd254453cee80514d72373a9d855f9ae35a52adad8c26b36aee2526155dfeb23b574663152b090bf2f26a60c48e38a7d61fef5ee05c9deec8618"}}, @extra_flags={0x8, 0x18, 0x80000000000}]}, 0x22c}, 0x1, 0x0, 0x0, 0x44044}, 0x40000c4) 20:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0xfffffffffffffffc}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x5d, 0x73e58be2c27555b9, 0x4, 0x8, 0x4, 0x3ff, 0xf48, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x0, 0x5, [0x8001, 0x9, 0x1f, 0x100000001, 0x1]}, 0x12) 20:37:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x6}) r1 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@mcast2, 0x800000, r2}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x7fffffff, "6d0684012b69e29f445ecc1f7ad0a8fcdeb72aea2cdf49a8c96a198c4e0af365", 0x3, 0x20, 0x0, 0x5, 0x4, 0x2, 0x5, 0x6}) 20:37:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34068}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000005007a00}}]}]}, 0x2c}}, 0x0) 20:37:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 20:37:37 executing program 5: unshare(0x8000400) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = creat(&(0x7f0000001d40)='./bus\x00', 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2800, 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x10013c93a) [ 378.144372] openvswitch: netlink: Key type 122 is out of range max 29 20:37:37 executing program 3: r0 = socket$inet(0x10, 0x4000000000000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10, 0x80800) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a000500000000030000000020000000ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4500, 0x0) sendto$inet(r2, &(0x7f0000000200)="d0d52f257d3226fc434dd92aa08406bb2d3fa49ef71558c0845e737275f1aab570469f5b10c6260cd79a9714c6c88a67ae633d5e175b1801cfa02a4bb455f7edf0f16861ab8b7f89afd6763c0f06ab7340a060629ec7ddb3482b8b343460575e9099887d8ca8", 0x66, 0x4, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x7fffffff, {0x2400000000, 0x80000000, 0x0, 0x5, 0x0, 0x9}}) 20:37:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x1000000000000002, &(0x7f000059dffc), &(0x7f0000000080)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10400, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2500, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x3}, 0xb) 20:37:37 executing program 0: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x80000000, 0x8000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x803) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000002c0)="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") pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f40011c0fe2b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000000000000000000000", 0x30}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in6=@ipv4, 0x4e24, 0x8, 0x4e22, 0x8, 0xa, 0xa0, 0xa0, 0x2b, r3, r4}, {0x8, 0x6, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3}, {0x5, 0x0, 0x0, 0x8}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x2, 0x3}, {{@in, 0x4d2, 0x3f}, 0xa, @in6, 0x34ff, 0x0, 0x0, 0x10001, 0x3, 0x9, 0x81}}, 0xe8) [ 378.463325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 378.472223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 20:37:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 378.564495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 378.573507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 20:37:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x20000) ioctl$TIOCNOTTY(r1, 0x5422) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 20:37:37 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r4, 0x910, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockname$packet(r2, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000200)=r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) 20:37:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:37:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x7}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r3}], {0x4, 