x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netstat\x00') ppoll(&(0x7f0000000000)=[{r0, 0xa042}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) 04:49:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpgid(0x0) getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000840), 0x0, 0x4000}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000040000000000000000000000006a"]) 04:49:57 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:57 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netstat\x00') ppoll(&(0x7f0000000000)=[{r0, 0xa042}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) 04:49:57 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpgid(0x0) getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000840), 0x0, 0x4000}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000040000000000000000000000006a"]) 04:49:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netstat\x00') ppoll(&(0x7f0000000000)=[{r0, 0xa042}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) 04:49:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpgid(0x0) getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000840), 0x0, 0x4000}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000040000000000000000000000006a"]) 04:49:58 executing program 0: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 04:49:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:49:59 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:59 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:49:59 executing program 0: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 04:49:59 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:59 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) r1 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000680)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40040, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000003c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ptrace$getenv(0x4201, r0, 0xea, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x20, 0x4bd8c4ede5a9a378, @tid=r0}, &(0x7f0000000580)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000300)={0xa, 0x1, 0x8, 0xd6b}, 0xa) fcntl$setflags(r5, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1c", &(0x7f0000000280)="457ddedb67de551cfcd65a6dee10e02f6c9bbdc346333753883bf4c2c88b26acd1559b6dc5a66ec3140bd75840e062128e702ae76a0a131d7d420d46d42aa8d67bb03ac45eec646b5f2395079d5a0af89c06f5a80ec738cc95fa3d1deec3707bcd8b6a9192650e0d4e8e155c9cc50246221d2bec2a2824dc7efb23b3"}}, &(0x7f0000000180)) 04:49:59 executing program 0: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 04:49:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:50:00 executing program 0: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 04:50:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:50:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:50:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 04:50:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000380)={0x1200, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x0, 0x401, 0x800}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 04:50:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:50:01 executing program 5: socket$inet6(0xa, 0x80003, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)=""/189) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xfffffffffffffedf, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@ax25, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/204, 0xcc}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000fc0)=0xfec7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000005240)={&(0x7f0000004f00), 0xc, &(0x7f0000005200)={&(0x7f0000000dc0)=ANY=[]}}, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000540)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@dev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000000c80)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) sendto(r1, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x0, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000d80)={0x2, 0x0, @remote}, 0xdb) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r1, &(0x7f0000006800)=[{{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/92, 0x5c}, {&(0x7f0000006440)=""/133, 0x85}], 0x3}}], 0x1, 0x0, &(0x7f0000000480)={0x77359400}) 04:50:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r2, 0x0) 04:50:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 04:50:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) dup2(r0, r1) 04:50:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x29, 0x39, 0x0, 0x300) 04:50:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000380)={0x1200, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x0, 0x401, 0x800}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 04:50:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 04:50:03 executing program 5: socket$inet6(0xa, 0x80003, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)=""/189) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xfffffffffffffedf, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@ax25, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/204, 0xcc}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000fc0)=0xfec7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000005240)={&(0x7f0000004f00), 0xc, &(0x7f0000005200)={&(0x7f0000000dc0)=ANY=[]}}, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000540)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@dev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000000c80)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) sendto(r1, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x0, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000d80)={0x2, 0x0, @remote}, 0xdb) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r1, &(0x7f0000006800)=[{{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/92, 0x5c}, {&(0x7f0000006440)=""/133, 0x85}], 0x3}}], 0x1, 0x0, &(0x7f0000000480)={0x77359400}) 04:50:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) 04:50:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, '/dev/vcs\x00'}}, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0xe44a68ffba56d18f, 0x0) 04:50:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x29, 0x39, 0x0, 0x300) [ 781.312950] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 781.343808] IPVS: stopping backup sync thread 27178 ... [ 781.384713] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 781.396902] IPVS: stopping backup sync thread 27184 ... 04:50:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x29, 0x39, 0x0, 0x300) 04:50:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 04:50:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, '/dev/vcs\x00'}}, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0xe44a68ffba56d18f, 0x0) 04:50:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) 04:50:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) 04:50:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x29, 0x39, 0x0, 0x300) [ 782.030250] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 782.067999] IPVS: stopping backup sync thread 27200 ... [ 782.278807] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 782.313996] IPVS: stopping backup sync thread 27209 ... 04:50:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000380)={0x1200, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x0, 0x401, 0x800}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 04:50:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, '/dev/vcs\x00'}}, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0xe44a68ffba56d18f, 0x0) 04:50:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) 04:50:04 executing program 5: socket$inet6(0xa, 0x80003, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)=""/189) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xfffffffffffffedf, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@ax25, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/204, 0xcc}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000fc0)=0xfec7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000005240)={&(0x7f0000004f00), 0xc, &(0x7f0000005200)={&(0x7f0000000dc0)=ANY=[]}}, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000540)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@dev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000000c80)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) sendto(r1, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x0, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000d80)={0x2, 0x0, @remote}, 0xdb) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r1, &(0x7f0000006800)=[{{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/92, 0x5c}, {&(0x7f0000006440)=""/133, 0x85}], 0x3}}], 0x1, 0x0, &(0x7f0000000480)={0x77359400}) 04:50:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) [ 782.572296] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 782.648223] IPVS: stopping backup sync thread 27219 ... 04:50:04 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 04:50:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, '/dev/vcs\x00'}}, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0xe44a68ffba56d18f, 0x0) 04:50:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) [ 782.969515] IPVS: stopping backup sync thread 27228 ... [ 783.207995] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 783.288659] IPVS: stopping backup sync thread 27240 ... 04:50:05 executing program 5: socket$inet6(0xa, 0x80003, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)=""/189) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xfffffffffffffedf, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@ax25, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/204, 0xcc}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000fc0)=0xfec7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000005240)={&(0x7f0000004f00), 0xc, &(0x7f0000005200)={&(0x7f0000000dc0)=ANY=[]}}, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000540)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@dev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000000c80)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) sendto(r1, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x0, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000d80)={0x2, 0x0, @remote}, 0xdb) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r1, &(0x7f0000006800)=[{{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/92, 0x5c}, {&(0x7f0000006440)=""/133, 0x85}], 0x3}}], 0x1, 0x0, &(0x7f0000000480)={0x77359400}) 04:50:05 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 04:50:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, "697025746e6c3000000000038c0400"}, 0x18) 04:50:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000480)="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", 0x1b4) [ 783.836816] netlink: 224 bytes leftover after parsing attributes in process `syz-executor1'. [ 783.850109] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 783.883443] IPVS: stopping backup sync thread 27256 ... 04:50:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000380)={0x1200, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x0, 0x401, 0x800}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 04:50:06 executing program 3: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:06 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 04:50:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000480)="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", 0x1b4) [ 784.166883] netlink: 224 bytes leftover after parsing attributes in process `syz-executor1'. 04:50:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:06 executing program 3: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000480)="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", 0x1b4) 04:50:06 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 04:50:06 executing program 5: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) [ 784.723417] netlink: 224 bytes leftover after parsing attributes in process `syz-executor1'. 04:50:06 executing program 2: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000480)="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", 0x1b4) 04:50:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:07 executing program 3: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) [ 785.328927] netlink: 224 bytes leftover after parsing attributes in process `syz-executor1'. 04:50:07 executing program 2: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:07 executing program 5: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:08 executing program 3: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:08 executing program 5: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 04:50:08 executing program 2: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:50:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:08 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@proc, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c0d00800000005000000650000000008"], 0x1}], 0x1, &(0x7f0000000240)}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x0) 04:50:08 executing program 2: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:08 executing program 3: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) 04:50:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:08 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@proc, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c0d00800000005000000650000000008"], 0x1}], 0x1, &(0x7f0000000240)}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x0) 04:50:09 executing program 3: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) 04:50:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:09 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:09 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x400000000000) 04:50:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@proc, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c0d00800000005000000650000000008"], 0x1}], 0x1, &(0x7f0000000240)}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x0) 04:50:10 executing program 3: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) 04:50:10 executing program 2: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:10 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@proc, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000b5c0d00800000005000000650000000008"], 0x1}], 0x1, &(0x7f0000000240)}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x0) 04:50:10 executing program 3: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) 04:50:10 executing program 1: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:11 executing program 3: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:11 executing program 2: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:11 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:11 executing program 1: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:12 executing program 2: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:12 executing program 1: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:12 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:13 executing program 3: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="2bda54090000005c07"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x128, 0x29, 0x1, {0x1, [{{0x10, 0x3, 0x4}, 0x5, 0x3f, 0xd, './file0/file0'}, {{0x2, 0x1, 0x6}, 0x2, 0x9, 0x7, './file1'}, {{0x86, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x80000000, 0x100000001, 0x7, './file0'}, {{0x9, 0x3}, 0x88, 0x101, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x5c99, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1eb, 0x200, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x6, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x4, 0x80000001, 0x7, './file0'}]}}, 0x128) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10001, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$eventfd(r6, &(0x7f0000000280)=0x7ff, 0x8) shutdown(r4, 0x1) setuid(r2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback={0xffffffffa0008000}}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x0) 04:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:13 executing program 4: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) 04:50:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:50:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0xb}) [ 792.132055] input: syz1 as /devices/virtual/input/input34 04:50:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x181, 0x307) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 04:50:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:14 executing program 5: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000001100000067000000bbde"], 0x12}, 0xfe80) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0), 0x1c) 04:50:14 executing program 4: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) [ 792.539030] not chained 200000 origins [ 792.543013] CPU: 1 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 792.550313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.559689] Call Trace: [ 792.562322] dump_stack+0x32d/0x480 [ 792.566013] kmsan_internal_chain_origin+0x222/0x240 [ 792.571184] ? _raw_spin_lock_irqsave+0x320/0x490 [ 792.576097] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 792.581507] ? __module_address+0x6a/0x5f0 [ 792.585784] ? is_bpf_text_address+0x3e5/0x4d0 [ 792.590409] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 792.595808] ? is_bpf_text_address+0x49e/0x4d0 [ 792.600425] ? kmsan_internal_chain_origin+0x90/0x240 [ 792.605675] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 792.611076] ? is_bpf_text_address+0x49e/0x4d0 [ 792.615725] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 792.621213] ? in_task_stack+0x12c/0x210 [ 792.625355] __msan_chain_origin+0x6d/0xb0 [ 792.629661] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 792.635068] __save_stack_trace+0x8be/0xc60 [ 792.639467] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 792.644879] save_stack_trace+0xc6/0x110 [ 792.649001] kmsan_internal_chain_origin+0x136/0x240 [ 792.654149] ? inet_sendmsg+0x4e9/0x800 [ 792.658173] ? kmsan_internal_chain_origin+0x136/0x240 [ 792.663485] ? kmsan_memcpy_origins+0x13d/0x190 [ 792.668191] ? __msan_memcpy+0x6f/0x80 [ 792.672123] ? pskb_expand_head+0x436/0x1d20 [ 792.676557] ? gre_tap_xmit+0x4e3/0x910 [ 792.680555] ? dev_hard_start_xmit+0x6dc/0xde0 [ 792.685180] ? sch_direct_xmit+0x59b/0x890 [ 792.689451] ? __qdisc_run+0x1bac/0x3600 [ 792.693546] ? __dev_queue_xmit+0x2131/0x3e00 [ 792.698065] ? dev_queue_xmit+0x4b/0x60 [ 792.702109] ? ip_finish_output2+0x136d/0x1560 [ 792.706719] ? ip_finish_output+0xd93/0x10f0 [ 792.711152] ? ip_mc_output+0xf25/0x10f0 [ 792.715254] ? ip_send_skb+0x178/0x370 [ 792.719179] ? udp_send_skb+0x1439/0x1920 [ 792.723356] ? udp_sendmsg+0x399a/0x4350 [ 792.727451] ? udpv6_sendmsg+0x123e/0x4960 [ 792.731715] ? inet_sendmsg+0x4e9/0x800 [ 792.735720] ? ___sys_sendmsg+0xe3b/0x1240 04:50:14 executing program 4: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000300)) [ 792.739984] ? __sys_sendmmsg+0x56b/0xa90 [ 792.744176] ? __se_sys_sendmmsg+0xbd/0xe0 [ 792.748458] ? __x64_sys_sendmmsg+0x56/0x70 [ 792.752815] ? do_syscall_64+0xcf/0x110 [ 792.756840] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 792.762265] ? memcg_kmem_put_cache+0x73/0x460 [ 792.766913] ? __msan_get_context_state+0x9/0x20 [ 792.771709] ? INIT_INT+0xc/0x30 [ 792.775111] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 792.780531] kmsan_memcpy_origins+0x13d/0x190 [ 792.785082] __msan_memcpy+0x6f/0x80 [ 792.788863] pskb_expand_head+0x436/0x1d20 [ 792.793166] gre_tap_xmit+0x4e3/0x910 [ 792.797024] ? gre_tap_init+0x650/0x650 [ 792.801042] dev_hard_start_xmit+0x6dc/0xde0 [ 792.805526] sch_direct_xmit+0x59b/0x890 [ 792.809654] __qdisc_run+0x1bac/0x3600 [ 792.813612] ? INIT_BOOL+0xc/0x30 [ 792.817108] ? do_raw_spin_trylock+0x378/0x4d0 [ 792.821747] __dev_queue_xmit+0x2131/0x3e00 [ 792.826147] dev_queue_xmit+0x4b/0x60 [ 792.830514] ip_finish_output2+0x136d/0x1560 [ 792.834995] ip_finish_output+0xd93/0x10f0 [ 792.839300] ip_mc_output+0xf25/0x10f0 [ 792.843261] ? ip_mc_finish_output+0x440/0x440 [ 792.847877] ? ip_build_and_send_pkt+0xe60/0xe60 [ 792.852664] ip_send_skb+0x178/0x370 [ 792.856442] udp_send_skb+0x1439/0x1920 [ 792.860488] udp_sendmsg+0x399a/0x4350 [ 792.864414] ? ip_copy_metadata+0x1710/0x1710 [ 792.869029] ? kmsan_set_origin+0x7f/0x100 [ 792.873317] udpv6_sendmsg+0x123e/0x4960 [ 792.877413] ? aa_label_sk_perm+0xda/0x960 [ 792.881677] ? aa_sk_perm+0x6db/0x9e0 [ 792.885569] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 792.890953] ? aa_sk_perm+0x7ab/0x9e0 [ 792.894805] ? inet_sendmsg+0x84/0x800 [ 792.898722] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 792.903068] inet_sendmsg+0x4e9/0x800 [ 792.906897] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 792.912289] ? security_socket_sendmsg+0x1bd/0x200 [ 792.917260] ___sys_sendmsg+0xe3b/0x1240 [ 792.921353] ? inet_getname+0x490/0x490 [ 792.925390] ? __msan_poison_alloca+0x1e0/0x270 [ 792.930084] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 792.935488] ? rcu_all_qs+0x3b/0x2b0 [ 792.939223] ? _cond_resched+0x59/0x120 [ 792.943249] ? rcu_all_qs+0x53/0x2b0 [ 792.946985] ? _cond_resched+0x37/0x120 [ 792.950983] ? __sys_sendmmsg+0x7c9/0xa90 [ 792.955169] ? _cond_resched+0x59/0x120 [ 792.959169] __sys_sendmmsg+0x56b/0xa90 [ 792.963213] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 792.968693] ? prepare_exit_to_usermode+0x182/0x4c0 [ 792.973747] __se_sys_sendmmsg+0xbd/0xe0 [ 792.977853] __x64_sys_sendmmsg+0x56/0x70 [ 792.982032] do_syscall_64+0xcf/0x110 [ 792.985858] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 792.991070] RIP: 0033:0x457569 [ 792.994289] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.013211] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 793.020956] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 793.028261] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 793.035553] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 793.042855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 793.050145] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 793.057452] Uninit was stored to memory at: [ 793.061803] kmsan_internal_chain_origin+0x136/0x240 [ 793.066927] __msan_chain_origin+0x6d/0xb0 [ 793.071190] __save_stack_trace+0x8be/0xc60 [ 793.075535] save_stack_trace+0xc6/0x110 [ 793.079615] kmsan_internal_chain_origin+0x136/0x240 [ 793.084741] kmsan_memcpy_origins+0x13d/0x190 [ 793.089258] __msan_memcpy+0x6f/0x80 [ 793.092999] pskb_expand_head+0x436/0x1d20 [ 793.097256] gre_tap_xmit+0x4e3/0x910 [ 793.101077] dev_hard_start_xmit+0x6dc/0xde0 [ 793.105502] sch_direct_xmit+0x59b/0x890 [ 793.109579] __qdisc_run+0x1bac/0x3600 [ 793.113486] __dev_queue_xmit+0x2131/0x3e00 [ 793.117826] dev_queue_xmit+0x4b/0x60 [ 793.121640] ip_finish_output2+0x136d/0x1560 [ 793.126071] ip_finish_output+0xd93/0x10f0 [ 793.130322] ip_mc_output+0xf25/0x10f0 [ 793.134222] ip_send_skb+0x178/0x370 [ 793.137967] udp_send_skb+0x1439/0x1920 [ 793.141963] udp_sendmsg+0x399a/0x4350 [ 793.145875] udpv6_sendmsg+0x123e/0x4960 [ 793.149982] inet_sendmsg+0x4e9/0x800 [ 793.153821] ___sys_sendmsg+0xe3b/0x1240 [ 793.157898] __sys_sendmmsg+0x56b/0xa90 [ 793.161889] __se_sys_sendmmsg+0xbd/0xe0 [ 793.165966] __x64_sys_sendmmsg+0x56/0x70 [ 793.170139] do_syscall_64+0xcf/0x110 [ 793.173962] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.179158] [ 793.180790] Uninit was stored to memory at: [ 793.185136] kmsan_internal_chain_origin+0x136/0x240 [ 793.190267] __msan_chain_origin+0x6d/0xb0 [ 793.194522] __save_stack_trace+0x8be/0xc60 [ 793.198862] save_stack_trace+0xc6/0x110 [ 793.202953] kmsan_internal_chain_origin+0x136/0x240 [ 793.208097] kmsan_memcpy_origins+0x13d/0x190 [ 793.212610] __msan_memcpy+0x6f/0x80 [ 793.216348] pskb_expand_head+0x436/0x1d20 [ 793.220599] gre_tap_xmit+0x4e3/0x910 [ 793.224414] dev_hard_start_xmit+0x6dc/0xde0 [ 793.228837] sch_direct_xmit+0x59b/0x890 [ 793.232912] __qdisc_run+0x1bac/0x3600 [ 793.236813] __dev_queue_xmit+0x2131/0x3e00 [ 793.241180] dev_queue_xmit+0x4b/0x60 [ 793.245008] ip_finish_output2+0x136d/0x1560 [ 793.249431] ip_finish_output+0xd93/0x10f0 [ 793.253683] ip_mc_output+0xf25/0x10f0 [ 793.257584] ip_send_skb+0x178/0x370 [ 793.261315] udp_send_skb+0x1439/0x1920 [ 793.265308] udp_sendmsg+0x399a/0x4350 [ 793.269212] udpv6_sendmsg+0x123e/0x4960 [ 793.273303] inet_sendmsg+0x4e9/0x800 [ 793.277116] ___sys_sendmsg+0xe3b/0x1240 [ 793.281194] __sys_sendmmsg+0x56b/0xa90 [ 793.285188] __se_sys_sendmmsg+0xbd/0xe0 [ 793.289281] __x64_sys_sendmmsg+0x56/0x70 [ 793.293445] do_syscall_64+0xcf/0x110 [ 793.297271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.302469] [ 793.304119] Uninit was stored to memory at: [ 793.308460] kmsan_internal_chain_origin+0x136/0x240 [ 793.313585] __msan_chain_origin+0x6d/0xb0 [ 793.317839] __save_stack_trace+0x8be/0xc60 [ 793.322181] save_stack_trace+0xc6/0x110 [ 793.326265] kmsan_internal_chain_origin+0x136/0x240 [ 793.331388] kmsan_memcpy_origins+0x13d/0x190 [ 793.335905] __msan_memcpy+0x6f/0x80 [ 793.339641] pskb_expand_head+0x436/0x1d20 [ 793.343905] gre_tap_xmit+0x4e3/0x910 [ 793.347724] dev_hard_start_xmit+0x6dc/0xde0 [ 793.352151] sch_direct_xmit+0x59b/0x890 [ 793.356237] __qdisc_run+0x1bac/0x3600 [ 793.360153] __dev_queue_xmit+0x2131/0x3e00 [ 793.364487] dev_queue_xmit+0x4b/0x60 [ 793.368305] ip_finish_output2+0x136d/0x1560 [ 793.372727] ip_finish_output+0xd93/0x10f0 [ 793.376978] ip_mc_output+0xf25/0x10f0 [ 793.380889] ip_send_skb+0x178/0x370 [ 793.384620] udp_send_skb+0x1439/0x1920 [ 793.388608] udp_sendmsg+0x399a/0x4350 [ 793.392512] udpv6_sendmsg+0x123e/0x4960 [ 793.396594] inet_sendmsg+0x4e9/0x800 [ 793.400419] ___sys_sendmsg+0xe3b/0x1240 [ 793.404497] __sys_sendmmsg+0x56b/0xa90 [ 793.408484] __se_sys_sendmmsg+0xbd/0xe0 [ 793.412563] __x64_sys_sendmmsg+0x56/0x70 [ 793.416740] do_syscall_64+0xcf/0x110 [ 793.420570] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.425765] [ 793.427407] Uninit was stored to memory at: [ 793.431753] kmsan_internal_chain_origin+0x136/0x240 [ 793.436888] __msan_chain_origin+0x6d/0xb0 [ 793.441140] __save_stack_trace+0x8be/0xc60 [ 793.445477] save_stack_trace+0xc6/0x110 [ 793.449562] kmsan_internal_chain_origin+0x136/0x240 [ 793.454684] kmsan_memcpy_origins+0x13d/0x190 [ 793.459197] __msan_memcpy+0x6f/0x80 [ 793.462941] pskb_expand_head+0x436/0x1d20 [ 793.467189] gre_tap_xmit+0x4e3/0x910 [ 793.471015] dev_hard_start_xmit+0x6dc/0xde0 [ 793.475445] sch_direct_xmit+0x59b/0x890 [ 793.479525] __qdisc_run+0x1bac/0x3600 [ 793.483437] __dev_queue_xmit+0x2131/0x3e00 [ 793.487776] dev_queue_xmit+0x4b/0x60 [ 793.491599] ip_finish_output2+0x136d/0x1560 [ 793.496025] ip_finish_output+0xd93/0x10f0 [ 793.500302] ip_mc_output+0xf25/0x10f0 [ 793.504205] ip_send_skb+0x178/0x370 [ 793.508002] udp_send_skb+0x1439/0x1920 [ 793.512022] udp_sendmsg+0x399a/0x4350 [ 793.515927] udpv6_sendmsg+0x123e/0x4960 [ 793.520009] inet_sendmsg+0x4e9/0x800 [ 793.523835] ___sys_sendmsg+0xe3b/0x1240 [ 793.527913] __sys_sendmmsg+0x56b/0xa90 [ 793.531900] __se_sys_sendmmsg+0xbd/0xe0 [ 793.535982] __x64_sys_sendmmsg+0x56/0x70 [ 793.540165] do_syscall_64+0xcf/0x110 [ 793.543994] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.549188] [ 793.550826] Uninit was stored to memory at: [ 793.555169] kmsan_internal_chain_origin+0x136/0x240 [ 793.560293] __msan_chain_origin+0x6d/0xb0 [ 793.564549] __save_stack_trace+0x8be/0xc60 [ 793.568885] save_stack_trace+0xc6/0x110 [ 793.572963] kmsan_internal_chain_origin+0x136/0x240 [ 793.578088] kmsan_memcpy_origins+0x13d/0x190 [ 793.582600] __msan_memcpy+0x6f/0x80 [ 793.586336] pskb_expand_head+0x436/0x1d20 [ 793.590590] gre_tap_xmit+0x4e3/0x910 [ 793.594421] dev_hard_start_xmit+0x6dc/0xde0 [ 793.598852] sch_direct_xmit+0x59b/0x890 [ 793.602929] __qdisc_run+0x1bac/0x3600 [ 793.606830] __dev_queue_xmit+0x2131/0x3e00 [ 793.611167] dev_queue_xmit+0x4b/0x60 [ 793.614987] ip_finish_output2+0x136d/0x1560 [ 793.619424] ip_finish_output+0xd93/0x10f0 [ 793.623677] ip_mc_output+0xf25/0x10f0 [ 793.627583] ip_send_skb+0x178/0x370 [ 793.631319] udp_send_skb+0x1439/0x1920 [ 793.635309] udp_sendmsg+0x399a/0x4350 [ 793.639222] udpv6_sendmsg+0x123e/0x4960 [ 793.643316] inet_sendmsg+0x4e9/0x800 [ 793.647134] ___sys_sendmsg+0xe3b/0x1240 [ 793.651207] __sys_sendmmsg+0x56b/0xa90 [ 793.655216] __se_sys_sendmmsg+0xbd/0xe0 [ 793.659301] __x64_sys_sendmmsg+0x56/0x70 [ 793.663465] do_syscall_64+0xcf/0x110 [ 793.667287] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.672482] [ 793.674115] Uninit was stored to memory at: [ 793.678461] kmsan_internal_chain_origin+0x136/0x240 [ 793.683584] __msan_chain_origin+0x6d/0xb0 [ 793.687839] __save_stack_trace+0x8be/0xc60 [ 793.692178] save_stack_trace+0xc6/0x110 [ 793.696519] kmsan_internal_chain_origin+0x136/0x240 [ 793.701655] kmsan_memcpy_origins+0x13d/0x190 [ 793.706172] __msan_memcpy+0x6f/0x80 [ 793.709907] pskb_expand_head+0x436/0x1d20 [ 793.714156] gre_tap_xmit+0x4e3/0x910 [ 793.717979] dev_hard_start_xmit+0x6dc/0xde0 [ 793.722408] sch_direct_xmit+0x59b/0x890 [ 793.726481] __qdisc_run+0x1bac/0x3600 [ 793.730391] __dev_queue_xmit+0x2131/0x3e00 [ 793.734728] dev_queue_xmit+0x4b/0x60 [ 793.738548] ip_finish_output2+0x136d/0x1560 [ 793.742976] ip_finish_output+0xd93/0x10f0 [ 793.747241] ip_mc_output+0xf25/0x10f0 [ 793.751145] ip_send_skb+0x178/0x370 [ 793.754878] udp_send_skb+0x1439/0x1920 [ 793.758865] udp_sendmsg+0x399a/0x4350 [ 793.762775] udpv6_sendmsg+0x123e/0x4960 [ 793.766852] inet_sendmsg+0x4e9/0x800 [ 793.770668] ___sys_sendmsg+0xe3b/0x1240 [ 793.774744] __sys_sendmmsg+0x56b/0xa90 [ 793.778732] __se_sys_sendmmsg+0xbd/0xe0 [ 793.782809] __x64_sys_sendmmsg+0x56/0x70 [ 793.786985] do_syscall_64+0xcf/0x110 [ 793.790817] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.796014] [ 793.797652] Uninit was stored to memory at: [ 793.802009] kmsan_internal_chain_origin+0x136/0x240 [ 793.807132] __msan_chain_origin+0x6d/0xb0 [ 793.811384] __save_stack_trace+0x8be/0xc60 [ 793.815726] save_stack_trace+0xc6/0x110 [ 793.819808] kmsan_internal_chain_origin+0x136/0x240 [ 793.824929] kmsan_memcpy_origins+0x13d/0x190 [ 793.829890] __msan_memcpy+0x6f/0x80 [ 793.833626] pskb_expand_head+0x436/0x1d20 [ 793.837902] gre_tap_xmit+0x4e3/0x910 [ 793.841721] dev_hard_start_xmit+0x6dc/0xde0 [ 793.846148] sch_direct_xmit+0x59b/0x890 [ 793.850236] __qdisc_run+0x1bac/0x3600 [ 793.854142] __dev_queue_xmit+0x2131/0x3e00 [ 793.858477] dev_queue_xmit+0x4b/0x60 [ 793.862297] ip_finish_output2+0x136d/0x1560 [ 793.866722] ip_finish_output+0xd93/0x10f0 [ 793.870970] ip_mc_output+0xf25/0x10f0 [ 793.874877] ip_send_skb+0x178/0x370 [ 793.878613] udp_send_skb+0x1439/0x1920 [ 793.882605] udp_sendmsg+0x399a/0x4350 [ 793.886508] udpv6_sendmsg+0x123e/0x4960 [ 793.890587] inet_sendmsg+0x4e9/0x800 04:50:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0xb}) [ 793.894403] ___sys_sendmsg+0xe3b/0x1240 [ 793.898487] __sys_sendmmsg+0x56b/0xa90 [ 793.902475] __se_sys_sendmmsg+0xbd/0xe0 [ 793.906559] __x64_sys_sendmmsg+0x56/0x70 [ 793.910722] do_syscall_64+0xcf/0x110 [ 793.914549] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.919739] [ 793.921378] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 793.927612] Variable was created at: [ 793.931343] kfree+0x12a/0x2fb0 [ 793.934643] skb_release_data+0xbcb/0xc90 04:50:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 794.118109] not chained 210000 origins [ 794.122082] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 794.129379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.138756] Call Trace: [ 794.141378] dump_stack+0x32d/0x480 [ 794.145057] kmsan_internal_chain_origin+0x222/0x240 [ 794.150214] ? _raw_spin_lock_irqsave+0x320/0x490 [ 794.155123] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 794.160525] ? __module_address+0x6a/0x5f0 [ 794.164791] ? apic_timer_interrupt+0xa/0x20 [ 794.169224] ? is_bpf_text_address+0x3e5/0x4d0 [ 794.173852] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 794.179264] ? is_bpf_text_address+0x49e/0x4d0 [ 794.183882] ? kmsan_internal_chain_origin+0x90/0x240 [ 794.189120] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 794.194521] ? is_bpf_text_address+0x49e/0x4d0 [ 794.199143] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 794.204631] ? in_task_stack+0x12c/0x210 [ 794.208742] __msan_chain_origin+0x6d/0xb0 [ 794.213011] ? udp_sendmsg+0x399a/0x4350 [ 794.217111] __save_stack_trace+0x8be/0xc60 [ 794.221505] ? udp_sendmsg+0x399a/0x4350 [ 794.225610] save_stack_trace+0xc6/0x110 [ 794.229719] kmsan_internal_chain_origin+0x136/0x240 [ 794.234855] ? inet_sendmsg+0x4e9/0x800 [ 794.238881] ? kmsan_internal_chain_origin+0x136/0x240 [ 794.244217] ? kmsan_memcpy_origins+0x13d/0x190 [ 794.248945] ? __msan_memcpy+0x6f/0x80 [ 794.252866] ? pskb_expand_head+0x436/0x1d20 [ 794.257299] ? gre_tap_xmit+0x4e3/0x910 [ 794.261303] ? dev_hard_start_xmit+0x6dc/0xde0 [ 794.265916] ? sch_direct_xmit+0x59b/0x890 [ 794.270179] ? __qdisc_run+0x1bac/0x3600 [ 794.274273] ? __dev_queue_xmit+0x2131/0x3e00 [ 794.278797] ? dev_queue_xmit+0x4b/0x60 [ 794.282806] ? ip_finish_output2+0x136d/0x1560 [ 794.287412] ? ip_finish_output+0xd93/0x10f0 [ 794.291849] ? ip_mc_output+0xf25/0x10f0 [ 794.295935] ? ip_send_skb+0x178/0x370 [ 794.299851] ? udp_send_skb+0x1439/0x1920 [ 794.304040] ? udp_sendmsg+0x399a/0x4350 [ 794.308155] ? udpv6_sendmsg+0x123e/0x4960 [ 794.312415] ? inet_sendmsg+0x4e9/0x800 [ 794.316431] ? ___sys_sendmsg+0xe3b/0x1240 [ 794.320696] ? __sys_sendmmsg+0x56b/0xa90 [ 794.324875] ? __se_sys_sendmmsg+0xbd/0xe0 [ 794.329139] ? __x64_sys_sendmmsg+0x56/0x70 [ 794.333484] ? do_syscall_64+0xcf/0x110 [ 794.337508] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.342898] ? memcg_kmem_put_cache+0x73/0x460 [ 794.347528] ? __msan_get_context_state+0x9/0x20 [ 794.352311] ? INIT_INT+0xc/0x30 [ 794.355699] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 794.361111] kmsan_memcpy_origins+0x13d/0x190 [ 794.365637] __msan_memcpy+0x6f/0x80 [ 794.369380] pskb_expand_head+0x436/0x1d20 [ 794.373668] gre_tap_xmit+0x4e3/0x910 [ 794.377512] ? gre_tap_init+0x650/0x650 [ 794.381519] dev_hard_start_xmit+0x6dc/0xde0 [ 794.385981] sch_direct_xmit+0x59b/0x890 [ 794.390090] __qdisc_run+0x1bac/0x3600 [ 794.394031] ? INIT_BOOL+0xc/0x30 [ 794.397526] ? do_raw_spin_trylock+0x378/0x4d0 [ 794.402151] __dev_queue_xmit+0x2131/0x3e00 [ 794.406542] dev_queue_xmit+0x4b/0x60 [ 794.410369] ip_finish_output2+0x136d/0x1560 [ 794.414827] ip_finish_output+0xd93/0x10f0 [ 794.419119] ip_mc_output+0xf25/0x10f0 [ 794.423047] ? ip_mc_finish_output+0x440/0x440 [ 794.427651] ? ip_build_and_send_pkt+0xe60/0xe60 [ 794.432427] ip_send_skb+0x178/0x370 [ 794.436197] udp_send_skb+0x1439/0x1920 [ 794.440241] udp_sendmsg+0x399a/0x4350 [ 794.444148] ? ip_copy_metadata+0x1710/0x1710 [ 794.448733] ? kmsan_set_origin+0x7f/0x100 [ 794.453014] udpv6_sendmsg+0x123e/0x4960 [ 794.457095] ? aa_label_sk_perm+0xda/0x960 [ 794.461349] ? aa_sk_perm+0x6db/0x9e0 [ 794.465240] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 794.470633] ? aa_sk_perm+0x7ab/0x9e0 [ 794.474483] ? inet_sendmsg+0x84/0x800 [ 794.478405] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 794.482754] inet_sendmsg+0x4e9/0x800 [ 794.486584] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 794.491978] ? security_socket_sendmsg+0x1bd/0x200 [ 794.496968] ___sys_sendmsg+0xe3b/0x1240 [ 794.501052] ? inet_getname+0x490/0x490 [ 794.505079] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 794.510469] ? kmsan_set_origin+0x7f/0x100 [ 794.514733] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 794.520134] ? _cond_resched+0xc7/0x120 [ 794.524142] __sys_sendmmsg+0x56b/0xa90 [ 794.528174] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 794.533651] ? prepare_exit_to_usermode+0x182/0x4c0 [ 794.538711] __se_sys_sendmmsg+0xbd/0xe0 [ 794.542802] __x64_sys_sendmmsg+0x56/0x70 [ 794.546970] do_syscall_64+0xcf/0x110 [ 794.550798] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.556008] RIP: 0033:0x457569 [ 794.559225] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.578161] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.585906] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 794.593190] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 794.600479] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 794.607771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 794.615052] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 794.622353] Uninit was stored to memory at: [ 794.626701] kmsan_internal_chain_origin+0x136/0x240 [ 794.631827] __msan_chain_origin+0x6d/0xb0 [ 794.636091] __save_stack_trace+0x8be/0xc60 [ 794.640429] save_stack_trace+0xc6/0x110 [ 794.644515] kmsan_internal_chain_origin+0x136/0x240 [ 794.649648] kmsan_memcpy_origins+0x13d/0x190 [ 794.654164] __msan_memcpy+0x6f/0x80 [ 794.657893] pskb_expand_head+0x436/0x1d20 [ 794.662150] gre_tap_xmit+0x4e3/0x910 [ 794.665965] dev_hard_start_xmit+0x6dc/0xde0 [ 794.670386] sch_direct_xmit+0x59b/0x890 [ 794.674463] __qdisc_run+0x1bac/0x3600 [ 794.678369] __dev_queue_xmit+0x2131/0x3e00 [ 794.682704] dev_queue_xmit+0x4b/0x60 [ 794.686526] ip_finish_output2+0x136d/0x1560 [ 794.690949] ip_finish_output+0xd93/0x10f0 [ 794.695202] ip_mc_output+0xf25/0x10f0 [ 794.699340] ip_send_skb+0x178/0x370 [ 794.703074] udp_send_skb+0x1439/0x1920 [ 794.707062] udp_sendmsg+0x399a/0x4350 [ 794.710966] udpv6_sendmsg+0x123e/0x4960 [ 794.715045] inet_sendmsg+0x4e9/0x800 [ 794.718860] ___sys_sendmsg+0xe3b/0x1240 [ 794.722934] __sys_sendmmsg+0x56b/0xa90 [ 794.726933] __se_sys_sendmmsg+0xbd/0xe0 [ 794.731009] __x64_sys_sendmmsg+0x56/0x70 [ 794.735188] do_syscall_64+0xcf/0x110 [ 794.739012] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.744204] [ 794.745843] Uninit was stored to memory at: [ 794.750181] kmsan_internal_chain_origin+0x136/0x240 [ 794.755306] __msan_chain_origin+0x6d/0xb0 [ 794.759558] __save_stack_trace+0x8be/0xc60 [ 794.763893] save_stack_trace+0xc6/0x110 [ 794.767973] kmsan_internal_chain_origin+0x136/0x240 [ 794.773109] kmsan_memcpy_origins+0x13d/0x190 [ 794.777622] __msan_memcpy+0x6f/0x80 [ 794.781356] pskb_expand_head+0x436/0x1d20 [ 794.785603] gre_tap_xmit+0x4e3/0x910 [ 794.789416] dev_hard_start_xmit+0x6dc/0xde0 [ 794.793851] sch_direct_xmit+0x59b/0x890 [ 794.797931] __qdisc_run+0x1bac/0x3600 [ 794.801834] __dev_queue_xmit+0x2131/0x3e00 [ 794.806170] dev_queue_xmit+0x4b/0x60 [ 794.809986] ip_finish_output2+0x136d/0x1560 [ 794.814412] ip_finish_output+0xd93/0x10f0 [ 794.818659] ip_mc_output+0xf25/0x10f0 [ 794.822567] ip_send_skb+0x178/0x370 [ 794.826301] udp_send_skb+0x1439/0x1920 [ 794.830293] udp_sendmsg+0x399a/0x4350 [ 794.834207] udpv6_sendmsg+0x123e/0x4960 [ 794.838296] inet_sendmsg+0x4e9/0x800 [ 794.842117] ___sys_sendmsg+0xe3b/0x1240 [ 794.846207] __sys_sendmmsg+0x56b/0xa90 [ 794.850205] __se_sys_sendmmsg+0xbd/0xe0 [ 794.854302] __x64_sys_sendmmsg+0x56/0x70 [ 794.858465] do_syscall_64+0xcf/0x110 [ 794.862292] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.867485] [ 794.869123] Uninit was stored to memory at: [ 794.873463] kmsan_internal_chain_origin+0x136/0x240 [ 794.878590] __msan_chain_origin+0x6d/0xb0 [ 794.882845] __save_stack_trace+0x8be/0xc60 [ 794.887179] save_stack_trace+0xc6/0x110 [ 794.891264] kmsan_internal_chain_origin+0x136/0x240 [ 794.896384] kmsan_memcpy_origins+0x13d/0x190 [ 794.900899] __msan_memcpy+0x6f/0x80 [ 794.904636] pskb_expand_head+0x436/0x1d20 [ 794.908925] gre_tap_xmit+0x4e3/0x910 [ 794.912779] dev_hard_start_xmit+0x6dc/0xde0 [ 794.917219] sch_direct_xmit+0x59b/0x890 [ 794.921324] __qdisc_run+0x1bac/0x3600 [ 794.925247] __dev_queue_xmit+0x2131/0x3e00 [ 794.929582] dev_queue_xmit+0x4b/0x60 [ 794.933401] ip_finish_output2+0x136d/0x1560 [ 794.937826] ip_finish_output+0xd93/0x10f0 [ 794.942075] ip_mc_output+0xf25/0x10f0 [ 794.945979] ip_send_skb+0x178/0x370 [ 794.949716] udp_send_skb+0x1439/0x1920 [ 794.953707] udp_sendmsg+0x399a/0x4350 [ 794.957631] udpv6_sendmsg+0x123e/0x4960 [ 794.961711] inet_sendmsg+0x4e9/0x800 [ 794.965534] ___sys_sendmsg+0xe3b/0x1240 [ 794.969608] __sys_sendmmsg+0x56b/0xa90 [ 794.973594] __se_sys_sendmmsg+0xbd/0xe0 [ 794.977668] __x64_sys_sendmmsg+0x56/0x70 [ 794.981830] do_syscall_64+0xcf/0x110 [ 794.985648] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.990837] [ 794.992472] Uninit was stored to memory at: [ 794.996833] kmsan_internal_chain_origin+0x136/0x240 [ 795.001951] __msan_chain_origin+0x6d/0xb0 [ 795.006203] __save_stack_trace+0x8be/0xc60 [ 795.010548] save_stack_trace+0xc6/0x110 [ 795.014633] kmsan_internal_chain_origin+0x136/0x240 [ 795.019752] kmsan_memcpy_origins+0x13d/0x190 [ 795.024275] __msan_memcpy+0x6f/0x80 [ 795.028006] pskb_expand_head+0x436/0x1d20 [ 795.032269] gre_tap_xmit+0x4e3/0x910 [ 795.036089] dev_hard_start_xmit+0x6dc/0xde0 [ 795.040517] sch_direct_xmit+0x59b/0x890 [ 795.044604] __qdisc_run+0x1bac/0x3600 [ 795.048513] __dev_queue_xmit+0x2131/0x3e00 [ 795.052846] dev_queue_xmit+0x4b/0x60 [ 795.056664] ip_finish_output2+0x136d/0x1560 [ 795.061087] ip_finish_output+0xd93/0x10f0 [ 795.065336] ip_mc_output+0xf25/0x10f0 [ 795.069248] ip_send_skb+0x178/0x370 [ 795.072993] udp_send_skb+0x1439/0x1920 [ 795.076979] udp_sendmsg+0x399a/0x4350 [ 795.080881] udpv6_sendmsg+0x123e/0x4960 [ 795.084962] inet_sendmsg+0x4e9/0x800 [ 795.088774] ___sys_sendmsg+0xe3b/0x1240 [ 795.092848] __sys_sendmmsg+0x56b/0xa90 [ 795.096833] __se_sys_sendmmsg+0xbd/0xe0 [ 795.100907] __x64_sys_sendmmsg+0x56/0x70 [ 795.105072] do_syscall_64+0xcf/0x110 [ 795.108891] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 795.114092] [ 795.115726] Uninit was stored to memory at: [ 795.120070] kmsan_internal_chain_origin+0x136/0x240 [ 795.125188] __msan_chain_origin+0x6d/0xb0 [ 795.129445] __save_stack_trace+0x8be/0xc60 [ 795.133792] save_stack_trace+0xc6/0x110 [ 795.137869] kmsan_internal_chain_origin+0x136/0x240 [ 795.142987] kmsan_memcpy_origins+0x13d/0x190 [ 795.147513] __msan_memcpy+0x6f/0x80 [ 795.151254] pskb_expand_head+0x436/0x1d20 [ 795.155515] gre_tap_xmit+0x4e3/0x910 [ 795.159333] dev_hard_start_xmit+0x6dc/0xde0 [ 795.163757] sch_direct_xmit+0x59b/0x890 [ 795.167836] __qdisc_run+0x1bac/0x3600 [ 795.171736] __dev_queue_xmit+0x2131/0x3e00 [ 795.176073] dev_queue_xmit+0x4b/0x60 [ 795.179890] ip_finish_output2+0x136d/0x1560 [ 795.184312] ip_finish_output+0xd93/0x10f0 [ 795.188572] ip_mc_output+0xf25/0x10f0 [ 795.192480] ip_send_skb+0x178/0x370 [ 795.196221] udp_send_skb+0x1439/0x1920 [ 795.200222] udp_sendmsg+0x399a/0x4350 [ 795.204134] udpv6_sendmsg+0x123e/0x4960 [ 795.208210] inet_sendmsg+0x4e9/0x800 [ 795.212034] ___sys_sendmsg+0xe3b/0x1240 [ 795.216114] __sys_sendmmsg+0x56b/0xa90 [ 795.220101] __se_sys_sendmmsg+0xbd/0xe0 [ 795.224173] __x64_sys_sendmmsg+0x56/0x70 [ 795.228342] do_syscall_64+0xcf/0x110 [ 795.232161] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 795.237360] [ 795.238990] Uninit was stored to memory at: [ 795.243339] kmsan_internal_chain_origin+0x136/0x240 [ 795.248461] __msan_chain_origin+0x6d/0xb0 [ 795.252715] __save_stack_trace+0x8be/0xc60 [ 795.257056] save_stack_trace+0xc6/0x110 [ 795.261133] kmsan_internal_chain_origin+0x136/0x240 [ 795.266283] kmsan_memcpy_origins+0x13d/0x190 [ 795.270793] __msan_memcpy+0x6f/0x80 [ 795.274527] pskb_expand_head+0x436/0x1d20 [ 795.278776] gre_tap_xmit+0x4e3/0x910 [ 795.282595] dev_hard_start_xmit+0x6dc/0xde0 [ 795.287017] sch_direct_xmit+0x59b/0x890 [ 795.291094] __qdisc_run+0x1bac/0x3600 [ 795.294994] __dev_queue_xmit+0x2131/0x3e00 [ 795.299330] dev_queue_xmit+0x4b/0x60 [ 795.303146] ip_finish_output2+0x136d/0x1560 [ 795.307567] ip_finish_output+0xd93/0x10f0 [ 795.311821] ip_mc_output+0xf25/0x10f0 [ 795.315732] ip_send_skb+0x178/0x370 [ 795.319467] udp_send_skb+0x1439/0x1920 [ 795.323457] udp_sendmsg+0x399a/0x4350 [ 795.327393] udpv6_sendmsg+0x123e/0x4960 [ 795.331472] inet_sendmsg+0x4e9/0x800 [ 795.335289] ___sys_sendmsg+0xe3b/0x1240 [ 795.339371] __sys_sendmmsg+0x56b/0xa90 [ 795.343358] __se_sys_sendmmsg+0xbd/0xe0 [ 795.347430] __x64_sys_sendmmsg+0x56/0x70 [ 795.351604] do_syscall_64+0xcf/0x110 [ 795.355424] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 795.360616] [ 795.362257] Uninit was stored to memory at: [ 795.366611] kmsan_internal_chain_origin+0x136/0x240 [ 795.371730] __msan_chain_origin+0x6d/0xb0 [ 795.375988] __save_stack_trace+0x8be/0xc60 [ 795.380323] save_stack_trace+0xc6/0x110 [ 795.384425] kmsan_internal_chain_origin+0x136/0x240 [ 795.389582] kmsan_memcpy_origins+0x13d/0x190 [ 795.394110] __msan_memcpy+0x6f/0x80 [ 795.397839] pskb_expand_head+0x436/0x1d20 [ 795.402087] gre_tap_xmit+0x4e3/0x910 [ 795.405902] dev_hard_start_xmit+0x6dc/0xde0 [ 795.410328] sch_direct_xmit+0x59b/0x890 [ 795.414405] __qdisc_run+0x1bac/0x3600 [ 795.418311] __dev_queue_xmit+0x2131/0x3e00 [ 795.422646] dev_queue_xmit+0x4b/0x60 [ 795.426465] ip_finish_output2+0x136d/0x1560 [ 795.430893] ip_finish_output+0xd93/0x10f0 [ 795.435162] ip_mc_output+0xf25/0x10f0 [ 795.439061] ip_send_skb+0x178/0x370 [ 795.442790] udp_send_skb+0x1439/0x1920 [ 795.446774] udp_sendmsg+0x399a/0x4350 [ 795.450675] udpv6_sendmsg+0x123e/0x4960 [ 795.454754] inet_sendmsg+0x4e9/0x800 [ 795.458574] ___sys_sendmsg+0xe3b/0x1240 [ 795.462650] __sys_sendmmsg+0x56b/0xa90 [ 795.466649] __se_sys_sendmmsg+0xbd/0xe0 [ 795.470721] __x64_sys_sendmmsg+0x56/0x70 [ 795.474889] do_syscall_64+0xcf/0x110 [ 795.478722] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 795.483928] [ 795.485573] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 795.491806] Variable was created at: [ 795.495536] kfree+0x12a/0x2fb0 [ 795.498836] skb_release_data+0xbcb/0xc90 04:50:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:50:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 795.522661] input: syz1 as /devices/virtual/input/input36 04:50:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 04:50:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0xb}) [ 795.730217] input: syz1 as /devices/virtual/input/input37 04:50:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 796.077122] input: syz1 as /devices/virtual/input/input38 [ 796.140806] not chained 220000 origins [ 796.144770] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 796.152063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.161439] Call Trace: [ 796.164067] dump_stack+0x32d/0x480 [ 796.167744] kmsan_internal_chain_origin+0x222/0x240 [ 796.172898] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 796.178293] ? is_bpf_text_address+0x49e/0x4d0 [ 796.182921] ? INIT_INT+0xc/0x30 [ 796.186341] ? __msan_warning+0x76/0xc0 [ 796.190360] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 796.195844] ? __save_stack_trace+0x9f2/0xc60 [ 796.200400] __msan_chain_origin+0x6d/0xb0 [ 796.204681] save_stack_trace+0xfa/0x110 [ 796.208788] kmsan_internal_chain_origin+0x136/0x240 [ 796.213919] ? inet_sendmsg+0x4e9/0x800 [ 796.217951] ? kmsan_internal_chain_origin+0x136/0x240 [ 796.223269] ? kmsan_memcpy_origins+0x13d/0x190 [ 796.227970] ? __msan_memcpy+0x6f/0x80 [ 796.231893] ? pskb_expand_head+0x436/0x1d20 [ 796.236327] ? gre_tap_xmit+0x4e3/0x910 [ 796.240343] ? dev_hard_start_xmit+0x6dc/0xde0 [ 796.244950] ? sch_direct_xmit+0x59b/0x890 [ 796.249226] ? __qdisc_run+0x1bac/0x3600 [ 796.253330] ? __dev_queue_xmit+0x2131/0x3e00 [ 796.257859] ? dev_queue_xmit+0x4b/0x60 [ 796.261865] ? ip_finish_output2+0x136d/0x1560 [ 796.266472] ? ip_finish_output+0xd93/0x10f0 [ 796.270921] ? ip_mc_output+0xf25/0x10f0 [ 796.275009] ? ip_send_skb+0x178/0x370 [ 796.278935] ? udp_send_skb+0x1439/0x1920 [ 796.283109] ? udp_sendmsg+0x399a/0x4350 [ 796.287200] ? udpv6_sendmsg+0x123e/0x4960 [ 796.291478] ? inet_sendmsg+0x4e9/0x800 [ 796.295487] ? ___sys_sendmsg+0xe3b/0x1240 [ 796.299770] ? __sys_sendmmsg+0x56b/0xa90 [ 796.303953] ? __se_sys_sendmmsg+0xbd/0xe0 [ 796.308217] ? __x64_sys_sendmmsg+0x56/0x70 [ 796.312583] ? do_syscall_64+0xcf/0x110 [ 796.316595] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.321996] ? memcg_kmem_put_cache+0x73/0x460 [ 796.326632] ? __msan_get_context_state+0x9/0x20 [ 796.331399] ? INIT_INT+0xc/0x30 [ 796.334784] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 796.340197] kmsan_memcpy_origins+0x13d/0x190 [ 796.344730] __msan_memcpy+0x6f/0x80 [ 796.348466] pskb_expand_head+0x436/0x1d20 [ 796.352742] gre_tap_xmit+0x4e3/0x910 [ 796.356550] ? gre_tap_init+0x650/0x650 [ 796.360527] dev_hard_start_xmit+0x6dc/0xde0 [ 796.364955] sch_direct_xmit+0x59b/0x890 [ 796.369056] __qdisc_run+0x1bac/0x3600 [ 796.373001] ? INIT_BOOL+0xc/0x30 [ 796.376459] ? do_raw_spin_trylock+0x378/0x4d0 [ 796.381057] __dev_queue_xmit+0x2131/0x3e00 [ 796.385449] dev_queue_xmit+0x4b/0x60 [ 796.389318] ip_finish_output2+0x136d/0x1560 [ 796.393793] ip_finish_output+0xd93/0x10f0 [ 796.398058] ip_mc_output+0xf25/0x10f0 [ 796.401971] ? ip_mc_finish_output+0x440/0x440 [ 796.406570] ? ip_build_and_send_pkt+0xe60/0xe60 [ 796.411338] ip_send_skb+0x178/0x370 [ 796.415063] udp_send_skb+0x1439/0x1920 [ 796.419080] udp_sendmsg+0x399a/0x4350 [ 796.423001] ? ip_copy_metadata+0x1710/0x1710 [ 796.427566] ? kmsan_set_origin+0x7f/0x100 [ 796.431820] udpv6_sendmsg+0x123e/0x4960 [ 796.435893] ? aa_label_sk_perm+0xda/0x960 [ 796.440132] ? aa_sk_perm+0x6db/0x9e0 [ 796.443976] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 796.449339] ? aa_sk_perm+0x7ab/0x9e0 [ 796.453154] ? inet_sendmsg+0x84/0x800 [ 796.457056] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 796.461408] inet_sendmsg+0x4e9/0x800 [ 796.465211] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 796.470622] ? security_socket_sendmsg+0x1bd/0x200 [ 796.475590] ___sys_sendmsg+0xe3b/0x1240 [ 796.479654] ? inet_getname+0x490/0x490 [ 796.483648] ? __msan_poison_alloca+0x1e0/0x270 [ 796.488320] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 796.493708] ? rcu_all_qs+0x3b/0x2b0 [ 796.497452] ? _cond_resched+0x59/0x120 [ 796.501472] ? rcu_all_qs+0x53/0x2b0 [ 796.505201] ? _cond_resched+0x37/0x120 [ 796.509178] ? __sys_sendmmsg+0x7c9/0xa90 [ 796.513344] ? _cond_resched+0x59/0x120 [ 796.517323] __sys_sendmmsg+0x56b/0xa90 [ 796.521325] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 796.526807] ? prepare_exit_to_usermode+0x182/0x4c0 [ 796.531875] __se_sys_sendmmsg+0xbd/0xe0 [ 796.535963] __x64_sys_sendmmsg+0x56/0x70 [ 796.540127] do_syscall_64+0xcf/0x110 [ 796.543968] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.549184] RIP: 0033:0x457569 [ 796.552393] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.571311] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 796.579037] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 796.586328] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 796.593610] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 796.600878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 796.608167] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 796.615448] Uninit was stored to memory at: [ 796.619805] kmsan_internal_chain_origin+0x136/0x240 [ 796.624914] __msan_chain_origin+0x6d/0xb0 [ 796.629159] save_stack_trace+0xfa/0x110 [ 796.633256] kmsan_internal_chain_origin+0x136/0x240 [ 796.638398] kmsan_memcpy_origins+0x13d/0x190 [ 796.642908] __msan_memcpy+0x6f/0x80 [ 796.646654] pskb_expand_head+0x436/0x1d20 [ 796.650904] gre_tap_xmit+0x4e3/0x910 [ 796.654703] dev_hard_start_xmit+0x6dc/0xde0 [ 796.659108] sch_direct_xmit+0x59b/0x890 [ 796.663165] __qdisc_run+0x1bac/0x3600 [ 796.667072] __dev_queue_xmit+0x2131/0x3e00 [ 796.671402] dev_queue_xmit+0x4b/0x60 [ 796.675199] ip_finish_output2+0x136d/0x1560 [ 796.679616] ip_finish_output+0xd93/0x10f0 [ 796.683865] ip_mc_output+0xf25/0x10f0 [ 796.687747] ip_send_skb+0x178/0x370 [ 796.691480] udp_send_skb+0x1439/0x1920 [ 796.695485] udp_sendmsg+0x399a/0x4350 [ 796.699394] udpv6_sendmsg+0x123e/0x4960 [ 796.703454] inet_sendmsg+0x4e9/0x800 [ 796.707261] ___sys_sendmsg+0xe3b/0x1240 [ 796.711348] __sys_sendmmsg+0x56b/0xa90 [ 796.715335] __se_sys_sendmmsg+0xbd/0xe0 [ 796.719390] __x64_sys_sendmmsg+0x56/0x70 [ 796.723547] do_syscall_64+0xcf/0x110 [ 796.727357] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.732534] [ 796.734161] Uninit was stored to memory at: [ 796.738502] kmsan_internal_chain_origin+0x136/0x240 [ 796.743626] __msan_chain_origin+0x6d/0xb0 [ 796.747873] __save_stack_trace+0x833/0xc60 [ 796.752207] save_stack_trace+0xc6/0x110 [ 796.756292] kmsan_internal_chain_origin+0x136/0x240 [ 796.761413] kmsan_memcpy_origins+0x13d/0x190 [ 796.765918] __msan_memcpy+0x6f/0x80 [ 796.769659] pskb_expand_head+0x436/0x1d20 [ 796.773908] gre_tap_xmit+0x4e3/0x910 [ 796.777707] dev_hard_start_xmit+0x6dc/0xde0 [ 796.782125] sch_direct_xmit+0x59b/0x890 [ 796.786192] __qdisc_run+0x1bac/0x3600 [ 796.790073] __dev_queue_xmit+0x2131/0x3e00 [ 796.794390] dev_queue_xmit+0x4b/0x60 [ 796.798186] ip_finish_output2+0x136d/0x1560 [ 796.802613] ip_finish_output+0xd93/0x10f0 [ 796.806859] ip_mc_output+0xf25/0x10f0 [ 796.810743] ip_send_skb+0x178/0x370 [ 796.814459] udp_send_skb+0x1439/0x1920 [ 796.818452] udp_sendmsg+0x399a/0x4350 [ 796.822374] udpv6_sendmsg+0x123e/0x4960 [ 796.826448] inet_sendmsg+0x4e9/0x800 [ 796.830255] ___sys_sendmsg+0xe3b/0x1240 [ 796.834328] __sys_sendmmsg+0x56b/0xa90 [ 796.838314] __se_sys_sendmmsg+0xbd/0xe0 [ 796.842372] __x64_sys_sendmmsg+0x56/0x70 [ 796.846539] do_syscall_64+0xcf/0x110 [ 796.850370] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.855568] [ 796.857186] Uninit was stored to memory at: [ 796.861513] kmsan_internal_chain_origin+0x136/0x240 [ 796.866613] __msan_chain_origin+0x6d/0xb0 [ 796.870861] save_stack_trace+0xfa/0x110 [ 796.874959] kmsan_internal_chain_origin+0x136/0x240 [ 796.880058] kmsan_memcpy_origins+0x13d/0x190 [ 796.884563] __msan_memcpy+0x6f/0x80 [ 796.888302] pskb_expand_head+0x436/0x1d20 [ 796.892537] gre_tap_xmit+0x4e3/0x910 [ 796.896357] dev_hard_start_xmit+0x6dc/0xde0 [ 796.900784] sch_direct_xmit+0x59b/0x890 [ 796.904841] __qdisc_run+0x1bac/0x3600 [ 796.908757] __dev_queue_xmit+0x2131/0x3e00 [ 796.913110] dev_queue_xmit+0x4b/0x60 [ 796.916930] ip_finish_output2+0x136d/0x1560 [ 796.921338] ip_finish_output+0xd93/0x10f0 [ 796.925567] ip_mc_output+0xf25/0x10f0 [ 796.929460] ip_send_skb+0x178/0x370 [ 796.933210] udp_send_skb+0x1439/0x1920 [ 796.937208] udp_sendmsg+0x399a/0x4350 [ 796.941101] udpv6_sendmsg+0x123e/0x4960 [ 796.945170] inet_sendmsg+0x4e9/0x800 [ 796.948996] ___sys_sendmsg+0xe3b/0x1240 [ 796.953067] __sys_sendmmsg+0x56b/0xa90 [ 796.957055] __se_sys_sendmmsg+0xbd/0xe0 [ 796.961127] __x64_sys_sendmmsg+0x56/0x70 [ 796.965295] do_syscall_64+0xcf/0x110 [ 796.969094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.974285] [ 796.975911] Uninit was stored to memory at: [ 796.980255] kmsan_internal_chain_origin+0x136/0x240 [ 796.985357] __msan_chain_origin+0x6d/0xb0 [ 796.989591] __save_stack_trace+0x833/0xc60 [ 796.993910] save_stack_trace+0xc6/0x110 [ 796.997980] kmsan_internal_chain_origin+0x136/0x240 [ 797.003096] kmsan_memcpy_origins+0x13d/0x190 [ 797.007602] __msan_memcpy+0x6f/0x80 [ 797.011361] pskb_expand_head+0x436/0x1d20 [ 797.015620] gre_tap_xmit+0x4e3/0x910 [ 797.019417] dev_hard_start_xmit+0x6dc/0xde0 [ 797.023821] sch_direct_xmit+0x59b/0x890 [ 797.027877] __qdisc_run+0x1bac/0x3600 [ 797.031777] __dev_queue_xmit+0x2131/0x3e00 [ 797.036092] dev_queue_xmit+0x4b/0x60 [ 797.039896] ip_finish_output2+0x136d/0x1560 [ 797.044308] ip_finish_output+0xd93/0x10f0 [ 797.048554] ip_mc_output+0xf25/0x10f0 [ 797.052438] ip_send_skb+0x178/0x370 [ 797.056149] udp_send_skb+0x1439/0x1920 [ 797.060146] udp_sendmsg+0x399a/0x4350 [ 797.064050] udpv6_sendmsg+0x123e/0x4960 [ 797.068107] inet_sendmsg+0x4e9/0x800 [ 797.071904] ___sys_sendmsg+0xe3b/0x1240 [ 797.075976] __sys_sendmmsg+0x56b/0xa90 [ 797.079961] __se_sys_sendmmsg+0xbd/0xe0 [ 797.084017] __x64_sys_sendmmsg+0x56/0x70 [ 797.088176] do_syscall_64+0xcf/0x110 [ 797.092006] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.097200] [ 797.098816] Uninit was stored to memory at: [ 797.103145] kmsan_internal_chain_origin+0x136/0x240 [ 797.108255] __msan_chain_origin+0x6d/0xb0 [ 797.112510] save_stack_trace+0xfa/0x110 [ 797.116587] kmsan_internal_chain_origin+0x136/0x240 [ 797.121698] kmsan_memcpy_origins+0x13d/0x190 [ 797.126211] __msan_memcpy+0x6f/0x80 [ 797.129952] pskb_expand_head+0x436/0x1d20 [ 797.134186] gre_tap_xmit+0x4e3/0x910 [ 797.137992] dev_hard_start_xmit+0x6dc/0xde0 [ 797.142416] sch_direct_xmit+0x59b/0x890 [ 797.146484] __qdisc_run+0x1bac/0x3600 [ 797.150383] __dev_queue_xmit+0x2131/0x3e00 [ 797.154716] dev_queue_xmit+0x4b/0x60 [ 797.158518] ip_finish_output2+0x136d/0x1560 [ 797.162923] ip_finish_output+0xd93/0x10f0 [ 797.167168] ip_mc_output+0xf25/0x10f0 [ 797.171066] ip_send_skb+0x178/0x370 [ 797.174815] udp_send_skb+0x1439/0x1920 [ 797.178809] udp_sendmsg+0x399a/0x4350 [ 797.182693] udpv6_sendmsg+0x123e/0x4960 [ 797.186748] inet_sendmsg+0x4e9/0x800 [ 797.190563] ___sys_sendmsg+0xe3b/0x1240 [ 797.194637] __sys_sendmmsg+0x56b/0xa90 [ 797.198633] __se_sys_sendmmsg+0xbd/0xe0 [ 797.202700] __x64_sys_sendmmsg+0x56/0x70 [ 797.206860] do_syscall_64+0xcf/0x110 [ 797.210658] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.215837] [ 797.217463] Uninit was stored to memory at: [ 797.221805] kmsan_internal_chain_origin+0x136/0x240 [ 797.226907] __msan_chain_origin+0x6d/0xb0 [ 797.231151] __save_stack_trace+0x833/0xc60 [ 797.235471] save_stack_trace+0xc6/0x110 [ 797.239551] kmsan_internal_chain_origin+0x136/0x240 [ 797.244668] kmsan_memcpy_origins+0x13d/0x190 [ 797.249175] __msan_memcpy+0x6f/0x80 [ 797.252932] pskb_expand_head+0x436/0x1d20 [ 797.257179] gre_tap_xmit+0x4e3/0x910 [ 797.260982] dev_hard_start_xmit+0x6dc/0xde0 [ 797.265390] sch_direct_xmit+0x59b/0x890 [ 797.269449] __qdisc_run+0x1bac/0x3600 [ 797.273330] __dev_queue_xmit+0x2131/0x3e00 [ 797.277648] dev_queue_xmit+0x4b/0x60 [ 797.281444] ip_finish_output2+0x136d/0x1560 [ 797.285865] ip_finish_output+0xd93/0x10f0 [ 797.290126] ip_mc_output+0xf25/0x10f0 [ 797.294050] ip_send_skb+0x178/0x370 [ 797.297764] udp_send_skb+0x1439/0x1920 [ 797.301749] udp_sendmsg+0x399a/0x4350 [ 797.305649] udpv6_sendmsg+0x123e/0x4960 [ 797.309704] inet_sendmsg+0x4e9/0x800 [ 797.313502] ___sys_sendmsg+0xe3b/0x1240 [ 797.317572] __sys_sendmmsg+0x56b/0xa90 [ 797.321559] __se_sys_sendmmsg+0xbd/0xe0 [ 797.325615] __x64_sys_sendmmsg+0x56/0x70 [ 797.329772] do_syscall_64+0xcf/0x110 [ 797.333608] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.338814] [ 797.340431] Uninit was stored to memory at: [ 797.344762] kmsan_internal_chain_origin+0x136/0x240 [ 797.349860] __msan_chain_origin+0x6d/0xb0 [ 797.354110] save_stack_trace+0xfa/0x110 [ 797.358183] kmsan_internal_chain_origin+0x136/0x240 [ 797.363285] kmsan_memcpy_origins+0x13d/0x190 [ 797.367777] __msan_memcpy+0x6f/0x80 [ 797.371493] pskb_expand_head+0x436/0x1d20 [ 797.375726] gre_tap_xmit+0x4e3/0x910 [ 797.379545] dev_hard_start_xmit+0x6dc/0xde0 [ 797.383966] sch_direct_xmit+0x59b/0x890 [ 797.388027] __qdisc_run+0x1bac/0x3600 [ 797.391942] __dev_queue_xmit+0x2131/0x3e00 [ 797.396274] dev_queue_xmit+0x4b/0x60 [ 797.400070] ip_finish_output2+0x136d/0x1560 [ 797.404475] ip_finish_output+0xd93/0x10f0 [ 797.408708] ip_mc_output+0xf25/0x10f0 [ 797.412612] ip_send_skb+0x178/0x370 [ 797.416354] udp_send_skb+0x1439/0x1920 [ 797.420355] udp_sendmsg+0x399a/0x4350 [ 797.424247] udpv6_sendmsg+0x123e/0x4960 [ 797.428304] inet_sendmsg+0x4e9/0x800 [ 797.432119] ___sys_sendmsg+0xe3b/0x1240 [ 797.436192] __sys_sendmmsg+0x56b/0xa90 [ 797.440182] __se_sys_sendmmsg+0xbd/0xe0 [ 797.444259] __x64_sys_sendmmsg+0x56/0x70 [ 797.448445] do_syscall_64+0xcf/0x110 [ 797.452269] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.457447] [ 797.459068] Local variable description: ----__ai_o2.i.i.i.i@kfree [ 797.465286] Variable was created at: [ 797.468998] kfree+0x100/0x2fb0 [ 797.472278] skb_release_data+0xbcb/0xc90 [ 797.493462] not chained 230000 origins [ 797.497430] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 797.504730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.514114] Call Trace: [ 797.516739] dump_stack+0x32d/0x480 [ 797.520420] kmsan_internal_chain_origin+0x222/0x240 [ 797.525571] ? skb_release_data+0xbcb/0xc90 [ 797.529942] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 797.535346] ? __module_address+0x6a/0x5f0 [ 797.539609] ? kmsan_print_origin+0x1e8/0x260 [ 797.544136] ? is_bpf_text_address+0x3e5/0x4d0 [ 797.548761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 797.554144] ? is_bpf_text_address+0x49e/0x4d0 [ 797.558748] ? kmsan_internal_chain_origin+0x90/0x240 [ 797.563985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 797.569383] ? is_bpf_text_address+0x49e/0x4d0 [ 797.573987] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 797.579458] ? in_task_stack+0x12c/0x210 [ 797.583580] __msan_chain_origin+0x6d/0xb0 [ 797.587838] ? __dev_queue_xmit+0x2131/0x3e00 [ 797.592335] __save_stack_trace+0x8be/0xc60 [ 797.596707] ? __dev_queue_xmit+0x2131/0x3e00 [ 797.601221] save_stack_trace+0xc6/0x110 [ 797.605300] kmsan_internal_chain_origin+0x136/0x240 [ 797.610401] ? inet_sendmsg+0x4e9/0x800 [ 797.614386] ? kmsan_internal_chain_origin+0x136/0x240 [ 797.619663] ? kmsan_memcpy_origins+0x13d/0x190 [ 797.624332] ? __msan_memcpy+0x6f/0x80 [ 797.628218] ? pskb_expand_head+0x436/0x1d20 [ 797.632635] ? gre_tap_xmit+0x4e3/0x910 [ 797.636627] ? dev_hard_start_xmit+0x6dc/0xde0 [ 797.641247] ? sch_direct_xmit+0x59b/0x890 [ 797.645502] ? __qdisc_run+0x1bac/0x3600 [ 797.649559] ? __dev_queue_xmit+0x2131/0x3e00 [ 797.654053] ? dev_queue_xmit+0x4b/0x60 [ 797.658024] ? ip_finish_output2+0x136d/0x1560 [ 797.662601] ? ip_finish_output+0xd93/0x10f0 [ 797.667018] ? ip_mc_output+0xf25/0x10f0 [ 797.671092] ? ip_send_skb+0x178/0x370 [ 797.674980] ? udp_send_skb+0x1439/0x1920 [ 797.679129] ? udp_sendmsg+0x399a/0x4350 [ 797.683188] ? udpv6_sendmsg+0x123e/0x4960 [ 797.687435] ? inet_sendmsg+0x4e9/0x800 [ 797.691442] ? ___sys_sendmsg+0xe3b/0x1240 [ 797.695690] ? __sys_sendmmsg+0x56b/0xa90 [ 797.699833] ? __se_sys_sendmmsg+0xbd/0xe0 [ 797.704063] ? __x64_sys_sendmmsg+0x56/0x70 [ 797.708400] ? do_syscall_64+0xcf/0x110 [ 797.712403] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.717772] ? memcg_kmem_put_cache+0x73/0x460 [ 797.722393] ? __msan_get_context_state+0x9/0x20 [ 797.727172] ? INIT_INT+0xc/0x30 [ 797.730545] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 797.735923] kmsan_memcpy_origins+0x13d/0x190 [ 797.740427] __msan_memcpy+0x6f/0x80 [ 797.744168] pskb_expand_head+0x436/0x1d20 [ 797.748451] gre_tap_xmit+0x4e3/0x910 [ 797.752304] ? gre_tap_init+0x650/0x650 [ 797.756313] dev_hard_start_xmit+0x6dc/0xde0 [ 797.760759] sch_direct_xmit+0x59b/0x890 [ 797.764834] __qdisc_run+0x1bac/0x3600 [ 797.768754] ? INIT_BOOL+0xc/0x30 [ 797.772223] ? do_raw_spin_trylock+0x378/0x4d0 [ 797.776831] __dev_queue_xmit+0x2131/0x3e00 [ 797.781206] dev_queue_xmit+0x4b/0x60 [ 797.785023] ip_finish_output2+0x136d/0x1560 [ 797.789466] ip_finish_output+0xd93/0x10f0 [ 797.793758] ip_mc_output+0xf25/0x10f0 [ 797.797669] ? ip_mc_finish_output+0x440/0x440 [ 797.802263] ? ip_build_and_send_pkt+0xe60/0xe60 [ 797.807027] ip_send_skb+0x178/0x370 [ 797.810754] udp_send_skb+0x1439/0x1920 [ 797.814758] udp_sendmsg+0x399a/0x4350 [ 797.818642] ? ip_copy_metadata+0x1710/0x1710 [ 797.823200] ? kmsan_set_origin+0x7f/0x100 [ 797.827491] udpv6_sendmsg+0x123e/0x4960 [ 797.831854] ? aa_label_sk_perm+0xda/0x960 [ 797.836086] ? aa_sk_perm+0x6db/0x9e0 [ 797.839933] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 797.845312] ? aa_sk_perm+0x7ab/0x9e0 [ 797.849147] ? inet_sendmsg+0x84/0x800 [ 797.853038] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 797.857378] inet_sendmsg+0x4e9/0x800 [ 797.861265] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 797.866659] ? security_socket_sendmsg+0x1bd/0x200 [ 797.871601] ___sys_sendmsg+0xe3b/0x1240 [ 797.875692] ? kmsan_set_origin+0x7f/0x100 [ 797.879943] ? inet_getname+0x490/0x490 [ 797.883937] ? __msan_poison_alloca+0x1e0/0x270 [ 797.888607] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 797.893977] ? rcu_all_qs+0x3b/0x2b0 [ 797.897697] ? _cond_resched+0x59/0x120 [ 797.901698] ? rcu_all_qs+0x53/0x2b0 [ 797.905451] ? _cond_resched+0x37/0x120 [ 797.909436] ? __sys_sendmmsg+0x7c9/0xa90 [ 797.913612] ? _cond_resched+0x59/0x120 [ 797.917589] __sys_sendmmsg+0x56b/0xa90 [ 797.921591] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 797.927040] ? prepare_exit_to_usermode+0x182/0x4c0 [ 797.932084] __se_sys_sendmmsg+0xbd/0xe0 [ 797.936167] __x64_sys_sendmmsg+0x56/0x70 [ 797.940348] do_syscall_64+0xcf/0x110 [ 797.944187] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.949396] RIP: 0033:0x457569 [ 797.952600] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.971523] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 797.979254] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 797.986553] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 797.993817] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 798.001091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 798.008375] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 798.015669] Uninit was stored to memory at: [ 798.020015] kmsan_internal_chain_origin+0x136/0x240 [ 798.025115] __msan_chain_origin+0x6d/0xb0 [ 798.029348] __save_stack_trace+0x8be/0xc60 [ 798.033683] save_stack_trace+0xc6/0x110 [ 798.037772] kmsan_internal_chain_origin+0x136/0x240 [ 798.042901] kmsan_memcpy_origins+0x13d/0x190 [ 798.047417] __msan_memcpy+0x6f/0x80 [ 798.051128] pskb_expand_head+0x436/0x1d20 [ 798.055358] gre_tap_xmit+0x4e3/0x910 [ 798.059153] dev_hard_start_xmit+0x6dc/0xde0 [ 798.063567] sch_direct_xmit+0x59b/0x890 [ 798.067653] __qdisc_run+0x1bac/0x3600 [ 798.071564] __dev_queue_xmit+0x2131/0x3e00 [ 798.075895] dev_queue_xmit+0x4b/0x60 [ 798.079690] ip_finish_output2+0x136d/0x1560 [ 798.084096] ip_finish_output+0xd93/0x10f0 [ 798.088324] ip_mc_output+0xf25/0x10f0 [ 798.092218] ip_send_skb+0x178/0x370 [ 798.095973] udp_send_skb+0x1439/0x1920 [ 798.099960] udp_sendmsg+0x399a/0x4350 [ 798.103841] udpv6_sendmsg+0x123e/0x4960 [ 798.107912] inet_sendmsg+0x4e9/0x800 [ 798.111735] ___sys_sendmsg+0xe3b/0x1240 [ 798.115823] __sys_sendmmsg+0x56b/0xa90 [ 798.119813] __se_sys_sendmmsg+0xbd/0xe0 [ 798.123869] __x64_sys_sendmmsg+0x56/0x70 [ 798.128017] do_syscall_64+0xcf/0x110 [ 798.131833] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.137009] [ 798.138639] Uninit was stored to memory at: [ 798.142984] kmsan_internal_chain_origin+0x136/0x240 [ 798.148111] __msan_chain_origin+0x6d/0xb0 [ 798.152364] __save_stack_trace+0x8be/0xc60 [ 798.156685] save_stack_trace+0xc6/0x110 [ 798.160756] kmsan_internal_chain_origin+0x136/0x240 [ 798.165867] kmsan_memcpy_origins+0x13d/0x190 [ 798.170373] __msan_memcpy+0x6f/0x80 [ 798.174118] pskb_expand_head+0x436/0x1d20 [ 798.178369] gre_tap_xmit+0x4e3/0x910 [ 798.182165] dev_hard_start_xmit+0x6dc/0xde0 [ 798.186571] sch_direct_xmit+0x59b/0x890 [ 798.190626] __qdisc_run+0x1bac/0x3600 [ 798.194536] __dev_queue_xmit+0x2131/0x3e00 [ 798.198864] dev_queue_xmit+0x4b/0x60 [ 798.202689] ip_finish_output2+0x136d/0x1560 [ 798.207109] ip_finish_output+0xd93/0x10f0 [ 798.211343] ip_mc_output+0xf25/0x10f0 [ 798.215231] ip_send_skb+0x178/0x370 [ 798.218952] udp_send_skb+0x1439/0x1920 [ 798.222920] udp_sendmsg+0x399a/0x4350 [ 798.226806] udpv6_sendmsg+0x123e/0x4960 [ 798.230885] inet_sendmsg+0x4e9/0x800 [ 798.234692] ___sys_sendmsg+0xe3b/0x1240 [ 798.238750] __sys_sendmmsg+0x56b/0xa90 [ 798.242717] __se_sys_sendmmsg+0xbd/0xe0 [ 798.246785] __x64_sys_sendmmsg+0x56/0x70 [ 798.250977] do_syscall_64+0xcf/0x110 [ 798.254808] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.260009] [ 798.261662] Uninit was stored to memory at: [ 798.266002] kmsan_internal_chain_origin+0x136/0x240 [ 798.271104] __msan_chain_origin+0x6d/0xb0 [ 798.275337] __save_stack_trace+0x8be/0xc60 [ 798.279667] save_stack_trace+0xc6/0x110 [ 798.283741] kmsan_internal_chain_origin+0x136/0x240 [ 798.288847] kmsan_memcpy_origins+0x13d/0x190 [ 798.293341] __msan_memcpy+0x6f/0x80 [ 798.297053] pskb_expand_head+0x436/0x1d20 [ 798.301282] gre_tap_xmit+0x4e3/0x910 [ 798.305079] dev_hard_start_xmit+0x6dc/0xde0 [ 798.309493] sch_direct_xmit+0x59b/0x890 [ 798.313585] __qdisc_run+0x1bac/0x3600 [ 798.317490] __dev_queue_xmit+0x2131/0x3e00 [ 798.321814] dev_queue_xmit+0x4b/0x60 [ 798.325610] ip_finish_output2+0x136d/0x1560 [ 798.330013] ip_finish_output+0xd93/0x10f0 [ 798.334282] ip_mc_output+0xf25/0x10f0 [ 798.338183] ip_send_skb+0x178/0x370 [ 798.341893] udp_send_skb+0x1439/0x1920 [ 798.345861] udp_sendmsg+0x399a/0x4350 [ 798.349748] udpv6_sendmsg+0x123e/0x4960 [ 798.353804] inet_sendmsg+0x4e9/0x800 [ 798.357613] ___sys_sendmsg+0xe3b/0x1240 [ 798.361685] __sys_sendmmsg+0x56b/0xa90 [ 798.365687] __se_sys_sendmmsg+0xbd/0xe0 [ 798.369773] __x64_sys_sendmmsg+0x56/0x70 [ 798.373933] do_syscall_64+0xcf/0x110 [ 798.377736] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.382914] [ 798.384531] Uninit was stored to memory at: [ 798.388875] kmsan_internal_chain_origin+0x136/0x240 [ 798.394009] __msan_chain_origin+0x6d/0xb0 [ 798.398263] __save_stack_trace+0x8be/0xc60 [ 798.402601] save_stack_trace+0xc6/0x110 [ 798.406659] kmsan_internal_chain_origin+0x136/0x240 [ 798.411758] kmsan_memcpy_origins+0x13d/0x190 [ 798.416275] __msan_memcpy+0x6f/0x80 [ 798.420006] pskb_expand_head+0x436/0x1d20 [ 798.424259] gre_tap_xmit+0x4e3/0x910 [ 798.428056] dev_hard_start_xmit+0x6dc/0xde0 [ 798.432485] sch_direct_xmit+0x59b/0x890 [ 798.436565] __qdisc_run+0x1bac/0x3600 [ 798.440450] __dev_queue_xmit+0x2131/0x3e00 [ 798.444784] dev_queue_xmit+0x4b/0x60 [ 798.448604] ip_finish_output2+0x136d/0x1560 [ 798.453044] ip_finish_output+0xd93/0x10f0 [ 798.457289] ip_mc_output+0xf25/0x10f0 [ 798.461169] ip_send_skb+0x178/0x370 [ 798.464882] udp_send_skb+0x1439/0x1920 [ 798.468857] udp_sendmsg+0x399a/0x4350 [ 798.472740] udpv6_sendmsg+0x123e/0x4960 [ 798.476796] inet_sendmsg+0x4e9/0x800 [ 798.480606] ___sys_sendmsg+0xe3b/0x1240 [ 798.484659] __sys_sendmmsg+0x56b/0xa90 [ 798.488631] __se_sys_sendmmsg+0xbd/0xe0 [ 798.492691] __x64_sys_sendmmsg+0x56/0x70 [ 798.496854] do_syscall_64+0xcf/0x110 [ 798.500690] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.505904] [ 798.507543] Uninit was stored to memory at: [ 798.511874] kmsan_internal_chain_origin+0x136/0x240 [ 798.516973] __msan_chain_origin+0x6d/0xb0 [ 798.521209] __save_stack_trace+0x8be/0xc60 [ 798.525554] save_stack_trace+0xc6/0x110 [ 798.529613] kmsan_internal_chain_origin+0x136/0x240 [ 798.534710] kmsan_memcpy_origins+0x13d/0x190 [ 798.539201] __msan_memcpy+0x6f/0x80 [ 798.542916] pskb_expand_head+0x436/0x1d20 [ 798.547159] gre_tap_xmit+0x4e3/0x910 [ 798.550971] dev_hard_start_xmit+0x6dc/0xde0 [ 798.555384] sch_direct_xmit+0x59b/0x890 [ 798.559441] __qdisc_run+0x1bac/0x3600 [ 798.563338] __dev_queue_xmit+0x2131/0x3e00 [ 798.567671] dev_queue_xmit+0x4b/0x60 [ 798.571486] ip_finish_output2+0x136d/0x1560 [ 798.575907] ip_finish_output+0xd93/0x10f0 [ 798.580155] ip_mc_output+0xf25/0x10f0 [ 798.584036] ip_send_skb+0x178/0x370 [ 798.587765] udp_send_skb+0x1439/0x1920 [ 798.591768] udp_sendmsg+0x399a/0x4350 [ 798.595667] udpv6_sendmsg+0x123e/0x4960 [ 798.599738] inet_sendmsg+0x4e9/0x800 [ 798.603564] ___sys_sendmsg+0xe3b/0x1240 [ 798.607632] __sys_sendmmsg+0x56b/0xa90 [ 798.611611] __se_sys_sendmmsg+0xbd/0xe0 [ 798.615672] __x64_sys_sendmmsg+0x56/0x70 [ 798.619854] do_syscall_64+0xcf/0x110 [ 798.623686] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.628890] [ 798.630522] Uninit was stored to memory at: [ 798.634842] kmsan_internal_chain_origin+0x136/0x240 [ 798.639942] __msan_chain_origin+0x6d/0xb0 [ 798.644172] __save_stack_trace+0x8be/0xc60 [ 798.648520] save_stack_trace+0xc6/0x110 [ 798.652584] kmsan_internal_chain_origin+0x136/0x240 [ 798.657686] kmsan_memcpy_origins+0x13d/0x190 [ 798.662177] __msan_memcpy+0x6f/0x80 [ 798.665886] pskb_expand_head+0x436/0x1d20 [ 798.670130] gre_tap_xmit+0x4e3/0x910 [ 798.673941] dev_hard_start_xmit+0x6dc/0xde0 [ 798.678360] sch_direct_xmit+0x59b/0x890 [ 798.682433] __qdisc_run+0x1bac/0x3600 [ 798.686320] __dev_queue_xmit+0x2131/0x3e00 [ 798.690634] dev_queue_xmit+0x4b/0x60 [ 798.694432] ip_finish_output2+0x136d/0x1560 [ 798.698846] ip_finish_output+0xd93/0x10f0 [ 798.703095] ip_mc_output+0xf25/0x10f0 [ 798.706990] ip_send_skb+0x178/0x370 [ 798.710707] udp_send_skb+0x1439/0x1920 [ 798.714678] udp_sendmsg+0x399a/0x4350 [ 798.718572] udpv6_sendmsg+0x123e/0x4960 [ 798.722651] inet_sendmsg+0x4e9/0x800 [ 798.726463] ___sys_sendmsg+0xe3b/0x1240 [ 798.730524] __sys_sendmmsg+0x56b/0xa90 [ 798.734519] __se_sys_sendmmsg+0xbd/0xe0 [ 798.738597] __x64_sys_sendmmsg+0x56/0x70 [ 798.742748] do_syscall_64+0xcf/0x110 [ 798.746564] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.751742] [ 798.753359] Uninit was stored to memory at: [ 798.757696] kmsan_internal_chain_origin+0x136/0x240 [ 798.762810] __msan_chain_origin+0x6d/0xb0 [ 798.767058] __save_stack_trace+0x8be/0xc60 [ 798.771391] save_stack_trace+0xc6/0x110 [ 798.775459] kmsan_internal_chain_origin+0x136/0x240 [ 798.780558] kmsan_memcpy_origins+0x13d/0x190 [ 798.785072] __msan_memcpy+0x6f/0x80 [ 798.788811] pskb_expand_head+0x436/0x1d20 [ 798.793075] gre_tap_xmit+0x4e3/0x910 [ 798.796890] dev_hard_start_xmit+0x6dc/0xde0 [ 798.801306] sch_direct_xmit+0x59b/0x890 [ 798.805378] __qdisc_run+0x1bac/0x3600 [ 798.809266] __dev_queue_xmit+0x2131/0x3e00 [ 798.813609] dev_queue_xmit+0x4b/0x60 [ 798.817432] ip_finish_output2+0x136d/0x1560 [ 798.821861] ip_finish_output+0xd93/0x10f0 [ 798.826105] ip_mc_output+0xf25/0x10f0 [ 798.830004] ip_send_skb+0x178/0x370 [ 798.833714] udp_send_skb+0x1439/0x1920 [ 798.837693] udp_sendmsg+0x399a/0x4350 [ 798.841592] udpv6_sendmsg+0x123e/0x4960 [ 798.845650] inet_sendmsg+0x4e9/0x800 [ 798.849481] ___sys_sendmsg+0xe3b/0x1240 [ 798.853555] __sys_sendmmsg+0x56b/0xa90 [ 798.857565] __se_sys_sendmmsg+0xbd/0xe0 [ 798.861621] __x64_sys_sendmmsg+0x56/0x70 [ 798.865776] do_syscall_64+0xcf/0x110 [ 798.869574] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.874749] [ 798.876390] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 798.882625] Variable was created at: [ 798.886335] kfree+0x12a/0x2fb0 [ 798.889625] skb_release_data+0xbcb/0xc90 [ 798.906191] not chained 240000 origins [ 798.910169] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 798.917454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.926810] Call Trace: [ 798.929436] dump_stack+0x32d/0x480 [ 798.933121] kmsan_internal_chain_origin+0x222/0x240 [ 798.938279] ? skb_release_data+0xbcb/0xc90 [ 798.942646] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 798.948048] ? __module_address+0x6a/0x5f0 [ 798.952318] ? kmsan_print_origin+0x1e8/0x260 [ 798.956846] ? is_bpf_text_address+0x3e5/0x4d0 [ 798.961471] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 798.966868] ? is_bpf_text_address+0x49e/0x4d0 [ 798.971484] ? kmsan_internal_chain_origin+0x90/0x240 [ 798.976751] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 798.982158] ? is_bpf_text_address+0x49e/0x4d0 [ 798.986777] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 798.992263] ? in_task_stack+0x12c/0x210 [ 798.996371] __msan_chain_origin+0x6d/0xb0 [ 799.000638] ? ___sys_sendmsg+0xe3b/0x1240 [ 799.004901] __save_stack_trace+0x8be/0xc60 [ 799.009292] ? ___sys_sendmsg+0xe3b/0x1240 [ 799.013562] save_stack_trace+0xc6/0x110 [ 799.017662] kmsan_internal_chain_origin+0x136/0x240 [ 799.022798] ? inet_sendmsg+0x4e9/0x800 [ 799.026837] ? kmsan_internal_chain_origin+0x136/0x240 [ 799.032147] ? kmsan_memcpy_origins+0x13d/0x190 [ 799.036850] ? __msan_memcpy+0x6f/0x80 [ 799.040775] ? pskb_expand_head+0x436/0x1d20 [ 799.045211] ? gre_tap_xmit+0x4e3/0x910 [ 799.049234] ? dev_hard_start_xmit+0x6dc/0xde0 [ 799.053857] ? sch_direct_xmit+0x59b/0x890 [ 799.058120] ? __qdisc_run+0x1bac/0x3600 [ 799.062209] ? __dev_queue_xmit+0x2131/0x3e00 [ 799.066740] ? dev_queue_xmit+0x4b/0x60 [ 799.070744] ? ip_finish_output2+0x136d/0x1560 [ 799.075354] ? ip_finish_output+0xd93/0x10f0 [ 799.079789] ? ip_mc_output+0xf25/0x10f0 [ 799.083876] ? ip_send_skb+0x178/0x370 [ 799.087795] ? udp_send_skb+0x1439/0x1920 [ 799.091980] ? udp_sendmsg+0x399a/0x4350 [ 799.096072] ? udpv6_sendmsg+0x123e/0x4960 [ 799.100334] ? inet_sendmsg+0x4e9/0x800 [ 799.104323] ? ___sys_sendmsg+0xe3b/0x1240 [ 799.108555] ? __sys_sendmmsg+0x56b/0xa90 [ 799.112698] ? __se_sys_sendmmsg+0xbd/0xe0 [ 799.116925] ? __x64_sys_sendmmsg+0x56/0x70 [ 799.121248] ? do_syscall_64+0xcf/0x110 [ 799.125221] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.130592] ? memcg_kmem_put_cache+0x73/0x460 [ 799.135187] ? __msan_get_context_state+0x9/0x20 [ 799.139939] ? INIT_INT+0xc/0x30 [ 799.143302] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 799.148675] kmsan_memcpy_origins+0x13d/0x190 [ 799.153195] __msan_memcpy+0x6f/0x80 [ 799.156909] pskb_expand_head+0x436/0x1d20 [ 799.161162] gre_tap_xmit+0x4e3/0x910 [ 799.164969] ? gre_tap_init+0x650/0x650 [ 799.168948] dev_hard_start_xmit+0x6dc/0xde0 [ 799.173378] sch_direct_xmit+0x59b/0x890 [ 799.177449] __qdisc_run+0x1bac/0x3600 [ 799.181347] ? INIT_BOOL+0xc/0x30 [ 799.184796] ? do_raw_spin_trylock+0x378/0x4d0 [ 799.189392] __dev_queue_xmit+0x2131/0x3e00 [ 799.193739] dev_queue_xmit+0x4b/0x60 [ 799.197544] ip_finish_output2+0x136d/0x1560 [ 799.201967] ip_finish_output+0xd93/0x10f0 [ 799.206216] ip_mc_output+0xf25/0x10f0 [ 799.210121] ? ip_mc_finish_output+0x440/0x440 [ 799.214714] ? ip_build_and_send_pkt+0xe60/0xe60 [ 799.219466] ip_send_skb+0x178/0x370 [ 799.223193] udp_send_skb+0x1439/0x1920 [ 799.227187] udp_sendmsg+0x399a/0x4350 [ 799.231094] ? ip_copy_metadata+0x1710/0x1710 [ 799.235635] ? kmsan_set_origin+0x7f/0x100 [ 799.239874] udpv6_sendmsg+0x123e/0x4960 [ 799.243932] ? aa_label_sk_perm+0xda/0x960 [ 799.248160] ? aa_sk_perm+0x6db/0x9e0 [ 799.252039] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 799.257399] ? aa_sk_perm+0x7ab/0x9e0 [ 799.261211] ? inet_sendmsg+0x84/0x800 [ 799.265106] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 799.269434] inet_sendmsg+0x4e9/0x800 [ 799.273234] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 799.278603] ? security_socket_sendmsg+0x1bd/0x200 [ 799.283540] ___sys_sendmsg+0xe3b/0x1240 [ 799.287599] ? kmsan_set_origin+0x7f/0x100 [ 799.291831] ? inet_getname+0x490/0x490 [ 799.295817] ? __msan_poison_alloca+0x1e0/0x270 [ 799.300479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 799.305850] ? rcu_all_qs+0x3b/0x2b0 [ 799.309560] ? _cond_resched+0x59/0x120 [ 799.313536] ? rcu_all_qs+0x53/0x2b0 [ 799.317250] ? _cond_resched+0x37/0x120 [ 799.321218] ? __sys_sendmmsg+0x7c9/0xa90 [ 799.325387] ? _cond_resched+0x59/0x120 [ 799.329386] __sys_sendmmsg+0x56b/0xa90 [ 799.333395] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 799.338839] ? prepare_exit_to_usermode+0x182/0x4c0 [ 799.343861] __se_sys_sendmmsg+0xbd/0xe0 [ 799.347926] __x64_sys_sendmmsg+0x56/0x70 [ 799.352072] do_syscall_64+0xcf/0x110 [ 799.355881] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.361077] RIP: 0033:0x457569 [ 799.364267] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.383165] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 799.390870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 799.398131] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 799.405392] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 799.412652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 799.419915] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 799.427196] Uninit was stored to memory at: [ 799.431541] kmsan_internal_chain_origin+0x136/0x240 [ 799.436639] __msan_chain_origin+0x6d/0xb0 [ 799.440866] __save_stack_trace+0x8be/0xc60 [ 799.445179] save_stack_trace+0xc6/0x110 [ 799.449254] kmsan_internal_chain_origin+0x136/0x240 [ 799.454359] kmsan_memcpy_origins+0x13d/0x190 [ 799.458844] __msan_memcpy+0x6f/0x80 [ 799.462562] pskb_expand_head+0x436/0x1d20 [ 799.466792] gre_tap_xmit+0x4e3/0x910 [ 799.470586] dev_hard_start_xmit+0x6dc/0xde0 [ 799.474987] sch_direct_xmit+0x59b/0x890 [ 799.479042] __qdisc_run+0x1bac/0x3600 [ 799.482923] __dev_queue_xmit+0x2131/0x3e00 [ 799.487235] dev_queue_xmit+0x4b/0x60 [ 799.491035] ip_finish_output2+0x136d/0x1560 [ 799.495434] ip_finish_output+0xd93/0x10f0 [ 799.499658] ip_mc_output+0xf25/0x10f0 [ 799.503537] ip_send_skb+0x178/0x370 [ 799.507248] udp_send_skb+0x1439/0x1920 [ 799.511243] udp_sendmsg+0x399a/0x4350 [ 799.515130] udpv6_sendmsg+0x123e/0x4960 [ 799.519185] inet_sendmsg+0x4e9/0x800 [ 799.522977] ___sys_sendmsg+0xe3b/0x1240 [ 799.527030] __sys_sendmmsg+0x56b/0xa90 [ 799.530998] __se_sys_sendmmsg+0xbd/0xe0 [ 799.535063] __x64_sys_sendmmsg+0x56/0x70 [ 799.539203] do_syscall_64+0xcf/0x110 [ 799.543010] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.548185] [ 799.549812] Uninit was stored to memory at: [ 799.554138] kmsan_internal_chain_origin+0x136/0x240 [ 799.559232] __msan_chain_origin+0x6d/0xb0 [ 799.563470] __save_stack_trace+0x8be/0xc60 [ 799.567787] save_stack_trace+0xc6/0x110 [ 799.571842] kmsan_internal_chain_origin+0x136/0x240 [ 799.576941] kmsan_memcpy_origins+0x13d/0x190 [ 799.581427] __msan_memcpy+0x6f/0x80 [ 799.585136] pskb_expand_head+0x436/0x1d20 [ 799.589362] gre_tap_xmit+0x4e3/0x910 [ 799.593164] dev_hard_start_xmit+0x6dc/0xde0 [ 799.597562] sch_direct_xmit+0x59b/0x890 [ 799.601616] __qdisc_run+0x1bac/0x3600 [ 799.605511] __dev_queue_xmit+0x2131/0x3e00 [ 799.609823] dev_queue_xmit+0x4b/0x60 [ 799.613623] ip_finish_output2+0x136d/0x1560 [ 799.618027] ip_finish_output+0xd93/0x10f0 [ 799.622261] ip_mc_output+0xf25/0x10f0 [ 799.626138] ip_send_skb+0x178/0x370 [ 799.629848] udp_send_skb+0x1439/0x1920 [ 799.633816] udp_sendmsg+0x399a/0x4350 [ 799.637709] udpv6_sendmsg+0x123e/0x4960 [ 799.641773] inet_sendmsg+0x4e9/0x800 [ 799.645565] ___sys_sendmsg+0xe3b/0x1240 [ 799.649619] __sys_sendmmsg+0x56b/0xa90 [ 799.653586] __se_sys_sendmmsg+0xbd/0xe0 [ 799.657642] __x64_sys_sendmmsg+0x56/0x70 [ 799.661795] do_syscall_64+0xcf/0x110 [ 799.665599] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.670779] [ 799.672400] Uninit was stored to memory at: [ 799.676715] kmsan_internal_chain_origin+0x136/0x240 [ 799.681814] __msan_chain_origin+0x6d/0xb0 [ 799.686045] __save_stack_trace+0x8be/0xc60 [ 799.690357] save_stack_trace+0xc6/0x110 [ 799.694412] kmsan_internal_chain_origin+0x136/0x240 [ 799.699681] kmsan_memcpy_origins+0x13d/0x190 [ 799.704190] __msan_memcpy+0x6f/0x80 [ 799.707909] pskb_expand_head+0x436/0x1d20 [ 799.712140] gre_tap_xmit+0x4e3/0x910 [ 799.715935] dev_hard_start_xmit+0x6dc/0xde0 [ 799.720337] sch_direct_xmit+0x59b/0x890 [ 799.724389] __qdisc_run+0x1bac/0x3600 [ 799.728271] __dev_queue_xmit+0x2131/0x3e00 [ 799.732587] dev_queue_xmit+0x4b/0x60 [ 799.736380] ip_finish_output2+0x136d/0x1560 [ 799.740781] ip_finish_output+0xd93/0x10f0 [ 799.745009] ip_mc_output+0xf25/0x10f0 [ 799.748891] ip_send_skb+0x178/0x370 [ 799.752599] udp_send_skb+0x1439/0x1920 [ 799.756565] udp_sendmsg+0x399a/0x4350 [ 799.760446] udpv6_sendmsg+0x123e/0x4960 [ 799.764505] inet_sendmsg+0x4e9/0x800 [ 799.768318] ___sys_sendmsg+0xe3b/0x1240 [ 799.772373] __sys_sendmmsg+0x56b/0xa90 [ 799.776336] __se_sys_sendmmsg+0xbd/0xe0 [ 799.780389] __x64_sys_sendmmsg+0x56/0x70 [ 799.784530] do_syscall_64+0xcf/0x110 [ 799.788328] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.793505] [ 799.795120] Uninit was stored to memory at: [ 799.799435] kmsan_internal_chain_origin+0x136/0x240 [ 799.804533] __msan_chain_origin+0x6d/0xb0 [ 799.808761] __save_stack_trace+0x8be/0xc60 [ 799.813081] save_stack_trace+0xc6/0x110 [ 799.817167] kmsan_internal_chain_origin+0x136/0x240 [ 799.822270] kmsan_memcpy_origins+0x13d/0x190 [ 799.826757] __msan_memcpy+0x6f/0x80 [ 799.830766] pskb_expand_head+0x436/0x1d20 [ 799.835006] gre_tap_xmit+0x4e3/0x910 [ 799.838800] dev_hard_start_xmit+0x6dc/0xde0 [ 799.843201] sch_direct_xmit+0x59b/0x890 [ 799.847255] __qdisc_run+0x1bac/0x3600 [ 799.851133] __dev_queue_xmit+0x2131/0x3e00 [ 799.855447] dev_queue_xmit+0x4b/0x60 [ 799.859246] ip_finish_output2+0x136d/0x1560 [ 799.863649] ip_finish_output+0xd93/0x10f0 [ 799.867875] ip_mc_output+0xf25/0x10f0 [ 799.871755] ip_send_skb+0x178/0x370 [ 799.875460] udp_send_skb+0x1439/0x1920 [ 799.879450] udp_sendmsg+0x399a/0x4350 [ 799.883335] udpv6_sendmsg+0x123e/0x4960 [ 799.887389] inet_sendmsg+0x4e9/0x800 [ 799.891181] ___sys_sendmsg+0xe3b/0x1240 [ 799.895232] __sys_sendmmsg+0x56b/0xa90 [ 799.899216] __se_sys_sendmmsg+0xbd/0xe0 [ 799.903280] __x64_sys_sendmmsg+0x56/0x70 [ 799.907445] do_syscall_64+0xcf/0x110 [ 799.911317] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.916493] [ 799.918130] Uninit was stored to memory at: [ 799.922448] kmsan_internal_chain_origin+0x136/0x240 [ 799.927546] __msan_chain_origin+0x6d/0xb0 [ 799.931775] __save_stack_trace+0x8be/0xc60 [ 799.936089] save_stack_trace+0xc6/0x110 [ 799.940147] kmsan_internal_chain_origin+0x136/0x240 [ 799.945261] kmsan_memcpy_origins+0x13d/0x190 [ 799.949750] __msan_memcpy+0x6f/0x80 [ 799.953466] pskb_expand_head+0x436/0x1d20 [ 799.957693] gre_tap_xmit+0x4e3/0x910 [ 799.961486] dev_hard_start_xmit+0x6dc/0xde0 [ 799.965892] sch_direct_xmit+0x59b/0x890 [ 799.969943] __qdisc_run+0x1bac/0x3600 [ 799.973828] __dev_queue_xmit+0x2131/0x3e00 [ 799.978140] dev_queue_xmit+0x4b/0x60 [ 799.981936] ip_finish_output2+0x136d/0x1560 [ 799.986335] ip_finish_output+0xd93/0x10f0 [ 799.990573] ip_mc_output+0xf25/0x10f0 [ 799.994452] ip_send_skb+0x178/0x370 [ 799.998161] udp_send_skb+0x1439/0x1920 [ 800.002158] udp_sendmsg+0x399a/0x4350 [ 800.006050] udpv6_sendmsg+0x123e/0x4960 [ 800.010101] inet_sendmsg+0x4e9/0x800 [ 800.013895] ___sys_sendmsg+0xe3b/0x1240 [ 800.017945] __sys_sendmmsg+0x56b/0xa90 [ 800.021910] __se_sys_sendmmsg+0xbd/0xe0 [ 800.025969] __x64_sys_sendmmsg+0x56/0x70 [ 800.030107] do_syscall_64+0xcf/0x110 [ 800.033907] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.039083] [ 800.040695] Uninit was stored to memory at: [ 800.045019] kmsan_internal_chain_origin+0x136/0x240 [ 800.050117] __msan_chain_origin+0x6d/0xb0 [ 800.054344] __save_stack_trace+0x8be/0xc60 [ 800.058658] save_stack_trace+0xc6/0x110 [ 800.062725] kmsan_internal_chain_origin+0x136/0x240 [ 800.067821] kmsan_memcpy_origins+0x13d/0x190 [ 800.072310] __msan_memcpy+0x6f/0x80 [ 800.076029] pskb_expand_head+0x436/0x1d20 [ 800.080261] gre_tap_xmit+0x4e3/0x910 [ 800.084077] dev_hard_start_xmit+0x6dc/0xde0 [ 800.088475] sch_direct_xmit+0x59b/0x890 [ 800.092535] __qdisc_run+0x1bac/0x3600 [ 800.096417] __dev_queue_xmit+0x2131/0x3e00 [ 800.100739] dev_queue_xmit+0x4b/0x60 [ 800.104533] ip_finish_output2+0x136d/0x1560 [ 800.108948] ip_finish_output+0xd93/0x10f0 [ 800.113177] ip_mc_output+0xf25/0x10f0 [ 800.117054] ip_send_skb+0x178/0x370 [ 800.120760] udp_send_skb+0x1439/0x1920 [ 800.124733] udp_sendmsg+0x399a/0x4350 [ 800.128611] udpv6_sendmsg+0x123e/0x4960 [ 800.132669] inet_sendmsg+0x4e9/0x800 [ 800.136463] ___sys_sendmsg+0xe3b/0x1240 [ 800.140520] __sys_sendmmsg+0x56b/0xa90 [ 800.144485] __se_sys_sendmmsg+0xbd/0xe0 [ 800.148549] __x64_sys_sendmmsg+0x56/0x70 [ 800.152708] do_syscall_64+0xcf/0x110 [ 800.156514] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.161699] [ 800.163340] Uninit was stored to memory at: [ 800.167657] kmsan_internal_chain_origin+0x136/0x240 [ 800.172756] __msan_chain_origin+0x6d/0xb0 [ 800.176982] __save_stack_trace+0x8be/0xc60 [ 800.181296] save_stack_trace+0xc6/0x110 [ 800.185352] kmsan_internal_chain_origin+0x136/0x240 [ 800.190457] kmsan_memcpy_origins+0x13d/0x190 [ 800.194944] __msan_memcpy+0x6f/0x80 [ 800.198652] pskb_expand_head+0x436/0x1d20 [ 800.202881] gre_tap_xmit+0x4e3/0x910 [ 800.206675] dev_hard_start_xmit+0x6dc/0xde0 [ 800.211074] sch_direct_xmit+0x59b/0x890 [ 800.215129] __qdisc_run+0x1bac/0x3600 [ 800.219014] __dev_queue_xmit+0x2131/0x3e00 [ 800.223327] dev_queue_xmit+0x4b/0x60 [ 800.227122] ip_finish_output2+0x136d/0x1560 [ 800.231527] ip_finish_output+0xd93/0x10f0 [ 800.235770] ip_mc_output+0xf25/0x10f0 [ 800.239668] ip_send_skb+0x178/0x370 [ 800.243390] udp_send_skb+0x1439/0x1920 [ 800.247354] udp_sendmsg+0x399a/0x4350 [ 800.251234] udpv6_sendmsg+0x123e/0x4960 [ 800.255301] inet_sendmsg+0x4e9/0x800 [ 800.259095] ___sys_sendmsg+0xe3b/0x1240 [ 800.263151] __sys_sendmmsg+0x56b/0xa90 [ 800.267118] __se_sys_sendmmsg+0xbd/0xe0 [ 800.271167] __x64_sys_sendmmsg+0x56/0x70 [ 800.275313] do_syscall_64+0xcf/0x110 [ 800.279108] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.284286] [ 800.285914] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 800.292130] Variable was created at: [ 800.295836] kfree+0x12a/0x2fb0 [ 800.299113] skb_release_data+0xbcb/0xc90 [ 800.316233] not chained 250000 origins [ 800.320190] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 800.327480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.336832] Call Trace: [ 800.339421] dump_stack+0x32d/0x480 [ 800.343062] kmsan_internal_chain_origin+0x222/0x240 [ 800.348170] ? skb_release_data+0xbcb/0xc90 [ 800.352507] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 800.357865] ? __module_address+0x6a/0x5f0 [ 800.362098] ? kmsan_print_origin+0x1e8/0x260 [ 800.366592] ? is_bpf_text_address+0x3e5/0x4d0 [ 800.371173] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 800.376535] ? is_bpf_text_address+0x49e/0x4d0 [ 800.381129] ? kmsan_internal_chain_origin+0x90/0x240 [ 800.386329] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 800.391703] ? is_bpf_text_address+0x49e/0x4d0 [ 800.396299] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 800.401761] ? in_task_stack+0x12c/0x210 [ 800.405837] __msan_chain_origin+0x6d/0xb0 [ 800.410070] ? kmsan_memcpy_origins+0x13d/0x190 [ 800.414739] __save_stack_trace+0x8be/0xc60 [ 800.419078] ? kmsan_memcpy_origins+0x13d/0x190 [ 800.423761] save_stack_trace+0xc6/0x110 [ 800.427836] kmsan_internal_chain_origin+0x136/0x240 [ 800.432933] ? inet_sendmsg+0x4e9/0x800 [ 800.436927] ? kmsan_internal_chain_origin+0x136/0x240 [ 800.442200] ? kmsan_memcpy_origins+0x13d/0x190 [ 800.446861] ? __msan_memcpy+0x6f/0x80 [ 800.450743] ? pskb_expand_head+0x436/0x1d20 [ 800.455145] ? gre_tap_xmit+0x4e3/0x910 [ 800.459114] ? dev_hard_start_xmit+0x6dc/0xde0 [ 800.463689] ? sch_direct_xmit+0x59b/0x890 [ 800.467918] ? __qdisc_run+0x1bac/0x3600 [ 800.471975] ? __dev_queue_xmit+0x2131/0x3e00 [ 800.476463] ? dev_queue_xmit+0x4b/0x60 [ 800.480430] ? ip_finish_output2+0x136d/0x1560 [ 800.485010] ? ip_finish_output+0xd93/0x10f0 [ 800.489409] ? ip_mc_output+0xf25/0x10f0 [ 800.493461] ? ip_send_skb+0x178/0x370 [ 800.497347] ? udp_send_skb+0x1439/0x1920 [ 800.501516] ? udp_sendmsg+0x399a/0x4350 [ 800.505611] ? udpv6_sendmsg+0x123e/0x4960 [ 800.509867] ? inet_sendmsg+0x4e9/0x800 [ 800.513836] ? ___sys_sendmsg+0xe3b/0x1240 [ 800.518064] ? __sys_sendmmsg+0x56b/0xa90 [ 800.522208] ? __se_sys_sendmmsg+0xbd/0xe0 [ 800.526458] ? __x64_sys_sendmmsg+0x56/0x70 [ 800.530773] ? do_syscall_64+0xcf/0x110 [ 800.534744] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.540108] ? memcg_kmem_put_cache+0x73/0x460 [ 800.544702] ? __msan_get_context_state+0x9/0x20 [ 800.549552] ? INIT_INT+0xc/0x30 [ 800.552916] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 800.558293] kmsan_memcpy_origins+0x13d/0x190 [ 800.562798] __msan_memcpy+0x6f/0x80 [ 800.566516] pskb_expand_head+0x436/0x1d20 [ 800.570770] gre_tap_xmit+0x4e3/0x910 [ 800.574575] ? gre_tap_init+0x650/0x650 [ 800.578547] dev_hard_start_xmit+0x6dc/0xde0 [ 800.582977] sch_direct_xmit+0x59b/0x890 [ 800.587066] __qdisc_run+0x1bac/0x3600 [ 800.590959] ? INIT_BOOL+0xc/0x30 [ 800.594424] ? do_raw_spin_trylock+0x378/0x4d0 [ 800.599015] __dev_queue_xmit+0x2131/0x3e00 [ 800.603366] dev_queue_xmit+0x4b/0x60 [ 800.607170] ip_finish_output2+0x136d/0x1560 [ 800.611643] ip_finish_output+0xd93/0x10f0 [ 800.615923] ip_mc_output+0xf25/0x10f0 [ 800.619841] ? ip_mc_finish_output+0x440/0x440 [ 800.624425] ? ip_build_and_send_pkt+0xe60/0xe60 [ 800.629177] ip_send_skb+0x178/0x370 [ 800.632902] udp_send_skb+0x1439/0x1920 [ 800.636893] udp_sendmsg+0x399a/0x4350 [ 800.640777] ? ip_copy_metadata+0x1710/0x1710 [ 800.645353] ? kmsan_set_origin+0x7f/0x100 [ 800.649607] udpv6_sendmsg+0x123e/0x4960 [ 800.653665] ? aa_label_sk_perm+0xda/0x960 [ 800.657893] ? aa_sk_perm+0x6db/0x9e0 [ 800.661759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 800.667155] ? aa_sk_perm+0x7ab/0x9e0 [ 800.670968] ? inet_sendmsg+0x84/0x800 [ 800.674856] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 800.679173] inet_sendmsg+0x4e9/0x800 [ 800.682975] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 800.688337] ? security_socket_sendmsg+0x1bd/0x200 [ 800.693304] ___sys_sendmsg+0xe3b/0x1240 [ 800.697362] ? kmsan_set_origin+0x7f/0x100 [ 800.701592] ? inet_getname+0x490/0x490 [ 800.705601] ? __msan_poison_alloca+0x1e0/0x270 [ 800.710284] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 800.715653] ? rcu_all_qs+0x3b/0x2b0 [ 800.719366] ? _cond_resched+0x59/0x120 [ 800.723348] ? rcu_all_qs+0x53/0x2b0 [ 800.727055] ? _cond_resched+0x37/0x120 [ 800.731024] ? __sys_sendmmsg+0x7c9/0xa90 [ 800.735181] ? _cond_resched+0x59/0x120 [ 800.739153] __sys_sendmmsg+0x56b/0xa90 [ 800.743149] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 800.748596] ? prepare_exit_to_usermode+0x182/0x4c0 [ 800.753622] __se_sys_sendmmsg+0xbd/0xe0 [ 800.757695] __x64_sys_sendmmsg+0x56/0x70 [ 800.761841] do_syscall_64+0xcf/0x110 [ 800.765643] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.770824] RIP: 0033:0x457569 [ 800.774012] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.792914] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 800.800621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 800.807885] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 800.815149] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 800.822412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 800.829702] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 800.836978] Uninit was stored to memory at: [ 800.841302] kmsan_internal_chain_origin+0x136/0x240 [ 800.846397] __msan_chain_origin+0x6d/0xb0 [ 800.850627] __save_stack_trace+0x8be/0xc60 [ 800.854941] save_stack_trace+0xc6/0x110 [ 800.858996] kmsan_internal_chain_origin+0x136/0x240 [ 800.864096] kmsan_memcpy_origins+0x13d/0x190 [ 800.868587] __msan_memcpy+0x6f/0x80 [ 800.872305] pskb_expand_head+0x436/0x1d20 [ 800.876737] gre_tap_xmit+0x4e3/0x910 [ 800.880528] dev_hard_start_xmit+0x6dc/0xde0 [ 800.884928] sch_direct_xmit+0x59b/0x890 [ 800.888994] __qdisc_run+0x1bac/0x3600 [ 800.892877] __dev_queue_xmit+0x2131/0x3e00 [ 800.897192] dev_queue_xmit+0x4b/0x60 [ 800.900988] ip_finish_output2+0x136d/0x1560 [ 800.905394] ip_finish_output+0xd93/0x10f0 [ 800.909626] ip_mc_output+0xf25/0x10f0 [ 800.913516] ip_send_skb+0x178/0x370 [ 800.917223] udp_send_skb+0x1439/0x1920 [ 800.921193] udp_sendmsg+0x399a/0x4350 [ 800.925072] udpv6_sendmsg+0x123e/0x4960 [ 800.929129] inet_sendmsg+0x4e9/0x800 [ 800.932922] ___sys_sendmsg+0xe3b/0x1240 [ 800.936978] __sys_sendmmsg+0x56b/0xa90 [ 800.940947] __se_sys_sendmmsg+0xbd/0xe0 [ 800.945006] __x64_sys_sendmmsg+0x56/0x70 [ 800.949159] do_syscall_64+0xcf/0x110 [ 800.952963] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.958139] [ 800.959753] Uninit was stored to memory at: [ 800.964082] kmsan_internal_chain_origin+0x136/0x240 [ 800.969180] __msan_chain_origin+0x6d/0xb0 [ 800.973408] __save_stack_trace+0x8be/0xc60 [ 800.977720] save_stack_trace+0xc6/0x110 [ 800.981777] kmsan_internal_chain_origin+0x136/0x240 [ 800.986871] kmsan_memcpy_origins+0x13d/0x190 [ 800.991358] __msan_memcpy+0x6f/0x80 [ 800.995068] pskb_expand_head+0x436/0x1d20 [ 800.999299] gre_tap_xmit+0x4e3/0x910 [ 801.003093] dev_hard_start_xmit+0x6dc/0xde0 [ 801.007503] sch_direct_xmit+0x59b/0x890 [ 801.011561] __qdisc_run+0x1bac/0x3600 [ 801.015440] __dev_queue_xmit+0x2131/0x3e00 [ 801.019764] dev_queue_xmit+0x4b/0x60 [ 801.023556] ip_finish_output2+0x136d/0x1560 [ 801.027955] ip_finish_output+0xd93/0x10f0 [ 801.032185] ip_mc_output+0xf25/0x10f0 [ 801.036062] ip_send_skb+0x178/0x370 [ 801.039774] udp_send_skb+0x1439/0x1920 [ 801.043740] udp_sendmsg+0x399a/0x4350 [ 801.047618] udpv6_sendmsg+0x123e/0x4960 [ 801.051682] inet_sendmsg+0x4e9/0x800 [ 801.055489] ___sys_sendmsg+0xe3b/0x1240 [ 801.059548] __sys_sendmmsg+0x56b/0xa90 [ 801.063516] __se_sys_sendmmsg+0xbd/0xe0 [ 801.067569] __x64_sys_sendmmsg+0x56/0x70 [ 801.071732] do_syscall_64+0xcf/0x110 [ 801.075548] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.080724] [ 801.082338] Uninit was stored to memory at: [ 801.086654] kmsan_internal_chain_origin+0x136/0x240 [ 801.091764] __msan_chain_origin+0x6d/0xb0 [ 801.095990] __save_stack_trace+0x8be/0xc60 [ 801.100305] save_stack_trace+0xc6/0x110 [ 801.104363] kmsan_internal_chain_origin+0x136/0x240 [ 801.109459] kmsan_memcpy_origins+0x13d/0x190 [ 801.113949] __msan_memcpy+0x6f/0x80 [ 801.117657] pskb_expand_head+0x436/0x1d20 [ 801.121885] gre_tap_xmit+0x4e3/0x910 [ 801.125677] dev_hard_start_xmit+0x6dc/0xde0 [ 801.130074] sch_direct_xmit+0x59b/0x890 [ 801.134127] __qdisc_run+0x1bac/0x3600 [ 801.138007] __dev_queue_xmit+0x2131/0x3e00 [ 801.142321] dev_queue_xmit+0x4b/0x60 [ 801.146112] ip_finish_output2+0x136d/0x1560 [ 801.150515] ip_finish_output+0xd93/0x10f0 [ 801.154756] ip_mc_output+0xf25/0x10f0 [ 801.158634] ip_send_skb+0x178/0x370 [ 801.162345] udp_send_skb+0x1439/0x1920 [ 801.166322] udp_sendmsg+0x399a/0x4350 [ 801.170201] udpv6_sendmsg+0x123e/0x4960 [ 801.174266] inet_sendmsg+0x4e9/0x800 [ 801.178061] ___sys_sendmsg+0xe3b/0x1240 [ 801.182117] __sys_sendmmsg+0x56b/0xa90 [ 801.186099] __se_sys_sendmmsg+0xbd/0xe0 [ 801.190165] __x64_sys_sendmmsg+0x56/0x70 [ 801.194307] do_syscall_64+0xcf/0x110 [ 801.198102] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.203276] [ 801.204892] Uninit was stored to memory at: [ 801.209206] kmsan_internal_chain_origin+0x136/0x240 [ 801.214312] __msan_chain_origin+0x6d/0xb0 [ 801.218546] __save_stack_trace+0x8be/0xc60 [ 801.222878] save_stack_trace+0xc6/0x110 [ 801.226931] kmsan_internal_chain_origin+0x136/0x240 [ 801.232027] kmsan_memcpy_origins+0x13d/0x190 [ 801.236515] __msan_memcpy+0x6f/0x80 [ 801.240220] pskb_expand_head+0x436/0x1d20 [ 801.244463] gre_tap_xmit+0x4e3/0x910 [ 801.248259] dev_hard_start_xmit+0x6dc/0xde0 [ 801.252666] sch_direct_xmit+0x59b/0x890 [ 801.256720] __qdisc_run+0x1bac/0x3600 [ 801.260600] __dev_queue_xmit+0x2131/0x3e00 [ 801.264927] dev_queue_xmit+0x4b/0x60 [ 801.268721] ip_finish_output2+0x136d/0x1560 [ 801.273120] ip_finish_output+0xd93/0x10f0 [ 801.277346] ip_mc_output+0xf25/0x10f0 [ 801.281237] ip_send_skb+0x178/0x370 [ 801.284950] udp_send_skb+0x1439/0x1920 [ 801.288912] udp_sendmsg+0x399a/0x4350 [ 801.292809] udpv6_sendmsg+0x123e/0x4960 [ 801.296863] inet_sendmsg+0x4e9/0x800 [ 801.300655] ___sys_sendmsg+0xe3b/0x1240 [ 801.304705] __sys_sendmmsg+0x56b/0xa90 [ 801.308683] __se_sys_sendmmsg+0xbd/0xe0 [ 801.312734] __x64_sys_sendmmsg+0x56/0x70 [ 801.316890] do_syscall_64+0xcf/0x110 [ 801.320682] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.325856] [ 801.327469] Uninit was stored to memory at: [ 801.331802] kmsan_internal_chain_origin+0x136/0x240 [ 801.336896] __msan_chain_origin+0x6d/0xb0 [ 801.341123] __save_stack_trace+0x8be/0xc60 [ 801.345447] save_stack_trace+0xc6/0x110 [ 801.349507] kmsan_internal_chain_origin+0x136/0x240 [ 801.354606] kmsan_memcpy_origins+0x13d/0x190 [ 801.359092] __msan_memcpy+0x6f/0x80 [ 801.362804] pskb_expand_head+0x436/0x1d20 [ 801.367032] gre_tap_xmit+0x4e3/0x910 [ 801.370834] dev_hard_start_xmit+0x6dc/0xde0 [ 801.375234] sch_direct_xmit+0x59b/0x890 [ 801.379292] __qdisc_run+0x1bac/0x3600 [ 801.383175] __dev_queue_xmit+0x2131/0x3e00 [ 801.387498] dev_queue_xmit+0x4b/0x60 [ 801.391295] ip_finish_output2+0x136d/0x1560 [ 801.395695] ip_finish_output+0xd93/0x10f0 [ 801.399920] ip_mc_output+0xf25/0x10f0 [ 801.403802] ip_send_skb+0x178/0x370 [ 801.407525] udp_send_skb+0x1439/0x1920 [ 801.411497] udp_sendmsg+0x399a/0x4350 [ 801.415380] udpv6_sendmsg+0x123e/0x4960 [ 801.419433] inet_sendmsg+0x4e9/0x800 [ 801.423229] ___sys_sendmsg+0xe3b/0x1240 [ 801.427289] __sys_sendmmsg+0x56b/0xa90 [ 801.431259] __se_sys_sendmmsg+0xbd/0xe0 [ 801.435312] __x64_sys_sendmmsg+0x56/0x70 [ 801.439452] do_syscall_64+0xcf/0x110 [ 801.443256] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.448429] [ 801.450045] Uninit was stored to memory at: [ 801.454361] kmsan_internal_chain_origin+0x136/0x240 [ 801.459460] __msan_chain_origin+0x6d/0xb0 [ 801.463702] __save_stack_trace+0x8be/0xc60 [ 801.468015] save_stack_trace+0xc6/0x110 [ 801.472070] kmsan_internal_chain_origin+0x136/0x240 [ 801.477165] kmsan_memcpy_origins+0x13d/0x190 [ 801.481661] __msan_memcpy+0x6f/0x80 [ 801.485400] pskb_expand_head+0x436/0x1d20 [ 801.489625] gre_tap_xmit+0x4e3/0x910 [ 801.493416] dev_hard_start_xmit+0x6dc/0xde0 [ 801.497818] sch_direct_xmit+0x59b/0x890 [ 801.501871] __qdisc_run+0x1bac/0x3600 [ 801.505749] __dev_queue_xmit+0x2131/0x3e00 [ 801.510062] dev_queue_xmit+0x4b/0x60 [ 801.513854] ip_finish_output2+0x136d/0x1560 [ 801.518258] ip_finish_output+0xd93/0x10f0 [ 801.522484] ip_mc_output+0xf25/0x10f0 [ 801.526369] ip_send_skb+0x178/0x370 [ 801.530074] udp_send_skb+0x1439/0x1920 [ 801.534040] udp_sendmsg+0x399a/0x4350 [ 801.537919] udpv6_sendmsg+0x123e/0x4960 [ 801.541974] inet_sendmsg+0x4e9/0x800 [ 801.545767] ___sys_sendmsg+0xe3b/0x1240 [ 801.549824] __sys_sendmmsg+0x56b/0xa90 [ 801.553790] __se_sys_sendmmsg+0xbd/0xe0 [ 801.557851] __x64_sys_sendmmsg+0x56/0x70 [ 801.562017] do_syscall_64+0xcf/0x110 [ 801.565809] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.570980] [ 801.572601] Uninit was stored to memory at: [ 801.576920] kmsan_internal_chain_origin+0x136/0x240 [ 801.582021] __msan_chain_origin+0x6d/0xb0 [ 801.586256] __save_stack_trace+0x8be/0xc60 [ 801.590569] save_stack_trace+0xc6/0x110 [ 801.594623] kmsan_internal_chain_origin+0x136/0x240 [ 801.599743] kmsan_memcpy_origins+0x13d/0x190 [ 801.604274] __msan_memcpy+0x6f/0x80 [ 801.607982] pskb_expand_head+0x436/0x1d20 [ 801.612224] gre_tap_xmit+0x4e3/0x910 [ 801.616034] dev_hard_start_xmit+0x6dc/0xde0 [ 801.620443] sch_direct_xmit+0x59b/0x890 [ 801.624498] __qdisc_run+0x1bac/0x3600 [ 801.628382] __dev_queue_xmit+0x2131/0x3e00 [ 801.632696] dev_queue_xmit+0x4b/0x60 [ 801.636494] ip_finish_output2+0x136d/0x1560 [ 801.640898] ip_finish_output+0xd93/0x10f0 [ 801.645125] ip_mc_output+0xf25/0x10f0 [ 801.649004] ip_send_skb+0x178/0x370 [ 801.652735] udp_send_skb+0x1439/0x1920 [ 801.656700] udp_sendmsg+0x399a/0x4350 [ 801.660577] udpv6_sendmsg+0x123e/0x4960 [ 801.664634] inet_sendmsg+0x4e9/0x800 [ 801.668425] ___sys_sendmsg+0xe3b/0x1240 [ 801.672476] __sys_sendmmsg+0x56b/0xa90 [ 801.676461] __se_sys_sendmmsg+0xbd/0xe0 [ 801.680515] __x64_sys_sendmmsg+0x56/0x70 [ 801.684662] do_syscall_64+0xcf/0x110 [ 801.688456] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.693638] [ 801.695285] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 801.701659] Variable was created at: [ 801.705403] kfree+0x12a/0x2fb0 [ 801.708675] skb_release_data+0xbcb/0xc90 [ 801.725939] not chained 260000 origins [ 801.729873] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 801.737169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.746548] Call Trace: [ 801.749136] dump_stack+0x32d/0x480 [ 801.752774] kmsan_internal_chain_origin+0x222/0x240 [ 801.757886] ? skb_release_data+0xbcb/0xc90 [ 801.762216] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 801.767584] ? __module_address+0x6a/0x5f0 [ 801.771815] ? kmsan_print_origin+0x1e8/0x260 [ 801.776312] ? is_bpf_text_address+0x3e5/0x4d0 [ 801.780891] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 801.786258] ? is_bpf_text_address+0x49e/0x4d0 [ 801.790835] ? kmsan_internal_chain_origin+0x90/0x240 [ 801.796036] ? __kernel_text_address+0x250/0x350 [ 801.800792] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 801.806238] ? in_task_stack+0x12c/0x210 [ 801.810318] __msan_chain_origin+0x6d/0xb0 [ 801.814554] ? ip_finish_output+0xd93/0x10f0 [ 801.818959] __save_stack_trace+0x8be/0xc60 [ 801.823301] ? ip_finish_output+0xd93/0x10f0 [ 801.827711] save_stack_trace+0xc6/0x110 [ 801.832061] kmsan_internal_chain_origin+0x136/0x240 [ 801.837163] ? inet_sendmsg+0x4e9/0x800 [ 801.841140] ? kmsan_internal_chain_origin+0x136/0x240 [ 801.846412] ? kmsan_memcpy_origins+0x13d/0x190 [ 801.851077] ? __msan_memcpy+0x6f/0x80 [ 801.854965] ? pskb_expand_head+0x436/0x1d20 [ 801.859369] ? gre_tap_xmit+0x4e3/0x910 [ 801.863341] ? dev_hard_start_xmit+0x6dc/0xde0 [ 801.867919] ? sch_direct_xmit+0x59b/0x890 [ 801.872146] ? __qdisc_run+0x1bac/0x3600 [ 801.876201] ? __dev_queue_xmit+0x2131/0x3e00 [ 801.880686] ? dev_queue_xmit+0x4b/0x60 [ 801.884664] ? ip_finish_output2+0x136d/0x1560 [ 801.889250] ? __msan_poison_alloca+0x1e0/0x270 [ 801.893926] ? memcg_kmem_put_cache+0x73/0x460 [ 801.898522] ? __msan_get_context_state+0x9/0x20 [ 801.903276] ? INIT_INT+0xc/0x30 [ 801.906650] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 801.912044] kmsan_memcpy_origins+0x13d/0x190 [ 801.916600] __msan_memcpy+0x6f/0x80 [ 801.920316] pskb_expand_head+0x436/0x1d20 [ 801.924574] gre_tap_xmit+0x4e3/0x910 [ 801.928387] ? gre_tap_init+0x650/0x650 [ 801.932388] dev_hard_start_xmit+0x6dc/0xde0 [ 801.936815] sch_direct_xmit+0x59b/0x890 [ 801.940888] __qdisc_run+0x1bac/0x3600 [ 801.944790] ? INIT_BOOL+0xc/0x30 [ 801.948247] ? do_raw_spin_trylock+0x378/0x4d0 [ 801.952842] __dev_queue_xmit+0x2131/0x3e00 [ 801.957196] dev_queue_xmit+0x4b/0x60 [ 801.960997] ip_finish_output2+0x136d/0x1560 [ 801.965422] ip_finish_output+0xd93/0x10f0 [ 801.969667] ip_mc_output+0xf25/0x10f0 [ 801.973587] ? ip_mc_finish_output+0x440/0x440 [ 801.978170] ? ip_build_and_send_pkt+0xe60/0xe60 [ 801.982922] ip_send_skb+0x178/0x370 [ 801.986646] udp_send_skb+0x1439/0x1920 [ 801.990645] udp_sendmsg+0x399a/0x4350 [ 801.994533] ? ip_copy_metadata+0x1710/0x1710 [ 801.999073] ? kmsan_set_origin+0x7f/0x100 [ 802.003320] udpv6_sendmsg+0x123e/0x4960 [ 802.007380] ? aa_label_sk_perm+0xda/0x960 [ 802.011609] ? aa_sk_perm+0x6db/0x9e0 [ 802.015458] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.020815] ? aa_sk_perm+0x7ab/0x9e0 [ 802.024629] ? inet_sendmsg+0x84/0x800 [ 802.028517] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 802.032835] inet_sendmsg+0x4e9/0x800 [ 802.036636] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.042016] ? security_socket_sendmsg+0x1bd/0x200 [ 802.046965] ___sys_sendmsg+0xe3b/0x1240 [ 802.051038] ? kmsan_set_origin+0x7f/0x100 [ 802.055274] ? inet_getname+0x490/0x490 [ 802.059272] ? __msan_poison_alloca+0x1e0/0x270 [ 802.063942] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.069322] ? rcu_all_qs+0x3b/0x2b0 [ 802.073048] ? _cond_resched+0x59/0x120 [ 802.077030] ? rcu_all_qs+0x53/0x2b0 [ 802.080739] ? _cond_resched+0x37/0x120 [ 802.084707] ? __sys_sendmmsg+0x7c9/0xa90 [ 802.088866] ? _cond_resched+0x59/0x120 [ 802.092838] __sys_sendmmsg+0x56b/0xa90 [ 802.096832] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 802.102294] ? prepare_exit_to_usermode+0x182/0x4c0 [ 802.107353] __se_sys_sendmmsg+0xbd/0xe0 [ 802.111455] __x64_sys_sendmmsg+0x56/0x70 [ 802.115643] do_syscall_64+0xcf/0x110 [ 802.119477] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.124696] RIP: 0033:0x457569 [ 802.127921] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.146851] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 802.154621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 802.161923] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 802.169189] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 802.176468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 802.183734] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 802.191014] Uninit was stored to memory at: [ 802.195338] kmsan_internal_chain_origin+0x136/0x240 [ 802.200435] __msan_chain_origin+0x6d/0xb0 [ 802.204664] __save_stack_trace+0x8be/0xc60 [ 802.208991] save_stack_trace+0xc6/0x110 [ 802.213052] kmsan_internal_chain_origin+0x136/0x240 [ 802.218165] kmsan_memcpy_origins+0x13d/0x190 [ 802.222654] __msan_memcpy+0x6f/0x80 [ 802.226364] pskb_expand_head+0x436/0x1d20 [ 802.230591] gre_tap_xmit+0x4e3/0x910 [ 802.234393] dev_hard_start_xmit+0x6dc/0xde0 [ 802.238814] sch_direct_xmit+0x59b/0x890 [ 802.242868] __qdisc_run+0x1bac/0x3600 [ 802.246760] __dev_queue_xmit+0x2131/0x3e00 [ 802.251069] dev_queue_xmit+0x4b/0x60 [ 802.254862] ip_finish_output2+0x136d/0x1560 [ 802.259267] ip_finish_output+0xd93/0x10f0 [ 802.263493] ip_mc_output+0xf25/0x10f0 [ 802.267378] ip_send_skb+0x178/0x370 [ 802.271083] udp_send_skb+0x1439/0x1920 [ 802.275078] udp_sendmsg+0x399a/0x4350 [ 802.278957] udpv6_sendmsg+0x123e/0x4960 [ 802.283026] inet_sendmsg+0x4e9/0x800 [ 802.286847] ___sys_sendmsg+0xe3b/0x1240 [ 802.290910] __sys_sendmmsg+0x56b/0xa90 [ 802.294876] __se_sys_sendmmsg+0xbd/0xe0 [ 802.298927] __x64_sys_sendmmsg+0x56/0x70 [ 802.303070] do_syscall_64+0xcf/0x110 [ 802.306866] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.312060] [ 802.313676] Uninit was stored to memory at: [ 802.317991] kmsan_internal_chain_origin+0x136/0x240 [ 802.323092] __msan_chain_origin+0x6d/0xb0 [ 802.327321] __save_stack_trace+0x8be/0xc60 [ 802.331638] save_stack_trace+0xc6/0x110 [ 802.335727] kmsan_internal_chain_origin+0x136/0x240 [ 802.340825] kmsan_memcpy_origins+0x13d/0x190 [ 802.345315] __msan_memcpy+0x6f/0x80 [ 802.349027] pskb_expand_head+0x436/0x1d20 [ 802.353261] gre_tap_xmit+0x4e3/0x910 [ 802.357057] dev_hard_start_xmit+0x6dc/0xde0 [ 802.361456] sch_direct_xmit+0x59b/0x890 [ 802.365510] __qdisc_run+0x1bac/0x3600 [ 802.369387] __dev_queue_xmit+0x2131/0x3e00 [ 802.373699] dev_queue_xmit+0x4b/0x60 [ 802.377498] ip_finish_output2+0x136d/0x1560 [ 802.381907] ip_finish_output+0xd93/0x10f0 [ 802.386134] ip_mc_output+0xf25/0x10f0 [ 802.390013] ip_send_skb+0x178/0x370 [ 802.393721] udp_send_skb+0x1439/0x1920 [ 802.397685] udp_sendmsg+0x399a/0x4350 [ 802.401576] udpv6_sendmsg+0x123e/0x4960 [ 802.405629] inet_sendmsg+0x4e9/0x800 [ 802.409419] ___sys_sendmsg+0xe3b/0x1240 [ 802.413496] __sys_sendmmsg+0x56b/0xa90 [ 802.417490] __se_sys_sendmmsg+0xbd/0xe0 [ 802.421553] __x64_sys_sendmmsg+0x56/0x70 [ 802.425694] do_syscall_64+0xcf/0x110 [ 802.429491] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.434670] [ 802.436290] Uninit was stored to memory at: [ 802.440608] kmsan_internal_chain_origin+0x136/0x240 [ 802.445703] __msan_chain_origin+0x6d/0xb0 [ 802.449931] __save_stack_trace+0x8be/0xc60 [ 802.454265] save_stack_trace+0xc6/0x110 [ 802.458327] kmsan_internal_chain_origin+0x136/0x240 [ 802.463421] kmsan_memcpy_origins+0x13d/0x190 [ 802.467909] __msan_memcpy+0x6f/0x80 [ 802.471614] pskb_expand_head+0x436/0x1d20 [ 802.475850] gre_tap_xmit+0x4e3/0x910 [ 802.479651] dev_hard_start_xmit+0x6dc/0xde0 [ 802.484052] sch_direct_xmit+0x59b/0x890 [ 802.488104] __qdisc_run+0x1bac/0x3600 [ 802.491984] __dev_queue_xmit+0x2131/0x3e00 [ 802.496299] dev_queue_xmit+0x4b/0x60 [ 802.500093] ip_finish_output2+0x136d/0x1560 [ 802.504494] ip_finish_output+0xd93/0x10f0 [ 802.508722] ip_mc_output+0xf25/0x10f0 [ 802.512601] ip_send_skb+0x178/0x370 [ 802.516310] udp_send_skb+0x1439/0x1920 [ 802.520285] udp_sendmsg+0x399a/0x4350 [ 802.524163] udpv6_sendmsg+0x123e/0x4960 [ 802.528217] inet_sendmsg+0x4e9/0x800 [ 802.532019] ___sys_sendmsg+0xe3b/0x1240 [ 802.536079] __sys_sendmmsg+0x56b/0xa90 [ 802.540052] __se_sys_sendmmsg+0xbd/0xe0 [ 802.544114] __x64_sys_sendmmsg+0x56/0x70 [ 802.548266] do_syscall_64+0xcf/0x110 [ 802.552068] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.557249] [ 802.558863] Uninit was stored to memory at: [ 802.563183] kmsan_internal_chain_origin+0x136/0x240 [ 802.568278] __msan_chain_origin+0x6d/0xb0 [ 802.572514] __save_stack_trace+0x8be/0xc60 [ 802.576830] save_stack_trace+0xc6/0x110 [ 802.580890] kmsan_internal_chain_origin+0x136/0x240 [ 802.585990] kmsan_memcpy_origins+0x13d/0x190 [ 802.590483] __msan_memcpy+0x6f/0x80 [ 802.594196] pskb_expand_head+0x436/0x1d20 [ 802.598422] gre_tap_xmit+0x4e3/0x910 [ 802.602216] dev_hard_start_xmit+0x6dc/0xde0 [ 802.606625] sch_direct_xmit+0x59b/0x890 [ 802.610677] __qdisc_run+0x1bac/0x3600 [ 802.614561] __dev_queue_xmit+0x2131/0x3e00 [ 802.618874] dev_queue_xmit+0x4b/0x60 [ 802.622670] ip_finish_output2+0x136d/0x1560 [ 802.627070] ip_finish_output+0xd93/0x10f0 [ 802.631295] ip_mc_output+0xf25/0x10f0 [ 802.635174] ip_send_skb+0x178/0x370 [ 802.638884] udp_send_skb+0x1439/0x1920 [ 802.642851] udp_sendmsg+0x399a/0x4350 [ 802.646730] udpv6_sendmsg+0x123e/0x4960 [ 802.650781] inet_sendmsg+0x4e9/0x800 [ 802.654576] ___sys_sendmsg+0xe3b/0x1240 [ 802.658655] __sys_sendmmsg+0x56b/0xa90 [ 802.662623] __se_sys_sendmmsg+0xbd/0xe0 [ 802.666677] __x64_sys_sendmmsg+0x56/0x70 [ 802.670817] do_syscall_64+0xcf/0x110 [ 802.674617] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.679792] [ 802.681407] Uninit was stored to memory at: [ 802.685728] kmsan_internal_chain_origin+0x136/0x240 [ 802.690824] __msan_chain_origin+0x6d/0xb0 [ 802.695055] __save_stack_trace+0x8be/0xc60 [ 802.699369] save_stack_trace+0xc6/0x110 [ 802.703427] kmsan_internal_chain_origin+0x136/0x240 [ 802.708537] kmsan_memcpy_origins+0x13d/0x190 [ 802.713026] __msan_memcpy+0x6f/0x80 [ 802.716733] pskb_expand_head+0x436/0x1d20 [ 802.720958] gre_tap_xmit+0x4e3/0x910 [ 802.724754] dev_hard_start_xmit+0x6dc/0xde0 [ 802.729153] sch_direct_xmit+0x59b/0x890 [ 802.733211] __qdisc_run+0x1bac/0x3600 [ 802.737104] __dev_queue_xmit+0x2131/0x3e00 [ 802.741418] dev_queue_xmit+0x4b/0x60 [ 802.745221] ip_finish_output2+0x136d/0x1560 [ 802.749625] ip_finish_output+0xd93/0x10f0 [ 802.753862] ip_mc_output+0xf25/0x10f0 [ 802.757740] ip_send_skb+0x178/0x370 [ 802.761446] udp_send_skb+0x1439/0x1920 [ 802.765410] udp_sendmsg+0x399a/0x4350 [ 802.769290] udpv6_sendmsg+0x123e/0x4960 [ 802.773353] inet_sendmsg+0x4e9/0x800 [ 802.777143] ___sys_sendmsg+0xe3b/0x1240 [ 802.781203] __sys_sendmmsg+0x56b/0xa90 [ 802.785168] __se_sys_sendmmsg+0xbd/0xe0 [ 802.789220] __x64_sys_sendmmsg+0x56/0x70 [ 802.793369] do_syscall_64+0xcf/0x110 [ 802.797181] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.802358] [ 802.803973] Uninit was stored to memory at: [ 802.808314] kmsan_internal_chain_origin+0x136/0x240 [ 802.813416] __msan_chain_origin+0x6d/0xb0 [ 802.817647] __save_stack_trace+0x8be/0xc60 [ 802.821961] save_stack_trace+0xc6/0x110 [ 802.826016] kmsan_internal_chain_origin+0x136/0x240 [ 802.831112] kmsan_memcpy_origins+0x13d/0x190 [ 802.835602] __msan_memcpy+0x6f/0x80 [ 802.839311] pskb_expand_head+0x436/0x1d20 [ 802.843540] gre_tap_xmit+0x4e3/0x910 [ 802.847336] dev_hard_start_xmit+0x6dc/0xde0 [ 802.851742] sch_direct_xmit+0x59b/0x890 [ 802.855800] __qdisc_run+0x1bac/0x3600 [ 802.859677] __dev_queue_xmit+0x2131/0x3e00 [ 802.863989] dev_queue_xmit+0x4b/0x60 [ 802.867786] ip_finish_output2+0x136d/0x1560 [ 802.872190] ip_finish_output+0xd93/0x10f0 [ 802.876416] ip_mc_output+0xf25/0x10f0 [ 802.880293] ip_send_skb+0x178/0x370 [ 802.884024] udp_send_skb+0x1439/0x1920 [ 802.887992] udp_sendmsg+0x399a/0x4350 [ 802.891875] udpv6_sendmsg+0x123e/0x4960 [ 802.895927] inet_sendmsg+0x4e9/0x800 [ 802.899750] ___sys_sendmsg+0xe3b/0x1240 [ 802.903806] __sys_sendmmsg+0x56b/0xa90 [ 802.907778] __se_sys_sendmmsg+0xbd/0xe0 [ 802.911841] __x64_sys_sendmmsg+0x56/0x70 [ 802.915987] do_syscall_64+0xcf/0x110 [ 802.919781] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.924984] [ 802.926609] Uninit was stored to memory at: [ 802.930927] kmsan_internal_chain_origin+0x136/0x240 [ 802.936031] __msan_chain_origin+0x6d/0xb0 [ 802.940263] __save_stack_trace+0x8be/0xc60 [ 802.944578] save_stack_trace+0xc6/0x110 [ 802.948646] kmsan_internal_chain_origin+0x136/0x240 [ 802.953759] kmsan_memcpy_origins+0x13d/0x190 [ 802.958252] __msan_memcpy+0x6f/0x80 [ 802.961964] pskb_expand_head+0x436/0x1d20 [ 802.966190] gre_tap_xmit+0x4e3/0x910 [ 802.969982] dev_hard_start_xmit+0x6dc/0xde0 [ 802.974386] sch_direct_xmit+0x59b/0x890 [ 802.978437] __qdisc_run+0x1bac/0x3600 [ 802.982318] __dev_queue_xmit+0x2131/0x3e00 [ 802.986633] dev_queue_xmit+0x4b/0x60 [ 802.990429] ip_finish_output2+0x136d/0x1560 [ 802.994849] ip_finish_output+0xd93/0x10f0 [ 802.999078] ip_mc_output+0xf25/0x10f0 [ 803.002958] ip_send_skb+0x178/0x370 [ 803.006667] udp_send_skb+0x1439/0x1920 [ 803.010632] udp_sendmsg+0x399a/0x4350 [ 803.014515] udpv6_sendmsg+0x123e/0x4960 [ 803.018570] inet_sendmsg+0x4e9/0x800 [ 803.022366] ___sys_sendmsg+0xe3b/0x1240 [ 803.026417] __sys_sendmmsg+0x56b/0xa90 [ 803.030384] __se_sys_sendmmsg+0xbd/0xe0 [ 803.034440] __x64_sys_sendmmsg+0x56/0x70 [ 803.038580] do_syscall_64+0xcf/0x110 [ 803.042377] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.047553] [ 803.049175] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 803.055394] Variable was created at: [ 803.059103] kfree+0x12a/0x2fb0 [ 803.062381] skb_release_data+0xbcb/0xc90 [ 803.078987] not chained 270000 origins [ 803.082923] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 803.090204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.099553] Call Trace: [ 803.102141] dump_stack+0x32d/0x480 [ 803.105778] kmsan_internal_chain_origin+0x222/0x240 [ 803.110884] ? skb_release_data+0xbcb/0xc90 [ 803.115214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 803.120578] ? __module_address+0x6a/0x5f0 [ 803.124807] ? kmsan_print_origin+0x1e8/0x260 [ 803.129302] ? is_bpf_text_address+0x3e5/0x4d0 [ 803.133890] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 803.139270] ? is_bpf_text_address+0x49e/0x4d0 [ 803.143873] ? kmsan_internal_chain_origin+0x90/0x240 [ 803.149073] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 803.154432] ? is_bpf_text_address+0x49e/0x4d0 [ 803.159015] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 803.164469] ? in_task_stack+0x12c/0x210 [ 803.168545] __msan_chain_origin+0x6d/0xb0 [ 803.172778] ? __x64_sys_sendmmsg+0x56/0x70 [ 803.177098] __save_stack_trace+0x8be/0xc60 [ 803.181434] ? __x64_sys_sendmmsg+0x56/0x70 [ 803.185772] save_stack_trace+0xc6/0x110 [ 803.189838] kmsan_internal_chain_origin+0x136/0x240 [ 803.194941] ? inet_sendmsg+0x4e9/0x800 [ 803.198919] ? kmsan_internal_chain_origin+0x136/0x240 [ 803.204192] ? kmsan_memcpy_origins+0x13d/0x190 [ 803.208855] ? __msan_memcpy+0x6f/0x80 [ 803.212741] ? pskb_expand_head+0x436/0x1d20 [ 803.217142] ? gre_tap_xmit+0x4e3/0x910 [ 803.221111] ? dev_hard_start_xmit+0x6dc/0xde0 [ 803.225686] ? sch_direct_xmit+0x59b/0x890 [ 803.229917] ? __qdisc_run+0x1bac/0x3600 [ 803.233974] ? __dev_queue_xmit+0x2131/0x3e00 [ 803.238464] ? dev_queue_xmit+0x4b/0x60 [ 803.242433] ? ip_finish_output2+0x136d/0x1560 [ 803.247008] ? ip_finish_output+0xd93/0x10f0 [ 803.251409] ? ip_mc_output+0xf25/0x10f0 [ 803.255470] ? ip_send_skb+0x178/0x370 [ 803.259352] ? udp_send_skb+0x1439/0x1920 [ 803.263492] ? udp_sendmsg+0x399a/0x4350 [ 803.267554] ? udpv6_sendmsg+0x123e/0x4960 [ 803.271787] ? inet_sendmsg+0x4e9/0x800 [ 803.275754] ? ___sys_sendmsg+0xe3b/0x1240 [ 803.279981] ? __sys_sendmmsg+0x56b/0xa90 [ 803.284126] ? __se_sys_sendmmsg+0xbd/0xe0 [ 803.288353] ? __x64_sys_sendmmsg+0x56/0x70 [ 803.292670] ? do_syscall_64+0xcf/0x110 [ 803.296667] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.302032] ? memcg_kmem_put_cache+0x73/0x460 [ 803.306626] ? __msan_get_context_state+0x9/0x20 [ 803.311374] ? INIT_INT+0xc/0x30 [ 803.314736] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 803.320107] kmsan_memcpy_origins+0x13d/0x190 [ 803.324610] __msan_memcpy+0x6f/0x80 [ 803.328322] pskb_expand_head+0x436/0x1d20 [ 803.332577] gre_tap_xmit+0x4e3/0x910 [ 803.336387] ? gre_tap_init+0x650/0x650 [ 803.340355] dev_hard_start_xmit+0x6dc/0xde0 [ 803.344796] sch_direct_xmit+0x59b/0x890 [ 803.348867] __qdisc_run+0x1bac/0x3600 [ 803.352764] ? INIT_BOOL+0xc/0x30 [ 803.356217] ? do_raw_spin_trylock+0x378/0x4d0 [ 803.360823] __dev_queue_xmit+0x2131/0x3e00 [ 803.365169] dev_queue_xmit+0x4b/0x60 [ 803.368972] ip_finish_output2+0x136d/0x1560 [ 803.373423] ip_finish_output+0xd93/0x10f0 [ 803.377671] ip_mc_output+0xf25/0x10f0 [ 803.381567] ? ip_mc_finish_output+0x440/0x440 [ 803.386146] ? ip_build_and_send_pkt+0xe60/0xe60 [ 803.390907] ip_send_skb+0x178/0x370 [ 803.394654] udp_send_skb+0x1439/0x1920 [ 803.398650] udp_sendmsg+0x399a/0x4350 [ 803.402533] ? ip_copy_metadata+0x1710/0x1710 [ 803.407078] ? kmsan_set_origin+0x7f/0x100 [ 803.411322] udpv6_sendmsg+0x123e/0x4960 [ 803.415380] ? aa_label_sk_perm+0xda/0x960 [ 803.419610] ? aa_sk_perm+0x6db/0x9e0 [ 803.423449] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 803.428838] ? aa_sk_perm+0x7ab/0x9e0 [ 803.432653] ? inet_sendmsg+0x84/0x800 [ 803.436539] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 803.440854] inet_sendmsg+0x4e9/0x800 [ 803.444655] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 803.450017] ? security_socket_sendmsg+0x1bd/0x200 [ 803.454952] ___sys_sendmsg+0xe3b/0x1240 [ 803.459013] ? kmsan_set_origin+0x7f/0x100 [ 803.463254] ? inet_getname+0x490/0x490 [ 803.467251] ? __msan_poison_alloca+0x1e0/0x270 [ 803.471917] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 803.477287] ? rcu_all_qs+0x3b/0x2b0 [ 803.480995] ? _cond_resched+0x59/0x120 [ 803.484976] ? rcu_all_qs+0x53/0x2b0 [ 803.488683] ? _cond_resched+0x37/0x120 [ 803.492651] ? __sys_sendmmsg+0x7c9/0xa90 [ 803.496797] ? _cond_resched+0x59/0x120 [ 803.500786] __sys_sendmmsg+0x56b/0xa90 [ 803.504846] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 803.510329] ? prepare_exit_to_usermode+0x182/0x4c0 [ 803.515371] __se_sys_sendmmsg+0xbd/0xe0 [ 803.519441] __x64_sys_sendmmsg+0x56/0x70 [ 803.523597] do_syscall_64+0xcf/0x110 [ 803.527400] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.532613] RIP: 0033:0x457569 [ 803.535801] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.554714] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 803.562425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 803.569688] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 803.576965] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 803.584230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 803.591507] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 803.598785] Uninit was stored to memory at: [ 803.603115] kmsan_internal_chain_origin+0x136/0x240 [ 803.608210] __msan_chain_origin+0x6d/0xb0 [ 803.612437] __save_stack_trace+0x8be/0xc60 [ 803.616752] save_stack_trace+0xc6/0x110 [ 803.620816] kmsan_internal_chain_origin+0x136/0x240 [ 803.625911] kmsan_memcpy_origins+0x13d/0x190 [ 803.630401] __msan_memcpy+0x6f/0x80 [ 803.634124] pskb_expand_head+0x436/0x1d20 [ 803.638353] gre_tap_xmit+0x4e3/0x910 [ 803.642147] dev_hard_start_xmit+0x6dc/0xde0 [ 803.646548] sch_direct_xmit+0x59b/0x890 [ 803.650599] __qdisc_run+0x1bac/0x3600 [ 803.654478] __dev_queue_xmit+0x2131/0x3e00 [ 803.658793] dev_queue_xmit+0x4b/0x60 [ 803.662603] ip_finish_output2+0x136d/0x1560 [ 803.667002] ip_finish_output+0xd93/0x10f0 [ 803.671232] ip_mc_output+0xf25/0x10f0 [ 803.675118] ip_send_skb+0x178/0x370 [ 803.678825] udp_send_skb+0x1439/0x1920 [ 803.682797] udp_sendmsg+0x399a/0x4350 [ 803.686680] udpv6_sendmsg+0x123e/0x4960 [ 803.690737] inet_sendmsg+0x4e9/0x800 [ 803.694531] ___sys_sendmsg+0xe3b/0x1240 [ 803.698779] __sys_sendmmsg+0x56b/0xa90 [ 803.702745] __se_sys_sendmmsg+0xbd/0xe0 [ 803.706795] __x64_sys_sendmmsg+0x56/0x70 [ 803.710934] do_syscall_64+0xcf/0x110 [ 803.714730] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.719905] [ 803.721523] Uninit was stored to memory at: [ 803.725840] kmsan_internal_chain_origin+0x136/0x240 [ 803.730933] __msan_chain_origin+0x6d/0xb0 [ 803.735165] __save_stack_trace+0x8be/0xc60 [ 803.739480] save_stack_trace+0xc6/0x110 [ 803.743539] kmsan_internal_chain_origin+0x136/0x240 [ 803.748634] kmsan_memcpy_origins+0x13d/0x190 [ 803.753123] __msan_memcpy+0x6f/0x80 [ 803.756831] pskb_expand_head+0x436/0x1d20 [ 803.761057] gre_tap_xmit+0x4e3/0x910 [ 803.764850] dev_hard_start_xmit+0x6dc/0xde0 [ 803.769255] sch_direct_xmit+0x59b/0x890 [ 803.773309] __qdisc_run+0x1bac/0x3600 [ 803.777194] __dev_queue_xmit+0x2131/0x3e00 [ 803.781520] dev_queue_xmit+0x4b/0x60 [ 803.785314] ip_finish_output2+0x136d/0x1560 [ 803.789712] ip_finish_output+0xd93/0x10f0 [ 803.793940] ip_mc_output+0xf25/0x10f0 [ 803.797826] ip_send_skb+0x178/0x370 [ 803.801543] udp_send_skb+0x1439/0x1920 [ 803.805516] udp_sendmsg+0x399a/0x4350 [ 803.809399] udpv6_sendmsg+0x123e/0x4960 [ 803.813452] inet_sendmsg+0x4e9/0x800 [ 803.817254] ___sys_sendmsg+0xe3b/0x1240 [ 803.821310] __sys_sendmmsg+0x56b/0xa90 [ 803.825277] __se_sys_sendmmsg+0xbd/0xe0 [ 803.829631] __x64_sys_sendmmsg+0x56/0x70 [ 803.833773] do_syscall_64+0xcf/0x110 [ 803.837570] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.842744] [ 803.844361] Uninit was stored to memory at: [ 803.848678] kmsan_internal_chain_origin+0x136/0x240 [ 803.853794] __msan_chain_origin+0x6d/0xb0 [ 803.858024] __save_stack_trace+0x8be/0xc60 [ 803.862339] save_stack_trace+0xc6/0x110 [ 803.866412] kmsan_internal_chain_origin+0x136/0x240 [ 803.871512] kmsan_memcpy_origins+0x13d/0x190 [ 803.876036] __msan_memcpy+0x6f/0x80 [ 803.879745] pskb_expand_head+0x436/0x1d20 [ 803.883971] gre_tap_xmit+0x4e3/0x910 [ 803.887778] dev_hard_start_xmit+0x6dc/0xde0 [ 803.892178] sch_direct_xmit+0x59b/0x890 [ 803.896250] __qdisc_run+0x1bac/0x3600 [ 803.900128] __dev_queue_xmit+0x2131/0x3e00 [ 803.904441] dev_queue_xmit+0x4b/0x60 [ 803.908252] ip_finish_output2+0x136d/0x1560 [ 803.912651] ip_finish_output+0xd93/0x10f0 [ 803.916877] ip_mc_output+0xf25/0x10f0 [ 803.920753] ip_send_skb+0x178/0x370 [ 803.924465] udp_send_skb+0x1439/0x1920 [ 803.928429] udp_sendmsg+0x399a/0x4350 [ 803.932309] udpv6_sendmsg+0x123e/0x4960 [ 803.936362] inet_sendmsg+0x4e9/0x800 [ 803.940157] ___sys_sendmsg+0xe3b/0x1240 [ 803.944211] __sys_sendmmsg+0x56b/0xa90 [ 803.948178] __se_sys_sendmmsg+0xbd/0xe0 [ 803.952233] __x64_sys_sendmmsg+0x56/0x70 [ 803.956384] do_syscall_64+0xcf/0x110 [ 803.960180] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.965356] [ 803.966971] Uninit was stored to memory at: [ 803.971302] kmsan_internal_chain_origin+0x136/0x240 [ 803.976416] __msan_chain_origin+0x6d/0xb0 [ 803.980646] __save_stack_trace+0x8be/0xc60 [ 803.984960] save_stack_trace+0xc6/0x110 [ 803.989015] kmsan_internal_chain_origin+0x136/0x240 [ 803.994462] kmsan_memcpy_origins+0x13d/0x190 [ 803.998951] __msan_memcpy+0x6f/0x80 [ 804.002660] pskb_expand_head+0x436/0x1d20 [ 804.006887] gre_tap_xmit+0x4e3/0x910 [ 804.010688] dev_hard_start_xmit+0x6dc/0xde0 [ 804.015090] sch_direct_xmit+0x59b/0x890 [ 804.019141] __qdisc_run+0x1bac/0x3600 [ 804.023023] __dev_queue_xmit+0x2131/0x3e00 [ 804.027343] dev_queue_xmit+0x4b/0x60 [ 804.031136] ip_finish_output2+0x136d/0x1560 [ 804.035537] ip_finish_output+0xd93/0x10f0 [ 804.039760] ip_mc_output+0xf25/0x10f0 [ 804.043638] ip_send_skb+0x178/0x370 [ 804.047345] udp_send_skb+0x1439/0x1920 [ 804.051313] udp_sendmsg+0x399a/0x4350 [ 804.055209] udpv6_sendmsg+0x123e/0x4960 [ 804.059269] inet_sendmsg+0x4e9/0x800 [ 804.063064] ___sys_sendmsg+0xe3b/0x1240 [ 804.067117] __sys_sendmmsg+0x56b/0xa90 [ 804.071095] __se_sys_sendmmsg+0xbd/0xe0 [ 804.075148] __x64_sys_sendmmsg+0x56/0x70 [ 804.079291] do_syscall_64+0xcf/0x110 [ 804.083085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.088263] [ 804.089879] Uninit was stored to memory at: [ 804.094225] kmsan_internal_chain_origin+0x136/0x240 [ 804.099331] __msan_chain_origin+0x6d/0xb0 [ 804.103578] __save_stack_trace+0x8be/0xc60 [ 804.107940] save_stack_trace+0xc6/0x110 [ 804.112029] kmsan_internal_chain_origin+0x136/0x240 [ 804.117124] kmsan_memcpy_origins+0x13d/0x190 [ 804.121610] __msan_memcpy+0x6f/0x80 [ 804.125324] pskb_expand_head+0x436/0x1d20 [ 804.129550] gre_tap_xmit+0x4e3/0x910 [ 804.133343] dev_hard_start_xmit+0x6dc/0xde0 [ 804.137744] sch_direct_xmit+0x59b/0x890 [ 804.141800] __qdisc_run+0x1bac/0x3600 [ 804.145693] __dev_queue_xmit+0x2131/0x3e00 [ 804.150003] dev_queue_xmit+0x4b/0x60 [ 804.153799] ip_finish_output2+0x136d/0x1560 [ 804.158228] ip_finish_output+0xd93/0x10f0 [ 804.162465] ip_mc_output+0xf25/0x10f0 [ 804.166346] ip_send_skb+0x178/0x370 [ 804.170055] udp_send_skb+0x1439/0x1920 [ 804.174034] udp_sendmsg+0x399a/0x4350 [ 804.177912] udpv6_sendmsg+0x123e/0x4960 [ 804.181964] inet_sendmsg+0x4e9/0x800 [ 804.185763] ___sys_sendmsg+0xe3b/0x1240 [ 804.189812] __sys_sendmmsg+0x56b/0xa90 [ 804.193779] __se_sys_sendmmsg+0xbd/0xe0 [ 804.197831] __x64_sys_sendmmsg+0x56/0x70 [ 804.201971] do_syscall_64+0xcf/0x110 [ 804.205766] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.210942] [ 804.212558] Uninit was stored to memory at: [ 804.216892] kmsan_internal_chain_origin+0x136/0x240 [ 804.221990] __msan_chain_origin+0x6d/0xb0 [ 804.226220] __save_stack_trace+0x8be/0xc60 [ 804.230544] save_stack_trace+0xc6/0x110 [ 804.234600] kmsan_internal_chain_origin+0x136/0x240 [ 804.239705] kmsan_memcpy_origins+0x13d/0x190 [ 804.244195] __msan_memcpy+0x6f/0x80 [ 804.247905] pskb_expand_head+0x436/0x1d20 [ 804.252131] gre_tap_xmit+0x4e3/0x910 [ 804.255924] dev_hard_start_xmit+0x6dc/0xde0 [ 804.260326] sch_direct_xmit+0x59b/0x890 [ 804.264383] __qdisc_run+0x1bac/0x3600 [ 804.268267] __dev_queue_xmit+0x2131/0x3e00 [ 804.272580] dev_queue_xmit+0x4b/0x60 [ 804.276378] ip_finish_output2+0x136d/0x1560 [ 804.280778] ip_finish_output+0xd93/0x10f0 [ 804.285009] ip_mc_output+0xf25/0x10f0 [ 804.288890] ip_send_skb+0x178/0x370 [ 804.292599] udp_send_skb+0x1439/0x1920 [ 804.296562] udp_sendmsg+0x399a/0x4350 [ 804.300440] udpv6_sendmsg+0x123e/0x4960 [ 804.304495] inet_sendmsg+0x4e9/0x800 [ 804.308296] ___sys_sendmsg+0xe3b/0x1240 [ 804.312348] __sys_sendmmsg+0x56b/0xa90 [ 804.316332] __se_sys_sendmmsg+0xbd/0xe0 [ 804.320388] __x64_sys_sendmmsg+0x56/0x70 [ 804.324538] do_syscall_64+0xcf/0x110 [ 804.328333] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.333517] [ 804.335132] Uninit was stored to memory at: [ 804.339450] kmsan_internal_chain_origin+0x136/0x240 [ 804.344547] __msan_chain_origin+0x6d/0xb0 [ 804.348777] __save_stack_trace+0x8be/0xc60 [ 804.353092] save_stack_trace+0xc6/0x110 [ 804.357151] kmsan_internal_chain_origin+0x136/0x240 [ 804.362257] kmsan_memcpy_origins+0x13d/0x190 [ 804.366749] __msan_memcpy+0x6f/0x80 [ 804.370455] pskb_expand_head+0x436/0x1d20 [ 804.374685] gre_tap_xmit+0x4e3/0x910 [ 804.378488] dev_hard_start_xmit+0x6dc/0xde0 [ 804.382892] sch_direct_xmit+0x59b/0x890 [ 804.386944] __qdisc_run+0x1bac/0x3600 [ 804.390822] __dev_queue_xmit+0x2131/0x3e00 [ 804.395134] dev_queue_xmit+0x4b/0x60 [ 804.398926] ip_finish_output2+0x136d/0x1560 [ 804.403346] ip_finish_output+0xd93/0x10f0 [ 804.407589] ip_mc_output+0xf25/0x10f0 [ 804.411467] ip_send_skb+0x178/0x370 [ 804.415175] udp_send_skb+0x1439/0x1920 [ 804.419138] udp_sendmsg+0x399a/0x4350 [ 804.423020] udpv6_sendmsg+0x123e/0x4960 [ 804.427072] inet_sendmsg+0x4e9/0x800 [ 804.430863] ___sys_sendmsg+0xe3b/0x1240 [ 804.434914] __sys_sendmmsg+0x56b/0xa90 [ 804.438879] __se_sys_sendmmsg+0xbd/0xe0 [ 804.442933] __x64_sys_sendmmsg+0x56/0x70 [ 804.447075] do_syscall_64+0xcf/0x110 [ 804.450872] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.456047] [ 804.457666] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 804.463884] Variable was created at: [ 804.467594] kfree+0x12a/0x2fb0 [ 804.470884] skb_release_data+0xbcb/0xc90 [ 804.488069] not chained 280000 origins [ 804.492010] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 804.499304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.508667] Call Trace: [ 804.511261] dump_stack+0x32d/0x480 [ 804.514903] kmsan_internal_chain_origin+0x222/0x240 [ 804.520009] ? skb_release_data+0xbcb/0xc90 [ 804.524377] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.529746] ? __module_address+0x6a/0x5f0 [ 804.533977] ? kmsan_print_origin+0x1e8/0x260 [ 804.538470] ? is_bpf_text_address+0x3e5/0x4d0 [ 804.543053] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 804.548413] ? is_bpf_text_address+0x49e/0x4d0 [ 804.552995] ? kmsan_internal_chain_origin+0x90/0x240 [ 804.558196] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 804.563557] ? is_bpf_text_address+0x49e/0x4d0 [ 804.568148] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 804.573611] ? in_task_stack+0x12c/0x210 [ 804.577677] __msan_chain_origin+0x6d/0xb0 [ 804.581915] ? gre_tap_xmit+0x4e3/0x910 [ 804.585895] __save_stack_trace+0x8be/0xc60 [ 804.590235] ? gre_tap_xmit+0x4e3/0x910 [ 804.594223] save_stack_trace+0xc6/0x110 [ 804.598295] kmsan_internal_chain_origin+0x136/0x240 [ 804.603395] ? inet_sendmsg+0x4e9/0x800 [ 804.607378] ? kmsan_internal_chain_origin+0x136/0x240 [ 804.612648] ? kmsan_memcpy_origins+0x13d/0x190 [ 804.617325] ? __msan_memcpy+0x6f/0x80 [ 804.621219] ? pskb_expand_head+0x436/0x1d20 [ 804.625630] ? gre_tap_xmit+0x4e3/0x910 [ 804.629597] ? dev_hard_start_xmit+0x6dc/0xde0 [ 804.634174] ? sch_direct_xmit+0x59b/0x890 [ 804.638434] ? __qdisc_run+0x1bac/0x3600 [ 804.642555] ? __dev_queue_xmit+0x2131/0x3e00 [ 804.647042] ? dev_queue_xmit+0x4b/0x60 [ 804.651041] ? ip_finish_output2+0x136d/0x1560 [ 804.655619] ? ip_finish_output+0xd93/0x10f0 [ 804.660021] ? ip_mc_output+0xf25/0x10f0 [ 804.664097] ? ip_send_skb+0x178/0x370 [ 804.667989] ? udp_send_skb+0x1439/0x1920 [ 804.672132] ? udp_sendmsg+0x399a/0x4350 [ 804.676186] ? udpv6_sendmsg+0x123e/0x4960 [ 804.680417] ? inet_sendmsg+0x4e9/0x800 [ 804.684388] ? ___sys_sendmsg+0xe3b/0x1240 [ 804.688617] ? __sys_sendmmsg+0x56b/0xa90 [ 804.692758] ? __se_sys_sendmmsg+0xbd/0xe0 [ 804.696985] ? __x64_sys_sendmmsg+0x56/0x70 [ 804.701306] ? do_syscall_64+0xcf/0x110 [ 804.705287] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.710651] ? memcg_kmem_put_cache+0x73/0x460 [ 804.715253] ? __msan_get_context_state+0x9/0x20 [ 804.720004] ? INIT_INT+0xc/0x30 [ 804.723369] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 804.728744] kmsan_memcpy_origins+0x13d/0x190 [ 804.733252] __msan_memcpy+0x6f/0x80 [ 804.736967] pskb_expand_head+0x436/0x1d20 [ 804.741227] gre_tap_xmit+0x4e3/0x910 [ 804.745044] ? gre_tap_init+0x650/0x650 [ 804.749014] dev_hard_start_xmit+0x6dc/0xde0 [ 804.753442] sch_direct_xmit+0x59b/0x890 [ 804.757517] __qdisc_run+0x1bac/0x3600 [ 804.761415] ? INIT_BOOL+0xc/0x30 [ 804.764865] ? do_raw_spin_trylock+0x378/0x4d0 [ 804.769455] __dev_queue_xmit+0x2131/0x3e00 [ 804.773803] dev_queue_xmit+0x4b/0x60 [ 804.777600] ip_finish_output2+0x136d/0x1560 [ 804.782024] ip_finish_output+0xd93/0x10f0 [ 804.786297] ip_mc_output+0xf25/0x10f0 [ 804.790202] ? ip_mc_finish_output+0x440/0x440 [ 804.795230] ? ip_build_and_send_pkt+0xe60/0xe60 [ 804.799984] ip_send_skb+0x178/0x370 [ 804.803707] udp_send_skb+0x1439/0x1920 [ 804.807712] udp_sendmsg+0x399a/0x4350 [ 804.811607] ? ip_copy_metadata+0x1710/0x1710 [ 804.816154] ? kmsan_set_origin+0x7f/0x100 [ 804.820419] udpv6_sendmsg+0x123e/0x4960 [ 804.824496] ? aa_label_sk_perm+0xda/0x960 [ 804.828731] ? aa_sk_perm+0x6db/0x9e0 [ 804.832577] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.837938] ? aa_sk_perm+0x7ab/0x9e0 [ 804.841761] ? inet_sendmsg+0x84/0x800 [ 804.845664] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 804.849980] inet_sendmsg+0x4e9/0x800 [ 804.853785] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.859143] ? security_socket_sendmsg+0x1bd/0x200 [ 804.864082] ___sys_sendmsg+0xe3b/0x1240 [ 804.868137] ? kmsan_set_origin+0x7f/0x100 [ 804.872371] ? inet_getname+0x490/0x490 [ 804.876360] ? __msan_poison_alloca+0x1e0/0x270 [ 804.881028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.886396] ? rcu_all_qs+0x3b/0x2b0 [ 804.890106] ? _cond_resched+0x59/0x120 [ 804.894082] ? rcu_all_qs+0x53/0x2b0 [ 804.897790] ? _cond_resched+0x37/0x120 [ 804.901760] ? __sys_sendmmsg+0x7c9/0xa90 [ 804.905906] ? _cond_resched+0x59/0x120 [ 804.909896] __sys_sendmmsg+0x56b/0xa90 [ 804.913897] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 804.919350] ? prepare_exit_to_usermode+0x182/0x4c0 [ 804.924375] __se_sys_sendmmsg+0xbd/0xe0 [ 804.928436] __x64_sys_sendmmsg+0x56/0x70 [ 804.932582] do_syscall_64+0xcf/0x110 [ 804.936384] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.941568] RIP: 0033:0x457569 [ 804.944755] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.963655] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 804.971357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 804.978619] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 804.985886] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 804.993151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 805.000414] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 805.007695] Uninit was stored to memory at: [ 805.012030] kmsan_internal_chain_origin+0x136/0x240 [ 805.017130] __msan_chain_origin+0x6d/0xb0 [ 805.021360] __save_stack_trace+0x8be/0xc60 [ 805.025676] save_stack_trace+0xc6/0x110 [ 805.029749] kmsan_internal_chain_origin+0x136/0x240 [ 805.034848] kmsan_memcpy_origins+0x13d/0x190 [ 805.039338] __msan_memcpy+0x6f/0x80 [ 805.043048] pskb_expand_head+0x436/0x1d20 [ 805.047291] gre_tap_xmit+0x4e3/0x910 [ 805.051083] dev_hard_start_xmit+0x6dc/0xde0 [ 805.055483] sch_direct_xmit+0x59b/0x890 [ 805.059539] __qdisc_run+0x1bac/0x3600 [ 805.063418] __dev_queue_xmit+0x2131/0x3e00 [ 805.067731] dev_queue_xmit+0x4b/0x60 [ 805.071535] ip_finish_output2+0x136d/0x1560 [ 805.075935] ip_finish_output+0xd93/0x10f0 [ 805.080177] ip_mc_output+0xf25/0x10f0 [ 805.084061] ip_send_skb+0x178/0x370 [ 805.087766] udp_send_skb+0x1439/0x1920 [ 805.091742] udp_sendmsg+0x399a/0x4350 [ 805.095637] udpv6_sendmsg+0x123e/0x4960 [ 805.099691] inet_sendmsg+0x4e9/0x800 [ 805.103486] ___sys_sendmsg+0xe3b/0x1240 [ 805.107559] __sys_sendmmsg+0x56b/0xa90 [ 805.111526] __se_sys_sendmmsg+0xbd/0xe0 [ 805.115579] __x64_sys_sendmmsg+0x56/0x70 [ 805.119720] do_syscall_64+0xcf/0x110 [ 805.123522] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.128695] [ 805.130311] Uninit was stored to memory at: [ 805.134628] kmsan_internal_chain_origin+0x136/0x240 [ 805.139722] __msan_chain_origin+0x6d/0xb0 [ 805.143949] __save_stack_trace+0x8be/0xc60 [ 805.148291] save_stack_trace+0xc6/0x110 [ 805.152350] kmsan_internal_chain_origin+0x136/0x240 [ 805.157444] kmsan_memcpy_origins+0x13d/0x190 [ 805.161931] __msan_memcpy+0x6f/0x80 [ 805.165638] pskb_expand_head+0x436/0x1d20 [ 805.169864] gre_tap_xmit+0x4e3/0x910 [ 805.173659] dev_hard_start_xmit+0x6dc/0xde0 [ 805.178059] sch_direct_xmit+0x59b/0x890 [ 805.182110] __qdisc_run+0x1bac/0x3600 [ 805.185988] __dev_queue_xmit+0x2131/0x3e00 [ 805.190300] dev_queue_xmit+0x4b/0x60 [ 805.194095] ip_finish_output2+0x136d/0x1560 [ 805.198493] ip_finish_output+0xd93/0x10f0 [ 805.202940] ip_mc_output+0xf25/0x10f0 [ 805.206819] ip_send_skb+0x178/0x370 [ 805.210530] udp_send_skb+0x1439/0x1920 [ 805.214496] udp_sendmsg+0x399a/0x4350 [ 805.218383] udpv6_sendmsg+0x123e/0x4960 [ 805.222442] inet_sendmsg+0x4e9/0x800 [ 805.226234] ___sys_sendmsg+0xe3b/0x1240 [ 805.230289] __sys_sendmmsg+0x56b/0xa90 [ 805.234260] __se_sys_sendmmsg+0xbd/0xe0 [ 805.238311] __x64_sys_sendmmsg+0x56/0x70 [ 805.242452] do_syscall_64+0xcf/0x110 [ 805.246251] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.251426] [ 805.253051] Uninit was stored to memory at: [ 805.257369] kmsan_internal_chain_origin+0x136/0x240 [ 805.262465] __msan_chain_origin+0x6d/0xb0 [ 805.266693] __save_stack_trace+0x8be/0xc60 [ 805.271010] save_stack_trace+0xc6/0x110 [ 805.275066] kmsan_internal_chain_origin+0x136/0x240 [ 805.280173] kmsan_memcpy_origins+0x13d/0x190 [ 805.284661] __msan_memcpy+0x6f/0x80 [ 805.288368] pskb_expand_head+0x436/0x1d20 [ 805.292598] gre_tap_xmit+0x4e3/0x910 [ 805.296388] dev_hard_start_xmit+0x6dc/0xde0 [ 805.300787] sch_direct_xmit+0x59b/0x890 [ 805.304845] __qdisc_run+0x1bac/0x3600 [ 805.308723] __dev_queue_xmit+0x2131/0x3e00 [ 805.313036] dev_queue_xmit+0x4b/0x60 [ 805.316828] ip_finish_output2+0x136d/0x1560 [ 805.321227] ip_finish_output+0xd93/0x10f0 [ 805.325462] ip_mc_output+0xf25/0x10f0 [ 805.329344] ip_send_skb+0x178/0x370 [ 805.333053] udp_send_skb+0x1439/0x1920 [ 805.337019] udp_sendmsg+0x399a/0x4350 [ 805.340898] udpv6_sendmsg+0x123e/0x4960 [ 805.344955] inet_sendmsg+0x4e9/0x800 [ 805.348745] ___sys_sendmsg+0xe3b/0x1240 [ 805.352797] __sys_sendmmsg+0x56b/0xa90 [ 805.356760] __se_sys_sendmmsg+0xbd/0xe0 [ 805.360810] __x64_sys_sendmmsg+0x56/0x70 [ 805.364951] do_syscall_64+0xcf/0x110 [ 805.368748] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.373922] [ 805.375540] Uninit was stored to memory at: [ 805.379858] kmsan_internal_chain_origin+0x136/0x240 [ 805.384957] __msan_chain_origin+0x6d/0xb0 [ 805.389184] __save_stack_trace+0x8be/0xc60 [ 805.393500] save_stack_trace+0xc6/0x110 [ 805.397560] kmsan_internal_chain_origin+0x136/0x240 [ 805.402660] kmsan_memcpy_origins+0x13d/0x190 [ 805.407234] __msan_memcpy+0x6f/0x80 [ 805.410955] pskb_expand_head+0x436/0x1d20 [ 805.415187] gre_tap_xmit+0x4e3/0x910 [ 805.418977] dev_hard_start_xmit+0x6dc/0xde0 [ 805.423378] sch_direct_xmit+0x59b/0x890 [ 805.427450] __qdisc_run+0x1bac/0x3600 [ 805.431358] __dev_queue_xmit+0x2131/0x3e00 [ 805.435675] dev_queue_xmit+0x4b/0x60 [ 805.439483] ip_finish_output2+0x136d/0x1560 [ 805.443898] ip_finish_output+0xd93/0x10f0 [ 805.448124] ip_mc_output+0xf25/0x10f0 [ 805.452015] ip_send_skb+0x178/0x370 [ 805.455721] udp_send_skb+0x1439/0x1920 [ 805.459688] udp_sendmsg+0x399a/0x4350 [ 805.463571] udpv6_sendmsg+0x123e/0x4960 [ 805.467627] inet_sendmsg+0x4e9/0x800 [ 805.471418] ___sys_sendmsg+0xe3b/0x1240 [ 805.475470] __sys_sendmmsg+0x56b/0xa90 [ 805.479435] __se_sys_sendmmsg+0xbd/0xe0 [ 805.483487] __x64_sys_sendmmsg+0x56/0x70 [ 805.487628] do_syscall_64+0xcf/0x110 [ 805.491422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.496597] [ 805.498212] Uninit was stored to memory at: [ 805.502531] kmsan_internal_chain_origin+0x136/0x240 [ 805.507625] __msan_chain_origin+0x6d/0xb0 [ 805.511852] __save_stack_trace+0x8be/0xc60 [ 805.516164] save_stack_trace+0xc6/0x110 [ 805.520216] kmsan_internal_chain_origin+0x136/0x240 [ 805.525317] kmsan_memcpy_origins+0x13d/0x190 [ 805.529806] __msan_memcpy+0x6f/0x80 [ 805.533519] pskb_expand_head+0x436/0x1d20 [ 805.537746] gre_tap_xmit+0x4e3/0x910 [ 805.541539] dev_hard_start_xmit+0x6dc/0xde0 [ 805.545941] sch_direct_xmit+0x59b/0x890 [ 805.549991] __qdisc_run+0x1bac/0x3600 [ 805.553872] __dev_queue_xmit+0x2131/0x3e00 [ 805.558182] dev_queue_xmit+0x4b/0x60 [ 805.561977] ip_finish_output2+0x136d/0x1560 [ 805.566379] ip_finish_output+0xd93/0x10f0 [ 805.570603] ip_mc_output+0xf25/0x10f0 [ 805.574483] ip_send_skb+0x178/0x370 [ 805.578198] udp_send_skb+0x1439/0x1920 [ 805.582166] udp_sendmsg+0x399a/0x4350 [ 805.586044] udpv6_sendmsg+0x123e/0x4960 [ 805.590142] inet_sendmsg+0x4e9/0x800 [ 805.593935] ___sys_sendmsg+0xe3b/0x1240 [ 805.597986] __sys_sendmmsg+0x56b/0xa90 [ 805.601954] __se_sys_sendmmsg+0xbd/0xe0 [ 805.606042] __x64_sys_sendmmsg+0x56/0x70 [ 805.610183] do_syscall_64+0xcf/0x110 [ 805.613979] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.619169] [ 805.620794] Uninit was stored to memory at: [ 805.625112] kmsan_internal_chain_origin+0x136/0x240 [ 805.630206] __msan_chain_origin+0x6d/0xb0 [ 805.634433] __save_stack_trace+0x8be/0xc60 [ 805.638746] save_stack_trace+0xc6/0x110 [ 805.642799] kmsan_internal_chain_origin+0x136/0x240 [ 805.647895] kmsan_memcpy_origins+0x13d/0x190 [ 805.652384] __msan_memcpy+0x6f/0x80 [ 805.656091] pskb_expand_head+0x436/0x1d20 [ 805.660335] gre_tap_xmit+0x4e3/0x910 [ 805.664139] dev_hard_start_xmit+0x6dc/0xde0 [ 805.668540] sch_direct_xmit+0x59b/0x890 [ 805.672625] __qdisc_run+0x1bac/0x3600 [ 805.676534] __dev_queue_xmit+0x2131/0x3e00 [ 805.680848] dev_queue_xmit+0x4b/0x60 [ 805.684640] ip_finish_output2+0x136d/0x1560 [ 805.689042] ip_finish_output+0xd93/0x10f0 [ 805.693276] ip_mc_output+0xf25/0x10f0 [ 805.697198] ip_send_skb+0x178/0x370 [ 805.700911] udp_send_skb+0x1439/0x1920 [ 805.704879] udp_sendmsg+0x399a/0x4350 [ 805.708756] udpv6_sendmsg+0x123e/0x4960 [ 805.712814] inet_sendmsg+0x4e9/0x800 [ 805.716624] ___sys_sendmsg+0xe3b/0x1240 [ 805.720694] __sys_sendmmsg+0x56b/0xa90 [ 805.724663] __se_sys_sendmmsg+0xbd/0xe0 [ 805.728720] __x64_sys_sendmmsg+0x56/0x70 [ 805.732861] do_syscall_64+0xcf/0x110 [ 805.736665] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.741887] [ 805.743503] Uninit was stored to memory at: [ 805.747825] kmsan_internal_chain_origin+0x136/0x240 [ 805.752924] __msan_chain_origin+0x6d/0xb0 [ 805.757153] __save_stack_trace+0x8be/0xc60 [ 805.761468] save_stack_trace+0xc6/0x110 [ 805.765534] kmsan_internal_chain_origin+0x136/0x240 [ 805.770652] kmsan_memcpy_origins+0x13d/0x190 [ 805.775142] __msan_memcpy+0x6f/0x80 [ 805.778850] pskb_expand_head+0x436/0x1d20 [ 805.783077] gre_tap_xmit+0x4e3/0x910 [ 805.786870] dev_hard_start_xmit+0x6dc/0xde0 [ 805.791274] sch_direct_xmit+0x59b/0x890 [ 805.795330] __qdisc_run+0x1bac/0x3600 [ 805.799210] __dev_queue_xmit+0x2131/0x3e00 [ 805.803526] dev_queue_xmit+0x4b/0x60 [ 805.807344] ip_finish_output2+0x136d/0x1560 [ 805.811748] ip_finish_output+0xd93/0x10f0 [ 805.815974] ip_mc_output+0xf25/0x10f0 [ 805.819851] ip_send_skb+0x178/0x370 [ 805.823561] udp_send_skb+0x1439/0x1920 [ 805.827530] udp_sendmsg+0x399a/0x4350 [ 805.831743] udpv6_sendmsg+0x123e/0x4960 [ 805.835801] inet_sendmsg+0x4e9/0x800 [ 805.839610] ___sys_sendmsg+0xe3b/0x1240 [ 805.843665] __sys_sendmmsg+0x56b/0xa90 [ 805.847629] __se_sys_sendmmsg+0xbd/0xe0 [ 805.851693] __x64_sys_sendmmsg+0x56/0x70 [ 805.855849] do_syscall_64+0xcf/0x110 [ 805.859644] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.864817] [ 805.866467] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 805.872685] Variable was created at: [ 805.876391] kfree+0x12a/0x2fb0 [ 805.879667] skb_release_data+0xbcb/0xc90 [ 805.896213] not chained 290000 origins [ 805.900165] CPU: 1 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 805.907449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.916797] Call Trace: [ 805.919385] dump_stack+0x32d/0x480 [ 805.923027] kmsan_internal_chain_origin+0x222/0x240 [ 805.928135] ? skb_release_data+0xbcb/0xc90 [ 805.932464] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 805.937822] ? __module_address+0x6a/0x5f0 [ 805.942056] ? kmsan_print_origin+0x1e8/0x260 [ 805.946547] ? is_bpf_text_address+0x3e5/0x4d0 [ 805.951128] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 805.956488] ? is_bpf_text_address+0x49e/0x4d0 [ 805.961087] ? kmsan_internal_chain_origin+0x90/0x240 [ 805.966289] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 805.971647] ? is_bpf_text_address+0x49e/0x4d0 [ 805.976244] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 805.981697] ? in_task_stack+0x12c/0x210 [ 805.985768] __msan_chain_origin+0x6d/0xb0 [ 805.990004] ? udp_send_skb+0x1439/0x1920 [ 805.994154] __save_stack_trace+0x8be/0xc60 [ 805.998496] ? udp_send_skb+0x1439/0x1920 [ 806.002661] save_stack_trace+0xc6/0x110 [ 806.006732] kmsan_internal_chain_origin+0x136/0x240 [ 806.011848] ? inet_sendmsg+0x4e9/0x800 [ 806.015848] ? kmsan_internal_chain_origin+0x136/0x240 [ 806.021119] ? kmsan_memcpy_origins+0x13d/0x190 [ 806.025779] ? __msan_memcpy+0x6f/0x80 [ 806.029664] ? pskb_expand_head+0x436/0x1d20 [ 806.034066] ? gre_tap_xmit+0x4e3/0x910 [ 806.038067] ? dev_hard_start_xmit+0x6dc/0xde0 [ 806.042654] ? sch_direct_xmit+0x59b/0x890 [ 806.046881] ? __qdisc_run+0x1bac/0x3600 [ 806.050937] ? __dev_queue_xmit+0x2131/0x3e00 [ 806.055425] ? dev_queue_xmit+0x4b/0x60 [ 806.059413] ? ip_finish_output2+0x136d/0x1560 [ 806.063987] ? ip_finish_output+0xd93/0x10f0 [ 806.068391] ? ip_mc_output+0xf25/0x10f0 [ 806.072444] ? ip_send_skb+0x178/0x370 [ 806.076328] ? udp_send_skb+0x1439/0x1920 [ 806.080468] ? udp_sendmsg+0x399a/0x4350 [ 806.084523] ? udpv6_sendmsg+0x123e/0x4960 [ 806.088763] ? inet_sendmsg+0x4e9/0x800 [ 806.092731] ? ___sys_sendmsg+0xe3b/0x1240 [ 806.096959] ? __sys_sendmmsg+0x56b/0xa90 [ 806.101102] ? __se_sys_sendmmsg+0xbd/0xe0 [ 806.105333] ? __x64_sys_sendmmsg+0x56/0x70 [ 806.109650] ? do_syscall_64+0xcf/0x110 [ 806.113624] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.118985] ? memcg_kmem_put_cache+0x73/0x460 [ 806.123585] ? __msan_get_context_state+0x9/0x20 [ 806.128334] ? INIT_INT+0xc/0x30 [ 806.131699] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 806.137070] kmsan_memcpy_origins+0x13d/0x190 [ 806.141569] __msan_memcpy+0x6f/0x80 [ 806.145286] pskb_expand_head+0x436/0x1d20 [ 806.149544] gre_tap_xmit+0x4e3/0x910 [ 806.153351] ? gre_tap_init+0x650/0x650 [ 806.157338] dev_hard_start_xmit+0x6dc/0xde0 [ 806.161763] sch_direct_xmit+0x59b/0x890 [ 806.165849] __qdisc_run+0x1bac/0x3600 [ 806.169751] ? INIT_BOOL+0xc/0x30 [ 806.173203] ? do_raw_spin_trylock+0x378/0x4d0 [ 806.177796] __dev_queue_xmit+0x2131/0x3e00 [ 806.182152] dev_queue_xmit+0x4b/0x60 [ 806.185950] ip_finish_output2+0x136d/0x1560 [ 806.190372] ip_finish_output+0xd93/0x10f0 [ 806.194621] ip_mc_output+0xf25/0x10f0 [ 806.198521] ? ip_mc_finish_output+0x440/0x440 [ 806.203103] ? ip_build_and_send_pkt+0xe60/0xe60 [ 806.207851] ip_send_skb+0x178/0x370 [ 806.211574] udp_send_skb+0x1439/0x1920 [ 806.215568] udp_sendmsg+0x399a/0x4350 [ 806.219448] ? ip_copy_metadata+0x1710/0x1710 [ 806.223990] ? kmsan_set_origin+0x7f/0x100 [ 806.228236] udpv6_sendmsg+0x123e/0x4960 [ 806.232305] ? aa_label_sk_perm+0xda/0x960 [ 806.236536] ? aa_sk_perm+0x6db/0x9e0 [ 806.240376] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 806.245739] ? aa_sk_perm+0x7ab/0x9e0 [ 806.249553] ? inet_sendmsg+0x84/0x800 [ 806.253445] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 806.257762] inet_sendmsg+0x4e9/0x800 [ 806.261565] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 806.266923] ? security_socket_sendmsg+0x1bd/0x200 [ 806.271858] ___sys_sendmsg+0xe3b/0x1240 [ 806.275920] ? inet_getname+0x490/0x490 [ 806.279932] ? __msan_poison_alloca+0x1e0/0x270 [ 806.284600] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 806.289972] ? rcu_all_qs+0x3b/0x2b0 [ 806.293682] ? _cond_resched+0x59/0x120 [ 806.297659] ? rcu_all_qs+0x53/0x2b0 [ 806.301380] ? _cond_resched+0x37/0x120 [ 806.305351] ? __sys_sendmmsg+0x7c9/0xa90 [ 806.309499] ? _cond_resched+0x59/0x120 [ 806.313483] __sys_sendmmsg+0x56b/0xa90 [ 806.317485] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 806.322932] ? prepare_exit_to_usermode+0x182/0x4c0 [ 806.327954] __se_sys_sendmmsg+0xbd/0xe0 [ 806.332031] __x64_sys_sendmmsg+0x56/0x70 [ 806.336179] do_syscall_64+0xcf/0x110 [ 806.339980] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.345174] RIP: 0033:0x457569 [ 806.348361] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.367268] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 806.374989] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 806.382263] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 806.389541] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 806.396857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 806.404127] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 806.411413] Uninit was stored to memory at: [ 806.415735] kmsan_internal_chain_origin+0x136/0x240 [ 806.420833] __msan_chain_origin+0x6d/0xb0 [ 806.425062] __save_stack_trace+0x8be/0xc60 [ 806.429380] save_stack_trace+0xc6/0x110 [ 806.433461] kmsan_internal_chain_origin+0x136/0x240 [ 806.438561] kmsan_memcpy_origins+0x13d/0x190 [ 806.443048] __msan_memcpy+0x6f/0x80 [ 806.446754] pskb_expand_head+0x436/0x1d20 [ 806.450981] gre_tap_xmit+0x4e3/0x910 [ 806.454778] dev_hard_start_xmit+0x6dc/0xde0 [ 806.459177] sch_direct_xmit+0x59b/0x890 [ 806.463227] __qdisc_run+0x1bac/0x3600 [ 806.467121] __dev_queue_xmit+0x2131/0x3e00 [ 806.471441] dev_queue_xmit+0x4b/0x60 [ 806.475236] ip_finish_output2+0x136d/0x1560 [ 806.479643] ip_finish_output+0xd93/0x10f0 [ 806.483867] ip_mc_output+0xf25/0x10f0 [ 806.487746] ip_send_skb+0x178/0x370 [ 806.491453] udp_send_skb+0x1439/0x1920 [ 806.495421] udp_sendmsg+0x399a/0x4350 [ 806.499304] udpv6_sendmsg+0x123e/0x4960 [ 806.503358] inet_sendmsg+0x4e9/0x800 [ 806.507153] ___sys_sendmsg+0xe3b/0x1240 [ 806.511210] __sys_sendmmsg+0x56b/0xa90 [ 806.515174] __se_sys_sendmmsg+0xbd/0xe0 [ 806.519227] __x64_sys_sendmmsg+0x56/0x70 [ 806.523376] do_syscall_64+0xcf/0x110 [ 806.527174] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.532347] [ 806.533980] Uninit was stored to memory at: [ 806.538310] kmsan_internal_chain_origin+0x136/0x240 [ 806.543407] __msan_chain_origin+0x6d/0xb0 [ 806.547634] __save_stack_trace+0x8be/0xc60 [ 806.551948] save_stack_trace+0xc6/0x110 [ 806.556000] kmsan_internal_chain_origin+0x136/0x240 [ 806.561119] kmsan_memcpy_origins+0x13d/0x190 [ 806.565644] __msan_memcpy+0x6f/0x80 [ 806.569351] pskb_expand_head+0x436/0x1d20 [ 806.573581] gre_tap_xmit+0x4e3/0x910 [ 806.577373] dev_hard_start_xmit+0x6dc/0xde0 [ 806.581787] sch_direct_xmit+0x59b/0x890 [ 806.585843] __qdisc_run+0x1bac/0x3600 [ 806.589725] __dev_queue_xmit+0x2131/0x3e00 [ 806.594052] dev_queue_xmit+0x4b/0x60 [ 806.597845] ip_finish_output2+0x136d/0x1560 [ 806.602254] ip_finish_output+0xd93/0x10f0 [ 806.606480] ip_mc_output+0xf25/0x10f0 [ 806.610358] ip_send_skb+0x178/0x370 [ 806.614067] udp_send_skb+0x1439/0x1920 [ 806.618035] udp_sendmsg+0x399a/0x4350 [ 806.621917] udpv6_sendmsg+0x123e/0x4960 [ 806.625973] inet_sendmsg+0x4e9/0x800 [ 806.629764] ___sys_sendmsg+0xe3b/0x1240 [ 806.633814] __sys_sendmmsg+0x56b/0xa90 [ 806.637776] __se_sys_sendmmsg+0xbd/0xe0 [ 806.641827] __x64_sys_sendmmsg+0x56/0x70 [ 806.645968] do_syscall_64+0xcf/0x110 [ 806.649765] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.654941] [ 806.656557] Uninit was stored to memory at: [ 806.660886] kmsan_internal_chain_origin+0x136/0x240 [ 806.665982] __msan_chain_origin+0x6d/0xb0 [ 806.670211] __save_stack_trace+0x8be/0xc60 [ 806.674525] save_stack_trace+0xc6/0x110 [ 806.678582] kmsan_internal_chain_origin+0x136/0x240 [ 806.683679] kmsan_memcpy_origins+0x13d/0x190 [ 806.688167] __msan_memcpy+0x6f/0x80 [ 806.691876] pskb_expand_head+0x436/0x1d20 [ 806.696105] gre_tap_xmit+0x4e3/0x910 [ 806.699898] dev_hard_start_xmit+0x6dc/0xde0 [ 806.704300] sch_direct_xmit+0x59b/0x890 [ 806.708352] __qdisc_run+0x1bac/0x3600 [ 806.712230] __dev_queue_xmit+0x2131/0x3e00 [ 806.716557] dev_queue_xmit+0x4b/0x60 [ 806.720354] ip_finish_output2+0x136d/0x1560 [ 806.724769] ip_finish_output+0xd93/0x10f0 [ 806.728994] ip_mc_output+0xf25/0x10f0 [ 806.732879] ip_send_skb+0x178/0x370 [ 806.736604] udp_send_skb+0x1439/0x1920 [ 806.740572] udp_sendmsg+0x399a/0x4350 [ 806.744453] udpv6_sendmsg+0x123e/0x4960 [ 806.748507] inet_sendmsg+0x4e9/0x800 [ 806.752307] ___sys_sendmsg+0xe3b/0x1240 [ 806.756366] __sys_sendmmsg+0x56b/0xa90 [ 806.760329] __se_sys_sendmmsg+0xbd/0xe0 [ 806.764380] __x64_sys_sendmmsg+0x56/0x70 [ 806.768521] do_syscall_64+0xcf/0x110 [ 806.772319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.777494] [ 806.779114] Uninit was stored to memory at: [ 806.783431] kmsan_internal_chain_origin+0x136/0x240 [ 806.788542] __msan_chain_origin+0x6d/0xb0 [ 806.792787] __save_stack_trace+0x8be/0xc60 [ 806.797108] save_stack_trace+0xc6/0x110 [ 806.801164] kmsan_internal_chain_origin+0x136/0x240 [ 806.806267] kmsan_memcpy_origins+0x13d/0x190 [ 806.810766] __msan_memcpy+0x6f/0x80 [ 806.814494] pskb_expand_head+0x436/0x1d20 [ 806.818739] gre_tap_xmit+0x4e3/0x910 [ 806.822534] dev_hard_start_xmit+0x6dc/0xde0 [ 806.826931] sch_direct_xmit+0x59b/0x890 [ 806.830984] __qdisc_run+0x1bac/0x3600 [ 806.834872] __dev_queue_xmit+0x2131/0x3e00 [ 806.839188] dev_queue_xmit+0x4b/0x60 [ 806.842987] ip_finish_output2+0x136d/0x1560 [ 806.847392] ip_finish_output+0xd93/0x10f0 [ 806.851618] ip_mc_output+0xf25/0x10f0 [ 806.855500] ip_send_skb+0x178/0x370 [ 806.859214] udp_send_skb+0x1439/0x1920 [ 806.863178] udp_sendmsg+0x399a/0x4350 [ 806.867059] udpv6_sendmsg+0x123e/0x4960 [ 806.871119] inet_sendmsg+0x4e9/0x800 [ 806.874922] ___sys_sendmsg+0xe3b/0x1240 [ 806.878978] __sys_sendmmsg+0x56b/0xa90 [ 806.882942] __se_sys_sendmmsg+0xbd/0xe0 [ 806.886992] __x64_sys_sendmmsg+0x56/0x70 [ 806.891140] do_syscall_64+0xcf/0x110 [ 806.894953] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 806.900131] [ 806.901747] Uninit was stored to memory at: [ 806.906063] kmsan_internal_chain_origin+0x136/0x240 [ 806.911178] __msan_chain_origin+0x6d/0xb0 [ 806.915424] __save_stack_trace+0x8be/0xc60 [ 806.919741] save_stack_trace+0xc6/0x110 [ 806.923808] kmsan_internal_chain_origin+0x136/0x240 [ 806.928903] kmsan_memcpy_origins+0x13d/0x190 [ 806.933400] __msan_memcpy+0x6f/0x80 [ 806.937108] pskb_expand_head+0x436/0x1d20 [ 806.941337] gre_tap_xmit+0x4e3/0x910 [ 806.945129] dev_hard_start_xmit+0x6dc/0xde0 [ 806.949532] sch_direct_xmit+0x59b/0x890 [ 806.953585] __qdisc_run+0x1bac/0x3600 [ 806.957463] __dev_queue_xmit+0x2131/0x3e00 [ 806.961786] dev_queue_xmit+0x4b/0x60 [ 806.965578] ip_finish_output2+0x136d/0x1560 [ 806.969980] ip_finish_output+0xd93/0x10f0 [ 806.974209] ip_mc_output+0xf25/0x10f0 [ 806.978085] ip_send_skb+0x178/0x370 [ 806.981792] udp_send_skb+0x1439/0x1920 [ 806.985761] udp_sendmsg+0x399a/0x4350 [ 806.989648] udpv6_sendmsg+0x123e/0x4960 [ 806.993704] inet_sendmsg+0x4e9/0x800 [ 806.997506] ___sys_sendmsg+0xe3b/0x1240 [ 807.001572] __sys_sendmmsg+0x56b/0xa90 [ 807.005542] __se_sys_sendmmsg+0xbd/0xe0 [ 807.009595] __x64_sys_sendmmsg+0x56/0x70 [ 807.013746] do_syscall_64+0xcf/0x110 [ 807.017540] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.022713] [ 807.024331] Uninit was stored to memory at: [ 807.028648] kmsan_internal_chain_origin+0x136/0x240 [ 807.033745] __msan_chain_origin+0x6d/0xb0 [ 807.037974] __save_stack_trace+0x8be/0xc60 [ 807.042288] save_stack_trace+0xc6/0x110 [ 807.046343] kmsan_internal_chain_origin+0x136/0x240 [ 807.051450] kmsan_memcpy_origins+0x13d/0x190 [ 807.055951] __msan_memcpy+0x6f/0x80 [ 807.059663] pskb_expand_head+0x436/0x1d20 [ 807.063889] gre_tap_xmit+0x4e3/0x910 [ 807.067696] dev_hard_start_xmit+0x6dc/0xde0 [ 807.072096] sch_direct_xmit+0x59b/0x890 [ 807.076149] __qdisc_run+0x1bac/0x3600 [ 807.080043] __dev_queue_xmit+0x2131/0x3e00 [ 807.084367] dev_queue_xmit+0x4b/0x60 [ 807.088188] ip_finish_output2+0x136d/0x1560 [ 807.092606] ip_finish_output+0xd93/0x10f0 [ 807.096831] ip_mc_output+0xf25/0x10f0 [ 807.100711] ip_send_skb+0x178/0x370 [ 807.104417] udp_send_skb+0x1439/0x1920 [ 807.108384] udp_sendmsg+0x399a/0x4350 [ 807.112286] udpv6_sendmsg+0x123e/0x4960 [ 807.116342] inet_sendmsg+0x4e9/0x800 [ 807.120133] ___sys_sendmsg+0xe3b/0x1240 [ 807.124188] __sys_sendmmsg+0x56b/0xa90 [ 807.128153] __se_sys_sendmmsg+0xbd/0xe0 [ 807.132204] __x64_sys_sendmmsg+0x56/0x70 [ 807.136343] do_syscall_64+0xcf/0x110 [ 807.140141] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.145314] [ 807.146931] Uninit was stored to memory at: [ 807.151245] kmsan_internal_chain_origin+0x136/0x240 [ 807.156394] __msan_chain_origin+0x6d/0xb0 [ 807.160623] __save_stack_trace+0x8be/0xc60 [ 807.164937] save_stack_trace+0xc6/0x110 [ 807.168990] kmsan_internal_chain_origin+0x136/0x240 [ 807.174108] kmsan_memcpy_origins+0x13d/0x190 [ 807.178599] __msan_memcpy+0x6f/0x80 [ 807.182307] pskb_expand_head+0x436/0x1d20 [ 807.186536] gre_tap_xmit+0x4e3/0x910 [ 807.190368] dev_hard_start_xmit+0x6dc/0xde0 [ 807.194781] sch_direct_xmit+0x59b/0x890 [ 807.198835] __qdisc_run+0x1bac/0x3600 [ 807.202715] __dev_queue_xmit+0x2131/0x3e00 [ 807.207030] dev_queue_xmit+0x4b/0x60 [ 807.210826] ip_finish_output2+0x136d/0x1560 [ 807.215240] ip_finish_output+0xd93/0x10f0 [ 807.219486] ip_mc_output+0xf25/0x10f0 [ 807.223369] ip_send_skb+0x178/0x370 [ 807.227075] udp_send_skb+0x1439/0x1920 [ 807.231049] udp_sendmsg+0x399a/0x4350 [ 807.234942] udpv6_sendmsg+0x123e/0x4960 [ 807.238994] inet_sendmsg+0x4e9/0x800 [ 807.242789] ___sys_sendmsg+0xe3b/0x1240 [ 807.246839] __sys_sendmmsg+0x56b/0xa90 [ 807.250802] __se_sys_sendmmsg+0xbd/0xe0 [ 807.254868] __x64_sys_sendmmsg+0x56/0x70 [ 807.259008] do_syscall_64+0xcf/0x110 [ 807.262807] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.267980] [ 807.269600] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 807.275818] Variable was created at: [ 807.279540] kfree+0x12a/0x2fb0 [ 807.282818] skb_release_data+0xbcb/0xc90 [ 807.311435] not chained 300000 origins [ 807.315375] CPU: 1 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 807.322643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.331992] Call Trace: [ 807.334589] dump_stack+0x32d/0x480 [ 807.338227] kmsan_internal_chain_origin+0x222/0x240 [ 807.343341] ? skb_release_data+0xbcb/0xc90 [ 807.347671] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 807.353034] ? __module_address+0x6a/0x5f0 [ 807.357272] ? kmsan_print_origin+0x1e8/0x260 [ 807.361779] ? is_bpf_text_address+0x3e5/0x4d0 [ 807.366371] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 807.371762] ? is_bpf_text_address+0x49e/0x4d0 [ 807.376368] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 807.381752] ? __module_address+0x6a/0x5f0 [ 807.386016] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 807.391378] ? is_bpf_text_address+0x49e/0x4d0 [ 807.395983] ? INIT_INT+0xc/0x30 [ 807.399366] __msan_chain_origin+0x6d/0xb0 [ 807.403623] __save_stack_trace+0xaff/0xc60 [ 807.407977] save_stack_trace+0xc6/0x110 [ 807.412049] kmsan_internal_chain_origin+0x136/0x240 [ 807.417150] ? inet_sendmsg+0x4e9/0x800 [ 807.421135] ? kmsan_internal_chain_origin+0x136/0x240 [ 807.426408] ? kmsan_memcpy_origins+0x13d/0x190 [ 807.431074] ? __msan_memcpy+0x6f/0x80 [ 807.434963] ? pskb_expand_head+0x436/0x1d20 [ 807.439364] ? gre_tap_xmit+0x4e3/0x910 [ 807.443334] ? dev_hard_start_xmit+0x6dc/0xde0 [ 807.447913] ? sch_direct_xmit+0x59b/0x890 [ 807.452280] ? __qdisc_run+0x1bac/0x3600 [ 807.456336] ? __dev_queue_xmit+0x2131/0x3e00 [ 807.460826] ? dev_queue_xmit+0x4b/0x60 [ 807.464805] ? ip_finish_output2+0x136d/0x1560 [ 807.469382] ? ip_finish_output+0xd93/0x10f0 [ 807.473791] ? ip_mc_output+0xf25/0x10f0 [ 807.477848] ? ip_send_skb+0x178/0x370 [ 807.481758] ? udp_send_skb+0x1439/0x1920 [ 807.485904] ? udp_sendmsg+0x399a/0x4350 [ 807.489962] ? udpv6_sendmsg+0x123e/0x4960 [ 807.494207] ? inet_sendmsg+0x4e9/0x800 [ 807.498174] ? ___sys_sendmsg+0xe3b/0x1240 [ 807.502403] ? __sys_sendmmsg+0x56b/0xa90 [ 807.506547] ? __se_sys_sendmmsg+0xbd/0xe0 [ 807.510784] ? __x64_sys_sendmmsg+0x56/0x70 [ 807.515105] ? do_syscall_64+0xcf/0x110 [ 807.519076] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.524441] ? memcg_kmem_put_cache+0x73/0x460 [ 807.529039] ? __msan_get_context_state+0x9/0x20 [ 807.533809] ? INIT_INT+0xc/0x30 [ 807.537171] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 807.542572] kmsan_memcpy_origins+0x13d/0x190 [ 807.547072] __msan_memcpy+0x6f/0x80 [ 807.550784] pskb_expand_head+0x436/0x1d20 [ 807.555045] gre_tap_xmit+0x4e3/0x910 [ 807.558852] ? gre_tap_init+0x650/0x650 [ 807.562836] dev_hard_start_xmit+0x6dc/0xde0 [ 807.567267] sch_direct_xmit+0x59b/0x890 [ 807.571340] __qdisc_run+0x1bac/0x3600 [ 807.575237] ? INIT_BOOL+0xc/0x30 [ 807.578696] ? do_raw_spin_trylock+0x378/0x4d0 [ 807.583302] __dev_queue_xmit+0x2131/0x3e00 [ 807.587652] dev_queue_xmit+0x4b/0x60 [ 807.591450] ip_finish_output2+0x136d/0x1560 [ 807.595890] ip_finish_output+0xd93/0x10f0 [ 807.600137] ip_mc_output+0xf25/0x10f0 [ 807.604041] ? ip_mc_finish_output+0x440/0x440 [ 807.608620] ? ip_build_and_send_pkt+0xe60/0xe60 [ 807.613374] ip_send_skb+0x178/0x370 [ 807.617096] udp_send_skb+0x1439/0x1920 [ 807.621091] udp_sendmsg+0x399a/0x4350 [ 807.624975] ? ip_copy_metadata+0x1710/0x1710 [ 807.629518] ? kmsan_set_origin+0x7f/0x100 [ 807.633760] udpv6_sendmsg+0x123e/0x4960 [ 807.637820] ? aa_label_sk_perm+0xda/0x960 [ 807.642072] ? aa_sk_perm+0x6db/0x9e0 [ 807.645911] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 807.651275] ? aa_sk_perm+0x7ab/0x9e0 [ 807.655098] ? inet_sendmsg+0x84/0x800 [ 807.658987] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 807.663309] inet_sendmsg+0x4e9/0x800 [ 807.667111] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 807.672471] ? security_socket_sendmsg+0x1bd/0x200 [ 807.677407] ___sys_sendmsg+0xe3b/0x1240 [ 807.681469] ? inet_getname+0x490/0x490 [ 807.685461] ? __msan_poison_alloca+0x1e0/0x270 [ 807.690126] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 807.695494] ? rcu_all_qs+0x3b/0x2b0 [ 807.699456] ? _cond_resched+0x59/0x120 [ 807.703436] ? rcu_all_qs+0x53/0x2b0 [ 807.707165] ? _cond_resched+0x37/0x120 [ 807.711141] ? __sys_sendmmsg+0x7c9/0xa90 [ 807.715300] ? _cond_resched+0x59/0x120 [ 807.719287] __sys_sendmmsg+0x56b/0xa90 [ 807.723292] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 807.728738] ? prepare_exit_to_usermode+0x182/0x4c0 [ 807.733761] __se_sys_sendmmsg+0xbd/0xe0 [ 807.737825] __x64_sys_sendmmsg+0x56/0x70 [ 807.741972] do_syscall_64+0xcf/0x110 [ 807.745773] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.750956] RIP: 0033:0x457569 [ 807.754149] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.773051] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.780765] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 807.788045] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 807.795318] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 807.802585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 807.809848] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 807.817139] Uninit was stored to memory at: [ 807.821466] kmsan_internal_chain_origin+0x136/0x240 [ 807.826568] __msan_chain_origin+0x6d/0xb0 [ 807.831094] __save_stack_trace+0x8be/0xc60 [ 807.835409] save_stack_trace+0xc6/0x110 [ 807.839465] kmsan_internal_chain_origin+0x136/0x240 [ 807.844567] kmsan_memcpy_origins+0x13d/0x190 [ 807.849060] __msan_memcpy+0x6f/0x80 [ 807.852773] pskb_expand_head+0x436/0x1d20 [ 807.857016] gre_tap_xmit+0x4e3/0x910 [ 807.860809] dev_hard_start_xmit+0x6dc/0xde0 [ 807.865230] sch_direct_xmit+0x59b/0x890 [ 807.869305] __qdisc_run+0x1bac/0x3600 [ 807.873185] __dev_queue_xmit+0x2131/0x3e00 [ 807.877498] dev_queue_xmit+0x4b/0x60 [ 807.881380] ip_finish_output2+0x136d/0x1560 [ 807.885804] ip_finish_output+0xd93/0x10f0 [ 807.890034] ip_mc_output+0xf25/0x10f0 [ 807.893915] ip_send_skb+0x178/0x370 [ 807.897624] udp_send_skb+0x1439/0x1920 [ 807.901589] udp_sendmsg+0x399a/0x4350 [ 807.905471] udpv6_sendmsg+0x123e/0x4960 [ 807.909529] inet_sendmsg+0x4e9/0x800 [ 807.913327] ___sys_sendmsg+0xe3b/0x1240 [ 807.917381] __sys_sendmmsg+0x56b/0xa90 [ 807.921345] __se_sys_sendmmsg+0xbd/0xe0 [ 807.925398] __x64_sys_sendmmsg+0x56/0x70 [ 807.929540] do_syscall_64+0xcf/0x110 [ 807.933342] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 807.938517] [ 807.940142] Uninit was stored to memory at: [ 807.944460] kmsan_internal_chain_origin+0x136/0x240 [ 807.949561] __msan_chain_origin+0x6d/0xb0 [ 807.953803] __save_stack_trace+0x8be/0xc60 [ 807.958116] save_stack_trace+0xc6/0x110 [ 807.962173] kmsan_internal_chain_origin+0x136/0x240 [ 807.967285] kmsan_memcpy_origins+0x13d/0x190 [ 807.971788] __msan_memcpy+0x6f/0x80 [ 807.975504] pskb_expand_head+0x436/0x1d20 [ 807.979732] gre_tap_xmit+0x4e3/0x910 [ 807.983542] dev_hard_start_xmit+0x6dc/0xde0 [ 807.987941] sch_direct_xmit+0x59b/0x890 [ 807.991996] __qdisc_run+0x1bac/0x3600 [ 807.995881] __dev_queue_xmit+0x2131/0x3e00 [ 808.000210] dev_queue_xmit+0x4b/0x60 [ 808.004005] ip_finish_output2+0x136d/0x1560 [ 808.008410] ip_finish_output+0xd93/0x10f0 [ 808.012637] ip_mc_output+0xf25/0x10f0 [ 808.016516] ip_send_skb+0x178/0x370 [ 808.020222] udp_send_skb+0x1439/0x1920 [ 808.024194] udp_sendmsg+0x399a/0x4350 [ 808.028074] udpv6_sendmsg+0x123e/0x4960 [ 808.032132] inet_sendmsg+0x4e9/0x800 [ 808.035931] ___sys_sendmsg+0xe3b/0x1240 [ 808.039985] __sys_sendmmsg+0x56b/0xa90 [ 808.043957] __se_sys_sendmmsg+0xbd/0xe0 [ 808.048017] __x64_sys_sendmmsg+0x56/0x70 [ 808.052160] do_syscall_64+0xcf/0x110 [ 808.055963] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.061153] [ 808.062771] Uninit was stored to memory at: [ 808.067095] kmsan_internal_chain_origin+0x136/0x240 [ 808.072195] __msan_chain_origin+0x6d/0xb0 [ 808.076423] __save_stack_trace+0x8be/0xc60 [ 808.080749] save_stack_trace+0xc6/0x110 [ 808.084821] kmsan_internal_chain_origin+0x136/0x240 [ 808.089922] kmsan_memcpy_origins+0x13d/0x190 [ 808.094411] __msan_memcpy+0x6f/0x80 [ 808.098118] pskb_expand_head+0x436/0x1d20 [ 808.102360] gre_tap_xmit+0x4e3/0x910 [ 808.106158] dev_hard_start_xmit+0x6dc/0xde0 [ 808.110558] sch_direct_xmit+0x59b/0x890 [ 808.114613] __qdisc_run+0x1bac/0x3600 [ 808.118492] __dev_queue_xmit+0x2131/0x3e00 [ 808.122809] dev_queue_xmit+0x4b/0x60 [ 808.126601] ip_finish_output2+0x136d/0x1560 [ 808.130998] ip_finish_output+0xd93/0x10f0 [ 808.135231] ip_mc_output+0xf25/0x10f0 [ 808.139114] ip_send_skb+0x178/0x370 [ 808.142822] udp_send_skb+0x1439/0x1920 [ 808.146785] udp_sendmsg+0x399a/0x4350 [ 808.150663] udpv6_sendmsg+0x123e/0x4960 [ 808.154719] inet_sendmsg+0x4e9/0x800 [ 808.158515] ___sys_sendmsg+0xe3b/0x1240 [ 808.162572] __sys_sendmmsg+0x56b/0xa90 [ 808.166538] __se_sys_sendmmsg+0xbd/0xe0 [ 808.170589] __x64_sys_sendmmsg+0x56/0x70 [ 808.174734] do_syscall_64+0xcf/0x110 [ 808.178531] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.183707] [ 808.185328] Uninit was stored to memory at: [ 808.189646] kmsan_internal_chain_origin+0x136/0x240 [ 808.194744] __msan_chain_origin+0x6d/0xb0 [ 808.198973] __save_stack_trace+0x8be/0xc60 [ 808.203295] save_stack_trace+0xc6/0x110 [ 808.207350] kmsan_internal_chain_origin+0x136/0x240 [ 808.212446] kmsan_memcpy_origins+0x13d/0x190 [ 808.216932] __msan_memcpy+0x6f/0x80 [ 808.220643] pskb_expand_head+0x436/0x1d20 [ 808.224872] gre_tap_xmit+0x4e3/0x910 [ 808.228664] dev_hard_start_xmit+0x6dc/0xde0 [ 808.233086] sch_direct_xmit+0x59b/0x890 [ 808.237139] __qdisc_run+0x1bac/0x3600 [ 808.241019] __dev_queue_xmit+0x2131/0x3e00 [ 808.245334] dev_queue_xmit+0x4b/0x60 [ 808.249131] ip_finish_output2+0x136d/0x1560 [ 808.253532] ip_finish_output+0xd93/0x10f0 [ 808.257757] ip_mc_output+0xf25/0x10f0 [ 808.261654] ip_send_skb+0x178/0x370 [ 808.265382] udp_send_skb+0x1439/0x1920 [ 808.269348] udp_sendmsg+0x399a/0x4350 [ 808.273228] udpv6_sendmsg+0x123e/0x4960 [ 808.277304] inet_sendmsg+0x4e9/0x800 [ 808.281095] ___sys_sendmsg+0xe3b/0x1240 [ 808.285146] __sys_sendmmsg+0x56b/0xa90 [ 808.289111] __se_sys_sendmmsg+0xbd/0xe0 [ 808.293176] __x64_sys_sendmmsg+0x56/0x70 [ 808.297333] do_syscall_64+0xcf/0x110 [ 808.301129] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.306304] [ 808.307919] Uninit was stored to memory at: [ 808.312238] kmsan_internal_chain_origin+0x136/0x240 [ 808.317355] __msan_chain_origin+0x6d/0xb0 [ 808.321584] __save_stack_trace+0x8be/0xc60 [ 808.325899] save_stack_trace+0xc6/0x110 [ 808.329954] kmsan_internal_chain_origin+0x136/0x240 [ 808.335051] kmsan_memcpy_origins+0x13d/0x190 [ 808.339541] __msan_memcpy+0x6f/0x80 [ 808.343259] pskb_expand_head+0x436/0x1d20 [ 808.347490] gre_tap_xmit+0x4e3/0x910 [ 808.351286] dev_hard_start_xmit+0x6dc/0xde0 [ 808.355686] sch_direct_xmit+0x59b/0x890 [ 808.359739] __qdisc_run+0x1bac/0x3600 [ 808.363620] __dev_queue_xmit+0x2131/0x3e00 [ 808.367932] dev_queue_xmit+0x4b/0x60 [ 808.371737] ip_finish_output2+0x136d/0x1560 [ 808.376148] ip_finish_output+0xd93/0x10f0 [ 808.380374] ip_mc_output+0xf25/0x10f0 [ 808.384260] ip_send_skb+0x178/0x370 [ 808.387969] udp_send_skb+0x1439/0x1920 [ 808.391938] udp_sendmsg+0x399a/0x4350 [ 808.395833] udpv6_sendmsg+0x123e/0x4960 [ 808.399885] inet_sendmsg+0x4e9/0x800 [ 808.403679] ___sys_sendmsg+0xe3b/0x1240 [ 808.407730] __sys_sendmmsg+0x56b/0xa90 [ 808.411712] __se_sys_sendmmsg+0xbd/0xe0 [ 808.415775] __x64_sys_sendmmsg+0x56/0x70 [ 808.419927] do_syscall_64+0xcf/0x110 [ 808.423721] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.428895] [ 808.430510] Uninit was stored to memory at: [ 808.434835] kmsan_internal_chain_origin+0x136/0x240 [ 808.439931] __msan_chain_origin+0x6d/0xb0 [ 808.444172] __save_stack_trace+0x8be/0xc60 [ 808.448486] save_stack_trace+0xc6/0x110 [ 808.452550] kmsan_internal_chain_origin+0x136/0x240 [ 808.457650] kmsan_memcpy_origins+0x13d/0x190 [ 808.462143] __msan_memcpy+0x6f/0x80 [ 808.465851] pskb_expand_head+0x436/0x1d20 [ 808.470078] gre_tap_xmit+0x4e3/0x910 [ 808.473870] dev_hard_start_xmit+0x6dc/0xde0 [ 808.478277] sch_direct_xmit+0x59b/0x890 [ 808.482341] __qdisc_run+0x1bac/0x3600 [ 808.486219] __dev_queue_xmit+0x2131/0x3e00 [ 808.490531] dev_queue_xmit+0x4b/0x60 [ 808.494326] ip_finish_output2+0x136d/0x1560 [ 808.498725] ip_finish_output+0xd93/0x10f0 [ 808.502952] ip_mc_output+0xf25/0x10f0 [ 808.506830] ip_send_skb+0x178/0x370 [ 808.510538] udp_send_skb+0x1439/0x1920 [ 808.514554] udp_sendmsg+0x399a/0x4350 [ 808.518436] udpv6_sendmsg+0x123e/0x4960 [ 808.522492] inet_sendmsg+0x4e9/0x800 [ 808.526296] ___sys_sendmsg+0xe3b/0x1240 [ 808.530350] __sys_sendmmsg+0x56b/0xa90 [ 808.534316] __se_sys_sendmmsg+0xbd/0xe0 [ 808.538370] __x64_sys_sendmmsg+0x56/0x70 [ 808.542516] do_syscall_64+0xcf/0x110 [ 808.546313] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.551489] [ 808.553110] Uninit was stored to memory at: [ 808.557445] kmsan_internal_chain_origin+0x136/0x240 [ 808.562547] __msan_chain_origin+0x6d/0xb0 [ 808.566773] __save_stack_trace+0x8be/0xc60 [ 808.571087] save_stack_trace+0xc6/0x110 [ 808.575149] kmsan_internal_chain_origin+0x136/0x240 [ 808.580258] kmsan_memcpy_origins+0x13d/0x190 [ 808.584766] __msan_memcpy+0x6f/0x80 [ 808.588489] pskb_expand_head+0x436/0x1d20 [ 808.592722] gre_tap_xmit+0x4e3/0x910 [ 808.596533] dev_hard_start_xmit+0x6dc/0xde0 [ 808.600934] sch_direct_xmit+0x59b/0x890 [ 808.604994] __qdisc_run+0x1bac/0x3600 [ 808.608875] __dev_queue_xmit+0x2131/0x3e00 [ 808.613191] dev_queue_xmit+0x4b/0x60 [ 808.616983] ip_finish_output2+0x136d/0x1560 [ 808.621389] ip_finish_output+0xd93/0x10f0 [ 808.625619] ip_mc_output+0xf25/0x10f0 [ 808.629504] ip_send_skb+0x178/0x370 [ 808.633216] udp_send_skb+0x1439/0x1920 [ 808.637179] udp_sendmsg+0x399a/0x4350 [ 808.641064] udpv6_sendmsg+0x123e/0x4960 [ 808.645130] inet_sendmsg+0x4e9/0x800 [ 808.648927] ___sys_sendmsg+0xe3b/0x1240 [ 808.652979] __sys_sendmmsg+0x56b/0xa90 [ 808.656943] __se_sys_sendmmsg+0xbd/0xe0 [ 808.660992] __x64_sys_sendmmsg+0x56/0x70 [ 808.665141] do_syscall_64+0xcf/0x110 [ 808.668936] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.674111] [ 808.675729] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 808.681943] Variable was created at: [ 808.685664] kfree+0x12a/0x2fb0 [ 808.688937] skb_release_data+0xbcb/0xc90 [ 808.705565] not chained 310000 origins [ 808.709512] CPU: 1 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 808.716805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.726168] Call Trace: [ 808.728758] dump_stack+0x32d/0x480 [ 808.732412] kmsan_internal_chain_origin+0x222/0x240 [ 808.737532] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 808.742895] ? __module_address+0x6a/0x5f0 [ 808.747127] ? is_bpf_text_address+0x3e5/0x4d0 [ 808.751710] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 808.757070] ? is_bpf_text_address+0x49e/0x4d0 [ 808.761665] ? kmsan_internal_chain_origin+0x90/0x240 [ 808.766880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 808.772242] ? is_bpf_text_address+0x49e/0x4d0 [ 808.776836] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 808.782290] ? in_task_stack+0x12c/0x210 [ 808.786372] __msan_chain_origin+0x6d/0xb0 [ 808.790608] ? __qdisc_run+0x1bac/0x3600 [ 808.794668] __save_stack_trace+0x8be/0xc60 [ 808.799015] ? __qdisc_run+0x1bac/0x3600 [ 808.803080] save_stack_trace+0xc6/0x110 [ 808.807144] kmsan_internal_chain_origin+0x136/0x240 [ 808.812241] ? inet_sendmsg+0x4e9/0x800 [ 808.816229] ? kmsan_internal_chain_origin+0x136/0x240 [ 808.821509] ? kmsan_memcpy_origins+0x13d/0x190 [ 808.826182] ? __msan_memcpy+0x6f/0x80 [ 808.830078] ? pskb_expand_head+0x436/0x1d20 [ 808.834485] ? gre_tap_xmit+0x4e3/0x910 [ 808.838453] ? dev_hard_start_xmit+0x6dc/0xde0 [ 808.843036] ? sch_direct_xmit+0x59b/0x890 [ 808.847280] ? __qdisc_run+0x1bac/0x3600 [ 808.851336] ? __dev_queue_xmit+0x2131/0x3e00 [ 808.855824] ? dev_queue_xmit+0x4b/0x60 [ 808.859793] ? ip_finish_output2+0x136d/0x1560 [ 808.864372] ? ip_finish_output+0xd93/0x10f0 [ 808.868774] ? ip_mc_output+0xf25/0x10f0 [ 808.872830] ? ip_send_skb+0x178/0x370 [ 808.876716] ? udp_send_skb+0x1439/0x1920 [ 808.880861] ? udp_sendmsg+0x399a/0x4350 [ 808.884924] ? udpv6_sendmsg+0x123e/0x4960 [ 808.889174] ? inet_sendmsg+0x4e9/0x800 [ 808.893144] ? ___sys_sendmsg+0xe3b/0x1240 [ 808.897373] ? __sys_sendmmsg+0x56b/0xa90 [ 808.901514] ? __se_sys_sendmmsg+0xbd/0xe0 [ 808.905747] ? __x64_sys_sendmmsg+0x56/0x70 [ 808.910069] ? do_syscall_64+0xcf/0x110 [ 808.914048] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.919410] ? memcg_kmem_put_cache+0x73/0x460 [ 808.924031] ? __msan_get_context_state+0x9/0x20 [ 808.928783] ? INIT_INT+0xc/0x30 [ 808.932144] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 808.937516] kmsan_memcpy_origins+0x13d/0x190 [ 808.942044] __msan_memcpy+0x6f/0x80 [ 808.945781] pskb_expand_head+0x436/0x1d20 [ 808.950039] gre_tap_xmit+0x4e3/0x910 [ 808.953843] ? gre_tap_init+0x650/0x650 [ 808.957813] dev_hard_start_xmit+0x6dc/0xde0 [ 808.962242] sch_direct_xmit+0x59b/0x890 [ 808.966412] __qdisc_run+0x1bac/0x3600 [ 808.970314] ? INIT_BOOL+0xc/0x30 [ 808.973771] ? do_raw_spin_trylock+0x378/0x4d0 [ 808.978387] __dev_queue_xmit+0x2131/0x3e00 [ 808.982738] dev_queue_xmit+0x4b/0x60 [ 808.986541] ip_finish_output2+0x136d/0x1560 [ 808.990964] ip_finish_output+0xd93/0x10f0 [ 808.995209] ip_mc_output+0xf25/0x10f0 [ 808.999113] ? ip_mc_finish_output+0x440/0x440 [ 809.003699] ? ip_build_and_send_pkt+0xe60/0xe60 [ 809.008447] ip_send_skb+0x178/0x370 [ 809.012168] udp_send_skb+0x1439/0x1920 [ 809.016157] udp_sendmsg+0x399a/0x4350 [ 809.020054] ? ip_copy_metadata+0x1710/0x1710 [ 809.024619] ? kmsan_set_origin+0x7f/0x100 [ 809.028875] udpv6_sendmsg+0x123e/0x4960 [ 809.032957] ? aa_label_sk_perm+0xda/0x960 [ 809.037200] ? aa_sk_perm+0x6db/0x9e0 [ 809.041040] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 809.046401] ? aa_sk_perm+0x7ab/0x9e0 [ 809.050214] ? inet_sendmsg+0x84/0x800 [ 809.054135] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 809.058455] inet_sendmsg+0x4e9/0x800 [ 809.062273] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 809.067636] ? security_socket_sendmsg+0x1bd/0x200 [ 809.072575] ___sys_sendmsg+0xe3b/0x1240 [ 809.076635] ? inet_getname+0x490/0x490 [ 809.080628] ? __msan_poison_alloca+0x1e0/0x270 [ 809.085297] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 809.090665] ? rcu_all_qs+0x3b/0x2b0 [ 809.094374] ? _cond_resched+0x59/0x120 [ 809.098352] ? rcu_all_qs+0x53/0x2b0 [ 809.102098] ? _cond_resched+0x37/0x120 [ 809.106080] ? __sys_sendmmsg+0x7c9/0xa90 [ 809.110233] ? _cond_resched+0x59/0x120 [ 809.114213] __sys_sendmmsg+0x56b/0xa90 [ 809.118220] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 809.123670] ? prepare_exit_to_usermode+0x182/0x4c0 [ 809.128694] __se_sys_sendmmsg+0xbd/0xe0 [ 809.132767] __x64_sys_sendmmsg+0x56/0x70 [ 809.136918] do_syscall_64+0xcf/0x110 [ 809.140727] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.145912] RIP: 