0x4}, [{0x8, 0x3, r4}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x1) r5 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0xf8, 0xc00) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/186, &(0x7f0000000500)=0xba) [ 379.124349] input: syz1 as /devices/virtual/input/input8 20:37:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 379.192865] input: syz1 as /devices/virtual/input/input9 20:37:38 executing program 5: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x3}) read(r3, &(0x7f0000481000)=""/128, 0x80) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) 20:37:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0x4006, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x22, &(0x7f0000000040)='lo!trustedem1eth0keyringmime_type\x00'}, 0x30) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r2) sendto$inet6(r0, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x2000000000e, @mcast2}, 0x1c) 20:37:38 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000180)={0xe2e, 0x0, 0x8, 0x0, 0x6, 0x10000}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xc58, 0x1100085) r2 = memfd_create(&(0x7f0000000140)='/dev/loop#\x00', 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x3f) getdents64(r2, &(0x7f0000000200)=""/75, 0x4b) ioctl$TIOCSTI(r2, 0x5412, 0x7fff) 20:37:38 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="fc0000001800071bab092500090007000aab08000a0000000000e293210001c000000000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc839dde3cd3229e38f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd20df295ed94e0ad91bd0734babc7c3f2eeb57d43d0c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd300013b41000000000000000000000000000000000000000000000000", 0xfc) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 20:37:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:37:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200200, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x46, 0x1}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1, 0x4}, 0x8) poll(&(0x7f0000000000)=[{}], 0x2000000000000320, 0x1ff) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) 20:37:39 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0xfae88c13e929fd85) ioctl$TCFLSH(r0, 0x540b, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271d, &(0x7f0000000040)=""/13, &(0x7f000033bffc)=0xd) 20:37:39 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x10de, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={"7465616d30063a000000001500", @random="b00bcc68324b"}) 20:37:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x0, @pid}]}, 0x1c}}, 0x0) 20:37:39 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='cgroup/cpuset+.\x00', 0x0) keyctl$update(0x2, r1, &(0x7f0000000100)="3eb89c502a6d85e4210be0e78d5d282bcda1b015dafb52c8b44a71f78358e0ec63537e321883e298d8e81d058c12f8d965d8583fee5771d2ab8ed76cc447956efc033147522dd473884b7bda3a7e9b1f762a27d2674ad9625b2e8ce999c59967f69ea605a5abd857dc78d0f56833016425d755380624f665aaf21bd94af41de70850330940d39aa1c43aa3", 0x8b) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x40001) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 20:37:39 executing program 0: ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000240)) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fd496adb141bd9e0311e0936933e297e5ca180f9e62e383b224ea8c5199092929044c6ab33ebc98704e05c611a02e6c850fbfdc1ba", 0x35}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x74}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xbf, "950b615dfdc82a9fd4b3bd4bdcbfbe1567bc6f8949432277fec19d1b2f2e1674957bd929ee68715334c403850bab385e258c1284dcff4638a9ff9763ccf7da8d2885d18341a178a4a3a535c61ca720e308876115217009a1e76de297a20630962abec077c99d8c7542911068e84970fe1fc59866d2ad910d8ebdb1336e9311d9fb9e46183fc996cc237ffbc60441d33dc73234073e60798073990d4ab1afbec7bfa6431a54a78f909632624898bb4e3ae8094cb2ac762702881f8eb3e4234a"}, @assoc={0x18, 0x117, 0x4, 0x2000}, @op={0x18}], 0x138, 