0033:0x457569 [ 809.149102] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.168002] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.175712] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 809.182978] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 809.190242] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.197512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 809.204781] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 809.212061] Uninit was stored to memory at: [ 809.216381] kmsan_internal_chain_origin+0x136/0x240 [ 809.221478] __msan_chain_origin+0x6d/0xb0 [ 809.225709] __save_stack_trace+0x8be/0xc60 [ 809.230041] save_stack_trace+0xc6/0x110 [ 809.234097] kmsan_internal_chain_origin+0x136/0x240 [ 809.239191] kmsan_memcpy_origins+0x13d/0x190 [ 809.243693] __msan_memcpy+0x6f/0x80 [ 809.247423] pskb_expand_head+0x436/0x1d20 [ 809.251652] gre_tap_xmit+0x4e3/0x910 [ 809.255444] dev_hard_start_xmit+0x6dc/0xde0 [ 809.259860] sch_direct_xmit+0x59b/0x890 [ 809.263915] __qdisc_run+0x1bac/0x3600 [ 809.267794] __dev_queue_xmit+0x2131/0x3e00 [ 809.272108] dev_queue_xmit+0x4b/0x60 [ 809.275904] ip_finish_output2+0x136d/0x1560 [ 809.280305] ip_finish_output+0xd93/0x10f0 [ 809.284535] ip_mc_output+0xf25/0x10f0 [ 809.288415] ip_send_skb+0x178/0x370 [ 809.292123] udp_send_skb+0x1439/0x1920 [ 809.296117] udp_sendmsg+0x399a/0x4350 [ 809.300006] udpv6_sendmsg+0x123e/0x4960 [ 809.304070] inet_sendmsg+0x4e9/0x800 [ 809.307861] ___sys_sendmsg+0xe3b/0x1240 [ 809.311913] __sys_sendmmsg+0x56b/0xa90 [ 809.315877] __se_sys_sendmmsg+0xbd/0xe0 [ 809.319929] __x64_sys_sendmmsg+0x56/0x70 [ 809.324069] do_syscall_64+0xcf/0x110 [ 809.327863] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.333037] [ 809.334656] Uninit was stored to memory at: [ 809.338974] kmsan_internal_chain_origin+0x136/0x240 [ 809.344082] __msan_chain_origin+0x6d/0xb0 [ 809.348312] __save_stack_trace+0x8be/0xc60 [ 809.352628] save_stack_trace+0xc6/0x110 [ 809.356682] kmsan_internal_chain_origin+0x136/0x240 [ 809.361779] kmsan_memcpy_origins+0x13d/0x190 [ 809.366315] __msan_memcpy+0x6f/0x80 [ 809.370030] pskb_expand_head+0x436/0x1d20 [ 809.374295] gre_tap_xmit+0x4e3/0x910 [ 809.378086] dev_hard_start_xmit+0x6dc/0xde0 [ 809.382488] sch_direct_xmit+0x59b/0x890 [ 809.386546] __qdisc_run+0x1bac/0x3600 [ 809.390423] __dev_queue_xmit+0x2131/0x3e00 [ 809.394744] dev_queue_xmit+0x4b/0x60 [ 809.398540] ip_finish_output2+0x136d/0x1560 [ 809.402939] ip_finish_output+0xd93/0x10f0 [ 809.407166] ip_mc_output+0xf25/0x10f0 [ 809.411043] ip_send_skb+0x178/0x370 [ 809.414753] udp_send_skb+0x1439/0x1920 [ 809.418718] udp_sendmsg+0x399a/0x4350 [ 809.422601] udpv6_sendmsg+0x123e/0x4960 [ 809.426658] inet_sendmsg+0x4e9/0x800 [ 809.430466] ___sys_sendmsg+0xe3b/0x1240 [ 809.434522] __sys_sendmmsg+0x56b/0xa90 [ 809.438489] __se_sys_sendmmsg+0xbd/0xe0 [ 809.442546] __x64_sys_sendmmsg+0x56/0x70 [ 809.446686] do_syscall_64+0xcf/0x110 [ 809.450491] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.455666] [ 809.457295] Uninit was stored to memory at: [ 809.461610] kmsan_internal_chain_origin+0x136/0x240 [ 809.466718] __msan_chain_origin+0x6d/0xb0 [ 809.470946] __save_stack_trace+0x8be/0xc60 [ 809.475266] save_stack_trace+0xc6/0x110 [ 809.479324] kmsan_internal_chain_origin+0x136/0x240 [ 809.484421] kmsan_memcpy_origins+0x13d/0x190 [ 809.488907] __msan_memcpy+0x6f/0x80 [ 809.492627] pskb_expand_head+0x436/0x1d20 [ 809.496855] gre_tap_xmit+0x4e3/0x910 [ 809.500646] dev_hard_start_xmit+0x6dc/0xde0 [ 809.505046] sch_direct_xmit+0x59b/0x890 [ 809.509097] __qdisc_run+0x1bac/0x3600 [ 809.512979] __dev_queue_xmit+0x2131/0x3e00 [ 809.517296] dev_queue_xmit+0x4b/0x60 [ 809.521089] ip_finish_output2+0x136d/0x1560 [ 809.525490] ip_finish_output+0xd93/0x10f0 [ 809.529718] ip_mc_output+0xf25/0x10f0 [ 809.533621] ip_send_skb+0x178/0x370 [ 809.537342] udp_send_skb+0x1439/0x1920 [ 809.541325] udp_sendmsg+0x399a/0x4350 [ 809.545208] udpv6_sendmsg+0x123e/0x4960 [ 809.549278] inet_sendmsg+0x4e9/0x800 [ 809.553079] ___sys_sendmsg+0xe3b/0x1240 [ 809.557137] __sys_sendmmsg+0x56b/0xa90 [ 809.561102] __se_sys_sendmmsg+0xbd/0xe0 [ 809.565156] __x64_sys_sendmmsg+0x56/0x70 [ 809.569303] do_syscall_64+0xcf/0x110 [ 809.573099] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.578280] [ 809.579895] Uninit was stored to memory at: [ 809.584211] kmsan_internal_chain_origin+0x136/0x240 [ 809.589305] __msan_chain_origin+0x6d/0xb0 [ 809.593538] __save_stack_trace+0x8be/0xc60 [ 809.597850] save_stack_trace+0xc6/0x110 [ 809.601905] kmsan_internal_chain_origin+0x136/0x240 [ 809.607017] kmsan_memcpy_origins+0x13d/0x190 [ 809.611504] __msan_memcpy+0x6f/0x80 [ 809.615219] pskb_expand_head+0x436/0x1d20 [ 809.619445] gre_tap_xmit+0x4e3/0x910 [ 809.623237] dev_hard_start_xmit+0x6dc/0xde0 [ 809.627665] sch_direct_xmit+0x59b/0x890 [ 809.631728] __qdisc_run+0x1bac/0x3600 [ 809.635615] __dev_queue_xmit+0x2131/0x3e00 [ 809.639925] dev_queue_xmit+0x4b/0x60 [ 809.643718] ip_finish_output2+0x136d/0x1560 [ 809.648125] ip_finish_output+0xd93/0x10f0 [ 809.652355] ip_mc_output+0xf25/0x10f0 [ 809.656232] ip_send_skb+0x178/0x370 [ 809.659943] udp_send_skb+0x1439/0x1920 [ 809.663910] udp_sendmsg+0x399a/0x4350 [ 809.667791] udpv6_sendmsg+0x123e/0x4960 [ 809.671851] inet_sendmsg+0x4e9/0x800 [ 809.675648] ___sys_sendmsg+0xe3b/0x1240 [ 809.679701] __sys_sendmmsg+0x56b/0xa90 [ 809.683671] __se_sys_sendmmsg+0xbd/0xe0 [ 809.687725] __x64_sys_sendmmsg+0x56/0x70 [ 809.691865] do_syscall_64+0xcf/0x110 [ 809.695664] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.701078] [ 809.702695] Uninit was stored to memory at: [ 809.707010] kmsan_internal_chain_origin+0x136/0x240 [ 809.712114] __msan_chain_origin+0x6d/0xb0 [ 809.716346] __save_stack_trace+0x8be/0xc60 [ 809.720660] save_stack_trace+0xc6/0x110 [ 809.724718] kmsan_internal_chain_origin+0x136/0x240 [ 809.729831] kmsan_memcpy_origins+0x13d/0x190 [ 809.734341] __msan_memcpy+0x6f/0x80 [ 809.738050] pskb_expand_head+0x436/0x1d20 [ 809.742285] gre_tap_xmit+0x4e3/0x910 [ 809.746080] dev_hard_start_xmit+0x6dc/0xde0 [ 809.750480] sch_direct_xmit+0x59b/0x890 [ 809.754534] __qdisc_run+0x1bac/0x3600 [ 809.758437] __dev_queue_xmit+0x2131/0x3e00 [ 809.762753] dev_queue_xmit+0x4b/0x60 [ 809.766551] ip_finish_output2+0x136d/0x1560 [ 809.770964] ip_finish_output+0xd93/0x10f0 [ 809.775191] ip_mc_output+0xf25/0x10f0 [ 809.779083] ip_send_skb+0x178/0x370 [ 809.782792] udp_send_skb+0x1439/0x1920 [ 809.786757] udp_sendmsg+0x399a/0x4350 [ 809.790637] udpv6_sendmsg+0x123e/0x4960 [ 809.794691] inet_sendmsg+0x4e9/0x800 [ 809.798482] ___sys_sendmsg+0xe3b/0x1240 [ 809.802539] __sys_sendmmsg+0x56b/0xa90 [ 809.806514] __se_sys_sendmmsg+0xbd/0xe0 [ 809.810570] __x64_sys_sendmmsg+0x56/0x70 [ 809.814710] do_syscall_64+0xcf/0x110 [ 809.818511] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.823688] [ 809.825307] Uninit was stored to memory at: [ 809.829852] kmsan_internal_chain_origin+0x136/0x240 [ 809.834950] __msan_chain_origin+0x6d/0xb0 [ 809.839181] __save_stack_trace+0x8be/0xc60 [ 809.843496] save_stack_trace+0xc6/0x110 [ 809.847564] kmsan_internal_chain_origin+0x136/0x240 [ 809.852661] kmsan_memcpy_origins+0x13d/0x190 [ 809.857152] __msan_memcpy+0x6f/0x80 [ 809.860859] pskb_expand_head+0x436/0x1d20 [ 809.865087] gre_tap_xmit+0x4e3/0x910 [ 809.868880] dev_hard_start_xmit+0x6dc/0xde0 [ 809.873285] sch_direct_xmit+0x59b/0x890 [ 809.877336] __qdisc_run+0x1bac/0x3600 [ 809.881214] __dev_queue_xmit+0x2131/0x3e00 [ 809.885528] dev_queue_xmit+0x4b/0x60 [ 809.889334] ip_finish_output2+0x136d/0x1560 [ 809.893738] ip_finish_output+0xd93/0x10f0 [ 809.897964] ip_mc_output+0xf25/0x10f0 [ 809.901842] ip_send_skb+0x178/0x370 [ 809.905552] udp_send_skb+0x1439/0x1920 [ 809.909520] udp_sendmsg+0x399a/0x4350 [ 809.913406] udpv6_sendmsg+0x123e/0x4960 [ 809.917461] inet_sendmsg+0x4e9/0x800 [ 809.921258] ___sys_sendmsg+0xe3b/0x1240 [ 809.925313] __sys_sendmmsg+0x56b/0xa90 [ 809.929285] __se_sys_sendmmsg+0xbd/0xe0 [ 809.933340] __x64_sys_sendmmsg+0x56/0x70 [ 809.937481] do_syscall_64+0xcf/0x110 [ 809.941279] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.946462] [ 809.948078] Uninit was stored to memory at: [ 809.952402] kmsan_internal_chain_origin+0x136/0x240 [ 809.957501] __msan_chain_origin+0x6d/0xb0 [ 809.961740] __save_stack_trace+0x8be/0xc60 [ 809.966073] save_stack_trace+0xc6/0x110 [ 809.970129] kmsan_internal_chain_origin+0x136/0x240 [ 809.975226] kmsan_memcpy_origins+0x13d/0x190 [ 809.979720] __msan_memcpy+0x6f/0x80 [ 809.983429] pskb_expand_head+0x436/0x1d20 [ 809.987658] gre_tap_xmit+0x4e3/0x910 [ 809.991449] dev_hard_start_xmit+0x6dc/0xde0 [ 809.995852] sch_direct_xmit+0x59b/0x890 [ 809.999903] __qdisc_run+0x1bac/0x3600 [ 810.003783] __dev_queue_xmit+0x2131/0x3e00 [ 810.008097] dev_queue_xmit+0x4b/0x60 [ 810.011907] ip_finish_output2+0x136d/0x1560 [ 810.016306] ip_finish_output+0xd93/0x10f0 [ 810.020533] ip_mc_output+0xf25/0x10f0 [ 810.024415] ip_send_skb+0x178/0x370 [ 810.028121] udp_send_skb+0x1439/0x1920 [ 810.032087] udp_sendmsg+0x399a/0x4350 [ 810.035966] udpv6_sendmsg+0x123e/0x4960 [ 810.040027] inet_sendmsg+0x4e9/0x800 [ 810.043822] ___sys_sendmsg+0xe3b/0x1240 [ 810.047873] __sys_sendmmsg+0x56b/0xa90 [ 810.051839] __se_sys_sendmmsg+0xbd/0xe0 [ 810.055890] __x64_sys_sendmmsg+0x56/0x70 [ 810.060035] do_syscall_64+0xcf/0x110 [ 810.063833] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.069007] [ 810.070628] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 810.076846] Variable was created at: [ 810.080554] kfree+0x12a/0x2fb0 [ 810.083831] skb_release_data+0xbcb/0xc90 [ 810.105475] not chained 320000 origins [ 810.109431] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 810.116718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.126091] Call Trace: [ 810.128721] dump_stack+0x32d/0x480 [ 810.132382] kmsan_internal_chain_origin+0x222/0x240 [ 810.137500] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 810.142871] ? __module_address+0x6a/0x5f0 [ 810.147113] ? is_bpf_text_address+0x3e5/0x4d0 [ 810.151692] ? common_interrupt+0xa/0xf [ 810.155664] ? kmsan_internal_chain_origin+0x90/0x240 [ 810.160850] ? __entry_text_end+0x7/0x7 [ 810.164835] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 810.170197] ? is_bpf_text_address+0x49e/0x4d0 [ 810.174783] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 810.180227] ? in_task_stack+0x12c/0x210 [ 810.184302] __msan_chain_origin+0x6d/0xb0 [ 810.188541] ? inet_sendmsg+0x4e9/0x800 [ 810.192536] __save_stack_trace+0x8be/0xc60 [ 810.196915] ? inet_sendmsg+0x4e9/0x800 [ 810.200918] save_stack_trace+0xc6/0x110 [ 810.205013] kmsan_internal_chain_origin+0x136/0x240 [ 810.210135] ? inet_sendmsg+0x4e9/0x800 [ 810.214145] ? kmsan_internal_chain_origin+0x136/0x240 [ 810.219445] ? kmsan_memcpy_origins+0x13d/0x190 [ 810.224138] ? __msan_memcpy+0x6f/0x80 [ 810.228047] ? pskb_expand_head+0x436/0x1d20 [ 810.232491] ? gre_tap_xmit+0x4e3/0x910 [ 810.236491] ? dev_hard_start_xmit+0x6dc/0xde0 [ 810.241093] ? sch_direct_xmit+0x59b/0x890 [ 810.245363] ? __qdisc_run+0x1bac/0x3600 [ 810.249443] ? __dev_queue_xmit+0x2131/0x3e00 [ 810.253956] ? dev_queue_xmit+0x4b/0x60 [ 810.257953] ? ip_finish_output2+0x136d/0x1560 [ 810.262562] ? ip_finish_output+0xd93/0x10f0 [ 810.266988] ? ip_mc_output+0xf25/0x10f0 [ 810.271067] ? ip_send_skb+0x178/0x370 [ 810.274982] ? udp_send_skb+0x1439/0x1920 [ 810.279144] ? udp_sendmsg+0x399a/0x4350 [ 810.283226] ? udpv6_sendmsg+0x123e/0x4960 [ 810.287489] ? inet_sendmsg+0x4e9/0x800 [ 810.291489] ? ___sys_sendmsg+0xe3b/0x1240 [ 810.295747] ? __sys_sendmmsg+0x56b/0xa90 [ 810.299927] ? __se_sys_sendmmsg+0xbd/0xe0 [ 810.304181] ? __x64_sys_sendmmsg+0x56/0x70 [ 810.308534] ? do_syscall_64+0xcf/0x110 [ 810.312537] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.317928] ? memcg_kmem_put_cache+0x73/0x460 [ 810.322563] ? __msan_get_context_state+0x9/0x20 [ 810.327363] ? INIT_INT+0xc/0x30 [ 810.330749] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 810.336152] kmsan_memcpy_origins+0x13d/0x190 [ 810.340680] __msan_memcpy+0x6f/0x80 [ 810.344420] pskb_expand_head+0x436/0x1d20 [ 810.348709] gre_tap_xmit+0x4e3/0x910 [ 810.352551] ? gre_tap_init+0x650/0x650 [ 810.356552] dev_hard_start_xmit+0x6dc/0xde0 [ 810.361026] sch_direct_xmit+0x59b/0x890 [ 810.365133] __qdisc_run+0x1bac/0x3600 [ 810.369070] ? INIT_BOOL+0xc/0x30 [ 810.372550] ? do_raw_spin_trylock+0x378/0x4d0 [ 810.377173] __dev_queue_xmit+0x2131/0x3e00 [ 810.381562] dev_queue_xmit+0x4b/0x60 [ 810.385390] ip_finish_output2+0x136d/0x1560 [ 810.389853] ip_finish_output+0xd93/0x10f0 [ 810.394132] ip_mc_output+0xf25/0x10f0 [ 810.398065] ? ip_mc_finish_output+0x440/0x440 [ 810.402688] ? ip_build_and_send_pkt+0xe60/0xe60 [ 810.407459] ip_send_skb+0x178/0x370 [ 810.411212] udp_send_skb+0x1439/0x1920 [ 810.415262] udp_sendmsg+0x399a/0x4350 [ 810.419173] ? ip_copy_metadata+0x1710/0x1710 [ 810.423760] ? kmsan_set_origin+0x7f/0x100 [ 810.428034] udpv6_sendmsg+0x123e/0x4960 [ 810.432117] ? aa_label_sk_perm+0xda/0x960 [ 810.436368] ? aa_sk_perm+0x6db/0x9e0 [ 810.440268] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 810.445653] ? aa_sk_perm+0x7ab/0x9e0 [ 810.449497] ? inet_sendmsg+0x84/0x800 [ 810.453415] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 810.457755] inet_sendmsg+0x4e9/0x800 [ 810.461583] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 810.466970] ? security_socket_sendmsg+0x1bd/0x200 [ 810.471935] ___sys_sendmsg+0xe3b/0x1240 [ 810.476020] ? kmsan_set_origin+0x7f/0x100 [ 810.480304] ? inet_getname+0x490/0x490 [ 810.484335] ? __msan_poison_alloca+0x1e0/0x270 [ 810.489041] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 810.494439] ? rcu_all_qs+0x3b/0x2b0 [ 810.498169] ? _cond_resched+0x59/0x120 [ 810.502177] ? rcu_all_qs+0x53/0x2b0 [ 810.505906] ? _cond_resched+0x37/0x120 [ 810.509896] ? __sys_sendmmsg+0x7c9/0xa90 [ 810.514072] ? _cond_resched+0x59/0x120 [ 810.518074] __sys_sendmmsg+0x56b/0xa90 [ 810.522108] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 810.527584] ? prepare_exit_to_usermode+0x182/0x4c0 [ 810.532635] __se_sys_sendmmsg+0xbd/0xe0 [ 810.536724] __x64_sys_sendmmsg+0x56/0x70 [ 810.540895] do_syscall_64+0xcf/0x110 [ 810.544726] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.549930] RIP: 0033:0x457569 [ 810.553147] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.572074] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 810.579804] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 810.587087] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 810.594375] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 810.601661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 810.608966] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 810.616288] Uninit was stored to memory at: [ 810.620640] kmsan_internal_chain_origin+0x136/0x240 [ 810.625758] __msan_chain_origin+0x6d/0xb0 [ 810.630007] __save_stack_trace+0x8be/0xc60 [ 810.634346] save_stack_trace+0xc6/0x110 [ 810.638428] kmsan_internal_chain_origin+0x136/0x240 [ 810.643553] kmsan_memcpy_origins+0x13d/0x190 [ 810.648068] __msan_memcpy+0x6f/0x80 [ 810.651801] pskb_expand_head+0x436/0x1d20 [ 810.656052] gre_tap_xmit+0x4e3/0x910 [ 810.659868] dev_hard_start_xmit+0x6dc/0xde0 [ 810.664302] sch_direct_xmit+0x59b/0x890 [ 810.668378] __qdisc_run+0x1bac/0x3600 [ 810.672290] __dev_queue_xmit+0x2131/0x3e00 [ 810.676624] dev_queue_xmit+0x4b/0x60 [ 810.680443] ip_finish_output2+0x136d/0x1560 [ 810.684865] ip_finish_output+0xd93/0x10f0 [ 810.689116] ip_mc_output+0xf25/0x10f0 [ 810.693016] ip_send_skb+0x178/0x370 [ 810.696748] udp_send_skb+0x1439/0x1920 [ 810.700737] udp_sendmsg+0x399a/0x4350 [ 810.704637] udpv6_sendmsg+0x123e/0x4960 [ 810.708712] inet_sendmsg+0x4e9/0x800 [ 810.712532] ___sys_sendmsg+0xe3b/0x1240 [ 810.716610] __sys_sendmmsg+0x56b/0xa90 [ 810.720601] __se_sys_sendmmsg+0xbd/0xe0 [ 810.724675] __x64_sys_sendmmsg+0x56/0x70 [ 810.728848] do_syscall_64+0xcf/0x110 [ 810.732668] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.737858] [ 810.739494] Uninit was stored to memory at: [ 810.743839] kmsan_internal_chain_origin+0x136/0x240 [ 810.748961] __msan_chain_origin+0x6d/0xb0 [ 810.753211] __save_stack_trace+0x8be/0xc60 [ 810.757552] save_stack_trace+0xc6/0x110 [ 810.761632] kmsan_internal_chain_origin+0x136/0x240 [ 810.766755] kmsan_memcpy_origins+0x13d/0x190 [ 810.771272] __msan_memcpy+0x6f/0x80 [ 810.775004] pskb_expand_head+0x436/0x1d20 [ 810.779267] gre_tap_xmit+0x4e3/0x910 [ 810.783082] dev_hard_start_xmit+0x6dc/0xde0 [ 810.787507] sch_direct_xmit+0x59b/0x890 [ 810.791588] __qdisc_run+0x1bac/0x3600 [ 810.795520] __dev_queue_xmit+0x2131/0x3e00 [ 810.799862] dev_queue_xmit+0x4b/0x60 [ 810.803678] ip_finish_output2+0x136d/0x1560 [ 810.808098] ip_finish_output+0xd93/0x10f0 [ 810.812355] ip_mc_output+0xf25/0x10f0 [ 810.816273] ip_send_skb+0x178/0x370 [ 810.820008] udp_send_skb+0x1439/0x1920 [ 810.824000] udp_sendmsg+0x399a/0x4350 [ 810.827903] udpv6_sendmsg+0x123e/0x4960 [ 810.831982] inet_sendmsg+0x4e9/0x800 [ 810.835794] ___sys_sendmsg+0xe3b/0x1240 [ 810.839870] __sys_sendmmsg+0x56b/0xa90 [ 810.843860] __se_sys_sendmmsg+0xbd/0xe0 [ 810.847938] __x64_sys_sendmmsg+0x56/0x70 [ 810.852100] do_syscall_64+0xcf/0x110 [ 810.855925] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.861118] [ 810.862755] Uninit was stored to memory at: [ 810.867097] kmsan_internal_chain_origin+0x136/0x240 [ 810.872217] __msan_chain_origin+0x6d/0xb0 [ 810.876475] __save_stack_trace+0x8be/0xc60 [ 810.880819] save_stack_trace+0xc6/0x110 [ 810.884898] kmsan_internal_chain_origin+0x136/0x240 [ 810.890019] kmsan_memcpy_origins+0x13d/0x190 [ 810.894535] __msan_memcpy+0x6f/0x80 [ 810.898274] pskb_expand_head+0x436/0x1d20 [ 810.902544] gre_tap_xmit+0x4e3/0x910 [ 810.906361] dev_hard_start_xmit+0x6dc/0xde0 [ 810.910820] sch_direct_xmit+0x59b/0x890 [ 810.914904] __qdisc_run+0x1bac/0x3600 [ 810.918810] __dev_queue_xmit+0x2131/0x3e00 [ 810.923145] dev_queue_xmit+0x4b/0x60 [ 810.926963] ip_finish_output2+0x136d/0x1560 [ 810.931383] ip_finish_output+0xd93/0x10f0 [ 810.935631] ip_mc_output+0xf25/0x10f0 [ 810.939547] ip_send_skb+0x178/0x370 [ 810.943298] udp_send_skb+0x1439/0x1920 [ 810.947294] udp_sendmsg+0x399a/0x4350 [ 810.951200] udpv6_sendmsg+0x123e/0x4960 [ 810.955284] inet_sendmsg+0x4e9/0x800 [ 810.959100] ___sys_sendmsg+0xe3b/0x1240 [ 810.963179] __sys_sendmmsg+0x56b/0xa90 [ 810.967168] __se_sys_sendmmsg+0xbd/0xe0 [ 810.971242] __x64_sys_sendmmsg+0x56/0x70 [ 810.975419] do_syscall_64+0xcf/0x110 [ 810.979239] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.984451] [ 810.986084] Uninit was stored to memory at: [ 810.990422] kmsan_internal_chain_origin+0x136/0x240 [ 810.995550] __msan_chain_origin+0x6d/0xb0 [ 810.999799] __save_stack_trace+0x8be/0xc60 [ 811.004145] save_stack_trace+0xc6/0x110 [ 811.008225] kmsan_internal_chain_origin+0x136/0x240 [ 811.013352] kmsan_memcpy_origins+0x13d/0x190 [ 811.017863] __msan_memcpy+0x6f/0x80 [ 811.021609] pskb_expand_head+0x436/0x1d20 [ 811.025876] gre_tap_xmit+0x4e3/0x910 [ 811.029691] dev_hard_start_xmit+0x6dc/0xde0 [ 811.034118] sch_direct_xmit+0x59b/0x890 [ 811.038196] __qdisc_run+0x1bac/0x3600 [ 811.042137] __dev_queue_xmit+0x2131/0x3e00 [ 811.046493] dev_queue_xmit+0x4b/0x60 [ 811.050333] ip_finish_output2+0x136d/0x1560 [ 811.054753] ip_finish_output+0xd93/0x10f0 [ 811.059002] ip_mc_output+0xf25/0x10f0 [ 811.062910] ip_send_skb+0x178/0x370 [ 811.066650] udp_send_skb+0x1439/0x1920 [ 811.070636] udp_sendmsg+0x399a/0x4350 [ 811.074548] udpv6_sendmsg+0x123e/0x4960 [ 811.078627] inet_sendmsg+0x4e9/0x800 [ 811.082440] ___sys_sendmsg+0xe3b/0x1240 [ 811.086525] __sys_sendmmsg+0x56b/0xa90 [ 811.090513] __se_sys_sendmmsg+0xbd/0xe0 [ 811.094593] __x64_sys_sendmmsg+0x56/0x70 [ 811.098757] do_syscall_64+0xcf/0x110 [ 811.102577] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.107773] [ 811.109410] Uninit was stored to memory at: [ 811.113760] kmsan_internal_chain_origin+0x136/0x240 [ 811.118883] __msan_chain_origin+0x6d/0xb0 [ 811.123136] __save_stack_trace+0x8be/0xc60 [ 811.127474] save_stack_trace+0xc6/0x110 [ 811.131554] kmsan_internal_chain_origin+0x136/0x240 [ 811.136687] kmsan_memcpy_origins+0x13d/0x190 [ 811.141196] __msan_memcpy+0x6f/0x80 [ 811.144927] pskb_expand_head+0x436/0x1d20 [ 811.149176] gre_tap_xmit+0x4e3/0x910 [ 811.152993] dev_hard_start_xmit+0x6dc/0xde0 [ 811.157416] sch_direct_xmit+0x59b/0x890 [ 811.161494] __qdisc_run+0x1bac/0x3600 [ 811.165400] __dev_queue_xmit+0x2131/0x3e00 [ 811.169738] dev_queue_xmit+0x4b/0x60 [ 811.173562] ip_finish_output2+0x136d/0x1560 [ 811.177985] ip_finish_output+0xd93/0x10f0 [ 811.182232] ip_mc_output+0xf25/0x10f0 [ 811.186142] ip_send_skb+0x178/0x370 [ 811.189872] udp_send_skb+0x1439/0x1920 [ 811.193861] udp_sendmsg+0x399a/0x4350 [ 811.197763] udpv6_sendmsg+0x123e/0x4960 [ 811.201839] inet_sendmsg+0x4e9/0x800 [ 811.205657] ___sys_sendmsg+0xe3b/0x1240 [ 811.209732] __sys_sendmmsg+0x56b/0xa90 [ 811.213720] __se_sys_sendmmsg+0xbd/0xe0 [ 811.217798] __x64_sys_sendmmsg+0x56/0x70 [ 811.221964] do_syscall_64+0xcf/0x110 [ 811.225786] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.230982] [ 811.232618] Uninit was stored to memory at: [ 811.236957] kmsan_internal_chain_origin+0x136/0x240 [ 811.242075] __msan_chain_origin+0x6d/0xb0 [ 811.246328] __save_stack_trace+0x8be/0xc60 [ 811.250676] save_stack_trace+0xc6/0x110 [ 811.254778] kmsan_internal_chain_origin+0x136/0x240 [ 811.259895] kmsan_memcpy_origins+0x13d/0x190 [ 811.264409] __msan_memcpy+0x6f/0x80 [ 811.268144] pskb_expand_head+0x436/0x1d20 [ 811.272393] gre_tap_xmit+0x4e3/0x910 [ 811.276205] dev_hard_start_xmit+0x6dc/0xde0 [ 811.280632] sch_direct_xmit+0x59b/0x890 [ 811.284734] __qdisc_run+0x1bac/0x3600 [ 811.288634] __dev_queue_xmit+0x2131/0x3e00 [ 811.292970] dev_queue_xmit+0x4b/0x60 [ 811.296788] ip_finish_output2+0x136d/0x1560 [ 811.301208] ip_finish_output+0xd93/0x10f0 [ 811.305462] ip_mc_output+0xf25/0x10f0 [ 811.309362] ip_send_skb+0x178/0x370 [ 811.313097] udp_send_skb+0x1439/0x1920 [ 811.317091] udp_sendmsg+0x399a/0x4350 [ 811.320994] udpv6_sendmsg+0x123e/0x4960 [ 811.325070] inet_sendmsg+0x4e9/0x800 [ 811.328900] ___sys_sendmsg+0xe3b/0x1240 [ 811.332982] __sys_sendmmsg+0x56b/0xa90 [ 811.336970] __se_sys_sendmmsg+0xbd/0xe0 [ 811.341050] __x64_sys_sendmmsg+0x56/0x70 [ 811.345216] do_syscall_64+0xcf/0x110 [ 811.349046] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.354238] [ 811.355891] Uninit was stored to memory at: [ 811.360233] kmsan_internal_chain_origin+0x136/0x240 [ 811.365364] __msan_chain_origin+0x6d/0xb0 [ 811.369633] __save_stack_trace+0x8be/0xc60 [ 811.373974] save_stack_trace+0xc6/0x110 [ 811.378051] kmsan_internal_chain_origin+0x136/0x240 [ 811.383174] kmsan_memcpy_origins+0x13d/0x190 [ 811.387685] __msan_memcpy+0x6f/0x80 [ 811.391421] pskb_expand_head+0x436/0x1d20 [ 811.396018] gre_tap_xmit+0x4e3/0x910 [ 811.399840] dev_hard_start_xmit+0x6dc/0xde0 [ 811.404274] sch_direct_xmit+0x59b/0x890 [ 811.408355] __qdisc_run+0x1bac/0x3600 [ 811.412277] __dev_queue_xmit+0x2131/0x3e00 [ 811.416615] dev_queue_xmit+0x4b/0x60 [ 811.420433] ip_finish_output2+0x136d/0x1560 [ 811.424856] ip_finish_output+0xd93/0x10f0 [ 811.429108] ip_mc_output+0xf25/0x10f0 [ 811.433023] ip_send_skb+0x178/0x370 [ 811.436758] udp_send_skb+0x1439/0x1920 [ 811.440745] udp_sendmsg+0x399a/0x4350 [ 811.444661] udpv6_sendmsg+0x123e/0x4960 [ 811.448740] inet_sendmsg+0x4e9/0x800 [ 811.452561] ___sys_sendmsg+0xe3b/0x1240 [ 811.456639] __sys_sendmmsg+0x56b/0xa90 [ 811.460624] __se_sys_sendmmsg+0xbd/0xe0 [ 811.464702] __x64_sys_sendmmsg+0x56/0x70 [ 811.468868] do_syscall_64+0xcf/0x110 [ 811.472688] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.477878] [ 811.479521] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 811.485755] Variable was created at: [ 811.489487] kfree+0x12a/0x2fb0 [ 811.492793] skb_release_data+0xbcb/0xc90 [ 811.523071] not chained 330000 origins [ 811.527015] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 811.534298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.543644] Call Trace: [ 811.546232] dump_stack+0x32d/0x480 [ 811.549899] kmsan_internal_chain_origin+0x222/0x240 [ 811.555010] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 811.560372] ? is_bpf_text_address+0x49e/0x4d0 [ 811.564972] ? INIT_INT+0xc/0x30 [ 811.568346] ? __msan_warning+0x76/0xc0 [ 811.572319] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 811.577772] ? __save_stack_trace+0x9f2/0xc60 [ 811.582296] __msan_chain_origin+0x6d/0xb0 [ 811.586539] save_stack_trace+0xfa/0x110 [ 811.590603] kmsan_internal_chain_origin+0x136/0x240 [ 811.595702] ? inet_sendmsg+0x4e9/0x800 [ 811.599701] ? kmsan_internal_chain_origin+0x136/0x240 [ 811.604990] ? kmsan_memcpy_origins+0x13d/0x190 [ 811.609655] ? __msan_memcpy+0x6f/0x80 [ 811.613591] ? pskb_expand_head+0x436/0x1d20 [ 811.618007] ? gre_tap_xmit+0x4e3/0x910 [ 811.622007] ? dev_hard_start_xmit+0x6dc/0xde0 [ 811.626600] ? sch_direct_xmit+0x59b/0x890 [ 811.630843] ? __qdisc_run+0x1bac/0x3600 [ 811.634897] ? __dev_queue_xmit+0x2131/0x3e00 [ 811.639401] ? dev_queue_xmit+0x4b/0x60 [ 811.643375] ? ip_finish_output2+0x136d/0x1560 [ 811.647949] ? ip_finish_output+0xd93/0x10f0 [ 811.652351] ? ip_mc_output+0xf25/0x10f0 [ 811.656407] ? ip_send_skb+0x178/0x370 [ 811.660293] ? udp_send_skb+0x1439/0x1920 [ 811.664448] ? udp_sendmsg+0x399a/0x4350 [ 811.668501] ? udpv6_sendmsg+0x123e/0x4960 [ 811.672737] ? inet_sendmsg+0x4e9/0x800 [ 811.676704] ? ___sys_sendmsg+0xe3b/0x1240 [ 811.680932] ? __sys_sendmmsg+0x56b/0xa90 [ 811.685075] ? __se_sys_sendmmsg+0xbd/0xe0 [ 811.689305] ? __x64_sys_sendmmsg+0x56/0x70 [ 811.693619] ? do_syscall_64+0xcf/0x110 [ 811.697836] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.703200] ? memcg_kmem_put_cache+0x73/0x460 [ 811.707797] ? __msan_get_context_state+0x9/0x20 [ 811.712579] ? INIT_INT+0xc/0x30 [ 811.715945] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 811.721338] kmsan_memcpy_origins+0x13d/0x190 [ 811.725840] __msan_memcpy+0x6f/0x80 [ 811.729554] pskb_expand_head+0x436/0x1d20 [ 811.733819] gre_tap_xmit+0x4e3/0x910 [ 811.737626] ? gre_tap_init+0x650/0x650 [ 811.741595] dev_hard_start_xmit+0x6dc/0xde0 [ 811.746046] sch_direct_xmit+0x59b/0x890 [ 811.750122] __qdisc_run+0x1bac/0x3600 [ 811.754028] ? INIT_BOOL+0xc/0x30 [ 811.757483] ? do_raw_spin_trylock+0x378/0x4d0 [ 811.762088] __dev_queue_xmit+0x2131/0x3e00 [ 811.766437] dev_queue_xmit+0x4b/0x60 [ 811.770233] ip_finish_output2+0x136d/0x1560 [ 811.774667] ip_finish_output+0xd93/0x10f0 [ 811.778912] ip_mc_output+0xf25/0x10f0 [ 811.782827] ? ip_mc_finish_output+0x440/0x440 [ 811.787412] ? ip_build_and_send_pkt+0xe60/0xe60 [ 811.792163] ip_send_skb+0x178/0x370 [ 811.795882] udp_send_skb+0x1439/0x1920 [ 811.799871] udp_sendmsg+0x399a/0x4350 [ 811.803755] ? ip_copy_metadata+0x1710/0x1710 [ 811.808303] ? kmsan_set_origin+0x7f/0x100 [ 811.812547] udpv6_sendmsg+0x123e/0x4960 [ 811.816604] ? aa_label_sk_perm+0xda/0x960 [ 811.820842] ? aa_sk_perm+0x6db/0x9e0 [ 811.824679] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 811.830525] ? aa_sk_perm+0x7ab/0x9e0 [ 811.834344] ? inet_sendmsg+0x84/0x800 [ 811.838229] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 811.842558] inet_sendmsg+0x4e9/0x800 [ 811.846378] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 811.851740] ? security_socket_sendmsg+0x1bd/0x200 [ 811.856675] ___sys_sendmsg+0xe3b/0x1240 [ 811.860748] ? kmsan_set_origin+0x7f/0x100 [ 811.864983] ? inet_getname+0x490/0x490 [ 811.868972] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 811.874335] ? kmsan_set_origin+0x7f/0x100 [ 811.878571] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 811.883950] ? _cond_resched+0xc7/0x120 [ 811.887921] __sys_sendmmsg+0x56b/0xa90 [ 811.891914] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 811.897361] ? prepare_exit_to_usermode+0x182/0x4c0 [ 811.902390] __se_sys_sendmmsg+0xbd/0xe0 [ 811.906486] __x64_sys_sendmmsg+0x56/0x70 [ 811.910643] do_syscall_64+0xcf/0x110 [ 811.914446] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.919630] RIP: 0033:0x457569 [ 811.922832] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.941750] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 811.949474] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 811.956737] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 811.964009] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 811.971290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 811.978553] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 811.985830] Uninit was stored to memory at: [ 811.990165] kmsan_internal_chain_origin+0x136/0x240 [ 811.995309] __msan_chain_origin+0x6d/0xb0 [ 811.999549] save_stack_trace+0xfa/0x110 [ 812.003623] kmsan_internal_chain_origin+0x136/0x240 [ 812.008722] kmsan_memcpy_origins+0x13d/0x190 [ 812.013211] __msan_memcpy+0x6f/0x80 [ 812.016919] pskb_expand_head+0x436/0x1d20 [ 812.021149] gre_tap_xmit+0x4e3/0x910 [ 812.024942] dev_hard_start_xmit+0x6dc/0xde0 [ 812.029345] sch_direct_xmit+0x59b/0x890 [ 812.033417] __qdisc_run+0x1bac/0x3600 [ 812.037300] __dev_queue_xmit+0x2131/0x3e00 [ 812.041615] dev_queue_xmit+0x4b/0x60 [ 812.045435] ip_finish_output2+0x136d/0x1560 [ 812.049836] ip_finish_output+0xd93/0x10f0 [ 812.054066] ip_mc_output+0xf25/0x10f0 [ 812.057944] ip_send_skb+0x178/0x370 [ 812.061663] udp_send_skb+0x1439/0x1920 [ 812.065643] udp_sendmsg+0x399a/0x4350 [ 812.069535] udpv6_sendmsg+0x123e/0x4960 [ 812.073592] inet_sendmsg+0x4e9/0x800 [ 812.077388] ___sys_sendmsg+0xe3b/0x1240 [ 812.081438] __sys_sendmmsg+0x56b/0xa90 [ 812.085405] __se_sys_sendmmsg+0xbd/0xe0 [ 812.089460] __x64_sys_sendmmsg+0x56/0x70 [ 812.093606] do_syscall_64+0xcf/0x110 [ 812.097398] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.102572] [ 812.104189] Uninit was stored to memory at: [ 812.108506] kmsan_internal_chain_origin+0x136/0x240 [ 812.113605] __msan_chain_origin+0x6d/0xb0 [ 812.117830] __save_stack_trace+0x833/0xc60 [ 812.122146] save_stack_trace+0xc6/0x110 [ 812.126206] kmsan_internal_chain_origin+0x136/0x240 [ 812.131307] kmsan_memcpy_origins+0x13d/0x190 [ 812.135796] __msan_memcpy+0x6f/0x80 [ 812.139504] pskb_expand_head+0x436/0x1d20 [ 812.143735] gre_tap_xmit+0x4e3/0x910 [ 812.147542] dev_hard_start_xmit+0x6dc/0xde0 [ 812.151945] sch_direct_xmit+0x59b/0x890 [ 812.155997] __qdisc_run+0x1bac/0x3600 [ 812.159875] __dev_queue_xmit+0x2131/0x3e00 [ 812.164188] dev_queue_xmit+0x4b/0x60 [ 812.167980] ip_finish_output2+0x136d/0x1560 [ 812.172380] ip_finish_output+0xd93/0x10f0 [ 812.176609] ip_mc_output+0xf25/0x10f0 [ 812.180489] ip_send_skb+0x178/0x370 [ 812.184201] udp_send_skb+0x1439/0x1920 [ 812.188168] udp_sendmsg+0x399a/0x4350 [ 812.192050] udpv6_sendmsg+0x123e/0x4960 [ 812.196103] inet_sendmsg+0x4e9/0x800 [ 812.199897] ___sys_sendmsg+0xe3b/0x1240 [ 812.203953] __sys_sendmmsg+0x56b/0xa90 [ 812.207936] __se_sys_sendmmsg+0xbd/0xe0 [ 812.211989] __x64_sys_sendmmsg+0x56/0x70 [ 812.216144] do_syscall_64+0xcf/0x110 [ 812.219937] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.225199] [ 812.226815] Uninit was stored to memory at: [ 812.231134] kmsan_internal_chain_origin+0x136/0x240 [ 812.236231] __msan_chain_origin+0x6d/0xb0 [ 812.240464] save_stack_trace+0xfa/0x110 [ 812.244524] kmsan_internal_chain_origin+0x136/0x240 [ 812.249646] kmsan_memcpy_origins+0x13d/0x190 [ 812.254146] __msan_memcpy+0x6f/0x80 [ 812.257894] pskb_expand_head+0x436/0x1d20 [ 812.262142] gre_tap_xmit+0x4e3/0x910 [ 812.265947] dev_hard_start_xmit+0x6dc/0xde0 [ 812.270349] sch_direct_xmit+0x59b/0x890 [ 812.274401] __qdisc_run+0x1bac/0x3600 [ 812.278289] __dev_queue_xmit+0x2131/0x3e00 [ 812.282608] dev_queue_xmit+0x4b/0x60 [ 812.286399] ip_finish_output2+0x136d/0x1560 [ 812.290799] ip_finish_output+0xd93/0x10f0 [ 812.295029] ip_mc_output+0xf25/0x10f0 [ 812.298911] ip_send_skb+0x178/0x370 [ 812.302618] udp_send_skb+0x1439/0x1920 [ 812.306600] udp_sendmsg+0x399a/0x4350 [ 812.310478] udpv6_sendmsg+0x123e/0x4960 [ 812.314534] inet_sendmsg+0x4e9/0x800 [ 812.318326] ___sys_sendmsg+0xe3b/0x1240 [ 812.322379] __sys_sendmmsg+0x56b/0xa90 [ 812.326343] __se_sys_sendmmsg+0xbd/0xe0 [ 812.330399] __x64_sys_sendmmsg+0x56/0x70 [ 812.334542] do_syscall_64+0xcf/0x110 [ 812.338339] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.343515] [ 812.345136] Uninit was stored to memory at: [ 812.349467] kmsan_internal_chain_origin+0x136/0x240 [ 812.354576] __msan_chain_origin+0x6d/0xb0 [ 812.358807] __save_stack_trace+0x833/0xc60 [ 812.363135] save_stack_trace+0xc6/0x110 [ 812.367191] kmsan_internal_chain_origin+0x136/0x240 [ 812.372325] kmsan_memcpy_origins+0x13d/0x190 [ 812.376814] __msan_memcpy+0x6f/0x80 [ 812.380538] pskb_expand_head+0x436/0x1d20 [ 812.384781] gre_tap_xmit+0x4e3/0x910 [ 812.388577] dev_hard_start_xmit+0x6dc/0xde0 [ 812.392978] sch_direct_xmit+0x59b/0x890 [ 812.397043] __qdisc_run+0x1bac/0x3600 [ 812.400921] __dev_queue_xmit+0x2131/0x3e00 [ 812.405234] dev_queue_xmit+0x4b/0x60 [ 812.409038] ip_finish_output2+0x136d/0x1560 [ 812.413437] ip_finish_output+0xd93/0x10f0 [ 812.417662] ip_mc_output+0xf25/0x10f0 [ 812.421548] ip_send_skb+0x178/0x370 [ 812.425273] udp_send_skb+0x1439/0x1920 [ 812.429248] udp_sendmsg+0x399a/0x4350 [ 812.433148] udpv6_sendmsg+0x123e/0x4960 [ 812.437202] inet_sendmsg+0x4e9/0x800 [ 812.440994] ___sys_sendmsg+0xe3b/0x1240 [ 812.445051] __sys_sendmmsg+0x56b/0xa90 [ 812.449015] __se_sys_sendmmsg+0xbd/0xe0 [ 812.453083] __x64_sys_sendmmsg+0x56/0x70 [ 812.457247] do_syscall_64+0xcf/0x110 [ 812.461051] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.466226] [ 812.467848] Uninit was stored to memory at: [ 812.472165] kmsan_internal_chain_origin+0x136/0x240 [ 812.477267] __msan_chain_origin+0x6d/0xb0 [ 812.481494] save_stack_trace+0xfa/0x110 [ 812.485554] kmsan_internal_chain_origin+0x136/0x240 [ 812.490651] kmsan_memcpy_origins+0x13d/0x190 [ 812.495138] __msan_memcpy+0x6f/0x80 [ 812.498845] pskb_expand_head+0x436/0x1d20 [ 812.503088] gre_tap_xmit+0x4e3/0x910 [ 812.506919] dev_hard_start_xmit+0x6dc/0xde0 [ 812.511367] sch_direct_xmit+0x59b/0x890 [ 812.515448] __qdisc_run+0x1bac/0x3600 [ 812.519329] __dev_queue_xmit+0x2131/0x3e00 [ 812.523639] dev_queue_xmit+0x4b/0x60 [ 812.527431] ip_finish_output2+0x136d/0x1560 [ 812.531844] ip_finish_output+0xd93/0x10f0 [ 812.536089] ip_mc_output+0xf25/0x10f0 [ 812.539968] ip_send_skb+0x178/0x370 [ 812.543674] udp_send_skb+0x1439/0x1920 [ 812.547636] udp_sendmsg+0x399a/0x4350 [ 812.551515] udpv6_sendmsg+0x123e/0x4960 [ 812.555578] inet_sendmsg+0x4e9/0x800 [ 812.559371] ___sys_sendmsg+0xe3b/0x1240 [ 812.563433] __sys_sendmmsg+0x56b/0xa90 [ 812.567397] __se_sys_sendmmsg+0xbd/0xe0 [ 812.571447] __x64_sys_sendmmsg+0x56/0x70 [ 812.575592] do_syscall_64+0xcf/0x110 [ 812.579387] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.584564] [ 812.586178] Uninit was stored to memory at: [ 812.590508] kmsan_internal_chain_origin+0x136/0x240 [ 812.595613] __msan_chain_origin+0x6d/0xb0 [ 812.599860] __save_stack_trace+0x833/0xc60 [ 812.604196] save_stack_trace+0xc6/0x110 [ 812.608250] kmsan_internal_chain_origin+0x136/0x240 [ 812.613364] kmsan_memcpy_origins+0x13d/0x190 [ 812.617854] __msan_memcpy+0x6f/0x80 [ 812.621587] pskb_expand_head+0x436/0x1d20 [ 812.625841] gre_tap_xmit+0x4e3/0x910 [ 812.629637] dev_hard_start_xmit+0x6dc/0xde0 [ 812.634041] sch_direct_xmit+0x59b/0x890 [ 812.638112] __qdisc_run+0x1bac/0x3600 [ 812.641990] __dev_queue_xmit+0x2131/0x3e00 [ 812.646306] dev_queue_xmit+0x4b/0x60 [ 812.650105] ip_finish_output2+0x136d/0x1560 [ 812.654516] ip_finish_output+0xd93/0x10f0 [ 812.658762] ip_mc_output+0xf25/0x10f0 [ 812.662649] ip_send_skb+0x178/0x370 [ 812.666361] udp_send_skb+0x1439/0x1920 [ 812.670325] udp_sendmsg+0x399a/0x4350 [ 812.674205] udpv6_sendmsg+0x123e/0x4960 [ 812.678269] inet_sendmsg+0x4e9/0x800 [ 812.682060] ___sys_sendmsg+0xe3b/0x1240 [ 812.686112] __sys_sendmmsg+0x56b/0xa90 [ 812.690075] __se_sys_sendmmsg+0xbd/0xe0 [ 812.694127] __x64_sys_sendmmsg+0x56/0x70 [ 812.698274] do_syscall_64+0xcf/0x110 [ 812.702070] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.707244] [ 812.708865] Uninit was stored to memory at: [ 812.713197] kmsan_internal_chain_origin+0x136/0x240 [ 812.718294] __msan_chain_origin+0x6d/0xb0 [ 812.722533] save_stack_trace+0xfa/0x110 [ 812.726589] kmsan_internal_chain_origin+0x136/0x240 [ 812.731701] kmsan_memcpy_origins+0x13d/0x190 [ 812.736220] __msan_memcpy+0x6f/0x80 [ 812.739926] pskb_expand_head+0x436/0x1d20 [ 812.744152] gre_tap_xmit+0x4e3/0x910 [ 812.747944] dev_hard_start_xmit+0x6dc/0xde0 [ 812.752348] sch_direct_xmit+0x59b/0x890 [ 812.756401] __qdisc_run+0x1bac/0x3600 [ 812.760288] __dev_queue_xmit+0x2131/0x3e00 [ 812.764600] dev_queue_xmit+0x4b/0x60 [ 812.768393] ip_finish_output2+0x136d/0x1560 [ 812.772799] ip_finish_output+0xd93/0x10f0 [ 812.777028] ip_mc_output+0xf25/0x10f0 [ 812.780906] ip_send_skb+0x178/0x370 [ 812.784613] udp_send_skb+0x1439/0x1920 [ 812.788580] udp_sendmsg+0x399a/0x4350 [ 812.792463] udpv6_sendmsg+0x123e/0x4960 [ 812.796517] inet_sendmsg+0x4e9/0x800 [ 812.800315] ___sys_sendmsg+0xe3b/0x1240 [ 812.804372] __sys_sendmmsg+0x56b/0xa90 [ 812.808367] __se_sys_sendmmsg+0xbd/0xe0 [ 812.812439] __x64_sys_sendmmsg+0x56/0x70 [ 812.816609] do_syscall_64+0xcf/0x110 [ 812.820408] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.825584] [ 812.827201] Local variable description: ----__ai_o2.i.i.i.i@kfree [ 812.833417] Variable was created at: [ 812.837130] kfree+0x100/0x2fb0 [ 812.840404] skb_release_data+0xbcb/0xc90 [ 812.860856] not chained 340000 origins [ 812.864820] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 812.872126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.881499] Call Trace: [ 812.884111] dump_stack+0x32d/0x480 [ 812.887753] kmsan_internal_chain_origin+0x222/0x240 [ 812.892871] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 812.898244] ? __module_address+0x6a/0x5f0 [ 812.902479] ? is_bpf_text_address+0x3e5/0x4d0 [ 812.907063] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 812.912426] ? is_bpf_text_address+0x49e/0x4d0 [ 812.917003] ? kmsan_internal_chain_origin+0x90/0x240 [ 812.922204] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 812.927568] ? is_bpf_text_address+0x49e/0x4d0 [ 812.932154] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 812.937601] ? in_task_stack+0x12c/0x210 [ 812.941700] __msan_chain_origin+0x6d/0xb0 [ 812.945950] ? __dev_queue_xmit+0x2131/0x3e00 [ 812.950442] __save_stack_trace+0x8be/0xc60 [ 812.954778] ? __dev_queue_xmit+0x2131/0x3e00 [ 812.959282] save_stack_trace+0xc6/0x110 [ 812.963351] kmsan_internal_chain_origin+0x136/0x240 [ 812.968451] ? inet_sendmsg+0x4e9/0x800 [ 812.972431] ? kmsan_internal_chain_origin+0x136/0x240 [ 812.977703] ? kmsan_memcpy_origins+0x13d/0x190 [ 812.982364] ? __msan_memcpy+0x6f/0x80 [ 812.986247] ? pskb_expand_head+0x436/0x1d20 [ 812.990671] ? gre_tap_xmit+0x4e3/0x910 [ 812.994637] ? dev_hard_start_xmit+0x6dc/0xde0 [ 812.999213] ? sch_direct_xmit+0x59b/0x890 [ 813.003443] ? __qdisc_run+0x1bac/0x3600 [ 813.007496] ? __dev_queue_xmit+0x2131/0x3e00 [ 813.011990] ? dev_queue_xmit+0x4b/0x60 [ 813.015971] ? ip_finish_output2+0x136d/0x1560 [ 813.020552] ? ip_finish_output+0xd93/0x10f0 [ 813.024954] ? ip_mc_output+0xf25/0x10f0 [ 813.029011] ? ip_send_skb+0x178/0x370 [ 813.032898] ? udp_send_skb+0x1439/0x1920 [ 813.037053] ? udp_sendmsg+0x399a/0x4350 [ 813.041111] ? udpv6_sendmsg+0x123e/0x4960 [ 813.045349] ? inet_sendmsg+0x4e9/0x800 [ 813.049315] ? ___sys_sendmsg+0xe3b/0x1240 [ 813.053549] ? __sys_sendmmsg+0x56b/0xa90 [ 813.057688] ? __se_sys_sendmmsg+0xbd/0xe0 [ 813.061913] ? __x64_sys_sendmmsg+0x56/0x70 [ 813.066229] ? do_syscall_64+0xcf/0x110 [ 813.070203] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.075601] ? memcg_kmem_put_cache+0x73/0x460 [ 813.080206] ? __msan_get_context_state+0x9/0x20 [ 813.084959] ? INIT_INT+0xc/0x30 [ 813.088348] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 813.093718] kmsan_memcpy_origins+0x13d/0x190 [ 813.098219] __msan_memcpy+0x6f/0x80 [ 813.101932] pskb_expand_head+0x436/0x1d20 [ 813.106189] gre_tap_xmit+0x4e3/0x910 [ 813.109998] ? gre_tap_init+0x650/0x650 [ 813.113975] dev_hard_start_xmit+0x6dc/0xde0 [ 813.118404] sch_direct_xmit+0x59b/0x890 [ 813.122475] __qdisc_run+0x1bac/0x3600 [ 813.126369] ? INIT_BOOL+0xc/0x30 [ 813.129817] ? do_raw_spin_trylock+0x378/0x4d0 [ 813.134407] __dev_queue_xmit+0x2131/0x3e00 [ 813.138780] dev_queue_xmit+0x4b/0x60 [ 813.142580] ip_finish_output2+0x136d/0x1560 [ 813.147019] ip_finish_output+0xd93/0x10f0 [ 813.151273] ip_mc_output+0xf25/0x10f0 [ 813.155175] ? ip_mc_finish_output+0x440/0x440 [ 813.159765] ? ip_build_and_send_pkt+0xe60/0xe60 [ 813.164527] ip_send_skb+0x178/0x370 [ 813.168247] udp_send_skb+0x1439/0x1920 [ 813.172244] udp_sendmsg+0x399a/0x4350 [ 813.176133] ? ip_copy_metadata+0x1710/0x1710 [ 813.180673] ? kmsan_set_origin+0x7f/0x100 [ 813.184912] udpv6_sendmsg+0x123e/0x4960 [ 813.188972] ? aa_label_sk_perm+0xda/0x960 [ 813.193200] ? aa_sk_perm+0x6db/0x9e0 [ 813.197041] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 813.202401] ? aa_sk_perm+0x7ab/0x9e0 [ 813.206213] ? inet_sendmsg+0x84/0x800 [ 813.210102] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 813.214423] inet_sendmsg+0x4e9/0x800 [ 813.218224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 813.223582] ? security_socket_sendmsg+0x1bd/0x200 [ 813.228516] ___sys_sendmsg+0xe3b/0x1240 [ 813.232577] ? kmsan_set_origin+0x7f/0x100 [ 813.236807] ? inet_getname+0x490/0x490 [ 813.240793] ? __msan_poison_alloca+0x1e0/0x270 [ 813.245456] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 813.250822] ? rcu_all_qs+0x3b/0x2b0 [ 813.254534] ? _cond_resched+0x59/0x120 [ 813.258529] ? rcu_all_qs+0x53/0x2b0 [ 813.262240] ? _cond_resched+0x37/0x120 [ 813.266213] ? __sys_sendmmsg+0x7c9/0xa90 [ 813.270361] ? _cond_resched+0x59/0x120 [ 813.274370] __sys_sendmmsg+0x56b/0xa90 [ 813.278367] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 813.283815] ? prepare_exit_to_usermode+0x182/0x4c0 [ 813.288838] __se_sys_sendmmsg+0xbd/0xe0 [ 813.292901] __x64_sys_sendmmsg+0x56/0x70 [ 813.297047] do_syscall_64+0xcf/0x110 [ 813.300848] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.306031] RIP: 0033:0x457569 [ 813.309219] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.328120] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 813.335830] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 813.343100] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 813.350382] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 813.357645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 813.364910] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 813.372189] Uninit was stored to memory at: [ 813.376513] kmsan_internal_chain_origin+0x136/0x240 [ 813.381618] __msan_chain_origin+0x6d/0xb0 [ 813.385855] __save_stack_trace+0x8be/0xc60 [ 813.390186] save_stack_trace+0xc6/0x110 [ 813.394239] kmsan_internal_chain_origin+0x136/0x240 [ 813.399339] kmsan_memcpy_origins+0x13d/0x190 [ 813.403826] __msan_memcpy+0x6f/0x80 [ 813.407538] pskb_expand_head+0x436/0x1d20 [ 813.411763] gre_tap_xmit+0x4e3/0x910 [ 813.415554] dev_hard_start_xmit+0x6dc/0xde0 [ 813.419953] sch_direct_xmit+0x59b/0x890 [ 813.424004] __qdisc_run+0x1bac/0x3600 [ 813.427885] __dev_queue_xmit+0x2131/0x3e00 [ 813.432199] dev_queue_xmit+0x4b/0x60 [ 813.435990] ip_finish_output2+0x136d/0x1560 [ 813.440388] ip_finish_output+0xd93/0x10f0 [ 813.444612] ip_mc_output+0xf25/0x10f0 [ 813.448492] ip_send_skb+0x178/0x370 [ 813.452205] udp_send_skb+0x1439/0x1920 [ 813.456186] udp_sendmsg+0x399a/0x4350 [ 813.460068] udpv6_sendmsg+0x123e/0x4960 [ 813.464122] inet_sendmsg+0x4e9/0x800 [ 813.467914] ___sys_sendmsg+0xe3b/0x1240 [ 813.471965] __sys_sendmmsg+0x56b/0xa90 [ 813.475931] __se_sys_sendmmsg+0xbd/0xe0 [ 813.479984] __x64_sys_sendmmsg+0x56/0x70 [ 813.484124] do_syscall_64+0xcf/0x110 [ 813.487918] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.493096] [ 813.494709] Uninit was stored to memory at: [ 813.499026] kmsan_internal_chain_origin+0x136/0x240 [ 813.504129] __msan_chain_origin+0x6d/0xb0 [ 813.508355] __save_stack_trace+0x8be/0xc60 [ 813.512668] save_stack_trace+0xc6/0x110 [ 813.516725] kmsan_internal_chain_origin+0x136/0x240 [ 813.521821] kmsan_memcpy_origins+0x13d/0x190 [ 813.526311] __msan_memcpy+0x6f/0x80 [ 813.530017] pskb_expand_head+0x436/0x1d20 [ 813.534247] gre_tap_xmit+0x4e3/0x910 [ 813.538046] dev_hard_start_xmit+0x6dc/0xde0 [ 813.542458] sch_direct_xmit+0x59b/0x890 [ 813.546529] __qdisc_run+0x1bac/0x3600 [ 813.550417] __dev_queue_xmit+0x2131/0x3e00 [ 813.554729] dev_queue_xmit+0x4b/0x60 [ 813.558524] ip_finish_output2+0x136d/0x1560 [ 813.562935] ip_finish_output+0xd93/0x10f0 [ 813.567161] ip_mc_output+0xf25/0x10f0 [ 813.571067] ip_send_skb+0x178/0x370 [ 