0x40}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="47631cc13a504f79a712d352bea3d36fe89ecc5775a40da90c5b66a522d7fa15ae9bdd7d82eed0b5a1b7829c26640abe21f195ffa1a101c6f0120d57562a00a69fca06b751a819708f5a0e6f9a3ca5101e329019a0e942d6ccfc55371bc24f4d7c3595cbaf77a27081239f092aef3d0614a13d84d00112dc7c8caaefc2a514d74cbddcda91c6d2cf4fbcb01a808f0930c5f6ad6346b9030d24fa82b91b9e6f62976d1a4555a5b449764f6eab1cba62e87c2e7e65c7ff89bbb4a7a6e8980c8108f6800585e89c61d02a2efe58138da0264a5e535bbfadb32736506923c20b4fdbde65a8c86490b1bb65a2c3688ecdf229224e8d895f", 0xf5}, {&(0x7f00000003c0)="a7e5bac01606e123c726eda4dd72777c32debeb3222bd305f92a9d60dcc664855940dcc8c70c23ffab5f302311da299f664f39c0a95c8f8aea653c631ee50eb183eb67de18e81e1aade0b56e349eeb6ca1052ee738874909dd32083036ad499a6a768847abbc8b4dd538c322ac302e098100e71fbe20a2acae96377c9400729f313c575043e60f68777087d375cd261f5ce2242eaf58b075344986077a6579901a2c7c6e2fe74c79ba0f39cfda457ba1285428982eb01a488c86d68b9989", 0xbe}, {&(0x7f0000000480)="82fba7094147746c582dc59e71ff201f809f8076c091538c37217d2a8b41979646d61f3c1c15023b6ccf5cfca71a95bfd8579abaedca1053a702343da722c2244eec3466ad928b90f4fb1e96edb924f21679cc9911a5273c07f0847100f17343371f91f0ea5d080d388a16e1506072d00bef9b9087b2661aff07bfb4a70d8ce7ff0b87fa9265db3c96dc6365a7059c65670eb1000a53a0d6c00958505f33511bb117d572387d906df9f442818526f1ac3dc847ea7e2c74eca28f38c7b9da3a65e8a50af6b93650478b13b96a64b513", 0xcf}, {&(0x7f0000000580)="7eb54da430590d6f2875779317326a3a7a59affe503f3b00d7af94d609ea299c16abd4f86aac4a29d9b91d1b489d7e8b435a7efe967d215186023bf9ecdb6f8c269646475b15aaddfec6b04e7badca6f62258b97dd106812b244fd5b9153476057af454ddbf8e9cf151600b43e8f419272382950617d6eec57daf2f1981292fa08eec8950fb90e5ac31e1fa96dcc98fe11d81b1a9ba8418cd821d3d11ca24190331f9011a866609349c3947797c2392fb2a7df6290cbc2c86b506663722fab679955edbb882aca203b5ed865ad82202724b7e22d1ac7c464e6", 0xd9}, {&(0x7f0000000680)="6630da643a01463e77ba0a5ad109e50b8031890690530d7ed7d31cc6a113f058418a9fa84f66864320b583ef329f791639febe93f267d36852100f7ba4c760e3351c61517202a2b8db82486b3685f92e417f737047d33622cea26f6cd50ae7279d48849d4a63fd2aac2cb49de68675da2b2833c0cf0ca5afbfcc9c7d52cbecd0ab5ed1f91ebad601cc26966f8d18be8d76bdd0b6903ffbbf07ea32b8aa5a92a1dd93b7dac1235372dce853fa85e144a9c01a0e390349363d0267e7d3f8351d40c9ed6b1975d16a6ea6d3cabfb764626a68627861cc4f34924d1435", 0xdb}], 0x5, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@iv={0x88, 0x117, 0x2, 0x71, "efb638cef60612722987c11bdfcd47e7784b7d26e9b62917fd57c3fbecc1365c0a6921b749d6e7bc3b1e9e4f6b55245f4e4caf45203b216a58dc8c21249617067498d7dadc7b49207d3f409526a3e1cc627fb791e654d9a5167ba00d7094fcba733f121a67cb04fbb2ffe63336c3aa7f33"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0xa8, 0x117, 0x2, 0x8e, "9303994d7238406e084b3c8932df02b2751db1d608cc3cc5f3c95e030215984c52ceb8264107276e1f21efc7779f59e6616438666b51140c72c776da3e5b1efb353f22e9effd39dafdc1da31852fa634d04a919152ac44e599a98498ee935dcd3f0069487f0fe57d04b4bff3beafc2d010129c0f8b36e44bd491a51db978028c0d14f0d36d252426d0f8030b3c1a"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x1c0, 0x880}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a00)="f0c20dc5dc50f8b2abae906aa9b9d8dd602e838be53607b5ad438fe4cf98011a16bcd3cb767a96405aa0462ce1ac92adeba72e7c909c548c49d7cd452d3f52999cc83227762ad53b0476013293df61e2d94b6e370ae9f7ee302e4894d2c82c1b6485d80d6945d77e2b37d3bb24e725ac2b2e3df51946ba03f527730e81617588f073f419488603e71748e18c53ad931f64660b4ef48694a989735ef319503046ea10a1ba98870609dabee9165aef1322c3f8695f326ace16a49b2060729b055ab9ef764176f9515eef", 0xc9}, {&(0x7f0000000b00)="85792ff6bf8c7c881502366f167f7396c24136b18e66530f0cd1a4fabdef8ea6663282b07152c3b06086ccbbc11faa0715a2c4254a53bf6d03d3de5e192dd01f24169c72350938de304bf6cb7d6a65f5cd14223b56c1fbd3bf78831ceb6ad480c3f9cf7134eaa6733c6631ce0e51a6589f0a3454c8ca75766308e8d1b2328ef75d2a971694898a68848093f7f34e4de8eecffeff3245a192965935a633516a69fe2aa4b93d881cef13dddeae5907b21ddb", 0xb1}, {&(0x7f0000000bc0)="4152d11ec17bc67295dc7b4db397dd16966007f1d4bcc615017f14e58805ac7a539a2ab6ce27ac682015601a9f032baf8ea46c68b94395773c82f279fb7c7c9910528b6cf980dc075713a36b9dfbcee55c6b6593f24c021e9ab51d6110897c448f0bde4a40", 0x65}, {&(0x7f0000000c40)="96849e948689b8d60b75c7b848723df50eca61561c4071ddcf6c8803d24a76caf59b1c6be24628f4cc7f240aff95268ba3ffc679a3bd042fd003483848", 0x3d}, {&(0x7f0000000c80)="b0fb6e19b5", 0x5}, {&(0x7f0000000cc0)="fe26d20d70cf04b900363f6525e0b34773c1f7ba6410d356f335229f5caa474e0fed980b525a3b42a99c3a64cae2f487d9a14e66b97c333ea683b8f7a2c7ac5f2eb5d086c89e0fe2e9c2353a02ff45ba751054926aaa1d394e9f3493c96e4f120d70ce62bb160810496322a98c063179dfc8887d1baaf7ca8c02b1a8c5eae785c6c2d2349fc515dd9769a933e3cb1f903567b2d5ad90c2c1ae103e16602029a7c74d47a5b3b484d22eca2225cc1283bf585185ae1af5341a677c42700ea3a8e0ab9a59d3d1d4e5cdb1f478b7e4b6d0a3e6ad", 0xd2}, {&(0x7f0000000dc0)="4e7c17b4f8e0bb45306334d538ccba6da1601b6515fc8e07e7a0e1e342c09a0351f416b53ab04cf2d3b4c4bc4c8b5e3a7ee7e0842391315beb7261385136de", 0x3f}], 0x7, &(0x7f0000000e80)=[@iv={0xa8, 0x117, 0x2, 0x8e, "dda597a790249a3772584130cb95759e3c384121d091a2ce5a9cdf31b9556f79bc5e7b6655299011807fb2af47b1a90b78850bc4020321298990ff4bbafa4dbe42f833d1717aa51b8491f89b792c8af5f8d39efec218dd82e6326aa4e7ba43d85a80d3231dc50369310cfeaea1ea19d9eba077c3e91aca6754688ed46b492e01d3a85e88845c185156c6b38c3f1c"}], 0xa8, 0x4044000}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f40)="217a2619afaa17d5bd", 0x9}, {&(0x7f0000000f80)="205f425a6ae00a35997b61ca76ba1efc7bd55028fa7e3d05e2", 0x19}, {&(0x7f0000000fc0)="bb10665f475215e9a4d5c6b89aa671db38c1ca738761a5", 0x17}, {&(0x7f0000001000)="a8b82e0980998ad6cdfd4d49d6b2e7066f8fcbd29cc0d56f1743d09b96cc9a7ebc7e6523b817ba13c17ed700097f511c0ad88b0ae4fae608845f91223a44a2b7fac131910a1e7e6a159d", 0x4a}, {&(0x7f0000001080)="5a3105bd5d5436f2601b8096252cd94ac9f77cb5f8ac18252e46df96002af337f95f0305ba318c2368d9e719e43b9dd6e8a1ccf16c61ad94557ee54dd205758d398da6e691577d3c2463c7abf66751d0eb8932ed476ed1d18d67242218d09bee1d069db7550c633bd5a8a442fa6d6de3c070d0c58dbcfdf4f788089b94dbc9fb281f298a707cd253a3dcee2308e2a8dd5d0462ab96384b2326b45d40e5be4d0aefed105bd56e8b45f2e3daa09bc6fa28c37a679674c9d8bdd2fc616992c1ce075979bf1cd782502e4dac0e95254ed3f7f0a81b21d60b0d43aa", 0xd9}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="34effaf9883a99f4ab70bc04b8c9156ed7d832065a844ef9cccf1f2ba72c2fe69f1b4de78ef96545a5542dd18c79c09341f9bb57c0b88dc5cf374ce8fae989fdf7bde0c172e710757926b2d00a6d0be836c2ad634d3ed12796ff0b769b4b11c0f972f0ec06b2408636e4e9cc9cb6f895632db2b5062c0b9a4e1abea046cf0aa27f60d913e41ac4418e1dd28af311bf472d6ae4a619ca03869bb58ec5e2f1ff6cb41b999da16b7ee79cc5f7bb82236d6b033c76b462a929cd5f4341fa480fdb5d82bbd71c066a9f587d213553cb339a7c64f7fc30260735b3324bf8ecd3b5", 0xde}, {&(0x7f0000002280)="98ba2964c583c1591e5fdf33371306f447d68ce0c5d1b65b4d571267267d52dc2cd33ac29e57f0f6933d2b18f25998cefc2bb3be539f9661267b833c3206fd124b25875c3fae37a5b6c86211a0f0611abbd9851343380b97b00e02facda32c19738bf0897f3448206d", 0x69}, {&(0x7f0000002300)="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", 0x1000}], 0x9, &(0x7f00000033c0)=[@assoc={0x18, 0x117, 0x4, 0x928}, @iv={0x38, 0x117, 0x2, 0x1d, "ef480f577987604921a71c7a94f97de032cd1083a9686f30b5e29ec710"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xf8, "8a4728c84ec6c357d471237609a898c4edba41e2d49f5d2235120119f20ab38304b9f316e8556da4ec1f600968022f0221efd2c8a7b1268ee4d9e64984073f4386095d3da050ffd30d1fd5793532acaa74d26b00c3fa958efd95db8b0054160f2528f50af9b395f75f612e6d4627aa911e0615982c9e7c6eabd162d65528cbeeeccdce5af5684bcb1c4e4521685becfcadef059cb1b808c65a1889a3c7fd34b69450ec9758a395557bacd593463491e127b1dab269f60a530e6cd2da9d4c63672ef7e5f226666d4c0d348ce10ba6a48bb6fc82fb5f9d15a47faf36dbc3ffcd604d2437661258494797460b9099b2650c6930c82ee792a88d"}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x98, 0x117, 0x2, 0x83, "b2d3853e2d84f8295a45cd7ba173e2cc8ba9e622e224f4379773800f593e6aca121b9bc6d797c4f9f50b214e120305d18b81bc6d32071d1a9ce41518c623521f935c41ce87f72149fe63409d0c4957d6366fcd03942fd2152a35a6b95fd118170ea7cf49068a317af195ecc189dceff185dfaacdbc2c8cb12ea5a648f9f4c082e4da93"}, @assoc={0x18, 