813.574771] udp_send_skb+0x1439/0x1920 [ 813.578735] udp_sendmsg+0x399a/0x4350 [ 813.582617] udpv6_sendmsg+0x123e/0x4960 [ 813.586672] inet_sendmsg+0x4e9/0x800 [ 813.590464] ___sys_sendmsg+0xe3b/0x1240 [ 813.594518] __sys_sendmmsg+0x56b/0xa90 [ 813.598486] __se_sys_sendmmsg+0xbd/0xe0 [ 813.602544] __x64_sys_sendmmsg+0x56/0x70 [ 813.606685] do_syscall_64+0xcf/0x110 [ 813.610479] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.615661] [ 813.617281] Uninit was stored to memory at: [ 813.621607] kmsan_internal_chain_origin+0x136/0x240 [ 813.626729] __msan_chain_origin+0x6d/0xb0 [ 813.630959] __save_stack_trace+0x8be/0xc60 [ 813.635280] save_stack_trace+0xc6/0x110 [ 813.639359] kmsan_internal_chain_origin+0x136/0x240 [ 813.644460] kmsan_memcpy_origins+0x13d/0x190 [ 813.648951] __msan_memcpy+0x6f/0x80 [ 813.652664] pskb_expand_head+0x436/0x1d20 [ 813.656894] gre_tap_xmit+0x4e3/0x910 [ 813.660685] dev_hard_start_xmit+0x6dc/0xde0 [ 813.665089] sch_direct_xmit+0x59b/0x890 [ 813.669146] __qdisc_run+0x1bac/0x3600 [ 813.673030] __dev_queue_xmit+0x2131/0x3e00 [ 813.677347] dev_queue_xmit+0x4b/0x60 [ 813.681140] ip_finish_output2+0x136d/0x1560 [ 813.685548] ip_finish_output+0xd93/0x10f0 [ 813.689777] ip_mc_output+0xf25/0x10f0 [ 813.693658] ip_send_skb+0x178/0x370 [ 813.697573] udp_send_skb+0x1439/0x1920 [ 813.701542] udp_sendmsg+0x399a/0x4350 [ 813.705421] udpv6_sendmsg+0x123e/0x4960 [ 813.709474] inet_sendmsg+0x4e9/0x800 [ 813.713274] ___sys_sendmsg+0xe3b/0x1240 [ 813.717327] __sys_sendmmsg+0x56b/0xa90 [ 813.721293] __se_sys_sendmmsg+0xbd/0xe0 [ 813.725347] __x64_sys_sendmmsg+0x56/0x70 [ 813.729486] do_syscall_64+0xcf/0x110 [ 813.733289] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.738465] [ 813.740081] Uninit was stored to memory at: [ 813.744398] kmsan_internal_chain_origin+0x136/0x240 [ 813.749493] __msan_chain_origin+0x6d/0xb0 [ 813.753726] __save_stack_trace+0x8be/0xc60 [ 813.758048] save_stack_trace+0xc6/0x110 [ 813.762105] kmsan_internal_chain_origin+0x136/0x240 [ 813.767212] kmsan_memcpy_origins+0x13d/0x190 [ 813.771716] __msan_memcpy+0x6f/0x80 [ 813.775447] pskb_expand_head+0x436/0x1d20 [ 813.779672] gre_tap_xmit+0x4e3/0x910 [ 813.783465] dev_hard_start_xmit+0x6dc/0xde0 [ 813.787866] sch_direct_xmit+0x59b/0x890 [ 813.791917] __qdisc_run+0x1bac/0x3600 [ 813.795796] __dev_queue_xmit+0x2131/0x3e00 [ 813.800106] dev_queue_xmit+0x4b/0x60 [ 813.803925] ip_finish_output2+0x136d/0x1560 [ 813.808327] ip_finish_output+0xd93/0x10f0 [ 813.812553] ip_mc_output+0xf25/0x10f0 [ 813.816432] ip_send_skb+0x178/0x370 [ 813.820137] udp_send_skb+0x1439/0x1920 [ 813.824102] udp_sendmsg+0x399a/0x4350 [ 813.827983] udpv6_sendmsg+0x123e/0x4960 [ 813.832229] inet_sendmsg+0x4e9/0x800 [ 813.836032] ___sys_sendmsg+0xe3b/0x1240 [ 813.840082] __sys_sendmmsg+0x56b/0xa90 [ 813.844049] __se_sys_sendmmsg+0xbd/0xe0 [ 813.848099] __x64_sys_sendmmsg+0x56/0x70 [ 813.852244] do_syscall_64+0xcf/0x110 [ 813.856051] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.861222] [ 813.862841] Uninit was stored to memory at: [ 813.867159] kmsan_internal_chain_origin+0x136/0x240 [ 813.872257] __msan_chain_origin+0x6d/0xb0 [ 813.876511] __save_stack_trace+0x8be/0xc60 [ 813.880834] save_stack_trace+0xc6/0x110 [ 813.884888] kmsan_internal_chain_origin+0x136/0x240 [ 813.889981] kmsan_memcpy_origins+0x13d/0x190 [ 813.894470] __msan_memcpy+0x6f/0x80 [ 813.898176] pskb_expand_head+0x436/0x1d20 [ 813.902405] gre_tap_xmit+0x4e3/0x910 [ 813.906215] dev_hard_start_xmit+0x6dc/0xde0 [ 813.910617] sch_direct_xmit+0x59b/0x890 [ 813.914678] __qdisc_run+0x1bac/0x3600 [ 813.918555] __dev_queue_xmit+0x2131/0x3e00 [ 813.922879] dev_queue_xmit+0x4b/0x60 [ 813.926671] ip_finish_output2+0x136d/0x1560 [ 813.931068] ip_finish_output+0xd93/0x10f0 [ 813.935296] ip_mc_output+0xf25/0x10f0 [ 813.939174] ip_send_skb+0x178/0x370 [ 813.942881] udp_send_skb+0x1439/0x1920 [ 813.946847] udp_sendmsg+0x399a/0x4350 [ 813.950728] udpv6_sendmsg+0x123e/0x4960 [ 813.954783] inet_sendmsg+0x4e9/0x800 [ 813.958576] ___sys_sendmsg+0xe3b/0x1240 [ 813.962629] __sys_sendmmsg+0x56b/0xa90 [ 813.966594] __se_sys_sendmmsg+0xbd/0xe0 [ 813.970644] __x64_sys_sendmmsg+0x56/0x70 [ 813.974788] do_syscall_64+0xcf/0x110 [ 813.978586] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.983777] [ 813.985416] Uninit was stored to memory at: [ 813.989730] kmsan_internal_chain_origin+0x136/0x240 [ 813.994846] __msan_chain_origin+0x6d/0xb0 [ 813.999075] __save_stack_trace+0x8be/0xc60 [ 814.003393] save_stack_trace+0xc6/0x110 [ 814.007462] kmsan_internal_chain_origin+0x136/0x240 [ 814.012560] kmsan_memcpy_origins+0x13d/0x190 [ 814.017049] __msan_memcpy+0x6f/0x80 [ 814.020756] pskb_expand_head+0x436/0x1d20 [ 814.024983] gre_tap_xmit+0x4e3/0x910 [ 814.028780] dev_hard_start_xmit+0x6dc/0xde0 [ 814.033182] sch_direct_xmit+0x59b/0x890 [ 814.037267] __qdisc_run+0x1bac/0x3600 [ 814.041148] __dev_queue_xmit+0x2131/0x3e00 [ 814.045473] dev_queue_xmit+0x4b/0x60 [ 814.049276] ip_finish_output2+0x136d/0x1560 [ 814.053675] ip_finish_output+0xd93/0x10f0 [ 814.057903] ip_mc_output+0xf25/0x10f0 [ 814.061783] ip_send_skb+0x178/0x370 [ 814.065489] udp_send_skb+0x1439/0x1920 [ 814.069454] udp_sendmsg+0x399a/0x4350 [ 814.073334] udpv6_sendmsg+0x123e/0x4960 [ 814.077387] inet_sendmsg+0x4e9/0x800 [ 814.081179] ___sys_sendmsg+0xe3b/0x1240 [ 814.085238] __sys_sendmmsg+0x56b/0xa90 [ 814.089225] __se_sys_sendmmsg+0xbd/0xe0 [ 814.093294] __x64_sys_sendmmsg+0x56/0x70 [ 814.097462] do_syscall_64+0xcf/0x110 [ 814.101257] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.106440] [ 814.108054] Uninit was stored to memory at: [ 814.112372] kmsan_internal_chain_origin+0x136/0x240 [ 814.117493] __msan_chain_origin+0x6d/0xb0 [ 814.121745] __save_stack_trace+0x8be/0xc60 [ 814.126065] save_stack_trace+0xc6/0x110 [ 814.130118] kmsan_internal_chain_origin+0x136/0x240 [ 814.135214] kmsan_memcpy_origins+0x13d/0x190 [ 814.139700] __msan_memcpy+0x6f/0x80 [ 814.143412] pskb_expand_head+0x436/0x1d20 [ 814.147651] gre_tap_xmit+0x4e3/0x910 [ 814.151442] dev_hard_start_xmit+0x6dc/0xde0 [ 814.155843] sch_direct_xmit+0x59b/0x890 [ 814.159892] __qdisc_run+0x1bac/0x3600 [ 814.163770] __dev_queue_xmit+0x2131/0x3e00 [ 814.168081] dev_queue_xmit+0x4b/0x60 [ 814.171875] ip_finish_output2+0x136d/0x1560 [ 814.176305] ip_finish_output+0xd93/0x10f0 [ 814.180534] ip_mc_output+0xf25/0x10f0 [ 814.184420] ip_send_skb+0x178/0x370 [ 814.188128] udp_send_skb+0x1439/0x1920 [ 814.192094] udp_sendmsg+0x399a/0x4350 [ 814.195971] udpv6_sendmsg+0x123e/0x4960 [ 814.200023] inet_sendmsg+0x4e9/0x800 [ 814.203818] ___sys_sendmsg+0xe3b/0x1240 [ 814.207868] __sys_sendmmsg+0x56b/0xa90 [ 814.211833] __se_sys_sendmmsg+0xbd/0xe0 [ 814.215885] __x64_sys_sendmmsg+0x56/0x70 [ 814.220026] do_syscall_64+0xcf/0x110 [ 814.223824] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.228998] [ 814.230621] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 814.236836] Variable was created at: [ 814.240548] kfree+0x12a/0x2fb0 [ 814.243825] skb_release_data+0xbcb/0xc90 [ 814.261368] not chained 350000 origins [ 814.265327] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 814.272612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.281958] Call Trace: [ 814.284560] dump_stack+0x32d/0x480 [ 814.288196] kmsan_internal_chain_origin+0x222/0x240 [ 814.293317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 814.298700] ? __module_address+0x6a/0x5f0 [ 814.302932] ? is_bpf_text_address+0x3e5/0x4d0 [ 814.307529] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 814.312891] ? is_bpf_text_address+0x49e/0x4d0 [ 814.317473] ? kmsan_internal_chain_origin+0x90/0x240 [ 814.322670] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 814.328032] ? is_bpf_text_address+0x49e/0x4d0 [ 814.332620] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 814.338066] ? in_task_stack+0x12c/0x210 [ 814.342136] __msan_chain_origin+0x6d/0xb0 [ 814.346379] ? ___sys_sendmsg+0xe3b/0x1240 [ 814.350612] __save_stack_trace+0x8be/0xc60 [ 814.354952] ? ___sys_sendmsg+0xe3b/0x1240 [ 814.359185] save_stack_trace+0xc6/0x110 [ 814.363252] kmsan_internal_chain_origin+0x136/0x240 [ 814.368362] ? inet_sendmsg+0x4e9/0x800 [ 814.372347] ? kmsan_internal_chain_origin+0x136/0x240 [ 814.377622] ? kmsan_memcpy_origins+0x13d/0x190 [ 814.382289] ? __msan_memcpy+0x6f/0x80 [ 814.386172] ? pskb_expand_head+0x436/0x1d20 [ 814.390572] ? gre_tap_xmit+0x4e3/0x910 [ 814.394574] ? dev_hard_start_xmit+0x6dc/0xde0 [ 814.399149] ? sch_direct_xmit+0x59b/0x890 [ 814.403378] ? __qdisc_run+0x1bac/0x3600 [ 814.407431] ? __dev_queue_xmit+0x2131/0x3e00 [ 814.411939] ? dev_queue_xmit+0x4b/0x60 [ 814.415945] ? ip_finish_output2+0x136d/0x1560 [ 814.420519] ? ip_finish_output+0xd93/0x10f0 [ 814.424925] ? ip_mc_output+0xf25/0x10f0 [ 814.428976] ? ip_send_skb+0x178/0x370 [ 814.432864] ? udp_send_skb+0x1439/0x1920 [ 814.437005] ? udp_sendmsg+0x399a/0x4350 [ 814.441063] ? udpv6_sendmsg+0x123e/0x4960 [ 814.445325] ? inet_sendmsg+0x4e9/0x800 [ 814.449292] ? ___sys_sendmsg+0xe3b/0x1240 [ 814.453529] ? __sys_sendmmsg+0x56b/0xa90 [ 814.457675] ? __se_sys_sendmmsg+0xbd/0xe0 [ 814.461900] ? __x64_sys_sendmmsg+0x56/0x70 [ 814.466215] ? do_syscall_64+0xcf/0x110 [ 814.470191] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.475558] ? memcg_kmem_put_cache+0x73/0x460 [ 814.480152] ? __msan_get_context_state+0x9/0x20 [ 814.484900] ? INIT_INT+0xc/0x30 [ 814.488267] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 814.493641] kmsan_memcpy_origins+0x13d/0x190 [ 814.498143] __msan_memcpy+0x6f/0x80 [ 814.501854] pskb_expand_head+0x436/0x1d20 [ 814.506109] gre_tap_xmit+0x4e3/0x910 [ 814.509916] ? gre_tap_init+0x650/0x650 [ 814.513888] dev_hard_start_xmit+0x6dc/0xde0 [ 814.518319] sch_direct_xmit+0x59b/0x890 [ 814.522391] __qdisc_run+0x1bac/0x3600 [ 814.526294] ? INIT_BOOL+0xc/0x30 [ 814.529741] ? do_raw_spin_trylock+0x378/0x4d0 [ 814.534350] __dev_queue_xmit+0x2131/0x3e00 [ 814.538697] dev_queue_xmit+0x4b/0x60 [ 814.542503] ip_finish_output2+0x136d/0x1560 [ 814.546929] ip_finish_output+0xd93/0x10f0 [ 814.551182] ip_mc_output+0xf25/0x10f0 [ 814.555082] ? ip_mc_finish_output+0x440/0x440 [ 814.559665] ? ip_build_and_send_pkt+0xe60/0xe60 [ 814.564419] ip_send_skb+0x178/0x370 [ 814.568142] udp_send_skb+0x1439/0x1920 [ 814.572156] udp_sendmsg+0x399a/0x4350 [ 814.576039] ? ip_copy_metadata+0x1710/0x1710 [ 814.580586] ? kmsan_set_origin+0x7f/0x100 [ 814.584838] udpv6_sendmsg+0x123e/0x4960 [ 814.588894] ? aa_label_sk_perm+0xda/0x960 [ 814.593125] ? aa_sk_perm+0x6db/0x9e0 [ 814.596964] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 814.602330] ? aa_sk_perm+0x7ab/0x9e0 [ 814.606144] ? inet_sendmsg+0x84/0x800 [ 814.610033] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 814.614354] inet_sendmsg+0x4e9/0x800 [ 814.618152] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 814.623516] ? security_socket_sendmsg+0x1bd/0x200 [ 814.628453] ___sys_sendmsg+0xe3b/0x1240 [ 814.632528] ? kmsan_set_origin+0x7f/0x100 [ 814.636759] ? inet_getname+0x490/0x490 [ 814.640768] ? __msan_poison_alloca+0x1e0/0x270 [ 814.645434] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 814.650799] ? rcu_all_qs+0x3b/0x2b0 [ 814.654510] ? _cond_resched+0x59/0x120 [ 814.658501] ? rcu_all_qs+0x53/0x2b0 [ 814.662215] ? _cond_resched+0x37/0x120 [ 814.666195] ? __sys_sendmmsg+0x7c9/0xa90 [ 814.670343] ? _cond_resched+0x59/0x120 [ 814.674316] __sys_sendmmsg+0x56b/0xa90 [ 814.678315] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 814.683763] ? prepare_exit_to_usermode+0x182/0x4c0 [ 814.688788] __se_sys_sendmmsg+0xbd/0xe0 [ 814.692866] __x64_sys_sendmmsg+0x56/0x70 [ 814.697011] do_syscall_64+0xcf/0x110 [ 814.700810] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.705994] RIP: 0033:0x457569 [ 814.709183] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.728097] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 814.735810] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 814.743076] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 814.750338] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 814.757600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 814.764863] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 814.772143] Uninit was stored to memory at: [ 814.776465] kmsan_internal_chain_origin+0x136/0x240 [ 814.781562] __msan_chain_origin+0x6d/0xb0 [ 814.785789] __save_stack_trace+0x8be/0xc60 [ 814.790105] save_stack_trace+0xc6/0x110 [ 814.794164] kmsan_internal_chain_origin+0x136/0x240 [ 814.799258] kmsan_memcpy_origins+0x13d/0x190 [ 814.803754] __msan_memcpy+0x6f/0x80 [ 814.807462] pskb_expand_head+0x436/0x1d20 [ 814.811719] gre_tap_xmit+0x4e3/0x910 [ 814.815530] dev_hard_start_xmit+0x6dc/0xde0 [ 814.819931] sch_direct_xmit+0x59b/0x890 [ 814.823984] __qdisc_run+0x1bac/0x3600 [ 814.827863] __dev_queue_xmit+0x2131/0x3e00 [ 814.832178] dev_queue_xmit+0x4b/0x60 [ 814.835970] ip_finish_output2+0x136d/0x1560 [ 814.840373] ip_finish_output+0xd93/0x10f0 [ 814.844600] ip_mc_output+0xf25/0x10f0 [ 814.848481] ip_send_skb+0x178/0x370 [ 814.852191] udp_send_skb+0x1439/0x1920 [ 814.856156] udp_sendmsg+0x399a/0x4350 [ 814.860041] udpv6_sendmsg+0x123e/0x4960 [ 814.864100] inet_sendmsg+0x4e9/0x800 [ 814.867891] ___sys_sendmsg+0xe3b/0x1240 [ 814.871956] __sys_sendmmsg+0x56b/0xa90 [ 814.875923] __se_sys_sendmmsg+0xbd/0xe0 [ 814.879973] __x64_sys_sendmmsg+0x56/0x70 [ 814.884133] do_syscall_64+0xcf/0x110 [ 814.887926] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.893112] [ 814.894726] Uninit was stored to memory at: [ 814.899044] kmsan_internal_chain_origin+0x136/0x240 [ 814.904140] __msan_chain_origin+0x6d/0xb0 [ 814.908371] __save_stack_trace+0x8be/0xc60 [ 814.912687] save_stack_trace+0xc6/0x110 [ 814.916751] kmsan_internal_chain_origin+0x136/0x240 [ 814.921847] kmsan_memcpy_origins+0x13d/0x190 [ 814.926334] __msan_memcpy+0x6f/0x80 [ 814.930070] pskb_expand_head+0x436/0x1d20 [ 814.934321] gre_tap_xmit+0x4e3/0x910 [ 814.938119] dev_hard_start_xmit+0x6dc/0xde0 [ 814.942527] sch_direct_xmit+0x59b/0x890 [ 814.946580] __qdisc_run+0x1bac/0x3600 [ 814.950457] __dev_queue_xmit+0x2131/0x3e00 [ 814.954769] dev_queue_xmit+0x4b/0x60 [ 814.958568] ip_finish_output2+0x136d/0x1560 [ 814.962968] ip_finish_output+0xd93/0x10f0 [ 814.967195] ip_mc_output+0xf25/0x10f0 [ 814.971073] ip_send_skb+0x178/0x370 [ 814.974781] udp_send_skb+0x1439/0x1920 [ 814.978748] udp_sendmsg+0x399a/0x4350 [ 814.982630] udpv6_sendmsg+0x123e/0x4960 [ 814.986680] inet_sendmsg+0x4e9/0x800 [ 814.990474] ___sys_sendmsg+0xe3b/0x1240 [ 814.994534] __sys_sendmmsg+0x56b/0xa90 [ 814.998499] __se_sys_sendmmsg+0xbd/0xe0 [ 815.002555] __x64_sys_sendmmsg+0x56/0x70 [ 815.006694] do_syscall_64+0xcf/0x110 [ 815.010487] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.015674] [ 815.017292] Uninit was stored to memory at: [ 815.021609] kmsan_internal_chain_origin+0x136/0x240 [ 815.026747] __msan_chain_origin+0x6d/0xb0 [ 815.030975] __save_stack_trace+0x8be/0xc60 [ 815.035292] save_stack_trace+0xc6/0x110 [ 815.039360] kmsan_internal_chain_origin+0x136/0x240 [ 815.044458] kmsan_memcpy_origins+0x13d/0x190 [ 815.048945] __msan_memcpy+0x6f/0x80 [ 815.052653] pskb_expand_head+0x436/0x1d20 [ 815.056880] gre_tap_xmit+0x4e3/0x910 [ 815.060670] dev_hard_start_xmit+0x6dc/0xde0 [ 815.065071] sch_direct_xmit+0x59b/0x890 [ 815.069122] __qdisc_run+0x1bac/0x3600 [ 815.073027] __dev_queue_xmit+0x2131/0x3e00 [ 815.077346] dev_queue_xmit+0x4b/0x60 [ 815.081140] ip_finish_output2+0x136d/0x1560 [ 815.085543] ip_finish_output+0xd93/0x10f0 [ 815.089772] ip_mc_output+0xf25/0x10f0 [ 815.093652] ip_send_skb+0x178/0x370 [ 815.097366] udp_send_skb+0x1439/0x1920 [ 815.101331] udp_sendmsg+0x399a/0x4350 [ 815.105213] udpv6_sendmsg+0x123e/0x4960 [ 815.109290] inet_sendmsg+0x4e9/0x800 [ 815.113084] ___sys_sendmsg+0xe3b/0x1240 [ 815.117135] __sys_sendmmsg+0x56b/0xa90 [ 815.121104] __se_sys_sendmmsg+0xbd/0xe0 [ 815.125157] __x64_sys_sendmmsg+0x56/0x70 [ 815.129298] do_syscall_64+0xcf/0x110 [ 815.133096] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.138275] [ 815.139893] Uninit was stored to memory at: [ 815.144228] kmsan_internal_chain_origin+0x136/0x240 [ 815.149342] __msan_chain_origin+0x6d/0xb0 [ 815.153568] __save_stack_trace+0x8be/0xc60 [ 815.157884] save_stack_trace+0xc6/0x110 [ 815.161937] kmsan_internal_chain_origin+0x136/0x240 [ 815.167033] kmsan_memcpy_origins+0x13d/0x190 [ 815.171521] __msan_memcpy+0x6f/0x80 [ 815.175235] pskb_expand_head+0x436/0x1d20 [ 815.179466] gre_tap_xmit+0x4e3/0x910 [ 815.183260] dev_hard_start_xmit+0x6dc/0xde0 [ 815.187676] sch_direct_xmit+0x59b/0x890 [ 815.191738] __qdisc_run+0x1bac/0x3600 [ 815.195621] __dev_queue_xmit+0x2131/0x3e00 [ 815.199933] dev_queue_xmit+0x4b/0x60 [ 815.203725] ip_finish_output2+0x136d/0x1560 [ 815.208127] ip_finish_output+0xd93/0x10f0 [ 815.212354] ip_mc_output+0xf25/0x10f0 [ 815.216230] ip_send_skb+0x178/0x370 [ 815.219936] udp_send_skb+0x1439/0x1920 [ 815.223901] udp_sendmsg+0x399a/0x4350 [ 815.227780] udpv6_sendmsg+0x123e/0x4960 [ 815.231833] inet_sendmsg+0x4e9/0x800 [ 815.235627] ___sys_sendmsg+0xe3b/0x1240 [ 815.239678] __sys_sendmmsg+0x56b/0xa90 [ 815.243645] __se_sys_sendmmsg+0xbd/0xe0 [ 815.247805] __x64_sys_sendmmsg+0x56/0x70 [ 815.251948] do_syscall_64+0xcf/0x110 [ 815.255742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.260916] [ 815.262536] Uninit was stored to memory at: [ 815.266853] kmsan_internal_chain_origin+0x136/0x240 [ 815.271949] __msan_chain_origin+0x6d/0xb0 [ 815.276175] __save_stack_trace+0x8be/0xc60 [ 815.280489] save_stack_trace+0xc6/0x110 [ 815.284549] kmsan_internal_chain_origin+0x136/0x240 [ 815.289659] kmsan_memcpy_origins+0x13d/0x190 [ 815.294148] __msan_memcpy+0x6f/0x80 [ 815.297857] pskb_expand_head+0x436/0x1d20 [ 815.302084] gre_tap_xmit+0x4e3/0x910 [ 815.305875] dev_hard_start_xmit+0x6dc/0xde0 [ 815.310291] sch_direct_xmit+0x59b/0x890 [ 815.314355] __qdisc_run+0x1bac/0x3600 [ 815.318251] __dev_queue_xmit+0x2131/0x3e00 [ 815.322574] dev_queue_xmit+0x4b/0x60 [ 815.326382] ip_finish_output2+0x136d/0x1560 [ 815.330783] ip_finish_output+0xd93/0x10f0 [ 815.335010] ip_mc_output+0xf25/0x10f0 [ 815.338888] ip_send_skb+0x178/0x370 [ 815.342601] udp_send_skb+0x1439/0x1920 [ 815.346566] udp_sendmsg+0x399a/0x4350 [ 815.350445] udpv6_sendmsg+0x123e/0x4960 [ 815.354499] inet_sendmsg+0x4e9/0x800 [ 815.358295] ___sys_sendmsg+0xe3b/0x1240 [ 815.362352] __sys_sendmmsg+0x56b/0xa90 [ 815.366321] __se_sys_sendmmsg+0xbd/0xe0 [ 815.370375] __x64_sys_sendmmsg+0x56/0x70 [ 815.374516] do_syscall_64+0xcf/0x110 [ 815.378316] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.383492] [ 815.385108] Uninit was stored to memory at: [ 815.389422] kmsan_internal_chain_origin+0x136/0x240 [ 815.394519] __msan_chain_origin+0x6d/0xb0 [ 815.398773] __save_stack_trace+0x8be/0xc60 [ 815.403090] save_stack_trace+0xc6/0x110 [ 815.407142] kmsan_internal_chain_origin+0x136/0x240 [ 815.412238] kmsan_memcpy_origins+0x13d/0x190 [ 815.416734] __msan_memcpy+0x6f/0x80 [ 815.420454] pskb_expand_head+0x436/0x1d20 [ 815.424684] gre_tap_xmit+0x4e3/0x910 [ 815.428476] dev_hard_start_xmit+0x6dc/0xde0 [ 815.432876] sch_direct_xmit+0x59b/0x890 [ 815.436927] __qdisc_run+0x1bac/0x3600 [ 815.440807] __dev_queue_xmit+0x2131/0x3e00 [ 815.445146] dev_queue_xmit+0x4b/0x60 [ 815.448942] ip_finish_output2+0x136d/0x1560 [ 815.453350] ip_finish_output+0xd93/0x10f0 [ 815.457575] ip_mc_output+0xf25/0x10f0 [ 815.461450] ip_send_skb+0x178/0x370 [ 815.465160] udp_send_skb+0x1439/0x1920 [ 815.469127] udp_sendmsg+0x399a/0x4350 [ 815.473005] udpv6_sendmsg+0x123e/0x4960 [ 815.477060] inet_sendmsg+0x4e9/0x800 [ 815.480850] ___sys_sendmsg+0xe3b/0x1240 [ 815.484902] __sys_sendmmsg+0x56b/0xa90 [ 815.488866] __se_sys_sendmmsg+0xbd/0xe0 [ 815.492917] __x64_sys_sendmmsg+0x56/0x70 [ 815.497060] do_syscall_64+0xcf/0x110 [ 815.500878] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.506082] [ 815.507725] Uninit was stored to memory at: [ 815.512076] kmsan_internal_chain_origin+0x136/0x240 [ 815.517195] __msan_chain_origin+0x6d/0xb0 [ 815.521425] __save_stack_trace+0x8be/0xc60 [ 815.525751] save_stack_trace+0xc6/0x110 [ 815.529803] kmsan_internal_chain_origin+0x136/0x240 [ 815.534901] kmsan_memcpy_origins+0x13d/0x190 [ 815.539407] __msan_memcpy+0x6f/0x80 [ 815.543116] pskb_expand_head+0x436/0x1d20 [ 815.547353] gre_tap_xmit+0x4e3/0x910 [ 815.551166] dev_hard_start_xmit+0x6dc/0xde0 [ 815.555573] sch_direct_xmit+0x59b/0x890 [ 815.559624] __qdisc_run+0x1bac/0x3600 [ 815.563503] __dev_queue_xmit+0x2131/0x3e00 [ 815.567824] dev_queue_xmit+0x4b/0x60 [ 815.571617] ip_finish_output2+0x136d/0x1560 [ 815.576030] ip_finish_output+0xd93/0x10f0 [ 815.580255] ip_mc_output+0xf25/0x10f0 [ 815.584140] ip_send_skb+0x178/0x370 [ 815.587847] udp_send_skb+0x1439/0x1920 [ 815.591816] udp_sendmsg+0x399a/0x4350 [ 815.595697] udpv6_sendmsg+0x123e/0x4960 [ 815.599763] inet_sendmsg+0x4e9/0x800 [ 815.603577] ___sys_sendmsg+0xe3b/0x1240 [ 815.607629] __sys_sendmmsg+0x56b/0xa90 [ 815.611594] __se_sys_sendmmsg+0xbd/0xe0 [ 815.615650] __x64_sys_sendmmsg+0x56/0x70 [ 815.619793] do_syscall_64+0xcf/0x110 [ 815.623606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.628779] [ 815.630417] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 815.636634] Variable was created at: [ 815.640343] kfree+0x12a/0x2fb0 [ 815.643617] skb_release_data+0xbcb/0xc90 [ 815.660051] not chained 360000 origins [ 815.663994] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 815.671289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.680640] Call Trace: [ 815.683231] dump_stack+0x32d/0x480 [ 815.686869] kmsan_internal_chain_origin+0x222/0x240 [ 815.692009] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 815.697396] ? __module_address+0x6a/0x5f0 [ 815.701957] ? is_bpf_text_address+0x3e5/0x4d0 [ 815.706548] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 815.711920] ? is_bpf_text_address+0x49e/0x4d0 [ 815.716518] ? kmsan_internal_chain_origin+0x90/0x240 [ 815.721720] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 815.727078] ? is_bpf_text_address+0x49e/0x4d0 [ 815.731680] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 815.737142] ? in_task_stack+0x12c/0x210 [ 815.741209] __msan_chain_origin+0x6d/0xb0 [ 815.745459] ? kmsan_memcpy_origins+0x13d/0x190 [ 815.750126] __save_stack_trace+0x8be/0xc60 [ 815.754484] ? kmsan_memcpy_origins+0x13d/0x190 [ 815.759171] save_stack_trace+0xc6/0x110 [ 815.763235] kmsan_internal_chain_origin+0x136/0x240 [ 815.768340] ? inet_sendmsg+0x4e9/0x800 [ 815.772323] ? kmsan_internal_chain_origin+0x136/0x240 [ 815.777595] ? kmsan_memcpy_origins+0x13d/0x190 [ 815.782255] ? __msan_memcpy+0x6f/0x80 [ 815.786150] ? pskb_expand_head+0x436/0x1d20 [ 815.790559] ? gre_tap_xmit+0x4e3/0x910 [ 815.794532] ? dev_hard_start_xmit+0x6dc/0xde0 [ 815.799108] ? sch_direct_xmit+0x59b/0x890 [ 815.803335] ? __qdisc_run+0x1bac/0x3600 [ 815.807404] ? __dev_queue_xmit+0x2131/0x3e00 [ 815.811923] ? dev_queue_xmit+0x4b/0x60 [ 815.815906] ? ip_finish_output2+0x136d/0x1560 [ 815.820484] ? ip_finish_output+0xd93/0x10f0 [ 815.824884] ? ip_mc_output+0xf25/0x10f0 [ 815.828940] ? ip_send_skb+0x178/0x370 [ 815.833135] ? udp_send_skb+0x1439/0x1920 [ 815.837285] ? udp_sendmsg+0x399a/0x4350 [ 815.841343] ? udpv6_sendmsg+0x123e/0x4960 [ 815.845574] ? inet_sendmsg+0x4e9/0x800 [ 815.849546] ? ___sys_sendmsg+0xe3b/0x1240 [ 815.853775] ? __sys_sendmmsg+0x56b/0xa90 [ 815.857915] ? __se_sys_sendmmsg+0xbd/0xe0 [ 815.862148] ? __x64_sys_sendmmsg+0x56/0x70 [ 815.866463] ? do_syscall_64+0xcf/0x110 [ 815.870433] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.875820] ? memcg_kmem_put_cache+0x73/0x460 [ 815.880416] ? __msan_get_context_state+0x9/0x20 [ 815.885185] ? INIT_INT+0xc/0x30 [ 815.888579] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 815.893952] kmsan_memcpy_origins+0x13d/0x190 [ 815.898454] __msan_memcpy+0x6f/0x80 [ 815.902178] pskb_expand_head+0x436/0x1d20 [ 815.906437] gre_tap_xmit+0x4e3/0x910 [ 815.910249] ? gre_tap_init+0x650/0x650 [ 815.914243] dev_hard_start_xmit+0x6dc/0xde0 [ 815.918675] sch_direct_xmit+0x59b/0x890 [ 815.922752] __qdisc_run+0x1bac/0x3600 [ 815.926652] ? INIT_BOOL+0xc/0x30 [ 815.930097] ? do_raw_spin_trylock+0x378/0x4d0 [ 815.934693] __dev_queue_xmit+0x2131/0x3e00 [ 815.939039] dev_queue_xmit+0x4b/0x60 [ 815.942841] ip_finish_output2+0x136d/0x1560 [ 815.947262] ip_finish_output+0xd93/0x10f0 [ 815.951515] ip_mc_output+0xf25/0x10f0 [ 815.955423] ? ip_mc_finish_output+0x440/0x440 [ 815.960004] ? ip_build_and_send_pkt+0xe60/0xe60 [ 815.964756] ip_send_skb+0x178/0x370 [ 815.968496] udp_send_skb+0x1439/0x1920 [ 815.972506] udp_sendmsg+0x399a/0x4350 [ 815.976405] ? ip_copy_metadata+0x1710/0x1710 [ 815.980950] ? kmsan_set_origin+0x7f/0x100 [ 815.985191] udpv6_sendmsg+0x123e/0x4960 [ 815.989247] ? aa_label_sk_perm+0xda/0x960 [ 815.993485] ? aa_sk_perm+0x6db/0x9e0 [ 815.997340] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 816.002704] ? aa_sk_perm+0x7ab/0x9e0 [ 816.006519] ? inet_sendmsg+0x84/0x800 [ 816.010412] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 816.014752] inet_sendmsg+0x4e9/0x800 [ 816.018559] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 816.023920] ? security_socket_sendmsg+0x1bd/0x200 [ 816.028857] ___sys_sendmsg+0xe3b/0x1240 [ 816.032918] ? kmsan_set_origin+0x7f/0x100 [ 816.037150] ? inet_getname+0x490/0x490 [ 816.041138] ? __msan_poison_alloca+0x1e0/0x270 [ 816.045817] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 816.051201] ? rcu_all_qs+0x3b/0x2b0 [ 816.054914] ? _cond_resched+0x59/0x120 [ 816.058892] ? rcu_all_qs+0x53/0x2b0 [ 816.062598] ? _cond_resched+0x37/0x120 [ 816.066566] ? __sys_sendmmsg+0x7c9/0xa90 [ 816.070714] ? _cond_resched+0x59/0x120 [ 816.074686] __sys_sendmmsg+0x56b/0xa90 [ 816.078704] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 816.084155] ? prepare_exit_to_usermode+0x182/0x4c0 [ 816.089177] __se_sys_sendmmsg+0xbd/0xe0 [ 816.093242] __x64_sys_sendmmsg+0x56/0x70 [ 816.097392] do_syscall_64+0xcf/0x110 [ 816.101190] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.106390] RIP: 0033:0x457569 [ 816.109593] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 816.128492] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 816.136200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 816.143476] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 816.150741] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 816.158004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 816.165277] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 816.172560] Uninit was stored to memory at: [ 816.176881] kmsan_internal_chain_origin+0x136/0x240 [ 816.181979] __msan_chain_origin+0x6d/0xb0 [ 816.186208] __save_stack_trace+0x8be/0xc60 [ 816.190559] save_stack_trace+0xc6/0x110 [ 816.194615] kmsan_internal_chain_origin+0x136/0x240 [ 816.199714] kmsan_memcpy_origins+0x13d/0x190 [ 816.204206] __msan_memcpy+0x6f/0x80 [ 816.207915] pskb_expand_head+0x436/0x1d20 [ 816.212145] gre_tap_xmit+0x4e3/0x910 [ 816.215939] dev_hard_start_xmit+0x6dc/0xde0 [ 816.220339] sch_direct_xmit+0x59b/0x890 [ 816.224392] __qdisc_run+0x1bac/0x3600 [ 816.228296] __dev_queue_xmit+0x2131/0x3e00 [ 816.232610] dev_queue_xmit+0x4b/0x60 [ 816.236402] ip_finish_output2+0x136d/0x1560 [ 816.240802] ip_finish_output+0xd93/0x10f0 [ 816.245031] ip_mc_output+0xf25/0x10f0 [ 816.248910] ip_send_skb+0x178/0x370 [ 816.252618] udp_send_skb+0x1439/0x1920 [ 816.256583] udp_sendmsg+0x399a/0x4350 [ 816.260461] udpv6_sendmsg+0x123e/0x4960 [ 816.264516] inet_sendmsg+0x4e9/0x800 [ 816.268319] ___sys_sendmsg+0xe3b/0x1240 [ 816.272373] __sys_sendmmsg+0x56b/0xa90 [ 816.276340] __se_sys_sendmmsg+0xbd/0xe0 [ 816.280397] __x64_sys_sendmmsg+0x56/0x70 [ 816.284545] do_syscall_64+0xcf/0x110 [ 816.288371] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.293545] [ 816.295161] Uninit was stored to memory at: [ 816.299477] kmsan_internal_chain_origin+0x136/0x240 [ 816.304578] __msan_chain_origin+0x6d/0xb0 [ 816.308807] __save_stack_trace+0x8be/0xc60 [ 816.313121] save_stack_trace+0xc6/0x110 [ 816.317176] kmsan_internal_chain_origin+0x136/0x240 [ 816.322279] kmsan_memcpy_origins+0x13d/0x190 [ 816.326771] __msan_memcpy+0x6f/0x80 [ 816.330477] pskb_expand_head+0x436/0x1d20 [ 816.334703] gre_tap_xmit+0x4e3/0x910 [ 816.338506] dev_hard_start_xmit+0x6dc/0xde0 [ 816.342916] sch_direct_xmit+0x59b/0x890 [ 816.346968] __qdisc_run+0x1bac/0x3600 [ 816.350851] __dev_queue_xmit+0x2131/0x3e00 [ 816.355163] dev_queue_xmit+0x4b/0x60 [ 816.358955] ip_finish_output2+0x136d/0x1560 [ 816.363355] ip_finish_output+0xd93/0x10f0 [ 816.367586] ip_mc_output+0xf25/0x10f0 [ 816.371464] ip_send_skb+0x178/0x370 [ 816.375172] udp_send_skb+0x1439/0x1920 [ 816.379135] udp_sendmsg+0x399a/0x4350 [ 816.383018] udpv6_sendmsg+0x123e/0x4960 [ 816.387074] inet_sendmsg+0x4e9/0x800 [ 816.390866] ___sys_sendmsg+0xe3b/0x1240 [ 816.394931] __sys_sendmmsg+0x56b/0xa90 [ 816.398900] __se_sys_sendmmsg+0xbd/0xe0 [ 816.402995] __x64_sys_sendmmsg+0x56/0x70 [ 816.407148] do_syscall_64+0xcf/0x110 [ 816.410944] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.416120] [ 816.417752] Uninit was stored to memory at: [ 816.422071] kmsan_internal_chain_origin+0x136/0x240 [ 816.427169] __msan_chain_origin+0x6d/0xb0 [ 816.431395] __save_stack_trace+0x8be/0xc60 [ 816.435713] save_stack_trace+0xc6/0x110 [ 816.439779] kmsan_internal_chain_origin+0x136/0x240 [ 816.444876] kmsan_memcpy_origins+0x13d/0x190 [ 816.449379] __msan_memcpy+0x6f/0x80 [ 816.453087] pskb_expand_head+0x436/0x1d20 [ 816.457327] gre_tap_xmit+0x4e3/0x910 [ 816.461121] dev_hard_start_xmit+0x6dc/0xde0 [ 816.465522] sch_direct_xmit+0x59b/0x890 [ 816.469582] __qdisc_run+0x1bac/0x3600 [ 816.473462] __dev_queue_xmit+0x2131/0x3e00 [ 816.477774] dev_queue_xmit+0x4b/0x60 [ 816.481564] ip_finish_output2+0x136d/0x1560 [ 816.485964] ip_finish_output+0xd93/0x10f0 [ 816.490189] ip_mc_output+0xf25/0x10f0 [ 816.494091] ip_send_skb+0x178/0x370 [ 816.497817] udp_send_skb+0x1439/0x1920 [ 816.501823] udp_sendmsg+0x399a/0x4350 [ 816.505728] udpv6_sendmsg+0x123e/0x4960 [ 816.509783] inet_sendmsg+0x4e9/0x800 [ 816.513578] ___sys_sendmsg+0xe3b/0x1240 [ 816.517629] __sys_sendmmsg+0x56b/0xa90 [ 816.521599] __se_sys_sendmmsg+0xbd/0xe0 [ 816.525656] __x64_sys_sendmmsg+0x56/0x70 [ 816.529795] do_syscall_64+0xcf/0x110 [ 816.533606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.538782] [ 816.540395] Uninit was stored to memory at: [ 816.544715] kmsan_internal_chain_origin+0x136/0x240 [ 816.549814] __msan_chain_origin+0x6d/0xb0 [ 816.554046] __save_stack_trace+0x8be/0xc60 [ 816.558371] save_stack_trace+0xc6/0x110 [ 816.562427] kmsan_internal_chain_origin+0x136/0x240 [ 816.567522] kmsan_memcpy_origins+0x13d/0x190 [ 816.572022] __msan_memcpy+0x6f/0x80 [ 816.575749] pskb_expand_head+0x436/0x1d20 [ 816.579977] gre_tap_xmit+0x4e3/0x910 [ 816.583769] dev_hard_start_xmit+0x6dc/0xde0 [ 816.588184] sch_direct_xmit+0x59b/0x890 [ 816.592255] __qdisc_run+0x1bac/0x3600 [ 816.596144] __dev_queue_xmit+0x2131/0x3e00 [ 816.600458] dev_queue_xmit+0x4b/0x60 [ 816.604254] ip_finish_output2+0x136d/0x1560 [ 816.608662] ip_finish_output+0xd93/0x10f0 [ 816.612890] ip_mc_output+0xf25/0x10f0 [ 816.616769] ip_send_skb+0x178/0x370 [ 816.620473] udp_send_skb+0x1439/0x1920 [ 816.624440] udp_sendmsg+0x399a/0x4350 [ 816.628318] udpv6_sendmsg+0x123e/0x4960 [ 816.632373] inet_sendmsg+0x4e9/0x800 [ 816.636165] ___sys_sendmsg+0xe3b/0x1240 [ 816.640215] __sys_sendmmsg+0x56b/0xa90 [ 816.644180] __se_sys_sendmmsg+0xbd/0xe0 [ 816.648230] __x64_sys_sendmmsg+0x56/0x70 [ 816.652375] do_syscall_64+0xcf/0x110 [ 816.656172] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.661346] [ 816.662960] Uninit was stored to memory at: [ 816.667286] kmsan_internal_chain_origin+0x136/0x240 [ 816.672386] __msan_chain_origin+0x6d/0xb0 [ 816.676615] __save_stack_trace+0x8be/0xc60 [ 816.680928] save_stack_trace+0xc6/0x110 [ 816.684983] kmsan_internal_chain_origin+0x136/0x240 [ 816.690082] kmsan_memcpy_origins+0x13d/0x190 [ 816.694574] __msan_memcpy+0x6f/0x80 [ 816.698306] pskb_expand_head+0x436/0x1d20 [ 816.702541] gre_tap_xmit+0x4e3/0x910 [ 816.706338] dev_hard_start_xmit+0x6dc/0xde0 [ 816.710736] sch_direct_xmit+0x59b/0x890 [ 816.714790] __qdisc_run+0x1bac/0x3600 [ 816.718670] __dev_queue_xmit+0x2131/0x3e00 [ 816.722998] dev_queue_xmit+0x4b/0x60 [ 816.726800] ip_finish_output2+0x136d/0x1560 [ 816.731197] ip_finish_output+0xd93/0x10f0 [ 816.735422] ip_mc_output+0xf25/0x10f0 [ 816.739303] ip_send_skb+0x178/0x370 [ 816.743017] udp_send_skb+0x1439/0x1920 [ 816.746983] udp_sendmsg+0x399a/0x4350 [ 816.750862] udpv6_sendmsg+0x123e/0x4960 [ 816.754915] inet_sendmsg+0x4e9/0x800 [ 816.758718] ___sys_sendmsg+0xe3b/0x1240 [ 816.762768] __sys_sendmmsg+0x56b/0xa90 [ 816.766735] __se_sys_sendmmsg+0xbd/0xe0 [ 816.770786] __x64_sys_sendmmsg+0x56/0x70 [ 816.774931] do_syscall_64+0xcf/0x110 [ 816.778729] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.783905] [ 816.785519] Uninit was stored to memory at: [ 816.789840] kmsan_internal_chain_origin+0x136/0x240 [ 816.794959] __msan_chain_origin+0x6d/0xb0 [ 816.799187] __save_stack_trace+0x8be/0xc60 [ 816.803503] save_stack_trace+0xc6/0x110 [ 816.807582] kmsan_internal_chain_origin+0x136/0x240 [ 816.812682] kmsan_memcpy_origins+0x13d/0x190 [ 816.817170] __msan_memcpy+0x6f/0x80 [ 816.820877] pskb_expand_head+0x436/0x1d20 [ 816.825108] gre_tap_xmit+0x4e3/0x910 [ 816.828920] dev_hard_start_xmit+0x6dc/0xde0 [ 816.833341] sch_direct_xmit+0x59b/0x890 [ 816.837395] __qdisc_run+0x1bac/0x3600 [ 816.841278] __dev_queue_xmit+0x2131/0x3e00 [ 816.845590] dev_queue_xmit+0x4b/0x60 [ 816.849400] ip_finish_output2+0x136d/0x1560 [ 816.853820] ip_finish_output+0xd93/0x10f0 [ 816.858050] ip_mc_output+0xf25/0x10f0 [ 816.861943] ip_send_skb+0x178/0x370 [ 816.865677] udp_send_skb+0x1439/0x1920 [ 816.869646] udp_sendmsg+0x399a/0x4350 [ 816.873530] udpv6_sendmsg+0x123e/0x4960 [ 816.877587] inet_sendmsg+0x4e9/0x800 [ 816.881380] ___sys_sendmsg+0xe3b/0x1240 [ 816.885431] __sys_sendmmsg+0x56b/0xa90 [ 816.889424] __se_sys_sendmmsg+0xbd/0xe0 [ 816.893477] __x64_sys_sendmmsg+0x56/0x70 [ 816.897627] do_syscall_64+0xcf/0x110 [ 816.901422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.906608] [ 816.908254] Uninit was stored to memory at: [ 816.912787] kmsan_internal_chain_origin+0x136/0x240 [ 816.917884] __msan_chain_origin+0x6d/0xb0 [ 816.922129] __save_stack_trace+0x8be/0xc60 [ 816.926442] save_stack_trace+0xc6/0x110 [ 816.930497] kmsan_internal_chain_origin+0x136/0x240 [ 816.935632] kmsan_memcpy_origins+0x13d/0x190 [ 816.940145] __msan_memcpy+0x6f/0x80 [ 816.943853] pskb_expand_head+0x436/0x1d20 [ 816.948080] gre_tap_xmit+0x4e3/0x910 [ 816.951877] dev_hard_start_xmit+0x6dc/0xde0 [ 816.956285] sch_direct_xmit+0x59b/0x890 [ 816.960339] __qdisc_run+0x1bac/0x3600 [ 816.964220] __dev_queue_xmit+0x2131/0x3e00 [ 816.968541] dev_queue_xmit+0x4b/0x60 [ 816.972336] ip_finish_output2+0x136d/0x1560 [ 816.976734] ip_finish_output+0xd93/0x10f0 [ 816.980977] ip_mc_output+0xf25/0x10f0 [ 816.984880] ip_send_skb+0x178/0x370 [ 816.988586] udp_send_skb+0x1439/0x1920 [ 816.992554] udp_sendmsg+0x399a/0x4350 [ 816.996452] udpv6_sendmsg+0x123e/0x4960 [ 817.000507] inet_sendmsg+0x4e9/0x800 [ 817.004312] ___sys_sendmsg+0xe3b/0x1240 [ 817.008363] __sys_sendmmsg+0x56b/0xa90 [ 817.012330] __se_sys_sendmmsg+0xbd/0xe0 [ 817.016380] __x64_sys_sendmmsg+0x56/0x70 [ 817.020519] do_syscall_64+0xcf/0x110 [ 817.024319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.029493] [ 817.031113] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 817.037332] Variable was created at: [ 817.041049] kfree+0x12a/0x2fb0 [ 817.044325] skb_release_data+0xbcb/0xc90 [ 817.061559] not chained 370000 origins [ 817.065505] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 817.072797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.082160] Call Trace: [ 817.084747] dump_stack+0x32d/0x480 [ 817.088383] kmsan_internal_chain_origin+0x222/0x240 [ 817.093500] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 817.098865] ? __module_address+0x6a/0x5f0 [ 817.103097] ? is_bpf_text_address+0x3e5/0x4d0 [ 817.107680] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 817.113042] ? is_bpf_text_address+0x49e/0x4d0 [ 817.117621] ? kmsan_internal_chain_origin+0x90/0x240 [ 817.122820] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 817.128185] ? is_bpf_text_address+0x49e/0x4d0 [ 817.132768] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 817.138212] ? in_task_stack+0x12c/0x210 [ 817.142288] __msan_chain_origin+0x6d/0xb0 [ 817.146530] ? ip_finish_output+0xd93/0x10f0 [ 817.150941] __save_stack_trace+0x8be/0xc60 [ 817.155297] ? ip_finish_output+0xd93/0x10f0 [ 817.159708] save_stack_trace+0xc6/0x110 [ 817.163773] kmsan_internal_chain_origin+0x136/0x240 [ 817.168870] ? inet_sendmsg+0x4e9/0x800 [ 817.172849] ? kmsan_internal_chain_origin+0x136/0x240 [ 817.178125] ? kmsan_memcpy_origins+0x13d/0x190 [ 817.182789] ? __msan_memcpy+0x6f/0x80 [ 817.186675] ? pskb_expand_head+0x436/0x1d20 [ 817.191079] ? gre_tap_xmit+0x4e3/0x910 [ 817.195051] ? dev_hard_start_xmit+0x6dc/0xde0 [ 817.199629] ? sch_direct_xmit+0x59b/0x890 [ 817.203860] ? __qdisc_run+0x1bac/0x3600 [ 817.207915] ? __dev_queue_xmit+0x2131/0x3e00 [ 817.212408] ? dev_queue_xmit+0x4b/0x60 [ 817.216379] ? ip_finish_output2+0x136d/0x1560 [ 817.220953] ? ip_finish_output+0xd93/0x10f0 [ 817.225359] ? ip_mc_output+0xf25/0x10f0 [ 817.229426] ? ip_send_skb+0x178/0x370 [ 817.233312] ? udp_send_skb+0x1439/0x1920 [ 817.237451] ? udp_sendmsg+0x399a/0x4350 [ 817.241504] ? udpv6_sendmsg+0x123e/0x4960 [ 817.245737] ? inet_sendmsg+0x4e9/0x800 [ 817.249705] ? ___sys_sendmsg+0xe3b/0x1240 [ 817.253932] ? __sys_sendmmsg+0x56b/0xa90 [ 817.258075] ? __se_sys_sendmmsg+0xbd/0xe0 [ 817.262301] ? __x64_sys_sendmmsg+0x56/0x70 [ 817.266631] ? do_syscall_64+0xcf/0x110 [ 817.270634] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.276000] ? memcg_kmem_put_cache+0x73/0x460 [ 817.280603] ? __msan_get_context_state+0x9/0x20 [ 817.285357] ? INIT_INT+0xc/0x30 [ 817.288721] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 817.294100] kmsan_memcpy_origins+0x13d/0x190 [ 817.298601] __msan_memcpy+0x6f/0x80 [ 817.302316] pskb_expand_head+0x436/0x1d20 [ 817.306614] gre_tap_xmit+0x4e3/0x910 [ 817.310424] ? gre_tap_init+0x650/0x650 [ 817.314394] dev_hard_start_xmit+0x6dc/0xde0 [ 817.318821] sch_direct_xmit+0x59b/0x890 [ 817.322896] __qdisc_run+0x1bac/0x3600 [ 817.326794] ? INIT_BOOL+0xc/0x30 [ 817.330242] ? do_raw_spin_trylock+0x378/0x4d0 [ 817.334840] __dev_queue_xmit+0x2131/0x3e00 [ 817.339187] dev_queue_xmit+0x4b/0x60 [ 817.342986] ip_finish_output2+0x136d/0x1560 [ 817.347405] ip_finish_output+0xd93/0x10f0 [ 817.351661] ip_mc_output+0xf25/0x10f0 [ 817.355576] ? ip_mc_finish_output+0x440/0x440 [ 817.360159] ? ip_build_and_send_pkt+0xe60/0xe60 [ 817.364911] ip_send_skb+0x178/0x370 [ 817.368632] udp_send_skb+0x1439/0x1920 [ 817.372626] udp_sendmsg+0x399a/0x4350 [ 817.376509] ? ip_copy_metadata+0x1710/0x1710 [ 817.381072] ? kmsan_set_origin+0x7f/0x100 [ 817.385316] udpv6_sendmsg+0x123e/0x4960 [ 817.389378] ? aa_label_sk_perm+0xda/0x960 [ 817.393630] ? aa_sk_perm+0x6db/0x9e0 [ 817.397470] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 817.402828] ? aa_sk_perm+0x7ab/0x9e0 [ 817.406641] ? inet_sendmsg+0x84/0x800 [ 817.410525] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 817.414846] inet_sendmsg+0x4e9/0x800 [ 817.418651] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 817.424035] ? security_socket_sendmsg+0x1bd/0x200 [ 817.428979] ___sys_sendmsg+0xe3b/0x1240 [ 817.433045] ? kmsan_set_origin+0x7f/0x100 [ 817.437282] ? inet_getname+0x490/0x490 [ 817.441276] ? __msan_poison_alloca+0x1e0/0x270 [ 817.445943] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 817.451312] ? rcu_all_qs+0x3b/0x2b0 [ 817.455020] ? _cond_resched+0x59/0x120 [ 817.458997] ? rcu_all_qs+0x53/0x2b0 [ 817.462707] ? _cond_resched+0x37/0x120 [ 817.466675] ? __sys_sendmmsg+0x7c9/0xa90 [ 817.470821] ? _cond_resched+0x59/0x120 [ 817.474814] __sys_sendmmsg+0x56b/0xa90 [ 817.478814] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 817.484263] ? prepare_exit_to_usermode+0x182/0x4c0 [ 817.489300] __se_sys_sendmmsg+0xbd/0xe0 [ 817.493369] __x64_sys_sendmmsg+0x56/0x70 [ 817.497541] do_syscall_64+0xcf/0x110 [ 817.501373] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.506687] RIP: 0033:0x457569 [ 817.509874] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.528776] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.536484] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 817.543755] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 817.551032] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 817.558296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 817.565558] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 817.572834] Uninit was stored to memory at: [ 817.577157] kmsan_internal_chain_origin+0x136/0x240 [ 817.582254] __msan_chain_origin+0x6d/0xb0 [ 817.586506] __save_stack_trace+0x8be/0xc60 [ 817.590821] save_stack_trace+0xc6/0x110 [ 817.594876] kmsan_internal_chain_origin+0x136/0x240 [ 817.600016] kmsan_memcpy_origins+0x13d/0x190 [ 817.604520] __msan_memcpy+0x6f/0x80 [ 817.608232] pskb_expand_head+0x436/0x1d20 [ 817.612462] gre_tap_xmit+0x4e3/0x910 [ 817.616255] dev_hard_start_xmit+0x6dc/0xde0 [ 817.620666] sch_direct_xmit+0x59b/0x890 [ 817.624720] __qdisc_run+0x1bac/0x3600 [ 817.628601] __dev_queue_xmit+0x2131/0x3e00 [ 817.632934] dev_queue_xmit+0x4b/0x60 [ 817.636730] ip_finish_output2+0x136d/0x1560 [ 817.641132] ip_finish_output+0xd93/0x10f0 [ 817.645368] ip_mc_output+0xf25/0x10f0 [ 817.649247] ip_send_skb+0x178/0x370 [ 817.652963] udp_send_skb+0x1439/0x1920 [ 817.656946] udp_sendmsg+0x399a/0x4350 [ 817.660823] udpv6_sendmsg+0x123e/0x4960 [ 817.664880] inet_sendmsg+0x4e9/0x800 [ 817.668671] ___sys_sendmsg+0xe3b/0x1240 [ 817.672722] __sys_sendmmsg+0x56b/0xa90 [ 817.676686] __se_sys_sendmmsg+0xbd/0xe0 [ 817.680735] __x64_sys_sendmmsg+0x56/0x70 [ 817.684878] do_syscall_64+0xcf/0x110 [ 817.688675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.693848] [ 817.695463] Uninit was stored to memory at: [ 817.699979] kmsan_internal_chain_origin+0x136/0x240 [ 817.705109] __msan_chain_origin+0x6d/0xb0 [ 817.709343] __save_stack_trace+0x8be/0xc60 [ 817.713659] save_stack_trace+0xc6/0x110 [ 817.717714] kmsan_internal_chain_origin+0x136/0x240 [ 817.722811] kmsan_memcpy_origins+0x13d/0x190 [ 817.727298] __msan_memcpy+0x6f/0x80 [ 817.731019] pskb_expand_head+0x436/0x1d20 [ 817.735262] gre_tap_xmit+0x4e3/0x910 [ 817.739060] dev_hard_start_xmit+0x6dc/0xde0 [ 817.743462] sch_direct_xmit+0x59b/0x890 [ 817.747512] __qdisc_run+0x1bac/0x3600 [ 817.751408] __dev_queue_xmit+0x2131/0x3e00 [ 817.755734] dev_queue_xmit+0x4b/0x60 [ 817.759524] ip_finish_output2+0x136d/0x1560 [ 817.763929] ip_finish_output+0xd93/0x10f0 [ 817.768166] ip_mc_output+0xf25/0x10f0 [ 817.772047] ip_send_skb+0x178/0x370 [ 817.775758] udp_send_skb+0x1439/0x1920 [ 817.779746] udp_sendmsg+0x399a/0x4350 [ 817.783627] udpv6_sendmsg+0x123e/0x4960 [ 817.787679] inet_sendmsg+0x4e9/0x800 [ 817.791470] ___sys_sendmsg+0xe3b/0x1240 [ 817.795524] __sys_sendmmsg+0x56b/0xa90 [ 817.799493] __se_sys_sendmmsg+0xbd/0xe0 [ 817.803551] __x64_sys_sendmmsg+0x56/0x70 [ 817.807693] do_syscall_64+0xcf/0x110 [ 817.811486] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.816679] [ 817.818294] Uninit was stored to memory at: [ 817.822635] kmsan_internal_chain_origin+0x136/0x240 [ 817.827737] __msan_chain_origin+0x6d/0xb0 [ 817.832275] __save_stack_trace+0x8be/0xc60 [ 817.836592] save_stack_trace+0xc6/0x110 [ 817.840648] kmsan_internal_chain_origin+0x136/0x240 [ 817.845742] kmsan_memcpy_origins+0x13d/0x190 [ 817.850226] __msan_memcpy+0x6f/0x80 [ 817.853935] pskb_expand_head+0x436/0x1d20 [ 817.858161] gre_tap_xmit+0x4e3/0x910 [ 817.861959] dev_hard_start_xmit+0x6dc/0xde0 [ 817.866361] sch_direct_xmit+0x59b/0x890 [ 817.870430] __qdisc_run+0x1bac/0x3600 [ 817.874310] __dev_queue_xmit+0x2131/0x3e00 [ 817.878622] dev_queue_xmit+0x4b/0x60 [ 817.882416] ip_finish_output2+0x136d/0x1560 [ 817.886817] ip_finish_output+0xd93/0x10f0 [ 817.891045] ip_mc_output+0xf25/0x10f0 [ 817.894939] ip_send_skb+0x178/0x370 [ 817.898647] udp_send_skb+0x1439/0x1920 [ 817.902617] udp_sendmsg+0x399a/0x4350 [ 817.906496] udpv6_sendmsg+0x123e/0x4960 [ 817.910559] inet_sendmsg+0x4e9/0x800 [ 817.914352] ___sys_sendmsg+0xe3b/0x1240 [ 817.918413] __sys_sendmmsg+0x56b/0xa90 [ 817.922383] __se_sys_sendmmsg+0xbd/0xe0 [ 817.926433] __x64_sys_sendmmsg+0x56/0x70 [ 817.930573] do_syscall_64+0xcf/0x110 [ 817.934370] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.939549] [ 817.941165] Uninit was stored to memory at: [ 817.945489] kmsan_internal_chain_origin+0x136/0x240 [ 817.950587] __msan_chain_origin+0x6d/0xb0 [ 817.954816] __save_stack_trace+0x8be/0xc60 [ 817.959129] save_stack_trace+0xc6/0x110 [ 817.963211] kmsan_internal_chain_origin+0x136/0x240 [ 817.968332] kmsan_memcpy_origins+0x13d/0x190 [ 817.972827] __msan_memcpy+0x6f/0x80 [ 817.976541] pskb_expand_head+0x436/0x1d20 [ 817.980776] gre_tap_xmit+0x4e3/0x910 [ 817.984583] dev_hard_start_xmit+0x6dc/0xde0 [ 817.988994] sch_direct_xmit+0x59b/0x890 [ 817.993056] __qdisc_run+0x1bac/0x3600 [ 817.996936] __dev_queue_xmit+0x2131/0x3e00 [ 818.001248] dev_queue_xmit+0x4b/0x60 [ 818.005050] ip_finish_output2+0x136d/0x1560 [ 818.009465] ip_finish_output+0xd93/0x10f0 [ 818.013708] ip_mc_output+0xf25/0x10f0 [ 818.017589] ip_send_skb+0x178/0x370 [ 818.021300] udp_send_skb+0x1439/0x1920 [ 818.025272] udp_sendmsg+0x399a/0x4350 [ 818.029160] udpv6_sendmsg+0x123e/0x4960 [ 818.033220] inet_sendmsg+0x4e9/0x800 [ 818.037013] ___sys_sendmsg+0xe3b/0x1240 [ 818.041076] __sys_sendmmsg+0x56b/0xa90 [ 818.045049] __se_sys_sendmmsg+0xbd/0xe0 [ 818.049101] __x64_sys_sendmmsg+0x56/0x70 [ 818.053242] do_syscall_64+0xcf/0x110 [ 818.057045] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.062221] [ 818.063837] Uninit was stored to memory at: [ 818.068161] kmsan_internal_chain_origin+0x136/0x240 [ 818.073294] __msan_chain_origin+0x6d/0xb0 [ 818.077523] __save_stack_trace+0x8be/0xc60 [ 818.081846] save_stack_trace+0xc6/0x110 [ 818.085899] kmsan_internal_chain_origin+0x136/0x240 [ 818.091024] kmsan_memcpy_origins+0x13d/0x190 [ 818.095519] __msan_memcpy+0x6f/0x80 [ 818.099238] pskb_expand_head+0x436/0x1d20 [ 818.103472] gre_tap_xmit+0x4e3/0x910 [ 818.107272] dev_hard_start_xmit+0x6dc/0xde0 [ 818.111683] sch_direct_xmit+0x59b/0x890 [ 818.115754] __qdisc_run+0x1bac/0x3600 [ 818.119634] __dev_queue_xmit+0x2131/0x3e00 [ 818.123947] dev_queue_xmit+0x4b/0x60 [ 818.127739] ip_finish_output2+0x136d/0x1560 [ 818.132152] ip_finish_output+0xd93/0x10f0 [ 818.136408] ip_mc_output+0xf25/0x10f0 [ 818.140291] ip_send_skb+0x178/0x370 [ 818.144000] udp_send_skb+0x1439/0x1920 [ 818.147982] udp_sendmsg+0x399a/0x4350 [ 818.151904] udpv6_sendmsg+0x123e/0x4960 [ 818.155962] inet_sendmsg+0x4e9/0x800 [ 818.159754] ___sys_sendmsg+0xe3b/0x1240 [ 818.163810] __sys_sendmmsg+0x56b/0xa90 [ 818.167786] __se_sys_sendmmsg+0xbd/0xe0 [ 818.171853] __x64_sys_sendmmsg+0x56/0x70 [ 818.175997] do_syscall_64+0xcf/0x110 [ 818.179795] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.184972] [ 818.186587] Uninit was stored to memory at: [ 818.190907] kmsan_internal_chain_origin+0x136/0x240 [ 818.196005] __msan_chain_origin+0x6d/0xb0 [ 818.200236] __save_stack_trace+0x8be/0xc60 [ 818.204554] save_stack_trace+0xc6/0x110 [ 818.208609] kmsan_internal_chain_origin+0x136/0x240 [ 818.213710] kmsan_memcpy_origins+0x13d/0x190 [ 818.218202] __msan_memcpy+0x6f/0x80 [ 818.221911] pskb_expand_head+0x436/0x1d20 [ 818.226142] gre_tap_xmit+0x4e3/0x910 [ 818.229933] dev_hard_start_xmit+0x6dc/0xde0 [ 818.234334] sch_direct_xmit+0x59b/0x890 [ 818.238390] __qdisc_run+0x1bac/0x3600 [ 818.242279] __dev_queue_xmit+0x2131/0x3e00 [ 818.246592] dev_queue_xmit+0x4b/0x60 [ 818.250388] ip_finish_output2+0x136d/0x1560 [ 818.254794] ip_finish_output+0xd93/0x10f0 [ 818.259019] ip_mc_output+0xf25/0x10f0 [ 818.262901] ip_send_skb+0x178/0x370 [ 818.266616] udp_send_skb+0x1439/0x1920 [ 818.270596] udp_sendmsg+0x399a/0x4350 [ 818.274481] udpv6_sendmsg+0x123e/0x4960 [ 818.278554] inet_sendmsg+0x4e9/0x800 [ 818.282358] ___sys_sendmsg+0xe3b/0x1240 [ 818.286408] __sys_sendmmsg+0x56b/0xa90 [ 818.290380] __se_sys_sendmmsg+0xbd/0xe0 [ 818.294450] __x64_sys_sendmmsg+0x56/0x70 [ 818.298591] do_syscall_64+0xcf/0x110 [ 818.302390] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.307564] [ 818.309179] Uninit was stored to memory at: [ 818.313498] kmsan_internal_chain_origin+0x136/0x240 [ 818.318603] __msan_chain_origin+0x6d/0xb0 [ 818.322831] __save_stack_trace+0x8be/0xc60 [ 818.327143] save_stack_trace+0xc6/0x110 [ 818.331198] kmsan_internal_chain_origin+0x136/0x240 [ 818.336323] kmsan_memcpy_origins+0x13d/0x190 [ 818.340822] __msan_memcpy+0x6f/0x80 [ 818.344589] pskb_expand_head+0x436/0x1d20 [ 818.348819] gre_tap_xmit+0x4e3/0x910 [ 818.352611] dev_hard_start_xmit+0x6dc/0xde0 [ 818.357008] sch_direct_xmit+0x59b/0x890 [ 818.361062] __qdisc_run+0x1bac/0x3600 [ 818.364942] __dev_queue_xmit+0x2131/0x3e00 [ 818.369252] dev_queue_xmit+0x4b/0x60 [ 818.373057] ip_finish_output2+0x136d/0x1560 [ 818.377455] ip_finish_output+0xd93/0x10f0 [ 818.381696] ip_mc_output+0xf25/0x10f0 [ 818.385592] ip_send_skb+0x178/0x370 [ 818.389305] udp_send_skb+0x1439/0x1920 [ 818.393295] udp_sendmsg+0x399a/0x4350 [ 818.397179] udpv6_sendmsg+0x123e/0x4960 [ 818.401249] inet_sendmsg+0x4e9/0x800 [ 818.405048] ___sys_sendmsg+0xe3b/0x1240 [ 818.409124] __sys_sendmmsg+0x56b/0xa90 [ 818.413088] __se_sys_sendmmsg+0xbd/0xe0 [ 818.417139] __x64_sys_sendmmsg+0x56/0x70 [ 818.421284] do_syscall_64+0xcf/0x110 [ 818.425104] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.430286] [ 818.431907] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 818.438124] Variable was created at: [ 818.441835] kfree+0x12a/0x2fb0 [ 818.445108] skb_release_data+0xbcb/0xc90 [ 818.461749] not chained 380000 origins [ 818.465684] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 818.472964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.482310] Call Trace: [ 818.484900] dump_stack+0x32d/0x480 [ 818.488544] kmsan_internal_chain_origin+0x222/0x240 [ 818.493661] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 818.499019] ? __module_address+0x6a/0x5f0 [ 818.503286] ? is_bpf_text_address+0x3e5/0x4d0 [ 818.507916] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 818.513329] ? is_bpf_text_address+0x49e/0x4d0 [ 818.517928] ? kmsan_internal_chain_origin+0x90/0x240 [ 818.523133] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 818.528492] ? is_bpf_text_address+0x49e/0x4d0 [ 818.533079] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 818.538533] ? in_task_stack+0x12c/0x210 [ 818.542602] __msan_chain_origin+0x6d/0xb0 [ 818.546838] ? __x64_sys_sendmmsg+0x56/0x70 [ 818.551159] __save_stack_trace+0x8be/0xc60 [ 818.555496] ? __x64_sys_sendmmsg+0x56/0x70 [ 818.559817] save_stack_trace+0xc6/0x110 [ 818.563885] kmsan_internal_chain_origin+0x136/0x240 [ 818.568989] ? inet_sendmsg+0x4e9/0x800 [ 818.572975] ? kmsan_internal_chain_origin+0x136/0x240 [ 818.578245] ? kmsan_memcpy_origins+0x13d/0x190 [ 818.582919] ? __msan_memcpy+0x6f/0x80 [ 818.586804] ? pskb_expand_head+0x436/0x1d20 [ 818.591209] ? gre_tap_xmit+0x4e3/0x910 [ 818.595176] ? dev_hard_start_xmit+0x6dc/0xde0 [ 818.599773] ? sch_direct_xmit+0x59b/0x890 [ 818.604023] ? __qdisc_run+0x1bac/0x3600 [ 818.608082] ? __dev_queue_xmit+0x2131/0x3e00 [ 818.612570] ? dev_queue_xmit+0x4b/0x60 [ 818.616542] ? ip_finish_output2+0x136d/0x1560 [ 818.621119] ? ip_finish_output+0xd93/0x10f0 [ 818.625521] ? ip_mc_output+0xf25/0x10f0 [ 818.629582] ? ip_send_skb+0x178/0x370 [ 818.633470] ? udp_send_skb+0x1439/0x1920 [ 818.637609] ? udp_sendmsg+0x399a/0x4350 [ 818.641662] ? udpv6_sendmsg+0x123e/0x4960 [ 818.645889] ? inet_sendmsg+0x4e9/0x800 [ 818.649856] ? ___sys_sendmsg+0xe3b/0x1240 [ 818.654095] ? __sys_sendmmsg+0x56b/0xa90 [ 818.658240] ? __se_sys_sendmmsg+0xbd/0xe0 [ 818.662474] ? __x64_sys_sendmmsg+0x56/0x70 [ 818.666791] ? do_syscall_64+0xcf/0x110 [ 818.670772] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.676132] ? memcg_kmem_put_cache+0x73/0x460 [ 818.680728] ? __msan_get_context_state+0x9/0x20 [ 818.685483] ? INIT_INT+0xc/0x30 [ 818.688845] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 818.694218] kmsan_memcpy_origins+0x13d/0x190 [ 818.698719] __msan_memcpy+0x6f/0x80 [ 818.702432] pskb_expand_head+0x436/0x1d20 [ 818.706704] gre_tap_xmit+0x4e3/0x910 [ 818.710510] ? gre_tap_init+0x650/0x650 [ 818.714486] dev_hard_start_xmit+0x6dc/0xde0 [ 818.718911] sch_direct_xmit+0x59b/0x890 [ 818.722984] __qdisc_run+0x1bac/0x3600 [ 818.726879] ? INIT_BOOL+0xc/0x30 [ 818.730330] ? do_raw_spin_trylock+0x378/0x4d0 [ 818.734919] __dev_queue_xmit+0x2131/0x3e00 [ 818.739265] dev_queue_xmit+0x4b/0x60 [ 818.743097] ip_finish_output2+0x136d/0x1560 [ 818.747515] ip_finish_output+0xd93/0x10f0 [ 818.751764] ip_mc_output+0xf25/0x10f0 [ 818.755664] ? ip_mc_finish_output+0x440/0x440 [ 818.760243] ? ip_build_and_send_pkt+0xe60/0xe60 [ 818.765000] ip_send_skb+0x178/0x370 [ 818.768719] udp_send_skb+0x1439/0x1920 [ 818.772709] udp_sendmsg+0x399a/0x4350 [ 818.776594] ? ip_copy_metadata+0x1710/0x1710 [ 818.781133] ? kmsan_set_origin+0x7f/0x100 [ 818.785376] udpv6_sendmsg+0x123e/0x4960 [ 818.789447] ? aa_label_sk_perm+0xda/0x960 [ 818.793678] ? aa_sk_perm+0x6db/0x9e0 [ 818.797518] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 818.802884] ? aa_sk_perm+0x7ab/0x9e0 [ 818.806698] ? inet_sendmsg+0x84/0x800 [ 818.810582] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 818.814897] inet_sendmsg+0x4e9/0x800 [ 818.818699] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 818.824061] ? security_socket_sendmsg+0x1bd/0x200 [ 818.828992] ___sys_sendmsg+0xe3b/0x1240 [ 818.833051] ? kmsan_set_origin+0x7f/0x100 [ 818.837295] ? inet_getname+0x490/0x490 [ 818.841291] ? __msan_poison_alloca+0x1e0/0x270 [ 818.845953] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 818.851323] ? rcu_all_qs+0x3b/0x2b0 [ 818.855034] ? _cond_resched+0x59/0x120 [ 818.859019] ? rcu_all_qs+0x53/0x2b0 [ 818.862728] ? _cond_resched+0x37/0x120 [ 818.866695] ? __sys_sendmmsg+0x7c9/0xa90 [ 818.870841] ? _cond_resched+0x59/0x120 [ 818.874812] __sys_sendmmsg+0x56b/0xa90 [ 818.878808] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 818.884252] ? prepare_exit_to_usermode+0x182/0x4c0 [ 818.889286] __se_sys_sendmmsg+0xbd/0xe0 [ 818.893348] __x64_sys_sendmmsg+0x56/0x70 [ 818.897492] do_syscall_64+0xcf/0x110 [ 818.901298] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.906482] RIP: 0033:0x457569 [ 818.909681] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.928585] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.936295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 818.943561] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 818.950827] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 818.958093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 818.965355] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 818.972633] Uninit was stored to memory at: [ 818.976953] kmsan_internal_chain_origin+0x136/0x240 [ 818.982049] __msan_chain_origin+0x6d/0xb0 [ 818.986282] __save_stack_trace+0x8be/0xc60 [ 818.990598] save_stack_trace+0xc6/0x110 [ 818.994670] kmsan_internal_chain_origin+0x136/0x240 [ 818.999779] kmsan_memcpy_origins+0x13d/0x190 [ 819.004277] __msan_memcpy+0x6f/0x80 [ 819.007986] pskb_expand_head+0x436/0x1d20 [ 819.012221] gre_tap_xmit+0x4e3/0x910 [ 819.016011] dev_hard_start_xmit+0x6dc/0xde0 [ 819.020411] sch_direct_xmit+0x59b/0x890 [ 819.024462] __qdisc_run+0x1bac/0x3600 [ 819.028361] __dev_queue_xmit+0x2131/0x3e00 [ 819.032671] dev_queue_xmit+0x4b/0x60 [ 819.036462] ip_finish_output2+0x136d/0x1560 [ 819.040860] ip_finish_output+0xd93/0x10f0 [ 819.045100] ip_mc_output+0xf25/0x10f0 [ 819.048978] ip_send_skb+0x178/0x370 [ 819.052688] udp_send_skb+0x1439/0x1920 [ 819.056656] udp_sendmsg+0x399a/0x4350 [ 819.060536] udpv6_sendmsg+0x123e/0x4960 [ 819.064589] inet_sendmsg+0x4e9/0x800 [ 819.068380] ___sys_sendmsg+0xe3b/0x1240 [ 819.072436] __sys_sendmmsg+0x56b/0xa90 [ 819.076399] __se_sys_sendmmsg+0xbd/0xe0 [ 819.080449] __x64_sys_sendmmsg+0x56/0x70 [ 819.084592] do_syscall_64+0xcf/0x110 [ 819.088386] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.093561] [ 819.095175] Uninit was stored to memory at: [ 819.099494] kmsan_internal_chain_origin+0x136/0x240 [ 819.104588] __msan_chain_origin+0x6d/0xb0 [ 819.108815] __save_stack_trace+0x8be/0xc60 [ 819.113127] save_stack_trace+0xc6/0x110 [ 819.117181] kmsan_internal_chain_origin+0x136/0x240 [ 819.122290] kmsan_memcpy_origins+0x13d/0x190 [ 819.126777] __msan_memcpy+0x6f/0x80 [ 819.130485] pskb_expand_head+0x436/0x1d20 [ 819.134733] gre_tap_xmit+0x4e3/0x910 [ 819.138536] dev_hard_start_xmit+0x6dc/0xde0 [ 819.142936] sch_direct_xmit+0x59b/0x890 [ 819.146987] __qdisc_run+0x1bac/0x3600 [ 819.150865] __dev_queue_xmit+0x2131/0x3e00 [ 819.155180] dev_queue_xmit+0x4b/0x60 [ 819.158972] ip_finish_output2+0x136d/0x1560 [ 819.163373] ip_finish_output+0xd93/0x10f0 [ 819.167600] ip_mc_output+0xf25/0x10f0 [ 819.171478] ip_send_skb+0x178/0x370 [ 819.175184] udp_send_skb+0x1439/0x1920 [ 819.179147] udp_sendmsg+0x399a/0x4350 [ 819.183046] udpv6_sendmsg+0x123e/0x4960 [ 819.187110] inet_sendmsg+0x4e9/0x800 [ 819.190902] ___sys_sendmsg+0xe3b/0x1240 [ 819.194956] __sys_sendmmsg+0x56b/0xa90 [ 819.198931] __se_sys_sendmmsg+0xbd/0xe0 [ 819.202983] __x64_sys_sendmmsg+0x56/0x70 [ 819.207125] do_syscall_64+0xcf/0x110 [ 819.210921] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.216094] [ 819.217711] Uninit was stored to memory at: [ 819.222044] kmsan_internal_chain_origin+0x136/0x240 [ 819.227139] __msan_chain_origin+0x6d/0xb0 [ 819.231366] __save_stack_trace+0x8be/0xc60 [ 819.235683] save_stack_trace+0xc6/0x110 [ 819.239745] kmsan_internal_chain_origin+0x136/0x240 [ 819.244840] kmsan_memcpy_origins+0x13d/0x190 [ 819.249347] __msan_memcpy+0x6f/0x80 [ 819.253059] pskb_expand_head+0x436/0x1d20 [ 819.257296] gre_tap_xmit+0x4e3/0x910 [ 819.261119] dev_hard_start_xmit+0x6dc/0xde0 [ 819.265520] sch_direct_xmit+0x59b/0x890 [ 819.269581] __qdisc_run+0x1bac/0x3600 [ 819.273461] __dev_queue_xmit+0x2131/0x3e00 [ 819.277792] dev_queue_xmit+0x4b/0x60 [ 819.281586] ip_finish_output2+0x136d/0x1560 [ 819.285984] ip_finish_output+0xd93/0x10f0 [ 819.290210] ip_mc_output+0xf25/0x10f0 [ 819.294089] ip_send_skb+0x178/0x370 [ 819.297807] udp_send_skb+0x1439/0x1920 [ 819.301772] udp_sendmsg+0x399a/0x4350 [ 819.305670] udpv6_sendmsg+0x123e/0x4960 [ 819.309724] inet_sendmsg+0x4e9/0x800 [ 819.313515] ___sys_sendmsg+0xe3b/0x1240 [ 819.317569] __sys_sendmmsg+0x56b/0xa90 [ 819.321541] __se_sys_sendmmsg+0xbd/0xe0 [ 819.325593] __x64_sys_sendmmsg+0x56/0x70 [ 819.329733] do_syscall_64+0xcf/0x110 [ 819.333533] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.338711] [ 819.340328] Uninit was stored to memory at: [ 819.344649] kmsan_internal_chain_origin+0x136/0x240 [ 819.349746] __msan_chain_origin+0x6d/0xb0 [ 819.353974] __save_stack_trace+0x8be/0xc60 [ 819.358293] save_stack_trace+0xc6/0x110 [ 819.362353] kmsan_internal_chain_origin+0x136/0x240 [ 819.367452] kmsan_memcpy_origins+0x13d/0x190 [ 819.371940] __msan_memcpy+0x6f/0x80 [ 819.375648] pskb_expand_head+0x436/0x1d20 [ 819.379872] gre_tap_xmit+0x4e3/0x910 [ 819.383662] dev_hard_start_xmit+0x6dc/0xde0 [ 819.388067] sch_direct_xmit+0x59b/0x890 [ 819.392139] __qdisc_run+0x1bac/0x3600 [ 819.396031] __dev_queue_xmit+0x2131/0x3e00 [ 819.400348] dev_queue_xmit+0x4b/0x60 [ 819.404178] ip_finish_output2+0x136d/0x1560 [ 819.408580] ip_finish_output+0xd93/0x10f0 [ 819.412811] ip_mc_output+0xf25/0x10f0 [ 819.416689] ip_send_skb+0x178/0x370 [ 819.420395] udp_send_skb+0x1439/0x1920 [ 819.424377] udp_sendmsg+0x399a/0x4350 [ 819.428277] udpv6_sendmsg+0x123e/0x4960 [ 819.432332] inet_sendmsg+0x4e9/0x800 [ 819.436127] ___sys_sendmsg+0xe3b/0x1240 [ 819.440179] __sys_sendmmsg+0x56b/0xa90 [ 819.444145] __se_sys_sendmmsg+0xbd/0xe0 [ 819.448196] __x64_sys_sendmmsg+0x56/0x70 [ 819.452340] do_syscall_64+0xcf/0x110 [ 819.456139] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.461315] [ 819.462931] Uninit was stored to memory at: [ 819.467247] kmsan_internal_chain_origin+0x136/0x240 [ 819.472382] __msan_chain_origin+0x6d/0xb0 [ 819.476611] __save_stack_trace+0x8be/0xc60 [ 819.480924] save_stack_trace+0xc6/0x110 [ 819.484998] kmsan_internal_chain_origin+0x136/0x240 [ 819.490105] kmsan_memcpy_origins+0x13d/0x190 [ 819.494594] __msan_memcpy+0x6f/0x80 [ 819.498306] pskb_expand_head+0x436/0x1d20 [ 819.502554] gre_tap_xmit+0x4e3/0x910 [ 819.506351] dev_hard_start_xmit+0x6dc/0xde0 [ 819.510748] sch_direct_xmit+0x59b/0x890 [ 819.514799] __qdisc_run+0x1bac/0x3600 [ 819.518676] __dev_queue_xmit+0x2131/0x3e00 [ 819.522986] dev_queue_xmit+0x4b/0x60 [ 819.526779] ip_finish_output2+0x136d/0x1560 [ 819.531214] ip_finish_output+0xd93/0x10f0 [ 819.535441] ip_mc_output+0xf25/0x10f0 [ 819.539323] ip_send_skb+0x178/0x370 [ 819.543047] udp_send_skb+0x1439/0x1920 [ 819.547024] udp_sendmsg+0x399a/0x4350 [ 819.550904] udpv6_sendmsg+0x123e/0x4960 [ 819.554956] inet_sendmsg+0x4e9/0x800 [ 819.558749] ___sys_sendmsg+0xe3b/0x1240 [ 819.562800] __sys_sendmmsg+0x56b/0xa90 [ 819.566766] __se_sys_sendmmsg+0xbd/0xe0 [ 819.570819] __x64_sys_sendmmsg+0x56/0x70 [ 819.574961] do_syscall_64+0xcf/0x110 [ 819.578753] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.583930] [ 819.585565] Uninit was stored to memory at: [ 819.589879] kmsan_internal_chain_origin+0x136/0x240 [ 819.594974] __msan_chain_origin+0x6d/0xb0 [ 819.599201] __save_stack_trace+0x8be/0xc60 [ 819.603518] save_stack_trace+0xc6/0x110 [ 819.607578] kmsan_internal_chain_origin+0x136/0x240 [ 819.612687] kmsan_memcpy_origins+0x13d/0x190 [ 819.617175] __msan_memcpy+0x6f/0x80 [ 819.620885] pskb_expand_head+0x436/0x1d20 [ 819.625116] gre_tap_xmit+0x4e3/0x910 [ 819.628921] dev_hard_start_xmit+0x6dc/0xde0 [ 819.633328] sch_direct_xmit+0x59b/0x890 [ 819.637392] __qdisc_run+0x1bac/0x3600 [ 819.641276] __dev_queue_xmit+0x2131/0x3e00 [ 819.645590] dev_queue_xmit+0x4b/0x60 [ 819.649402] ip_finish_output2+0x136d/0x1560 [ 819.653800] ip_finish_output+0xd93/0x10f0 [ 819.658032] ip_mc_output+0xf25/0x10f0 [ 819.661912] ip_send_skb+0x178/0x370 [ 819.665627] udp_send_skb+0x1439/0x1920 [ 819.669609] udp_sendmsg+0x399a/0x4350 [ 819.673489] udpv6_sendmsg+0x123e/0x4960 [ 819.677546] inet_sendmsg+0x4e9/0x800 [ 819.681340] ___sys_sendmsg+0xe3b/0x1240 [ 819.685392] __sys_sendmmsg+0x56b/0xa90 [ 819.689357] __se_sys_sendmmsg+0xbd/0xe0 [ 819.693415] __x64_sys_sendmmsg+0x56/0x70 [ 819.697724] do_syscall_64+0xcf/0x110 [ 819.701518] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.706694] [ 819.708308] Uninit was stored to memory at: [ 819.712642] kmsan_internal_chain_origin+0x136/0x240 [ 819.717740] __msan_chain_origin+0x6d/0xb0 [ 819.721968] __save_stack_trace+0x8be/0xc60 [ 819.726287] save_stack_trace+0xc6/0x110 [ 819.730344] kmsan_internal_chain_origin+0x136/0x240 [ 819.735443] kmsan_memcpy_origins+0x13d/0x190 [ 819.739930] __msan_memcpy+0x6f/0x80 [ 819.743642] pskb_expand_head+0x436/0x1d20 [ 819.747868] gre_tap_xmit+0x4e3/0x910 [ 819.751663] dev_hard_start_xmit+0x6dc/0xde0 [ 819.756061] sch_direct_xmit+0x59b/0x890 [ 819.760114] __qdisc_run+0x1bac/0x3600 [ 819.763994] __dev_queue_xmit+0x2131/0x3e00 [ 819.768310] dev_queue_xmit+0x4b/0x60 [ 819.772106] ip_finish_output2+0x136d/0x1560 [ 819.776507] ip_finish_output+0xd93/0x10f0 [ 819.780736] ip_mc_output+0xf25/0x10f0 [ 819.784614] ip_send_skb+0x178/0x370 [ 819.788323] udp_send_skb+0x1439/0x1920 [ 819.792292] udp_sendmsg+0x399a/0x4350 [ 819.796172] udpv6_sendmsg+0x123e/0x4960 [ 819.800222] inet_sendmsg+0x4e9/0x800 [ 819.804014] ___sys_sendmsg+0xe3b/0x1240 [ 819.808067] __sys_sendmmsg+0x56b/0xa90 [ 819.812035] __se_sys_sendmmsg+0xbd/0xe0 [ 819.816086] __x64_sys_sendmmsg+0x56/0x70 [ 819.820238] do_syscall_64+0xcf/0x110 [ 819.824034] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.829208] [ 819.831145] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 819.837379] Variable was created at: [ 819.841098] kfree+0x12a/0x2fb0 [ 819.844373] skb_release_data+0xbcb/0xc90 [ 819.861838] not chained 390000 origins [ 819.865782] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 819.873064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.882428] Call Trace: [ 819.885018] dump_stack+0x32d/0x480 [ 819.888659] kmsan_internal_chain_origin+0x222/0x240 [ 819.893776] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 819.899134] ? __module_address+0x6a/0x5f0 [ 819.903373] ? is_bpf_text_address+0x3e5/0x4d0 [ 819.907973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 819.913345] ? is_bpf_text_address+0x49e/0x4d0 [ 819.917928] ? kmsan_internal_chain_origin+0x90/0x240 [ 819.923126] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 819.928485] ? is_bpf_text_address+0x49e/0x4d0 [ 819.933071] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 819.938516] ? in_task_stack+0x12c/0x210 [ 819.942590] __msan_chain_origin+0x6d/0xb0 [ 819.946826] ? gre_tap_xmit+0x4e3/0x910 [ 819.950797] __save_stack_trace+0x8be/0xc60 [ 819.955137] ? gre_tap_xmit+0x4e3/0x910 [ 819.959122] save_stack_trace+0xc6/0x110 [ 819.963202] kmsan_internal_chain_origin+0x136/0x240 [ 819.968303] ? inet_sendmsg+0x4e9/0x800 [ 819.972291] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.977565] ? kmsan_memcpy_origins+0x13d/0x190 [ 819.982228] ? __msan_memcpy+0x6f/0x80 [ 819.986110] ? pskb_expand_head+0x436/0x1d20 [ 819.990521] ? gre_tap_xmit+0x4e3/0x910 [ 819.994499] ? dev_hard_start_xmit+0x6dc/0xde0 [ 819.999077] ? sch_direct_xmit+0x59b/0x890 [ 820.003306] ? __qdisc_run+0x1bac/0x3600 [ 820.007363] ? __dev_queue_xmit+0x2131/0x3e00 [ 820.011852] ? dev_queue_xmit+0x4b/0x60 [ 820.015820] ? ip_finish_output2+0x136d/0x1560 [ 820.020397] ? ip_finish_output+0xd93/0x10f0 [ 820.024798] ? ip_mc_output+0xf25/0x10f0 [ 820.028850] ? ip_send_skb+0x178/0x370 [ 820.032749] ? udp_send_skb+0x1439/0x1920 [ 820.036890] ? udp_sendmsg+0x399a/0x4350 [ 820.040943] ? udpv6_sendmsg+0x123e/0x4960 [ 820.045176] ? inet_sendmsg+0x4e9/0x800 [ 820.049141] ? ___sys_sendmsg+0xe3b/0x1240 [ 820.053368] ? __sys_sendmmsg+0x56b/0xa90 [ 820.057539] ? __se_sys_sendmmsg+0xbd/0xe0 [ 820.061769] ? __x64_sys_sendmmsg+0x56/0x70 [ 820.066085] ? do_syscall_64+0xcf/0x110 [ 820.070057] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.075435] ? memcg_kmem_put_cache+0x73/0x460 [ 820.080029] ? __msan_get_context_state+0x9/0x20 [ 820.084783] ? INIT_INT+0xc/0x30 [ 820.088143] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 820.093515] kmsan_memcpy_origins+0x13d/0x190 [ 820.098032] __msan_memcpy+0x6f/0x80 [ 820.101758] pskb_expand_head+0x436/0x1d20 [ 820.106012] gre_tap_xmit+0x4e3/0x910 [ 820.109823] ? gre_tap_init+0x650/0x650 [ 820.113795] dev_hard_start_xmit+0x6dc/0xde0 [ 820.118224] sch_direct_xmit+0x59b/0x890 [ 820.122312] __qdisc_run+0x1bac/0x3600 [ 820.126211] ? INIT_BOOL+0xc/0x30 [ 820.129657] ? do_raw_spin_trylock+0x378/0x4d0 [ 820.134252] __dev_queue_xmit+0x2131/0x3e00 [ 820.138612] dev_queue_xmit+0x4b/0x60 [ 820.142416] ip_finish_output2+0x136d/0x1560 [ 820.146841] ip_finish_output+0xd93/0x10f0 [ 820.151087] ip_mc_output+0xf25/0x10f0 [ 820.154990] ? ip_mc_finish_output+0x440/0x440 [ 820.159568] ? ip_build_and_send_pkt+0xe60/0xe60 [ 820.164320] ip_send_skb+0x178/0x370 [ 820.168044] udp_send_skb+0x1439/0x1920 [ 820.172039] udp_sendmsg+0x399a/0x4350 [ 820.175920] ? ip_copy_metadata+0x1710/0x1710 [ 820.180463] ? kmsan_set_origin+0x7f/0x100 [ 820.184706] udpv6_sendmsg+0x123e/0x4960 [ 820.188766] ? aa_label_sk_perm+0xda/0x960 [ 820.193007] ? aa_sk_perm+0x6db/0x9e0 [ 820.196860] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 820.202220] ? aa_sk_perm+0x7ab/0x9e0 [ 820.206036] ? inet_sendmsg+0x84/0x800 [ 820.209925] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 820.214243] inet_sendmsg+0x4e9/0x800 [ 820.218050] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 820.223417] ? security_socket_sendmsg+0x1bd/0x200 [ 820.228350] ___sys_sendmsg+0xe3b/0x1240 [ 820.232416] ? kmsan_set_origin+0x7f/0x100 [ 820.236648] ? inet_getname+0x490/0x490 [ 820.240649] ? __msan_poison_alloca+0x1e0/0x270 [ 820.245313] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 820.250678] ? rcu_all_qs+0x3b/0x2b0 [ 820.254386] ? _cond_resched+0x59/0x120 [ 820.258361] ? rcu_all_qs+0x53/0x2b0 [ 820.262068] ? _cond_resched+0x37/0x120 [ 820.266038] ? __sys_sendmmsg+0x7c9/0xa90 [ 820.270197] ? _cond_resched+0x59/0x120 [ 820.274169] __sys_sendmmsg+0x56b/0xa90 [ 820.278164] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 820.283614] ? prepare_exit_to_usermode+0x182/0x4c0 [ 820.288635] __se_sys_sendmmsg+0xbd/0xe0 [ 820.292699] __x64_sys_sendmmsg+0x56/0x70 [ 820.296845] do_syscall_64+0xcf/0x110 [ 820.300645] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.305828] RIP: 0033:0x457569 [ 820.309015] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.327918] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 820.335627] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 820.342889] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 820.350151] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 820.357416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 820.364681] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 820.371967] Uninit was stored to memory at: [ 820.376294] kmsan_internal_chain_origin+0x136/0x240 [ 820.381409] __msan_chain_origin+0x6d/0xb0 [ 820.385644] __save_stack_trace+0x8be/0xc60 [ 820.389958] save_stack_trace+0xc6/0x110 [ 820.394016] kmsan_internal_chain_origin+0x136/0x240 [ 820.399115] kmsan_memcpy_origins+0x13d/0x190 [ 820.403603] __msan_memcpy+0x6f/0x80 [ 820.407312] pskb_expand_head+0x436/0x1d20 [ 820.411542] gre_tap_xmit+0x4e3/0x910 [ 820.415335] dev_hard_start_xmit+0x6dc/0xde0 [ 820.419733] sch_direct_xmit+0x59b/0x890 [ 820.423804] __qdisc_run+0x1bac/0x3600 [ 820.427686] __dev_queue_xmit+0x2131/0x3e00 [ 820.431999] dev_queue_xmit+0x4b/0x60 [ 820.435809] ip_finish_output2+0x136d/0x1560 [ 820.440206] ip_finish_output+0xd93/0x10f0 [ 820.444431] ip_mc_output+0xf25/0x10f0 [ 820.448308] ip_send_skb+0x178/0x370 [ 820.452016] udp_send_skb+0x1439/0x1920 [ 820.455982] udp_sendmsg+0x399a/0x4350 [ 820.459864] udpv6_sendmsg+0x123e/0x4960 [ 820.463923] inet_sendmsg+0x4e9/0x800 [ 820.467714] ___sys_sendmsg+0xe3b/0x1240 [ 820.471767] __sys_sendmmsg+0x56b/0xa90 [ 820.475730] __se_sys_sendmmsg+0xbd/0xe0 [ 820.479780] __x64_sys_sendmmsg+0x56/0x70 [ 820.483922] do_syscall_64+0xcf/0x110 [ 820.487716] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.492889] [ 820.494504] Uninit was stored to memory at: [ 820.498823] kmsan_internal_chain_origin+0x136/0x240 [ 820.503919] __msan_chain_origin+0x6d/0xb0 [ 820.508145] __save_stack_trace+0x8be/0xc60 [ 820.512459] save_stack_trace+0xc6/0x110 [ 820.516514] kmsan_internal_chain_origin+0x136/0x240 [ 820.521615] kmsan_memcpy_origins+0x13d/0x190 [ 820.526112] __msan_memcpy+0x6f/0x80 [ 820.529837] pskb_expand_head+0x436/0x1d20 [ 820.534066] gre_tap_xmit+0x4e3/0x910 [ 820.537860] dev_hard_start_xmit+0x6dc/0xde0 [ 820.542265] sch_direct_xmit+0x59b/0x890 [ 820.546332] __qdisc_run+0x1bac/0x3600 [ 820.550231] __dev_queue_xmit+0x2131/0x3e00 [ 820.554550] dev_queue_xmit+0x4b/0x60 [ 820.558343] ip_finish_output2+0x136d/0x1560 [ 820.562742] ip_finish_output+0xd93/0x10f0 [ 820.566968] ip_mc_output+0xf25/0x10f0 [ 820.570845] ip_send_skb+0x178/0x370 [ 820.574557] udp_send_skb+0x1439/0x1920 [ 820.578521] udp_sendmsg+0x399a/0x4350 [ 820.582406] udpv6_sendmsg+0x123e/0x4960 [ 820.586478] inet_sendmsg+0x4e9/0x800 [ 820.590293] ___sys_sendmsg+0xe3b/0x1240 [ 820.594354] __sys_sendmmsg+0x56b/0xa90 [ 820.598336] __se_sys_sendmmsg+0xbd/0xe0 [ 820.602391] __x64_sys_sendmmsg+0x56/0x70 [ 820.606571] do_syscall_64+0xcf/0x110 [ 820.610369] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.615546] [ 820.617163] Uninit was stored to memory at: [ 820.621483] kmsan_internal_chain_origin+0x136/0x240 [ 820.626580] __msan_chain_origin+0x6d/0xb0 [ 820.630808] __save_stack_trace+0x8be/0xc60 [ 820.635125] save_stack_trace+0xc6/0x110 [ 820.639178] kmsan_internal_chain_origin+0x136/0x240 [ 820.644291] kmsan_memcpy_origins+0x13d/0x190 [ 820.648778] __msan_memcpy+0x6f/0x80 [ 820.652487] pskb_expand_head+0x436/0x1d20 [ 820.656713] gre_tap_xmit+0x4e3/0x910 [ 820.660509] dev_hard_start_xmit+0x6dc/0xde0 [ 820.664912] sch_direct_xmit+0x59b/0x890 [ 820.668963] __qdisc_run+0x1bac/0x3600 [ 820.672841] __dev_queue_xmit+0x2131/0x3e00 [ 820.677152] dev_queue_xmit+0x4b/0x60 [ 820.680942] ip_finish_output2+0x136d/0x1560 [ 820.685346] ip_finish_output+0xd93/0x10f0 [ 820.689593] ip_mc_output+0xf25/0x10f0 [ 820.693472] ip_send_skb+0x178/0x370 [ 820.697182] udp_send_skb+0x1439/0x1920 [ 820.701146] udp_sendmsg+0x399a/0x4350 [ 820.705037] udpv6_sendmsg+0x123e/0x4960 [ 820.709092] inet_sendmsg+0x4e9/0x800 [ 820.712889] ___sys_sendmsg+0xe3b/0x1240 [ 820.716942] __sys_sendmmsg+0x56b/0xa90 [ 820.720905] __se_sys_sendmmsg+0xbd/0xe0 [ 820.724959] __x64_sys_sendmmsg+0x56/0x70 [ 820.729099] do_syscall_64+0xcf/0x110 [ 820.732896] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.738069] [ 820.739704] Uninit was stored to memory at: [ 820.744024] kmsan_internal_chain_origin+0x136/0x240 [ 820.749126] __msan_chain_origin+0x6d/0xb0 [ 820.753368] __save_stack_trace+0x8be/0xc60 [ 820.757679] save_stack_trace+0xc6/0x110 [ 820.761751] kmsan_internal_chain_origin+0x136/0x240 [ 820.766852] kmsan_memcpy_origins+0x13d/0x190 [ 820.771340] __msan_memcpy+0x6f/0x80 [ 820.775050] pskb_expand_head+0x436/0x1d20 [ 820.779302] gre_tap_xmit+0x4e3/0x910 [ 820.783106] dev_hard_start_xmit+0x6dc/0xde0 [ 820.787508] sch_direct_xmit+0x59b/0x890 [ 820.791565] __qdisc_run+0x1bac/0x3600 [ 820.795454] __dev_queue_xmit+0x2131/0x3e00 [ 820.799784] dev_queue_xmit+0x4b/0x60 [ 820.803579] ip_finish_output2+0x136d/0x1560 [ 820.807980] ip_finish_output+0xd93/0x10f0 [ 820.812205] ip_mc_output+0xf25/0x10f0 [ 820.816082] ip_send_skb+0x178/0x370 [ 820.819791] udp_send_skb+0x1439/0x1920 [ 820.823779] udp_sendmsg+0x399a/0x4350 [ 820.827659] udpv6_sendmsg+0x123e/0x4960 [ 820.831725] inet_sendmsg+0x4e9/0x800 [ 820.835527] ___sys_sendmsg+0xe3b/0x1240 [ 820.839582] __sys_sendmmsg+0x56b/0xa90 [ 820.843564] __se_sys_sendmmsg+0xbd/0xe0 [ 820.847619] __x64_sys_sendmmsg+0x56/0x70 [ 820.851768] do_syscall_64+0xcf/0x110 [ 820.855567] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.860739] [ 820.862353] Uninit was stored to memory at: [ 820.866669] kmsan_internal_chain_origin+0x136/0x240 [ 820.871769] __msan_chain_origin+0x6d/0xb0 [ 820.876021] __save_stack_trace+0x8be/0xc60 [ 820.880338] save_stack_trace+0xc6/0x110 [ 820.884413] kmsan_internal_chain_origin+0x136/0x240 [ 820.889508] kmsan_memcpy_origins+0x13d/0x190 [ 820.893998] __msan_memcpy+0x6f/0x80 [ 820.897707] pskb_expand_head+0x436/0x1d20 [ 820.901936] gre_tap_xmit+0x4e3/0x910 [ 820.905727] dev_hard_start_xmit+0x6dc/0xde0 [ 820.910129] sch_direct_xmit+0x59b/0x890 [ 820.914200] __qdisc_run+0x1bac/0x3600 [ 820.918079] __dev_queue_xmit+0x2131/0x3e00 [ 820.922391] dev_queue_xmit+0x4b/0x60 [ 820.926190] ip_finish_output2+0x136d/0x1560 [ 820.930588] ip_finish_output+0xd93/0x10f0 [ 820.934814] ip_mc_output+0xf25/0x10f0 [ 820.938691] ip_send_skb+0x178/0x370 [ 820.942401] udp_send_skb+0x1439/0x1920 [ 820.946366] udp_sendmsg+0x399a/0x4350 [ 820.950245] udpv6_sendmsg+0x123e/0x4960 [ 820.954307] inet_sendmsg+0x4e9/0x800 [ 820.958097] ___sys_sendmsg+0xe3b/0x1240 [ 820.962153] __sys_sendmmsg+0x56b/0xa90 [ 820.966116] __se_sys_sendmmsg+0xbd/0xe0 [ 820.970166] __x64_sys_sendmmsg+0x56/0x70 [ 820.974310] do_syscall_64+0xcf/0x110 [ 820.978108] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.983291] [ 820.984909] Uninit was stored to memory at: [ 820.989225] kmsan_internal_chain_origin+0x136/0x240 [ 820.994346] __msan_chain_origin+0x6d/0xb0 [ 820.998589] __save_stack_trace+0x8be/0xc60 [ 821.002913] save_stack_trace+0xc6/0x110 [ 821.006981] kmsan_internal_chain_origin+0x136/0x240 [ 821.012078] kmsan_memcpy_origins+0x13d/0x190 [ 821.016566] __msan_memcpy+0x6f/0x80 [ 821.020279] pskb_expand_head+0x436/0x1d20 [ 821.024508] gre_tap_xmit+0x4e3/0x910 [ 821.028304] dev_hard_start_xmit+0x6dc/0xde0 [ 821.032709] sch_direct_xmit+0x59b/0x890 [ 821.036760] __qdisc_run+0x1bac/0x3600 [ 821.040637] __dev_queue_xmit+0x2131/0x3e00 [ 821.044954] dev_queue_xmit+0x4b/0x60 [ 821.048746] ip_finish_output2+0x136d/0x1560 [ 821.053146] ip_finish_output+0xd93/0x10f0 [ 821.057377] ip_mc_output+0xf25/0x10f0 [ 821.061256] ip_send_skb+0x178/0x370 [ 821.064979] udp_send_skb+0x1439/0x1920 [ 821.068942] udp_sendmsg+0x399a/0x4350 [ 821.072821] udpv6_sendmsg+0x123e/0x4960 [ 821.076875] inet_sendmsg+0x4e9/0x800 [ 821.080680] ___sys_sendmsg+0xe3b/0x1240 [ 821.084733] __sys_sendmmsg+0x56b/0xa90 [ 821.088700] __se_sys_sendmmsg+0xbd/0xe0 [ 821.092752] __x64_sys_sendmmsg+0x56/0x70 [ 821.096890] do_syscall_64+0xcf/0x110 [ 821.100685] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.105860] [ 821.107474] Uninit was stored to memory at: [ 821.111794] kmsan_internal_chain_origin+0x136/0x240 [ 821.116889] __msan_chain_origin+0x6d/0xb0 [ 821.121115] __save_stack_trace+0x8be/0xc60 [ 821.125436] save_stack_trace+0xc6/0x110 [ 821.129494] kmsan_internal_chain_origin+0x136/0x240 [ 821.134592] kmsan_memcpy_origins+0x13d/0x190 [ 821.139079] __msan_memcpy+0x6f/0x80 [ 821.142789] pskb_expand_head+0x436/0x1d20 [ 821.147020] gre_tap_xmit+0x4e3/0x910 [ 821.150815] dev_hard_start_xmit+0x6dc/0xde0 [ 821.155215] sch_direct_xmit+0x59b/0x890 [ 821.159281] __qdisc_run+0x1bac/0x3600 [ 821.163163] __dev_queue_xmit+0x2131/0x3e00 [ 821.167475] dev_queue_xmit+0x4b/0x60 [ 821.171266] ip_finish_output2+0x136d/0x1560 [ 821.175683] ip_finish_output+0xd93/0x10f0 [ 821.179909] ip_mc_output+0xf25/0x10f0 [ 821.183788] ip_send_skb+0x178/0x370 [ 821.187496] udp_send_skb+0x1439/0x1920 [ 821.191459] udp_sendmsg+0x399a/0x4350 [ 821.195349] udpv6_sendmsg+0x123e/0x4960 [ 821.199402] inet_sendmsg+0x4e9/0x800 [ 821.203196] ___sys_sendmsg+0xe3b/0x1240 [ 821.207247] __sys_sendmmsg+0x56b/0xa90 [ 821.211217] __se_sys_sendmmsg+0xbd/0xe0 [ 821.215281] __x64_sys_sendmmsg+0x56/0x70 [ 821.219422] do_syscall_64+0xcf/0x110 [ 821.223219] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.228393] [ 821.230018] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 821.236235] Variable was created at: [ 821.239940] kfree+0x12a/0x2fb0 [ 821.243213] skb_release_data+0xbcb/0xc90 [ 821.260598] not chained 400000 origins [ 821.264548] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 821.271846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.281191] Call Trace: [ 821.283781] dump_stack+0x32d/0x480 [ 821.287417] kmsan_internal_chain_origin+0x222/0x240 [ 821.292540] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 821.297900] ? __module_address+0x6a/0x5f0 [ 821.302133] ? is_bpf_text_address+0x3e5/0x4d0 [ 821.306717] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 821.312077] ? is_bpf_text_address+0x49e/0x4d0 [ 821.316656] ? kmsan_internal_chain_origin+0x90/0x240 [ 821.321854] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 821.327215] ? is_bpf_text_address+0x49e/0x4d0 [ 821.331798] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 821.337245] ? in_task_stack+0x12c/0x210 [ 821.341324] __msan_chain_origin+0x6d/0xb0 [ 821.345564] ? udp_send_skb+0x1439/0x1920 [ 821.349711] __save_stack_trace+0x8be/0xc60 [ 821.354052] ? udp_send_skb+0x1439/0x1920 [ 821.358200] save_stack_trace+0xc6/0x110 [ 821.362264] kmsan_internal_chain_origin+0x136/0x240 [ 821.367373] ? inet_sendmsg+0x4e9/0x800 [ 821.371351] ? kmsan_internal_chain_origin+0x136/0x240 [ 821.376623] ? kmsan_memcpy_origins+0x13d/0x190 [ 821.381291] ? __msan_memcpy+0x6f/0x80 [ 821.385188] ? pskb_expand_head+0x436/0x1d20 [ 821.389590] ? gre_tap_xmit+0x4e3/0x910 [ 821.393562] ? dev_hard_start_xmit+0x6dc/0xde0 [ 821.398135] ? sch_direct_xmit+0x59b/0x890 [ 821.402363] ? __qdisc_run+0x1bac/0x3600 [ 821.406420] ? __dev_queue_xmit+0x2131/0x3e00 [ 821.410907] ? dev_queue_xmit+0x4b/0x60 [ 821.414877] ? ip_finish_output2+0x136d/0x1560 [ 821.419462] ? ip_finish_output+0xd93/0x10f0 [ 821.423875] ? ip_mc_output+0xf25/0x10f0 [ 821.427928] ? ip_send_skb+0x178/0x370 [ 821.431812] ? udp_send_skb+0x1439/0x1920 [ 821.435950] ? udp_sendmsg+0x399a/0x4350 [ 821.440006] ? udpv6_sendmsg+0x123e/0x4960 [ 821.444247] ? inet_sendmsg+0x4e9/0x800 [ 821.448226] ? ___sys_sendmsg+0xe3b/0x1240 [ 821.452453] ? __sys_sendmmsg+0x56b/0xa90 [ 821.456594] ? __se_sys_sendmmsg+0xbd/0xe0 [ 821.460836] ? __x64_sys_sendmmsg+0x56/0x70 [ 821.465155] ? do_syscall_64+0xcf/0x110 [ 821.469125] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.474489] ? memcg_kmem_put_cache+0x73/0x460 [ 821.479085] ? __msan_get_context_state+0x9/0x20 [ 821.483843] ? INIT_INT+0xc/0x30 [ 821.487205] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 821.492581] kmsan_memcpy_origins+0x13d/0x190 [ 821.497078] __msan_memcpy+0x6f/0x80 [ 821.500813] pskb_expand_head+0x436/0x1d20 [ 821.505118] gre_tap_xmit+0x4e3/0x910 [ 821.508972] ? gre_tap_init+0x650/0x650 [ 821.512978] dev_hard_start_xmit+0x6dc/0xde0 [ 821.517431] sch_direct_xmit+0x59b/0x890 [ 821.521510] __qdisc_run+0x1bac/0x3600 [ 821.525430] ? INIT_BOOL+0xc/0x30 [ 821.528879] ? do_raw_spin_trylock+0x378/0x4d0 [ 821.533482] __dev_queue_xmit+0x2131/0x3e00 [ 821.537829] dev_queue_xmit+0x4b/0x60 [ 821.541651] ip_finish_output2+0x136d/0x1560 [ 821.546112] ip_finish_output+0xd93/0x10f0 [ 821.550361] ip_mc_output+0xf25/0x10f0 [ 821.554262] ? ip_mc_finish_output+0x440/0x440 [ 821.558857] ? ip_build_and_send_pkt+0xe60/0xe60 [ 821.563612] ip_send_skb+0x178/0x370 [ 821.567335] udp_send_skb+0x1439/0x1920 [ 821.571331] udp_sendmsg+0x399a/0x4350 [ 821.575216] ? ip_copy_metadata+0x1710/0x1710 [ 821.579758] ? kmsan_set_origin+0x7f/0x100 [ 821.584000] udpv6_sendmsg+0x123e/0x4960 [ 821.588060] ? aa_label_sk_perm+0xda/0x960 [ 821.592296] ? aa_sk_perm+0x6db/0x9e0 [ 821.596135] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 821.601495] ? aa_sk_perm+0x7ab/0x9e0 [ 821.605317] ? inet_sendmsg+0x84/0x800 [ 821.609205] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 821.613523] inet_sendmsg+0x4e9/0x800 [ 821.617332] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 821.622694] ? security_socket_sendmsg+0x1bd/0x200 [ 821.627629] ___sys_sendmsg+0xe3b/0x1240 [ 821.631702] ? kmsan_set_origin+0x7f/0x100 [ 821.635952] ? inet_getname+0x490/0x490 [ 821.639941] ? __msan_poison_alloca+0x1e0/0x270 [ 821.644606] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 821.649972] ? rcu_all_qs+0x3b/0x2b0 [ 821.653686] ? _cond_resched+0x59/0x120 [ 821.657661] ? rcu_all_qs+0x53/0x2b0 [ 821.661368] ? _cond_resched+0x37/0x120 [ 821.665336] ? __sys_sendmmsg+0x7c9/0xa90 [ 821.669486] ? _cond_resched+0x59/0x120 [ 821.673460] __sys_sendmmsg+0x56b/0xa90 [ 821.677455] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 821.682903] ? prepare_exit_to_usermode+0x182/0x4c0 [ 821.687928] __se_sys_sendmmsg+0xbd/0xe0 [ 821.691993] __x64_sys_sendmmsg+0x56/0x70 [ 821.696140] do_syscall_64+0xcf/0x110 [ 821.700170] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.705353] RIP: 0033:0x457569 [ 821.708544] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.727444] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.735150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 821.742412] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 821.749675] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 821.756939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 821.764201] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 821.771479] Uninit was stored to memory at: [ 821.775801] kmsan_internal_chain_origin+0x136/0x240 [ 821.780896] __msan_chain_origin+0x6d/0xb0 [ 821.785125] __save_stack_trace+0x8be/0xc60 [ 821.789442] save_stack_trace+0xc6/0x110 [ 821.793504] kmsan_internal_chain_origin+0x136/0x240 [ 821.798603] kmsan_memcpy_origins+0x13d/0x190 [ 821.803093] __msan_memcpy+0x6f/0x80 [ 821.806824] pskb_expand_head+0x436/0x1d20 [ 821.811053] gre_tap_xmit+0x4e3/0x910 [ 821.814851] dev_hard_start_xmit+0x6dc/0xde0 [ 821.819249] sch_direct_xmit+0x59b/0x890 [ 821.823312] __qdisc_run+0x1bac/0x3600 [ 821.827190] __dev_queue_xmit+0x2131/0x3e00 [ 821.831787] dev_queue_xmit+0x4b/0x60 [ 821.835580] ip_finish_output2+0x136d/0x1560 [ 821.839997] ip_finish_output+0xd93/0x10f0 [ 821.844236] ip_mc_output+0xf25/0x10f0 [ 821.848113] ip_send_skb+0x178/0x370 [ 821.851823] udp_send_skb+0x1439/0x1920 [ 821.855787] udp_sendmsg+0x399a/0x4350 [ 821.859666] udpv6_sendmsg+0x123e/0x4960 [ 821.863720] inet_sendmsg+0x4e9/0x800 [ 821.867517] ___sys_sendmsg+0xe3b/0x1240 [ 821.871572] __sys_sendmmsg+0x56b/0xa90 [ 821.875542] __se_sys_sendmmsg+0xbd/0xe0 [ 821.879593] __x64_sys_sendmmsg+0x56/0x70 [ 821.883745] do_syscall_64+0xcf/0x110 [ 821.887545] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.892719] [ 821.894333] Uninit was stored to memory at: [ 821.898647] kmsan_internal_chain_origin+0x136/0x240 [ 821.903743] __msan_chain_origin+0x6d/0xb0 [ 821.907997] __save_stack_trace+0x8be/0xc60 [ 821.912337] save_stack_trace+0xc6/0x110 [ 821.916396] kmsan_internal_chain_origin+0x136/0x240 [ 821.921503] kmsan_memcpy_origins+0x13d/0x190 [ 821.925994] __msan_memcpy+0x6f/0x80 [ 821.929703] pskb_expand_head+0x436/0x1d20 [ 821.933933] gre_tap_xmit+0x4e3/0x910 [ 821.937738] dev_hard_start_xmit+0x6dc/0xde0 [ 821.942151] sch_direct_xmit+0x59b/0x890 [ 821.946206] __qdisc_run+0x1bac/0x3600 [ 821.950083] __dev_queue_xmit+0x2131/0x3e00 [ 821.954399] dev_queue_xmit+0x4b/0x60 [ 821.958193] ip_finish_output2+0x136d/0x1560 [ 821.962595] ip_finish_output+0xd93/0x10f0 [ 821.966819] ip_mc_output+0xf25/0x10f0 [ 821.970696] ip_send_skb+0x178/0x370 [ 821.974407] udp_send_skb+0x1439/0x1920 [ 821.978376] udp_sendmsg+0x399a/0x4350 [ 821.982258] udpv6_sendmsg+0x123e/0x4960 [ 821.986322] inet_sendmsg+0x4e9/0x800 [ 821.990118] ___sys_sendmsg+0xe3b/0x1240 [ 821.994173] __sys_sendmmsg+0x56b/0xa90 [ 821.998137] __se_sys_sendmmsg+0xbd/0xe0 [ 822.002190] __x64_sys_sendmmsg+0x56/0x70 [ 822.006332] do_syscall_64+0xcf/0x110 [ 822.010126] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.015300] [ 822.016915] Uninit was stored to memory at: [ 822.021242] kmsan_internal_chain_origin+0x136/0x240 [ 822.026336] __msan_chain_origin+0x6d/0xb0 [ 822.030567] __save_stack_trace+0x8be/0xc60 [ 822.034880] save_stack_trace+0xc6/0x110 [ 822.038933] kmsan_internal_chain_origin+0x136/0x240 [ 822.044099] kmsan_memcpy_origins+0x13d/0x190 [ 822.048590] __msan_memcpy+0x6f/0x80 [ 822.052305] pskb_expand_head+0x436/0x1d20 [ 822.056540] gre_tap_xmit+0x4e3/0x910 [ 822.060342] dev_hard_start_xmit+0x6dc/0xde0 [ 822.064743] sch_direct_xmit+0x59b/0x890 [ 822.068794] __qdisc_run+0x1bac/0x3600 [ 822.072674] __dev_queue_xmit+0x2131/0x3e00 [ 822.076985] dev_queue_xmit+0x4b/0x60 [ 822.080778] ip_finish_output2+0x136d/0x1560 [ 822.085179] ip_finish_output+0xd93/0x10f0 [ 822.089407] ip_mc_output+0xf25/0x10f0 [ 822.093290] ip_send_skb+0x178/0x370 [ 822.097004] udp_send_skb+0x1439/0x1920 [ 822.100972] udp_sendmsg+0x399a/0x4350 [ 822.105283] udpv6_sendmsg+0x123e/0x4960 [ 822.109343] inet_sendmsg+0x4e9/0x800 [ 822.113138] ___sys_sendmsg+0xe3b/0x1240 [ 822.117192] __sys_sendmmsg+0x56b/0xa90 [ 822.121159] __se_sys_sendmmsg+0xbd/0xe0 [ 822.125215] __x64_sys_sendmmsg+0x56/0x70 [ 822.129384] do_syscall_64+0xcf/0x110 [ 822.133196] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.138369] [ 822.139982] Uninit was stored to memory at: [ 822.144306] kmsan_internal_chain_origin+0x136/0x240 [ 822.149404] __msan_chain_origin+0x6d/0xb0 [ 822.153636] __save_stack_trace+0x8be/0xc60 [ 822.157948] save_stack_trace+0xc6/0x110 [ 822.162002] kmsan_internal_chain_origin+0x136/0x240 [ 822.167101] kmsan_memcpy_origins+0x13d/0x190 [ 822.171588] __msan_memcpy+0x6f/0x80 [ 822.175302] pskb_expand_head+0x436/0x1d20 [ 822.179528] gre_tap_xmit+0x4e3/0x910 [ 822.183329] dev_hard_start_xmit+0x6dc/0xde0 [ 822.187728] sch_direct_xmit+0x59b/0x890 [ 822.191782] __qdisc_run+0x1bac/0x3600 [ 822.195662] __dev_queue_xmit+0x2131/0x3e00 [ 822.199973] dev_queue_xmit+0x4b/0x60 [ 822.203770] ip_finish_output2+0x136d/0x1560 [ 822.208169] ip_finish_output+0xd93/0x10f0 [ 822.212411] ip_mc_output+0xf25/0x10f0 [ 822.216305] ip_send_skb+0x178/0x370 [ 822.220010] udp_send_skb+0x1439/0x1920 [ 822.223978] udp_sendmsg+0x399a/0x4350 [ 822.227857] udpv6_sendmsg+0x123e/0x4960 [ 822.231910] inet_sendmsg+0x4e9/0x800 [ 822.235718] ___sys_sendmsg+0xe3b/0x1240 [ 822.239785] __sys_sendmmsg+0x56b/0xa90 [ 822.243764] __se_sys_sendmmsg+0xbd/0xe0 [ 822.247819] __x64_sys_sendmmsg+0x56/0x70 [ 822.251962] do_syscall_64+0xcf/0x110 [ 822.255772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.260949] [ 822.262581] Uninit was stored to memory at: [ 822.266914] kmsan_internal_chain_origin+0x136/0x240 [ 822.272017] __msan_chain_origin+0x6d/0xb0 [ 822.276248] __save_stack_trace+0x8be/0xc60 [ 822.280568] save_stack_trace+0xc6/0x110 [ 822.284623] kmsan_internal_chain_origin+0x136/0x240 [ 822.289722] kmsan_memcpy_origins+0x13d/0x190 [ 822.294217] __msan_memcpy+0x6f/0x80 [ 822.297926] pskb_expand_head+0x436/0x1d20 [ 822.302157] gre_tap_xmit+0x4e3/0x910 [ 822.305952] dev_hard_start_xmit+0x6dc/0xde0 [ 822.310355] sch_direct_xmit+0x59b/0x890 [ 822.314407] __qdisc_run+0x1bac/0x3600 [ 822.318292] __dev_queue_xmit+0x2131/0x3e00 [ 822.322607] dev_queue_xmit+0x4b/0x60 [ 822.326402] ip_finish_output2+0x136d/0x1560 [ 