0x117, 0x4, 0xd3}, @iv={0xd0, 0x117, 0x2, 0xb5, "134db0675a8ee3bf55c4d390d2d9052ea7f70fe23b43e31e8ca54bc0677740a358343f5735b0b3f28cfcbd3432c5c3aca7bcded9683ed8aead66726d26d0eea93911115958f0f7612e31a9e95a96a5025cff4575d39cfd57eb762ae7213b17fa0639a91c89aad5634f0f56c0ece246f1658a50a434cb979bc406be59d84407ed8c0e720ff6d0e81b4b5eb8a8a58c93f549ef970a5a710bf59032513f29f0043a1a512a020a6a08508a0b288648281197215a7e58eb"}, @iv={0x30, 0x117, 0x2, 0x15, "4e81b1131ac448e5d6a6fb88038df7b126bf31f35c"}], 0x340, 0x10}], 0x5, 0x4000) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="230000005e00817491bc655067d7aee4050c00000f00000018a30000000000008b1832", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/mixer\x00', 0x721800, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000038c0)=0x14, 0x0) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000003b00)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003900)=@newsa={0x19c, 0x10, 0x200, 0x70bd26, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, [], 0x20}, @in6=@mcast1, 0x4e23, 0x0, 0x4e22, 0x1, 0x2, 0x20, 0x80, 0x7e, r2, r3}, {@in6=@dev={0xfe, 0x80, [], 0x1f}, 0x4d6, 0xff}, @in=@local, {0x20, 0x7, 0x1, 0x3, 0x2, 0x6, 0x8, 0x7}, {0xfffffffffffffff9, 0xfffffffffffffd81, 0x400, 0x80000001}, {0x1ff, 0x1, 0x66d84d53}, 0x70bd2c, 0x3503, 0x2, 0x2, 0x0, 0x41}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xc}}, @sec_ctx={0x7c, 0x8, {0x75, 0x8, 0x1, 0x70, 0x6d, "15613bae5ca272ae41c1e1d10eeb7568e7279940446d5de6a774329c48893db3852b323241aea213c5d862f6cb8c4387c72c5d07d354069820acdf4ff25f13b0984191102d0c38cd5c7b5484aced391219fcd6f339b201c4ab99ffaad91db6784ed28cd1245e95d867b2396425"}}, @policy_type={0xc, 0x10, {0x1}}, @replay_thresh={0x8, 0xb, 0xffffffffffffff29}, @extra_flags={0x8, 0x18, 0x80000001}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40841) 20:37:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3f, 0x83fa) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x8, "e858a4f4d4037f486e8e8e20ac1e05719a21402914ba2ac74cb5f763f8070d9c"}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'vcan0\x00', 0x7fff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x71, 0x5, 0x8, 0x5, 0x9, 0x47ab, 0x6, 0xffffffffffffbb67, 0x4, 0xe6}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x5, 0x2, 0x5}) 20:37:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300), &(0x7f0000000080)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e") ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) 20:37:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x0, @pid}]}, 0x1c}}, 0x0) 20:37:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000380)={0x9, 0x0, 0x10003, 0x2}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/4096) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000003c0)={0xcb, r2, 0x10000, 0x1}) mount(&(0x7f0000001480)=ANY=[@ANYBLOB="6d80b7968e1dbbf81ccc9a075ae7ae5d9effe001a01493e5f5714c8e6367a802ff01000000000000a02602db4dd95db4d341d4e2fca018e1eec9d58029efabd4e163b942df7c5d2af793883ba3b209111a222000232b40046e90bfcc15acd2a3132a51f944be4297c2cb593f695c76ce054eee9b72ca6ebdcc0bd5ca984ab660302e646e68645e391665b5bb6cdabb9973d3e6532fd4f66eb781bd552fbfb183dea6466af8f529268f34f497053393df1db4ca5f107e3153430f38bb9a2f51b652df977dc2d82ab0bf7851f8b0e38065445673cefb4fb7fa720ca7fb96813adc2c2a0bae5fe9da9ff5edb1b8f9e2d4962e084a179497b8f74b66e303175f6c6a06c7294b69a47204d0d986c999c2e2a971c658380ed001d48e58d7b0a505b52140852617f5ce554c5d919c71463503c7c5617288acf539c6b4817b91c7fe3c46e38f557a9d90397addd9de0395827550ff8693c2c5e5c0aa7184336059be42168a3eb2a71d9298572950c9a89283d9fdb6c089e053d532917e19788a64d0647cef129f6113b6ebfad7de"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2000, 0x230802) r4 = semget(0x3, 0x3, 0x20) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000140)=""/197) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x80000001, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x7ff, r5, 0x1, 0xb17c}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}, 0x8000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000001400)=[{0x48, 0x111, 0x80000000, "b21cb439009ed646987c4463c06047b948ac99773bef955ed38cf5d6397deef06ca0f91b7c4e660e5b5eaf691e2b2466ee"}], 0x48}}], 0x2, 0x0) 20:37:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000), 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f0000000400), 0x2800000000000) 20:37:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x375, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000140)={0x0, 0x3}) 20:37:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0xd147) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r1, 0x8, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') close(r3) 20:37:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x0, @pid}]}, 0x1c}}, 0x0) 20:37:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000c80)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000200)="24000000010207041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 20:37:40 executing program 2: unshare(0x8000400) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x200000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/16, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r1, 0x4}, 0x8) r2 = socket$inet(0x2, 0x3, 0x2) geteuid() getsockopt(r2, 0x0, 0xcd, &(0x7f0000000180)=""/203, &(0x7f0000000040)=0xffffffffffffffab) [ 381.929840] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. 20:37:41 executing program 0: io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x80) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0xffffffff, r1, &(0x7f0000000140)="274e4dd2f97bb8b576787c35fc8669824fff1c694f9ef65c06d962f9bf0354cd1f872e8628fd1076ab730fce480b0a981f3ff6c4b28b7666ec46d7e3ea9bbfd8e23c4f67d64047fd761bf25887222e8c4ad997d08ccaaa3752f263350bd6377a88a5d9eaeb7ba49184e4ae5aa1b24882a37555c5af9c5382a53d77bafee7ab28b8b47857662fa53c27a76c0941afd4f6c1f68b4cd45ab35fca3b0ff78661f205a78f38df53f19b3f3165f673f06ddf6c84f764df8a237e3c42f5fd8d0e2a324521c3a3d7604455229b", 0xc9, 0x8, 0x0, 0x0, r2}, &(0x7f0000000640)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000240)={"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"}) 20:37:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) sendto$packet(r0, &(0x7f0000000140)="0738363c25c2f239c185ea66461c0e297e4ffc3c39893816e716eb5490c9be0d95fcac2f4d26f7733f35767556f2c45f5661b92cb105dfc64718d52905954f9855f8ba1881633e7827e6a5b87600191163d18039dfad49e7127d69f0689b602f010b9d3454b1e8eeeefbccd0b78c24413b59ce5f7a0aa5b4703ba442e213127d2c5b7b1832cd9b7590e393097086b16022a915a5e1645523c61eb5cc5800df41d089854b989b7298c57f18e57efed343ca34096f9dce074f90be61d5c3663a2e59f8c78747ce9bd0b17ffa6a82cbe0f5620e9636365adfb7f5ed01c6407ecb1e5f51ae9a233f01a890", 0xe9, 0x40, &(0x7f00000000c0)={0x11, 0x4, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x100, 0x4) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x6, @dev}, 0x1c) 20:37:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc), 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) readv(r1, &(0x7f0000000380), 0x1000000000000049) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) 20:37:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x58000) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:37:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc), 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:37:41 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 382.574434] input: syz1 as /devices/virtual/input/input10 20:37:41 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) rt_sigreturn() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r0, &(0x7f0000c40ff8)=ANY=[@ANYBLOB="a34c13f99ca5b0c8"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) [ 382.682770] input: syz1 as /devices/virtual/input/input11 [ 382.754307] FAULT_INJECTION: forcing a failure. [ 382.754307] name failslab, interval 1, probability 0, space 0, times 1 [ 382.766043] CPU: 0 PID: 9388 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #85 [ 382.773315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.775658] Call Trace: [ 382.775658] dump_stack+0x32d/0x480 [ 382.775658] should_fail+0x11e5/0x13c0 [ 382.775658] __should_failslab+0x278/0x2a0 [ 382.775658] should_failslab+0x29/0x70 [ 382.775658] kmem_cache_alloc_node+0x164/0xec0 [ 382.775658] ? __alloc_skb+0x32e/0xeb0 [ 382.775658] __alloc_skb+0x32e/0xeb0 [ 382.775658] ? __msan_get_context_state+0x9/0x20 [ 382.775658] netlink_sendmsg+0xc9e/0x1440 [ 382.775658] ___sys_sendmsg+0xe3b/0x1240 [ 382.775658] ? netlink_getsockopt+0x1910/0x1910 [ 382.775658] ? __fdget+0x329/0x440 [ 382.834312] __se_sys_sendmsg+0x305/0x460 [ 382.834312] __x64_sys_sendmsg+0x4a/0x70 [ 382.842550] do_syscall_64+0xcf/0x110 [ 382.842550] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 382.842550] RIP: 0033:0x457569 [ 382.842550] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.862560] PANIC: double fault, error_code: 0x0 [ 382.842550] RSP: 002b:00007f75a0c76c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.871937] CPU: 1 PID: 9394 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 382.842550] RAX: ffffffffffffffda RBX: 00007f75a0c76c90 RCX: 0000000000457569 [ 382.871937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.871937] RIP: 0010:kmsan_get_origin_address+0x212/0x360 [ 382.842550] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 382.871937] Code: 2d 01 00 00 e9 fe 00 00 00 65 44 8b 34 25 20 a1 02 00 48 b8 00 00 00 00 00 02 00 00 48 01 d8 48 3d ff 0f e8 00 77 38 44 89 f7 19 30 4a ff 48 89 d9 48 29 c1 85 c9 78 26 48 63 c1 48 3d ff 9f [ 382.842550] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.871937] RSP: 0018:fffffe000003c000 EFLAGS: 00010093 [ 382.842550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75a0c776d4 [ 382.871937] RAX: 000000000003c150 RBX: fffffe000003c150 RCX: 000000000000002e [ 382.842550] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000004 [ 382.871937] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000001 [ 382.976560] ================================================================== [ 382.976560] BUG: KMSAN: uninit-value in do_raw_spin_lock+0x16a/0x410 [ 382.976560] CPU: 1 PID: 9394 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 382.976560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.976560] Call Trace: [ 382.976560] <#DF> [ 382.976560] dump_stack+0x32d/0x480 [ 382.976560] ? do_raw_spin_lock+0x16a/0x410 [ 382.976560] kmsan_report+0x19f/0x300 [ 382.976560] kmsan_internal_check_memory+0x35b/0x3b0 [ 382.976560] ? __msan_poison_alloca+0x1e0/0x270 [ 382.976560] kmsan_check_memory+0xd/0x10 [ 382.976560] do_raw_spin_lock+0x16a/0x410 [ 382.976560] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 382.976560] _raw_spin_lock+0x27/0x30 [ 382.976560] vprintk_emit+0x1d9/0x8a0 [ 382.976560] vprintk_default+0x90/0xa0 [ 382.976560] vprintk_func+0x26b/0x2a0 [ 382.976560] printk+0x1a3/0x1f0 [ 382.976560] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 382.976560] __show_regs+0x525/0x1350 [ 382.976560] show_regs+0xaf/0x170 [ 382.976560] df_debug+0x86/0xb0 [ 382.976560] do_double_fault+0x362/0x480 [ 382.976560] double_fault+0x1e/0x30 [ 382.976560] RIP: 0010:kmsan_get_origin_address+0x212/0x360 [ 382.976560] Code: 2d 01 00 00 e9 fe 00 00 00 65 44 8b 34 25 20 a1 02 00 48 b8 00 00 00 00 00 02 00 00 48 01 d8 48 3d ff 0f e8 00 77 38 44 89 f7 19 30 4a ff 48 89 d9 48 29 c1 85 c9 78 26 48 63 c1 48 3d ff 9f [ 382.976560] RSP: 0018:fffffe000003c000 EFLAGS: 00010093 [ 382.976560] RAX: 000000000003c150 RBX: fffffe000003c150 RCX: 000000000000002e [ 382.976560] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000001 [ 382.976560] RBP: fffffe000003c038 R08: 0000000000000000 R09: 0000000000000000 [ 382.976560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000778000000000 [ 382.976560] R13: 0000000000000000 R14: 0000000000000001 R15: fffffe008003c150 [ 382.976560] [ 382.976560] [ 382.976560] kmsan_memmove_origins+0xbd/0x1c0 [ 382.976560] ? kmsan_memmove_shadow+0xad/0xd0 [ 382.976560] __msan_memmove+0x6c/0x80 [ 382.976560] fixup_bad_iret+0x63/0xc0 [ 382.976560] error_entry+0xad/0xc0 [ 382.976560] RIP: 0000: (null) [ 382.976560] Code: Bad RIP value. [ 382.976560] RSP: a3fb7f:00007f39d65659c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 382.976560] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 000000000040393c [ 382.976560] RDX: cb02275b18555200 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.976560] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 382.976560] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 382.976560] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 382.976560] ? general_protection+0x8/0x30 [ 382.976560] ? general_protection+0x8/0x30 [ 382.976560] [ 382.976560] [ 382.976560] Local variable description: ----new.addr.i.i@do_raw_spin_lock [ 382.976560] Variable was created at: [ 382.976560] do_raw_spin_lock+0x8c/0x410 [ 382.976560] _raw_spin_lock+0x27/0x30 [ 382.976560] [ 382.976560] Bytes 0-3 of 4 are uninitialized [ 382.976560] Memory access of size 4 starts at fffffe0000043aac [ 382.976560] ================================================================== [ 382.976560] Disabling lock debugging due to kernel taint [ 382.976560] Kernel panic - not syncing: panic_on_warn set ... [ 382.976560] CPU: 1 PID: 9394 Comm: syz-executor3 Tainted: G B 4.20.0-rc2+ #85 [ 382.976560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.976560] Call Trace: [ 382.976560] <#DF> [ 382.976560] dump_stack+0x32d/0x480 [ 382.976560] panic+0x624/0xc08 [ 382.976560] kmsan_report+0x300/0x300 [ 382.976560] kmsan_internal_check_memory+0x35b/0x3b0 [ 382.976560] ? __msan_poison_alloca+0x1e0/0x270 [ 382.976560] kmsan_check_memory+0xd/0x10 [ 382.976560] do_raw_spin_lock+0x16a/0x410 [ 382.976560] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 382.976560] _raw_spin_lock+0x27/0x30 [ 382.976560] vprintk_emit+0x1d9/0x8a0 [ 382.976560] vprintk_default+0x90/0xa0 [ 382.976560] vprintk_func+0x26b/0x2a0 [ 382.976560] printk+0x1a3/0x1f0 [ 382.976560] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 382.976560] __show_regs+0x525/0x1350 [ 382.976560] show_regs+0xaf/0x170 [ 382.976560] df_debug+0x86/0xb0 [ 382.976560] do_double_fault+0x362/0x480 [ 382.976560] double_fault+0x1e/0x30 [ 382.976560] RIP: 0010:kmsan_get_origin_address+0x212/0x360 [ 382.976560] Code: 2d 01 00 00 e9 fe 00 00 00 65 44 8b 34 25 20 a1 02 00 48 b8 00 00 00 00 00 02 00 00 48 01 d8 48 3d ff 0f e8 00 77 38 44 89 f7 19 30 4a ff 48 89 d9 48 29 c1 85 c9 78 26 48 63 c1 48 3d ff 9f [ 382.976560] RSP: 0018:fffffe000003c000 EFLAGS: 00010093 [ 382.976560] RAX: 000000000003c150 RBX: fffffe000003c150 RCX: 000000000000002e [ 382.976560] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000001 [ 382.976560] RBP: fffffe000003c038 R08: 0000000000000000 R09: 0000000000000000 [ 382.976560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000778000000000 [ 382.976560] R13: 0000000000000000 R14: 0000000000000001 R15: fffffe008003c150 [ 382.976560] [ 382.976560] [ 382.976560] kmsan_memmove_origins+0xbd/0x1c0 [ 382.976560] ? kmsan_memmove_shadow+0xad/0xd0 [ 382.976560] __msan_memmove+0x6c/0x80 [ 382.976560] fixup_bad_iret+0x63/0xc0 [ 382.976560] error_entry+0xad/0xc0 [ 382.976560] RIP: 0000: (null) [ 382.976560] Code: Bad RIP value. [ 382.976560] RSP: a3fb7f:00007f39d65659c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 382.976560] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 000000000040393c [ 382.976560] RDX: cb02275b18555200 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.976560] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 382.976560] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 382.976560] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 382.976560] ? general_protection+0x8/0x30 [ 382.976560] ? general_protection+0x8/0x30 [ 382.976560] [ 382.976560] Kernel Offset: disabled