822.330799] ip_finish_output+0xd93/0x10f0 [ 822.335024] ip_mc_output+0xf25/0x10f0 [ 822.338913] ip_send_skb+0x178/0x370 [ 822.342626] udp_send_skb+0x1439/0x1920 [ 822.346596] udp_sendmsg+0x399a/0x4350 [ 822.350473] udpv6_sendmsg+0x123e/0x4960 [ 822.354529] inet_sendmsg+0x4e9/0x800 [ 822.358341] ___sys_sendmsg+0xe3b/0x1240 [ 822.362397] __sys_sendmmsg+0x56b/0xa90 [ 822.366360] __se_sys_sendmmsg+0xbd/0xe0 [ 822.370409] __x64_sys_sendmmsg+0x56/0x70 [ 822.374568] do_syscall_64+0xcf/0x110 [ 822.378362] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.383540] [ 822.385153] Uninit was stored to memory at: [ 822.389469] kmsan_internal_chain_origin+0x136/0x240 [ 822.394565] __msan_chain_origin+0x6d/0xb0 [ 822.398794] __save_stack_trace+0x8be/0xc60 [ 822.403110] save_stack_trace+0xc6/0x110 [ 822.407169] kmsan_internal_chain_origin+0x136/0x240 [ 822.412265] kmsan_memcpy_origins+0x13d/0x190 [ 822.416771] __msan_memcpy+0x6f/0x80 [ 822.420479] pskb_expand_head+0x436/0x1d20 [ 822.424709] gre_tap_xmit+0x4e3/0x910 [ 822.428499] dev_hard_start_xmit+0x6dc/0xde0 [ 822.432912] sch_direct_xmit+0x59b/0x890 [ 822.436969] __qdisc_run+0x1bac/0x3600 [ 822.440844] __dev_queue_xmit+0x2131/0x3e00 [ 822.445160] dev_queue_xmit+0x4b/0x60 [ 822.448952] ip_finish_output2+0x136d/0x1560 [ 822.453356] ip_finish_output+0xd93/0x10f0 [ 822.457580] ip_mc_output+0xf25/0x10f0 [ 822.461458] ip_send_skb+0x178/0x370 [ 822.465196] udp_send_skb+0x1439/0x1920 [ 822.469164] udp_sendmsg+0x399a/0x4350 [ 822.473045] udpv6_sendmsg+0x123e/0x4960 [ 822.477101] inet_sendmsg+0x4e9/0x800 [ 822.480892] ___sys_sendmsg+0xe3b/0x1240 [ 822.484945] __sys_sendmmsg+0x56b/0xa90 [ 822.488909] __se_sys_sendmmsg+0xbd/0xe0 [ 822.493023] __x64_sys_sendmmsg+0x56/0x70 [ 822.497189] do_syscall_64+0xcf/0x110 [ 822.500985] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.506159] [ 822.507774] Uninit was stored to memory at: [ 822.512103] kmsan_internal_chain_origin+0x136/0x240 [ 822.517198] __msan_chain_origin+0x6d/0xb0 [ 822.521427] __save_stack_trace+0x8be/0xc60 [ 822.525743] save_stack_trace+0xc6/0x110 [ 822.529800] kmsan_internal_chain_origin+0x136/0x240 [ 822.534896] kmsan_memcpy_origins+0x13d/0x190 [ 822.539385] __msan_memcpy+0x6f/0x80 [ 822.543096] pskb_expand_head+0x436/0x1d20 [ 822.547324] gre_tap_xmit+0x4e3/0x910 [ 822.551131] dev_hard_start_xmit+0x6dc/0xde0 [ 822.555540] sch_direct_xmit+0x59b/0x890 [ 822.559594] __qdisc_run+0x1bac/0x3600 [ 822.563474] __dev_queue_xmit+0x2131/0x3e00 [ 822.567786] dev_queue_xmit+0x4b/0x60 [ 822.571590] ip_finish_output2+0x136d/0x1560 [ 822.575991] ip_finish_output+0xd93/0x10f0 [ 822.580217] ip_mc_output+0xf25/0x10f0 [ 822.584098] ip_send_skb+0x178/0x370 [ 822.587805] udp_send_skb+0x1439/0x1920 [ 822.591775] udp_sendmsg+0x399a/0x4350 [ 822.595678] udpv6_sendmsg+0x123e/0x4960 [ 822.599747] inet_sendmsg+0x4e9/0x800 [ 822.603561] ___sys_sendmsg+0xe3b/0x1240 [ 822.607614] __sys_sendmmsg+0x56b/0xa90 [ 822.611581] __se_sys_sendmmsg+0xbd/0xe0 [ 822.615635] __x64_sys_sendmmsg+0x56/0x70 [ 822.619774] do_syscall_64+0xcf/0x110 [ 822.623570] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.628752] [ 822.630375] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 822.636594] Variable was created at: [ 822.640306] kfree+0x12a/0x2fb0 [ 822.643583] skb_release_data+0xbcb/0xc90 [ 822.660041] not chained 410000 origins [ 822.663987] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 822.671291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.680645] Call Trace: [ 822.683233] dump_stack+0x32d/0x480 [ 822.686919] kmsan_internal_chain_origin+0x222/0x240 [ 822.692086] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 822.697460] ? __module_address+0x6a/0x5f0 [ 822.701692] ? is_bpf_text_address+0x3e5/0x4d0 [ 822.706290] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 822.711667] ? is_bpf_text_address+0x49e/0x4d0 [ 822.716271] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 822.721655] ? __module_address+0x6a/0x5f0 [ 822.725898] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 822.731265] ? is_bpf_text_address+0x49e/0x4d0 [ 822.735860] ? INIT_INT+0xc/0x30 [ 822.739234] __msan_chain_origin+0x6d/0xb0 [ 822.743471] __save_stack_trace+0xaff/0xc60 [ 822.747817] save_stack_trace+0xc6/0x110 [ 822.751903] kmsan_internal_chain_origin+0x136/0x240 [ 822.757037] ? inet_sendmsg+0x4e9/0x800 [ 822.761031] ? kmsan_internal_chain_origin+0x136/0x240 [ 822.766309] ? kmsan_memcpy_origins+0x13d/0x190 [ 822.770973] ? __msan_memcpy+0x6f/0x80 [ 822.774859] ? pskb_expand_head+0x436/0x1d20 [ 822.779260] ? gre_tap_xmit+0x4e3/0x910 [ 822.783235] ? dev_hard_start_xmit+0x6dc/0xde0 [ 822.787808] ? sch_direct_xmit+0x59b/0x890 [ 822.792039] ? __qdisc_run+0x1bac/0x3600 [ 822.796096] ? __dev_queue_xmit+0x2131/0x3e00 [ 822.800584] ? dev_queue_xmit+0x4b/0x60 [ 822.804557] ? ip_finish_output2+0x136d/0x1560 [ 822.809135] ? ip_finish_output+0xd93/0x10f0 [ 822.813545] ? ip_mc_output+0xf25/0x10f0 [ 822.817607] ? ip_send_skb+0x178/0x370 [ 822.821494] ? udp_send_skb+0x1439/0x1920 [ 822.825650] ? udp_sendmsg+0x399a/0x4350 [ 822.829703] ? udpv6_sendmsg+0x123e/0x4960 [ 822.833930] ? inet_sendmsg+0x4e9/0x800 [ 822.837896] ? ___sys_sendmsg+0xe3b/0x1240 [ 822.842128] ? __sys_sendmmsg+0x56b/0xa90 [ 822.846271] ? __se_sys_sendmmsg+0xbd/0xe0 [ 822.850505] ? __x64_sys_sendmmsg+0x56/0x70 [ 822.854825] ? do_syscall_64+0xcf/0x110 [ 822.858794] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 822.864158] ? memcg_kmem_put_cache+0x73/0x460 [ 822.868752] ? __msan_get_context_state+0x9/0x20 [ 822.873505] ? INIT_INT+0xc/0x30 [ 822.876868] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 822.882254] kmsan_memcpy_origins+0x13d/0x190 [ 822.886768] __msan_memcpy+0x6f/0x80 [ 822.890481] pskb_expand_head+0x436/0x1d20 [ 822.894738] gre_tap_xmit+0x4e3/0x910 [ 822.898548] ? gre_tap_init+0x650/0x650 [ 822.902521] dev_hard_start_xmit+0x6dc/0xde0 [ 822.906952] sch_direct_xmit+0x59b/0x890 [ 822.911031] __qdisc_run+0x1bac/0x3600 [ 822.914946] ? INIT_BOOL+0xc/0x30 [ 822.918393] ? do_raw_spin_trylock+0x378/0x4d0 [ 822.922988] __dev_queue_xmit+0x2131/0x3e00 [ 822.927336] dev_queue_xmit+0x4b/0x60 [ 822.931137] ip_finish_output2+0x136d/0x1560 [ 822.935568] ip_finish_output+0xd93/0x10f0 [ 822.939816] ip_mc_output+0xf25/0x10f0 [ 822.943717] ? ip_mc_finish_output+0x440/0x440 [ 822.948304] ? ip_build_and_send_pkt+0xe60/0xe60 [ 822.953060] ip_send_skb+0x178/0x370 [ 822.956780] udp_send_skb+0x1439/0x1920 [ 822.960783] udp_sendmsg+0x399a/0x4350 [ 822.964675] ? ip_copy_metadata+0x1710/0x1710 [ 822.969261] ? kmsan_set_origin+0x7f/0x100 [ 822.973533] udpv6_sendmsg+0x123e/0x4960 [ 822.977599] ? aa_label_sk_perm+0xda/0x960 [ 822.981829] ? aa_sk_perm+0x6db/0x9e0 [ 822.985667] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 822.991026] ? aa_sk_perm+0x7ab/0x9e0 [ 822.994844] ? inet_sendmsg+0x84/0x800 [ 822.998736] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 823.003071] inet_sendmsg+0x4e9/0x800 [ 823.006899] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 823.012310] ? security_socket_sendmsg+0x1bd/0x200 [ 823.017260] ___sys_sendmsg+0xe3b/0x1240 [ 823.021331] ? kmsan_set_origin+0x7f/0x100 [ 823.025568] ? inet_getname+0x490/0x490 [ 823.029563] ? __msan_poison_alloca+0x1e0/0x270 [ 823.034270] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 823.039645] ? rcu_all_qs+0x3b/0x2b0 [ 823.043357] ? _cond_resched+0x59/0x120 [ 823.047344] ? rcu_all_qs+0x53/0x2b0 [ 823.051054] ? _cond_resched+0x37/0x120 [ 823.055025] ? __sys_sendmmsg+0x7c9/0xa90 [ 823.059175] ? _cond_resched+0x59/0x120 [ 823.063152] __sys_sendmmsg+0x56b/0xa90 [ 823.067150] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 823.072602] ? prepare_exit_to_usermode+0x182/0x4c0 [ 823.077624] __se_sys_sendmmsg+0xbd/0xe0 [ 823.081707] __x64_sys_sendmmsg+0x56/0x70 [ 823.085870] do_syscall_64+0xcf/0x110 [ 823.089676] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.094868] RIP: 0033:0x457569 [ 823.098079] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.116980] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 823.124685] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 823.131962] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 823.139222] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 823.146485] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 823.153747] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 823.161052] Uninit was stored to memory at: [ 823.165376] kmsan_internal_chain_origin+0x136/0x240 [ 823.170474] __msan_chain_origin+0x6d/0xb0 [ 823.174707] __save_stack_trace+0x8be/0xc60 [ 823.179020] save_stack_trace+0xc6/0x110 [ 823.183081] kmsan_internal_chain_origin+0x136/0x240 [ 823.188174] kmsan_memcpy_origins+0x13d/0x190 [ 823.192663] __msan_memcpy+0x6f/0x80 [ 823.196371] pskb_expand_head+0x436/0x1d20 [ 823.200598] gre_tap_xmit+0x4e3/0x910 [ 823.204390] dev_hard_start_xmit+0x6dc/0xde0 [ 823.208788] sch_direct_xmit+0x59b/0x890 [ 823.212843] __qdisc_run+0x1bac/0x3600 [ 823.216721] __dev_queue_xmit+0x2131/0x3e00 [ 823.221036] dev_queue_xmit+0x4b/0x60 [ 823.224832] ip_finish_output2+0x136d/0x1560 [ 823.229229] ip_finish_output+0xd93/0x10f0 [ 823.233458] ip_mc_output+0xf25/0x10f0 [ 823.237335] ip_send_skb+0x178/0x370 [ 823.241046] udp_send_skb+0x1439/0x1920 [ 823.245013] udp_sendmsg+0x399a/0x4350 [ 823.248891] udpv6_sendmsg+0x123e/0x4960 [ 823.252945] inet_sendmsg+0x4e9/0x800 [ 823.256739] ___sys_sendmsg+0xe3b/0x1240 [ 823.260791] __sys_sendmmsg+0x56b/0xa90 [ 823.264755] __se_sys_sendmmsg+0xbd/0xe0 [ 823.268824] __x64_sys_sendmmsg+0x56/0x70 [ 823.272966] do_syscall_64+0xcf/0x110 [ 823.276763] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.281937] [ 823.283556] Uninit was stored to memory at: [ 823.287871] kmsan_internal_chain_origin+0x136/0x240 [ 823.292970] __msan_chain_origin+0x6d/0xb0 [ 823.297199] __save_stack_trace+0x8be/0xc60 [ 823.301516] save_stack_trace+0xc6/0x110 [ 823.305577] kmsan_internal_chain_origin+0x136/0x240 [ 823.310671] kmsan_memcpy_origins+0x13d/0x190 [ 823.315160] __msan_memcpy+0x6f/0x80 [ 823.318872] pskb_expand_head+0x436/0x1d20 [ 823.323109] gre_tap_xmit+0x4e3/0x910 [ 823.326900] dev_hard_start_xmit+0x6dc/0xde0 [ 823.331301] sch_direct_xmit+0x59b/0x890 [ 823.335371] __qdisc_run+0x1bac/0x3600 [ 823.339249] __dev_queue_xmit+0x2131/0x3e00 [ 823.343587] dev_queue_xmit+0x4b/0x60 [ 823.347391] ip_finish_output2+0x136d/0x1560 [ 823.351797] ip_finish_output+0xd93/0x10f0 [ 823.356024] ip_mc_output+0xf25/0x10f0 [ 823.359902] ip_send_skb+0x178/0x370 [ 823.363623] udp_send_skb+0x1439/0x1920 [ 823.367588] udp_sendmsg+0x399a/0x4350 [ 823.371466] udpv6_sendmsg+0x123e/0x4960 [ 823.375528] inet_sendmsg+0x4e9/0x800 [ 823.379323] ___sys_sendmsg+0xe3b/0x1240 [ 823.383377] __sys_sendmmsg+0x56b/0xa90 [ 823.387341] __se_sys_sendmmsg+0xbd/0xe0 [ 823.391395] __x64_sys_sendmmsg+0x56/0x70 [ 823.395540] do_syscall_64+0xcf/0x110 [ 823.399372] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.404551] [ 823.406165] Uninit was stored to memory at: [ 823.410485] kmsan_internal_chain_origin+0x136/0x240 [ 823.415585] __msan_chain_origin+0x6d/0xb0 [ 823.419812] __save_stack_trace+0x8be/0xc60 [ 823.424125] save_stack_trace+0xc6/0x110 [ 823.428192] kmsan_internal_chain_origin+0x136/0x240 [ 823.433329] kmsan_memcpy_origins+0x13d/0x190 [ 823.437823] __msan_memcpy+0x6f/0x80 [ 823.441530] pskb_expand_head+0x436/0x1d20 [ 823.445763] gre_tap_xmit+0x4e3/0x910 [ 823.449556] dev_hard_start_xmit+0x6dc/0xde0 [ 823.453960] sch_direct_xmit+0x59b/0x890 [ 823.458010] __qdisc_run+0x1bac/0x3600 [ 823.461894] __dev_queue_xmit+0x2131/0x3e00 [ 823.466208] dev_queue_xmit+0x4b/0x60 [ 823.469998] ip_finish_output2+0x136d/0x1560 [ 823.474398] ip_finish_output+0xd93/0x10f0 [ 823.478622] ip_mc_output+0xf25/0x10f0 [ 823.482505] ip_send_skb+0x178/0x370 [ 823.486213] udp_send_skb+0x1439/0x1920 [ 823.490177] udp_sendmsg+0x399a/0x4350 [ 823.494070] udpv6_sendmsg+0x123e/0x4960 [ 823.498126] inet_sendmsg+0x4e9/0x800 [ 823.501917] ___sys_sendmsg+0xe3b/0x1240 [ 823.505970] __sys_sendmmsg+0x56b/0xa90 [ 823.509934] __se_sys_sendmmsg+0xbd/0xe0 [ 823.513985] __x64_sys_sendmmsg+0x56/0x70 [ 823.518125] do_syscall_64+0xcf/0x110 [ 823.521925] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.527097] [ 823.528722] Uninit was stored to memory at: [ 823.533046] kmsan_internal_chain_origin+0x136/0x240 [ 823.538154] __msan_chain_origin+0x6d/0xb0 [ 823.542385] __save_stack_trace+0x8be/0xc60 [ 823.546700] save_stack_trace+0xc6/0x110 [ 823.550755] kmsan_internal_chain_origin+0x136/0x240 [ 823.555850] kmsan_memcpy_origins+0x13d/0x190 [ 823.560337] __msan_memcpy+0x6f/0x80 [ 823.564056] pskb_expand_head+0x436/0x1d20 [ 823.568288] gre_tap_xmit+0x4e3/0x910 [ 823.572083] dev_hard_start_xmit+0x6dc/0xde0 [ 823.576497] sch_direct_xmit+0x59b/0x890 [ 823.580552] __qdisc_run+0x1bac/0x3600 [ 823.584435] __dev_queue_xmit+0x2131/0x3e00 [ 823.588745] dev_queue_xmit+0x4b/0x60 [ 823.592543] ip_finish_output2+0x136d/0x1560 [ 823.596943] ip_finish_output+0xd93/0x10f0 [ 823.601172] ip_mc_output+0xf25/0x10f0 [ 823.605055] ip_send_skb+0x178/0x370 [ 823.608779] udp_send_skb+0x1439/0x1920 [ 823.612765] udp_sendmsg+0x399a/0x4350 [ 823.616645] udpv6_sendmsg+0x123e/0x4960 [ 823.620706] inet_sendmsg+0x4e9/0x800 [ 823.624498] ___sys_sendmsg+0xe3b/0x1240 [ 823.628553] __sys_sendmmsg+0x56b/0xa90 [ 823.632522] __se_sys_sendmmsg+0xbd/0xe0 [ 823.636581] __x64_sys_sendmmsg+0x56/0x70 [ 823.640718] do_syscall_64+0xcf/0x110 [ 823.644523] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.649701] [ 823.651316] Uninit was stored to memory at: [ 823.655636] kmsan_internal_chain_origin+0x136/0x240 [ 823.660755] __msan_chain_origin+0x6d/0xb0 [ 823.664987] __save_stack_trace+0x8be/0xc60 [ 823.669302] save_stack_trace+0xc6/0x110 [ 823.673357] kmsan_internal_chain_origin+0x136/0x240 [ 823.678463] kmsan_memcpy_origins+0x13d/0x190 [ 823.682952] __msan_memcpy+0x6f/0x80 [ 823.686667] pskb_expand_head+0x436/0x1d20 [ 823.690895] gre_tap_xmit+0x4e3/0x910 [ 823.694703] dev_hard_start_xmit+0x6dc/0xde0 [ 823.699349] sch_direct_xmit+0x59b/0x890 [ 823.703406] __qdisc_run+0x1bac/0x3600 [ 823.707309] __dev_queue_xmit+0x2131/0x3e00 [ 823.711621] dev_queue_xmit+0x4b/0x60 [ 823.715426] ip_finish_output2+0x136d/0x1560 [ 823.719829] ip_finish_output+0xd93/0x10f0 [ 823.724061] ip_mc_output+0xf25/0x10f0 [ 823.727941] ip_send_skb+0x178/0x370 [ 823.731676] udp_send_skb+0x1439/0x1920 [ 823.735664] udp_sendmsg+0x399a/0x4350 [ 823.739548] udpv6_sendmsg+0x123e/0x4960 [ 823.743606] inet_sendmsg+0x4e9/0x800 [ 823.747399] ___sys_sendmsg+0xe3b/0x1240 [ 823.751457] __sys_sendmmsg+0x56b/0xa90 [ 823.755426] __se_sys_sendmmsg+0xbd/0xe0 [ 823.759477] __x64_sys_sendmmsg+0x56/0x70 [ 823.763621] do_syscall_64+0xcf/0x110 [ 823.767417] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.772590] [ 823.774212] Uninit was stored to memory at: [ 823.778528] kmsan_internal_chain_origin+0x136/0x240 [ 823.783634] __msan_chain_origin+0x6d/0xb0 [ 823.787861] __save_stack_trace+0x8be/0xc60 [ 823.792176] save_stack_trace+0xc6/0x110 [ 823.796239] kmsan_internal_chain_origin+0x136/0x240 [ 823.801333] kmsan_memcpy_origins+0x13d/0x190 [ 823.805820] __msan_memcpy+0x6f/0x80 [ 823.809528] pskb_expand_head+0x436/0x1d20 [ 823.813764] gre_tap_xmit+0x4e3/0x910 [ 823.817561] dev_hard_start_xmit+0x6dc/0xde0 [ 823.821965] sch_direct_xmit+0x59b/0x890 [ 823.826017] __qdisc_run+0x1bac/0x3600 [ 823.830210] __dev_queue_xmit+0x2131/0x3e00 [ 823.834523] dev_queue_xmit+0x4b/0x60 [ 823.838327] ip_finish_output2+0x136d/0x1560 [ 823.842739] ip_finish_output+0xd93/0x10f0 [ 823.846969] ip_mc_output+0xf25/0x10f0 [ 823.850845] ip_send_skb+0x178/0x370 [ 823.854559] udp_send_skb+0x1439/0x1920 [ 823.858524] udp_sendmsg+0x399a/0x4350 [ 823.862413] udpv6_sendmsg+0x123e/0x4960 [ 823.866465] inet_sendmsg+0x4e9/0x800 [ 823.870257] ___sys_sendmsg+0xe3b/0x1240 [ 823.874344] __sys_sendmmsg+0x56b/0xa90 [ 823.878311] __se_sys_sendmmsg+0xbd/0xe0 [ 823.882363] __x64_sys_sendmmsg+0x56/0x70 [ 823.886501] do_syscall_64+0xcf/0x110 [ 823.890305] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.895490] [ 823.897109] Uninit was stored to memory at: [ 823.901454] kmsan_internal_chain_origin+0x136/0x240 [ 823.906563] __msan_chain_origin+0x6d/0xb0 [ 823.910829] __save_stack_trace+0x8be/0xc60 [ 823.915145] save_stack_trace+0xc6/0x110 [ 823.919200] kmsan_internal_chain_origin+0x136/0x240 [ 823.924300] kmsan_memcpy_origins+0x13d/0x190 [ 823.928789] __msan_memcpy+0x6f/0x80 [ 823.932499] pskb_expand_head+0x436/0x1d20 [ 823.936725] gre_tap_xmit+0x4e3/0x910 [ 823.940523] dev_hard_start_xmit+0x6dc/0xde0 [ 823.944952] sch_direct_xmit+0x59b/0x890 [ 823.949004] __qdisc_run+0x1bac/0x3600 [ 823.952883] __dev_queue_xmit+0x2131/0x3e00 [ 823.957196] dev_queue_xmit+0x4b/0x60 [ 823.960989] ip_finish_output2+0x136d/0x1560 [ 823.965390] ip_finish_output+0xd93/0x10f0 [ 823.969619] ip_mc_output+0xf25/0x10f0 [ 823.973498] ip_send_skb+0x178/0x370 [ 823.977207] udp_send_skb+0x1439/0x1920 [ 823.981170] udp_sendmsg+0x399a/0x4350 [ 823.985064] udpv6_sendmsg+0x123e/0x4960 [ 823.989118] inet_sendmsg+0x4e9/0x800 [ 823.992912] ___sys_sendmsg+0xe3b/0x1240 [ 823.996962] __sys_sendmmsg+0x56b/0xa90 [ 824.000924] __se_sys_sendmmsg+0xbd/0xe0 [ 824.004988] __x64_sys_sendmmsg+0x56/0x70 [ 824.009127] do_syscall_64+0xcf/0x110 [ 824.012931] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.018116] [ 824.019741] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 824.025957] Variable was created at: [ 824.029695] kfree+0x12a/0x2fb0 [ 824.032972] skb_release_data+0xbcb/0xc90 [ 824.050639] not chained 420000 origins [ 824.054624] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 824.061907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.071253] Call Trace: [ 824.073854] dump_stack+0x32d/0x480 [ 824.077495] kmsan_internal_chain_origin+0x222/0x240 [ 824.082615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 824.087988] ? __module_address+0x6a/0x5f0 [ 824.092220] ? is_bpf_text_address+0x3e5/0x4d0 [ 824.096800] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 824.102158] ? is_bpf_text_address+0x49e/0x4d0 [ 824.106735] ? kmsan_internal_chain_origin+0x90/0x240 [ 824.111944] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 824.117307] ? is_bpf_text_address+0x49e/0x4d0 [ 824.121894] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 824.127347] ? in_task_stack+0x12c/0x210 [ 824.131413] __msan_chain_origin+0x6d/0xb0 [ 824.135646] ? __qdisc_run+0x1bac/0x3600 [ 824.139704] __save_stack_trace+0x8be/0xc60 [ 824.144044] ? __qdisc_run+0x1bac/0x3600 [ 824.148107] save_stack_trace+0xc6/0x110 [ 824.152211] kmsan_internal_chain_origin+0x136/0x240 [ 824.157311] ? inet_sendmsg+0x4e9/0x800 [ 824.161293] ? kmsan_internal_chain_origin+0x136/0x240 [ 824.166569] ? kmsan_memcpy_origins+0x13d/0x190 [ 824.171250] ? __msan_memcpy+0x6f/0x80 [ 824.175153] ? pskb_expand_head+0x436/0x1d20 [ 824.179580] ? gre_tap_xmit+0x4e3/0x910 [ 824.183556] ? dev_hard_start_xmit+0x6dc/0xde0 [ 824.188130] ? sch_direct_xmit+0x59b/0x890 [ 824.192358] ? __qdisc_run+0x1bac/0x3600 [ 824.196416] ? __dev_queue_xmit+0x2131/0x3e00 [ 824.200903] ? dev_queue_xmit+0x4b/0x60 [ 824.204872] ? ip_finish_output2+0x136d/0x1560 [ 824.209448] ? ip_finish_output+0xd93/0x10f0 [ 824.213855] ? ip_mc_output+0xf25/0x10f0 [ 824.217910] ? ip_send_skb+0x178/0x370 [ 824.221796] ? udp_send_skb+0x1439/0x1920 [ 824.225935] ? udp_sendmsg+0x399a/0x4350 [ 824.230002] ? udpv6_sendmsg+0x123e/0x4960 [ 824.234232] ? inet_sendmsg+0x4e9/0x800 [ 824.238201] ? ___sys_sendmsg+0xe3b/0x1240 [ 824.242432] ? __sys_sendmmsg+0x56b/0xa90 [ 824.246573] ? __se_sys_sendmmsg+0xbd/0xe0 [ 824.250804] ? __x64_sys_sendmmsg+0x56/0x70 [ 824.255134] ? do_syscall_64+0xcf/0x110 [ 824.259104] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.264466] ? memcg_kmem_put_cache+0x73/0x460 [ 824.269061] ? __msan_get_context_state+0x9/0x20 [ 824.273811] ? INIT_INT+0xc/0x30 [ 824.277174] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 824.282552] kmsan_memcpy_origins+0x13d/0x190 [ 824.287053] __msan_memcpy+0x6f/0x80 [ 824.290766] pskb_expand_head+0x436/0x1d20 [ 824.295022] gre_tap_xmit+0x4e3/0x910 [ 824.298830] ? gre_tap_init+0x650/0x650 [ 824.302799] dev_hard_start_xmit+0x6dc/0xde0 [ 824.307227] sch_direct_xmit+0x59b/0x890 [ 824.311306] __qdisc_run+0x1bac/0x3600 [ 824.315202] ? INIT_BOOL+0xc/0x30 [ 824.318652] ? do_raw_spin_trylock+0x378/0x4d0 [ 824.323244] __dev_queue_xmit+0x2131/0x3e00 [ 824.327593] dev_queue_xmit+0x4b/0x60 [ 824.331403] ip_finish_output2+0x136d/0x1560 [ 824.335825] ip_finish_output+0xd93/0x10f0 [ 824.340072] ip_mc_output+0xf25/0x10f0 [ 824.343973] ? ip_mc_finish_output+0x440/0x440 [ 824.348559] ? ip_build_and_send_pkt+0xe60/0xe60 [ 824.353312] ip_send_skb+0x178/0x370 [ 824.357030] udp_send_skb+0x1439/0x1920 [ 824.361036] udp_sendmsg+0x399a/0x4350 [ 824.364921] ? ip_copy_metadata+0x1710/0x1710 [ 824.369461] ? kmsan_set_origin+0x7f/0x100 [ 824.373702] udpv6_sendmsg+0x123e/0x4960 [ 824.377759] ? aa_label_sk_perm+0xda/0x960 [ 824.381988] ? aa_sk_perm+0x6db/0x9e0 [ 824.385827] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 824.391188] ? aa_sk_perm+0x7ab/0x9e0 [ 824.395012] ? inet_sendmsg+0x84/0x800 [ 824.398900] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 824.403219] inet_sendmsg+0x4e9/0x800 [ 824.407019] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 824.412384] ? security_socket_sendmsg+0x1bd/0x200 [ 824.417322] ___sys_sendmsg+0xe3b/0x1240 [ 824.421384] ? kmsan_set_origin+0x7f/0x100 [ 824.425619] ? inet_getname+0x490/0x490 [ 824.429610] ? __msan_poison_alloca+0x1e0/0x270 [ 824.434275] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 824.439666] ? rcu_all_qs+0x3b/0x2b0 [ 824.443375] ? _cond_resched+0x59/0x120 [ 824.447351] ? rcu_all_qs+0x53/0x2b0 [ 824.451058] ? _cond_resched+0x37/0x120 [ 824.455027] ? __sys_sendmmsg+0x7c9/0xa90 [ 824.459177] ? _cond_resched+0x59/0x120 [ 824.463149] __sys_sendmmsg+0x56b/0xa90 [ 824.467146] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 824.472595] ? prepare_exit_to_usermode+0x182/0x4c0 [ 824.477673] __se_sys_sendmmsg+0xbd/0xe0 [ 824.481751] __x64_sys_sendmmsg+0x56/0x70 [ 824.485897] do_syscall_64+0xcf/0x110 [ 824.489696] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.494879] RIP: 0033:0x457569 [ 824.498066] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.516968] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 824.524694] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 824.531958] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 824.539223] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 824.546496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 824.553759] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 824.561037] Uninit was stored to memory at: [ 824.565362] kmsan_internal_chain_origin+0x136/0x240 [ 824.570458] __msan_chain_origin+0x6d/0xb0 [ 824.574689] __save_stack_trace+0x8be/0xc60 [ 824.579017] save_stack_trace+0xc6/0x110 [ 824.583076] kmsan_internal_chain_origin+0x136/0x240 [ 824.588171] kmsan_memcpy_origins+0x13d/0x190 [ 824.592661] __msan_memcpy+0x6f/0x80 [ 824.596369] pskb_expand_head+0x436/0x1d20 [ 824.600597] gre_tap_xmit+0x4e3/0x910 [ 824.604392] dev_hard_start_xmit+0x6dc/0xde0 [ 824.608795] sch_direct_xmit+0x59b/0x890 [ 824.612846] __qdisc_run+0x1bac/0x3600 [ 824.616726] __dev_queue_xmit+0x2131/0x3e00 [ 824.621054] dev_queue_xmit+0x4b/0x60 [ 824.624851] ip_finish_output2+0x136d/0x1560 [ 824.629249] ip_finish_output+0xd93/0x10f0 [ 824.633481] ip_mc_output+0xf25/0x10f0 [ 824.637362] ip_send_skb+0x178/0x370 [ 824.641070] udp_send_skb+0x1439/0x1920 [ 824.645034] udp_sendmsg+0x399a/0x4350 [ 824.648927] udpv6_sendmsg+0x123e/0x4960 [ 824.652992] inet_sendmsg+0x4e9/0x800 [ 824.656786] ___sys_sendmsg+0xe3b/0x1240 [ 824.660837] __sys_sendmmsg+0x56b/0xa90 [ 824.664804] __se_sys_sendmmsg+0xbd/0xe0 [ 824.668858] __x64_sys_sendmmsg+0x56/0x70 [ 824.672998] do_syscall_64+0xcf/0x110 [ 824.676792] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.681971] [ 824.683590] Uninit was stored to memory at: [ 824.687910] kmsan_internal_chain_origin+0x136/0x240 [ 824.693007] __msan_chain_origin+0x6d/0xb0 [ 824.697246] __save_stack_trace+0x8be/0xc60 [ 824.701563] save_stack_trace+0xc6/0x110 [ 824.705625] kmsan_internal_chain_origin+0x136/0x240 [ 824.710723] kmsan_memcpy_origins+0x13d/0x190 [ 824.715209] __msan_memcpy+0x6f/0x80 [ 824.718917] pskb_expand_head+0x436/0x1d20 [ 824.723147] gre_tap_xmit+0x4e3/0x910 [ 824.726943] dev_hard_start_xmit+0x6dc/0xde0 [ 824.731342] sch_direct_xmit+0x59b/0x890 [ 824.735418] __qdisc_run+0x1bac/0x3600 [ 824.739306] __dev_queue_xmit+0x2131/0x3e00 [ 824.743658] dev_queue_xmit+0x4b/0x60 [ 824.747469] ip_finish_output2+0x136d/0x1560 [ 824.751871] ip_finish_output+0xd93/0x10f0 [ 824.756114] ip_mc_output+0xf25/0x10f0 [ 824.760004] ip_send_skb+0x178/0x370 [ 824.763715] udp_send_skb+0x1439/0x1920 [ 824.767679] udp_sendmsg+0x399a/0x4350 [ 824.771576] udpv6_sendmsg+0x123e/0x4960 [ 824.775633] inet_sendmsg+0x4e9/0x800 [ 824.779427] ___sys_sendmsg+0xe3b/0x1240 [ 824.783482] __sys_sendmmsg+0x56b/0xa90 [ 824.787455] __se_sys_sendmmsg+0xbd/0xe0 [ 824.791506] __x64_sys_sendmmsg+0x56/0x70 [ 824.795650] do_syscall_64+0xcf/0x110 [ 824.799451] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.804629] [ 824.806247] Uninit was stored to memory at: [ 824.810566] kmsan_internal_chain_origin+0x136/0x240 [ 824.815669] __msan_chain_origin+0x6d/0xb0 [ 824.819896] __save_stack_trace+0x8be/0xc60 [ 824.824214] save_stack_trace+0xc6/0x110 [ 824.828269] kmsan_internal_chain_origin+0x136/0x240 [ 824.833377] kmsan_memcpy_origins+0x13d/0x190 [ 824.837864] __msan_memcpy+0x6f/0x80 [ 824.841571] pskb_expand_head+0x436/0x1d20 [ 824.845799] gre_tap_xmit+0x4e3/0x910 [ 824.849590] dev_hard_start_xmit+0x6dc/0xde0 [ 824.853993] sch_direct_xmit+0x59b/0x890 [ 824.858048] __qdisc_run+0x1bac/0x3600 [ 824.861932] __dev_queue_xmit+0x2131/0x3e00 [ 824.866246] dev_queue_xmit+0x4b/0x60 [ 824.870035] ip_finish_output2+0x136d/0x1560 [ 824.874440] ip_finish_output+0xd93/0x10f0 [ 824.878676] ip_mc_output+0xf25/0x10f0 [ 824.882559] ip_send_skb+0x178/0x370 [ 824.886273] udp_send_skb+0x1439/0x1920 [ 824.890247] udp_sendmsg+0x399a/0x4350 [ 824.894137] udpv6_sendmsg+0x123e/0x4960 [ 824.898189] inet_sendmsg+0x4e9/0x800 [ 824.901980] ___sys_sendmsg+0xe3b/0x1240 [ 824.906048] __sys_sendmmsg+0x56b/0xa90 [ 824.910014] __se_sys_sendmmsg+0xbd/0xe0 [ 824.914078] __x64_sys_sendmmsg+0x56/0x70 [ 824.918218] do_syscall_64+0xcf/0x110 [ 824.922017] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.927208] [ 824.928822] Uninit was stored to memory at: [ 824.933142] kmsan_internal_chain_origin+0x136/0x240 [ 824.938238] __msan_chain_origin+0x6d/0xb0 [ 824.942469] __save_stack_trace+0x8be/0xc60 [ 824.946812] save_stack_trace+0xc6/0x110 [ 824.950867] kmsan_internal_chain_origin+0x136/0x240 [ 824.955964] kmsan_memcpy_origins+0x13d/0x190 [ 824.960456] __msan_memcpy+0x6f/0x80 [ 824.964166] pskb_expand_head+0x436/0x1d20 [ 824.968396] gre_tap_xmit+0x4e3/0x910 [ 824.972191] dev_hard_start_xmit+0x6dc/0xde0 [ 824.976591] sch_direct_xmit+0x59b/0x890 [ 824.980641] __qdisc_run+0x1bac/0x3600 [ 824.984524] __dev_queue_xmit+0x2131/0x3e00 [ 824.988840] dev_queue_xmit+0x4b/0x60 [ 824.992636] ip_finish_output2+0x136d/0x1560 [ 824.997035] ip_finish_output+0xd93/0x10f0 [ 825.001262] ip_mc_output+0xf25/0x10f0 [ 825.005148] ip_send_skb+0x178/0x370 [ 825.008853] udp_send_skb+0x1439/0x1920 [ 825.012820] udp_sendmsg+0x399a/0x4350 [ 825.016700] udpv6_sendmsg+0x123e/0x4960 [ 825.020753] inet_sendmsg+0x4e9/0x800 [ 825.024549] ___sys_sendmsg+0xe3b/0x1240 [ 825.028602] __sys_sendmmsg+0x56b/0xa90 [ 825.032567] __se_sys_sendmmsg+0xbd/0xe0 [ 825.036620] __x64_sys_sendmmsg+0x56/0x70 [ 825.040772] do_syscall_64+0xcf/0x110 [ 825.044569] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.049741] [ 825.051357] Uninit was stored to memory at: [ 825.055675] kmsan_internal_chain_origin+0x136/0x240 [ 825.060770] __msan_chain_origin+0x6d/0xb0 [ 825.065011] __save_stack_trace+0x8be/0xc60 [ 825.069339] save_stack_trace+0xc6/0x110 [ 825.073393] kmsan_internal_chain_origin+0x136/0x240 [ 825.078490] kmsan_memcpy_origins+0x13d/0x190 [ 825.082980] __msan_memcpy+0x6f/0x80 [ 825.086686] pskb_expand_head+0x436/0x1d20 [ 825.090941] gre_tap_xmit+0x4e3/0x910 [ 825.094746] dev_hard_start_xmit+0x6dc/0xde0 [ 825.099144] sch_direct_xmit+0x59b/0x890 [ 825.103197] __qdisc_run+0x1bac/0x3600 [ 825.107090] __dev_queue_xmit+0x2131/0x3e00 [ 825.111403] dev_queue_xmit+0x4b/0x60 [ 825.115232] ip_finish_output2+0x136d/0x1560 [ 825.119631] ip_finish_output+0xd93/0x10f0 [ 825.123857] ip_mc_output+0xf25/0x10f0 [ 825.127734] ip_send_skb+0x178/0x370 [ 825.131457] udp_send_skb+0x1439/0x1920 [ 825.135443] udp_sendmsg+0x399a/0x4350 [ 825.139336] udpv6_sendmsg+0x123e/0x4960 [ 825.143390] inet_sendmsg+0x4e9/0x800 [ 825.147181] ___sys_sendmsg+0xe3b/0x1240 [ 825.151233] __sys_sendmmsg+0x56b/0xa90 [ 825.155201] __se_sys_sendmmsg+0xbd/0xe0 [ 825.159253] __x64_sys_sendmmsg+0x56/0x70 [ 825.163418] do_syscall_64+0xcf/0x110 [ 825.167214] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.172408] [ 825.174022] Uninit was stored to memory at: [ 825.178344] kmsan_internal_chain_origin+0x136/0x240 [ 825.183450] __msan_chain_origin+0x6d/0xb0 [ 825.187691] __save_stack_trace+0x8be/0xc60 [ 825.192004] save_stack_trace+0xc6/0x110 [ 825.196062] kmsan_internal_chain_origin+0x136/0x240 [ 825.201158] kmsan_memcpy_origins+0x13d/0x190 [ 825.205647] __msan_memcpy+0x6f/0x80 [ 825.209354] pskb_expand_head+0x436/0x1d20 [ 825.213583] gre_tap_xmit+0x4e3/0x910 [ 825.217377] dev_hard_start_xmit+0x6dc/0xde0 [ 825.221781] sch_direct_xmit+0x59b/0x890 [ 825.225835] __qdisc_run+0x1bac/0x3600 [ 825.229712] __dev_queue_xmit+0x2131/0x3e00 [ 825.234035] dev_queue_xmit+0x4b/0x60 [ 825.237845] ip_finish_output2+0x136d/0x1560 [ 825.242245] ip_finish_output+0xd93/0x10f0 [ 825.246473] ip_mc_output+0xf25/0x10f0 [ 825.250354] ip_send_skb+0x178/0x370 [ 825.254065] udp_send_skb+0x1439/0x1920 [ 825.258030] udp_sendmsg+0x399a/0x4350 [ 825.261936] udpv6_sendmsg+0x123e/0x4960 [ 825.265990] inet_sendmsg+0x4e9/0x800 [ 825.269781] ___sys_sendmsg+0xe3b/0x1240 [ 825.273834] __sys_sendmmsg+0x56b/0xa90 [ 825.277799] __se_sys_sendmmsg+0xbd/0xe0 [ 825.281868] __x64_sys_sendmmsg+0x56/0x70 [ 825.286007] do_syscall_64+0xcf/0x110 [ 825.289800] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.294974] [ 825.296593] Uninit was stored to memory at: [ 825.300911] kmsan_internal_chain_origin+0x136/0x240 [ 825.306010] __msan_chain_origin+0x6d/0xb0 [ 825.310238] __save_stack_trace+0x8be/0xc60 [ 825.314562] save_stack_trace+0xc6/0x110 [ 825.318647] kmsan_internal_chain_origin+0x136/0x240 [ 825.323745] kmsan_memcpy_origins+0x13d/0x190 [ 825.328231] __msan_memcpy+0x6f/0x80 [ 825.331941] pskb_expand_head+0x436/0x1d20 [ 825.336168] gre_tap_xmit+0x4e3/0x910 [ 825.339960] dev_hard_start_xmit+0x6dc/0xde0 [ 825.344389] sch_direct_xmit+0x59b/0x890 [ 825.348443] __qdisc_run+0x1bac/0x3600 [ 825.352324] __dev_queue_xmit+0x2131/0x3e00 [ 825.356635] dev_queue_xmit+0x4b/0x60 [ 825.360431] ip_finish_output2+0x136d/0x1560 [ 825.364830] ip_finish_output+0xd93/0x10f0 [ 825.369057] ip_mc_output+0xf25/0x10f0 [ 825.372954] ip_send_skb+0x178/0x370 [ 825.376688] udp_send_skb+0x1439/0x1920 [ 825.380651] udp_sendmsg+0x399a/0x4350 [ 825.384532] udpv6_sendmsg+0x123e/0x4960 [ 825.388592] inet_sendmsg+0x4e9/0x800 [ 825.392385] ___sys_sendmsg+0xe3b/0x1240 [ 825.396440] __sys_sendmmsg+0x56b/0xa90 [ 825.400415] __se_sys_sendmmsg+0xbd/0xe0 [ 825.404471] __x64_sys_sendmmsg+0x56/0x70 [ 825.408610] do_syscall_64+0xcf/0x110 [ 825.412411] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.417588] [ 825.419205] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 825.425419] Variable was created at: [ 825.429126] kfree+0x12a/0x2fb0 [ 825.432404] skb_release_data+0xbcb/0xc90 [ 825.449267] not chained 430000 origins [ 825.453222] CPU: 0 PID: 27498 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 825.460504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.469855] Call Trace: [ 825.472448] dump_stack+0x32d/0x480 [ 825.476089] kmsan_internal_chain_origin+0x222/0x240 [ 825.481205] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 825.486567] ? __module_address+0x6a/0x5f0 [ 825.490796] ? is_bpf_text_address+0x3e5/0x4d0 [ 825.495379] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 825.500739] ? is_bpf_text_address+0x49e/0x4d0 [ 825.505335] ? kmsan_internal_chain_origin+0x90/0x240 [ 825.510531] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 825.515894] ? is_bpf_text_address+0x49e/0x4d0 [ 825.520478] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 825.525923] ? in_task_stack+0x12c/0x210 [ 825.529991] __msan_chain_origin+0x6d/0xb0 [ 825.534225] ? inet_sendmsg+0x4e9/0x800 [ 825.538194] __save_stack_trace+0x8be/0xc60 [ 825.542534] ? inet_sendmsg+0x4e9/0x800 [ 825.546514] save_stack_trace+0xc6/0x110 [ 825.550589] kmsan_internal_chain_origin+0x136/0x240 [ 825.555704] ? inet_sendmsg+0x4e9/0x800 [ 825.559682] ? kmsan_internal_chain_origin+0x136/0x240 [ 825.564953] ? kmsan_memcpy_origins+0x13d/0x190 [ 825.569615] ? __msan_memcpy+0x6f/0x80 [ 825.573500] ? pskb_expand_head+0x436/0x1d20 [ 825.577901] ? gre_tap_xmit+0x4e3/0x910 [ 825.581868] ? dev_hard_start_xmit+0x6dc/0xde0 [ 825.586445] ? sch_direct_xmit+0x59b/0x890 [ 825.590670] ? __qdisc_run+0x1bac/0x3600 [ 825.594723] ? __dev_queue_xmit+0x2131/0x3e00 [ 825.599225] ? dev_queue_xmit+0x4b/0x60 [ 825.603202] ? ip_finish_output2+0x136d/0x1560 [ 825.607779] ? ip_finish_output+0xd93/0x10f0 [ 825.612181] ? ip_mc_output+0xf25/0x10f0 [ 825.616244] ? ip_send_skb+0x178/0x370 [ 825.620129] ? udp_send_skb+0x1439/0x1920 [ 825.624298] ? udp_sendmsg+0x399a/0x4350 [ 825.628355] ? udpv6_sendmsg+0x123e/0x4960 [ 825.632586] ? inet_sendmsg+0x4e9/0x800 [ 825.636560] ? ___sys_sendmsg+0xe3b/0x1240 [ 825.640786] ? __sys_sendmmsg+0x56b/0xa90 [ 825.644943] ? __se_sys_sendmmsg+0xbd/0xe0 [ 825.649178] ? __x64_sys_sendmmsg+0x56/0x70 [ 825.653491] ? do_syscall_64+0xcf/0x110 [ 825.657460] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.662844] ? memcg_kmem_put_cache+0x73/0x460 [ 825.667454] ? __msan_get_context_state+0x9/0x20 [ 825.672202] ? INIT_INT+0xc/0x30 [ 825.675569] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 825.680939] kmsan_memcpy_origins+0x13d/0x190 [ 825.685438] __msan_memcpy+0x6f/0x80 [ 825.689150] pskb_expand_head+0x436/0x1d20 [ 825.693404] gre_tap_xmit+0x4e3/0x910 [ 825.697337] ? gre_tap_init+0x650/0x650 [ 825.701315] dev_hard_start_xmit+0x6dc/0xde0 [ 825.705740] sch_direct_xmit+0x59b/0x890 [ 825.709813] __qdisc_run+0x1bac/0x3600 [ 825.713708] ? INIT_BOOL+0xc/0x30 [ 825.717159] ? do_raw_spin_trylock+0x378/0x4d0 [ 825.721797] __dev_queue_xmit+0x2131/0x3e00 [ 825.726160] dev_queue_xmit+0x4b/0x60 [ 825.729977] ip_finish_output2+0x136d/0x1560 [ 825.734400] ip_finish_output+0xd93/0x10f0 [ 825.738646] ip_mc_output+0xf25/0x10f0 [ 825.742552] ? ip_mc_finish_output+0x440/0x440 [ 825.747134] ? ip_build_and_send_pkt+0xe60/0xe60 [ 825.751884] ip_send_skb+0x178/0x370 [ 825.755607] udp_send_skb+0x1439/0x1920 [ 825.759599] udp_sendmsg+0x399a/0x4350 [ 825.763479] ? ip_copy_metadata+0x1710/0x1710 [ 825.768018] ? kmsan_set_origin+0x7f/0x100 [ 825.772262] udpv6_sendmsg+0x123e/0x4960 [ 825.776324] ? aa_label_sk_perm+0xda/0x960 [ 825.780555] ? aa_sk_perm+0x6db/0x9e0 [ 825.784412] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 825.789771] ? aa_sk_perm+0x7ab/0x9e0 [ 825.793586] ? inet_sendmsg+0x84/0x800 [ 825.797484] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 825.801801] inet_sendmsg+0x4e9/0x800 [ 825.805600] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 825.810958] ? security_socket_sendmsg+0x1bd/0x200 [ 825.815893] ___sys_sendmsg+0xe3b/0x1240 [ 825.819950] ? kmsan_set_origin+0x7f/0x100 [ 825.824180] ? inet_getname+0x490/0x490 [ 825.828181] ? __msan_poison_alloca+0x1e0/0x270 [ 825.833117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 825.838484] ? rcu_all_qs+0x3b/0x2b0 [ 825.842190] ? _cond_resched+0x59/0x120 [ 825.846166] ? rcu_all_qs+0x53/0x2b0 [ 825.849871] ? _cond_resched+0x37/0x120 [ 825.853836] ? __sys_sendmmsg+0x7c9/0xa90 [ 825.857988] ? _cond_resched+0x59/0x120 [ 825.861969] __sys_sendmmsg+0x56b/0xa90 [ 825.865964] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 825.871408] ? prepare_exit_to_usermode+0x182/0x4c0 [ 825.876430] __se_sys_sendmmsg+0xbd/0xe0 [ 825.880493] __x64_sys_sendmmsg+0x56/0x70 [ 825.884656] do_syscall_64+0xcf/0x110 [ 825.888467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.893650] RIP: 0033:0x457569 [ 825.896838] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 825.915739] RSP: 002b:00007ff423dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.923443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 825.930701] RDX: 0400000000000174 RSI: 00000000200002c0 RDI: 0000000000000003 [ 825.937978] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 825.945245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423dc06d4 [ 825.952506] R13: 00000000004c3c33 R14: 00000000004d63e8 R15: 00000000ffffffff [ 825.959780] Uninit was stored to memory at: [ 825.964103] kmsan_internal_chain_origin+0x136/0x240 [ 825.969196] __msan_chain_origin+0x6d/0xb0 [ 825.973427] __save_stack_trace+0x8be/0xc60 [ 825.977742] save_stack_trace+0xc6/0x110 [ 825.981802] kmsan_internal_chain_origin+0x136/0x240 [ 825.986899] kmsan_memcpy_origins+0x13d/0x190 [ 825.991388] __msan_memcpy+0x6f/0x80 [ 825.995098] pskb_expand_head+0x436/0x1d20 [ 825.999324] gre_tap_xmit+0x4e3/0x910 [ 826.003120] dev_hard_start_xmit+0x6dc/0xde0 [ 826.007518] sch_direct_xmit+0x59b/0x890 [ 826.011572] __qdisc_run+0x1bac/0x3600 [ 826.015451] __dev_queue_xmit+0x2131/0x3e00 [ 826.019762] dev_queue_xmit+0x4b/0x60 [ 826.023558] ip_finish_output2+0x136d/0x1560 [ 826.027957] ip_finish_output+0xd93/0x10f0 [ 826.032185] ip_mc_output+0xf25/0x10f0 [ 826.036067] ip_send_skb+0x178/0x370 [ 826.039785] udp_send_skb+0x1439/0x1920 [ 826.043767] udp_sendmsg+0x399a/0x4350 [ 826.047656] udpv6_sendmsg+0x123e/0x4960 [ 826.051711] inet_sendmsg+0x4e9/0x800 [ 826.055506] ___sys_sendmsg+0xe3b/0x1240 [ 826.059575] __sys_sendmmsg+0x56b/0xa90 [ 826.063565] __se_sys_sendmmsg+0xbd/0xe0 [ 826.067617] __x64_sys_sendmmsg+0x56/0x70 [ 826.071757] do_syscall_64+0xcf/0x110 [ 826.075557] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.080733] [ 826.082350] Uninit was stored to memory at: [ 826.086670] kmsan_internal_chain_origin+0x136/0x240 [ 826.091782] __msan_chain_origin+0x6d/0xb0 [ 826.096025] __save_stack_trace+0x8be/0xc60 [ 826.100340] save_stack_trace+0xc6/0x110 [ 826.104414] kmsan_internal_chain_origin+0x136/0x240 [ 826.109511] kmsan_memcpy_origins+0x13d/0x190 [ 826.114001] __msan_memcpy+0x6f/0x80 [ 826.117707] pskb_expand_head+0x436/0x1d20 [ 826.121934] gre_tap_xmit+0x4e3/0x910 [ 826.125725] dev_hard_start_xmit+0x6dc/0xde0 [ 826.130130] sch_direct_xmit+0x59b/0x890 [ 826.134183] __qdisc_run+0x1bac/0x3600 [ 826.138081] __dev_queue_xmit+0x2131/0x3e00 [ 826.142392] dev_queue_xmit+0x4b/0x60 [ 826.146183] ip_finish_output2+0x136d/0x1560 [ 826.150585] ip_finish_output+0xd93/0x10f0 [ 826.154826] ip_mc_output+0xf25/0x10f0 [ 826.158742] ip_send_skb+0x178/0x370 [ 826.162448] udp_send_skb+0x1439/0x1920 [ 826.166428] udp_sendmsg+0x399a/0x4350 [ 826.170312] udpv6_sendmsg+0x123e/0x4960 [ 826.174381] inet_sendmsg+0x4e9/0x800 [ 826.178175] ___sys_sendmsg+0xe3b/0x1240 [ 826.182240] __sys_sendmmsg+0x56b/0xa90 [ 826.186203] __se_sys_sendmmsg+0xbd/0xe0 [ 826.190252] __x64_sys_sendmmsg+0x56/0x70 [ 826.194398] do_syscall_64+0xcf/0x110 [ 826.198192] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.203375] [ 826.204988] Uninit was stored to memory at: [ 826.209309] kmsan_internal_chain_origin+0x136/0x240 [ 826.214408] __msan_chain_origin+0x6d/0xb0 [ 826.218637] __save_stack_trace+0x8be/0xc60 [ 826.222949] save_stack_trace+0xc6/0x110 [ 826.227002] kmsan_internal_chain_origin+0x136/0x240 [ 826.232096] kmsan_memcpy_origins+0x13d/0x190 [ 826.236584] __msan_memcpy+0x6f/0x80 [ 826.240298] pskb_expand_head+0x436/0x1d20 [ 826.244524] gre_tap_xmit+0x4e3/0x910 [ 826.248322] dev_hard_start_xmit+0x6dc/0xde0 [ 826.252721] sch_direct_xmit+0x59b/0x890 [ 826.256778] __qdisc_run+0x1bac/0x3600 [ 826.260660] __dev_queue_xmit+0x2131/0x3e00 [ 826.264973] dev_queue_xmit+0x4b/0x60 [ 826.268763] ip_finish_output2+0x136d/0x1560 [ 826.273161] ip_finish_output+0xd93/0x10f0 [ 826.277386] ip_mc_output+0xf25/0x10f0 [ 826.281265] ip_send_skb+0x178/0x370 [ 826.284981] udp_send_skb+0x1439/0x1920 [ 826.288944] udp_sendmsg+0x399a/0x4350 [ 826.292827] udpv6_sendmsg+0x123e/0x4960 [ 826.296877] inet_sendmsg+0x4e9/0x800 [ 826.300667] ___sys_sendmsg+0xe3b/0x1240 [ 826.304722] __sys_sendmmsg+0x56b/0xa90 [ 826.308688] __se_sys_sendmmsg+0xbd/0xe0 [ 826.312740] __x64_sys_sendmmsg+0x56/0x70 [ 826.316879] do_syscall_64+0xcf/0x110 [ 826.320674] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.325863] [ 826.327477] Uninit was stored to memory at: [ 826.331793] kmsan_internal_chain_origin+0x136/0x240 [ 826.336890] __msan_chain_origin+0x6d/0xb0 [ 826.341123] __save_stack_trace+0x8be/0xc60 [ 826.345439] save_stack_trace+0xc6/0x110 [ 826.349491] kmsan_internal_chain_origin+0x136/0x240 [ 826.354589] kmsan_memcpy_origins+0x13d/0x190 [ 826.359079] __msan_memcpy+0x6f/0x80 [ 826.362787] pskb_expand_head+0x436/0x1d20 [ 826.367015] gre_tap_xmit+0x4e3/0x910 [ 826.370810] dev_hard_start_xmit+0x6dc/0xde0 [ 826.375209] sch_direct_xmit+0x59b/0x890 [ 826.379260] __qdisc_run+0x1bac/0x3600 [ 826.383147] __dev_queue_xmit+0x2131/0x3e00 [ 826.387467] dev_queue_xmit+0x4b/0x60 [ 826.391260] ip_finish_output2+0x136d/0x1560 [ 826.395669] ip_finish_output+0xd93/0x10f0 [ 826.399896] ip_mc_output+0xf25/0x10f0 [ 826.403772] ip_send_skb+0x178/0x370 [ 826.407481] udp_send_skb+0x1439/0x1920 [ 826.411457] udp_sendmsg+0x399a/0x4350 [ 826.415339] udpv6_sendmsg+0x123e/0x4960 [ 826.419407] inet_sendmsg+0x4e9/0x800 [ 826.423201] ___sys_sendmsg+0xe3b/0x1240 [ 826.427250] __sys_sendmmsg+0x56b/0xa90 [ 826.431220] __se_sys_sendmmsg+0xbd/0xe0 [ 826.435273] __x64_sys_sendmmsg+0x56/0x70 [ 826.439421] do_syscall_64+0xcf/0x110 [ 826.443217] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.448390] [ 826.450008] Uninit was stored to memory at: [ 826.454328] kmsan_internal_chain_origin+0x136/0x240 [ 826.459426] __msan_chain_origin+0x6d/0xb0 [ 826.463653] __save_stack_trace+0x8be/0xc60 [ 826.467970] save_stack_trace+0xc6/0x110 [ 826.472022] kmsan_internal_chain_origin+0x136/0x240 [ 826.477129] kmsan_memcpy_origins+0x13d/0x190 [ 826.481626] __msan_memcpy+0x6f/0x80 [ 826.485335] pskb_expand_head+0x436/0x1d20 [ 826.489566] gre_tap_xmit+0x4e3/0x910 [ 826.493395] dev_hard_start_xmit+0x6dc/0xde0 [ 826.497796] sch_direct_xmit+0x59b/0x890 [ 826.501850] __qdisc_run+0x1bac/0x3600 [ 826.505732] __dev_queue_xmit+0x2131/0x3e00 [ 826.510043] dev_queue_xmit+0x4b/0x60 [ 826.513835] ip_finish_output2+0x136d/0x1560 [ 826.518234] ip_finish_output+0xd93/0x10f0 [ 826.522467] ip_mc_output+0xf25/0x10f0 [ 826.526349] ip_send_skb+0x178/0x370 [ 826.530058] udp_send_skb+0x1439/0x1920 [ 826.534021] udp_sendmsg+0x399a/0x4350 [ 826.537901] udpv6_sendmsg+0x123e/0x4960 [ 826.541955] inet_sendmsg+0x4e9/0x800 [ 826.545745] ___sys_sendmsg+0xe3b/0x1240 [ 826.549796] __sys_sendmmsg+0x56b/0xa90 [ 826.553772] __se_sys_sendmmsg+0xbd/0xe0 [ 826.557825] __x64_sys_sendmmsg+0x56/0x70 [ 826.561966] do_syscall_64+0xcf/0x110 [ 826.565759] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.570935] [ 826.572552] Uninit was stored to memory at: [ 826.576878] kmsan_internal_chain_origin+0x136/0x240 [ 826.581992] __msan_chain_origin+0x6d/0xb0 [ 826.586219] __save_stack_trace+0x8be/0xc60 [ 826.590581] save_stack_trace+0xc6/0x110 [ 826.594637] kmsan_internal_chain_origin+0x136/0x240 [ 826.599753] kmsan_memcpy_origins+0x13d/0x190 [ 826.604258] __msan_memcpy+0x6f/0x80 [ 826.607974] pskb_expand_head+0x436/0x1d20 [ 826.612201] gre_tap_xmit+0x4e3/0x910 [ 826.615994] dev_hard_start_xmit+0x6dc/0xde0 [ 826.620412] sch_direct_xmit+0x59b/0x890 [ 826.624463] __qdisc_run+0x1bac/0x3600 [ 826.628339] __dev_queue_xmit+0x2131/0x3e00 [ 826.632654] dev_queue_xmit+0x4b/0x60 [ 826.636465] ip_finish_output2+0x136d/0x1560 [ 826.640865] ip_finish_output+0xd93/0x10f0 [ 826.645089] ip_mc_output+0xf25/0x10f0 [ 826.648967] ip_send_skb+0x178/0x370 [ 826.652675] udp_send_skb+0x1439/0x1920 [ 826.656641] udp_sendmsg+0x399a/0x4350 [ 826.660519] udpv6_sendmsg+0x123e/0x4960 [ 826.664574] inet_sendmsg+0x4e9/0x800 [ 826.668368] ___sys_sendmsg+0xe3b/0x1240 [ 826.672418] __sys_sendmmsg+0x56b/0xa90 [ 826.676383] __se_sys_sendmmsg+0xbd/0xe0 [ 826.680434] __x64_sys_sendmmsg+0x56/0x70 [ 826.684632] do_syscall_64+0xcf/0x110 [ 826.688433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.693608] [ 826.695221] Uninit was stored to memory at: [ 826.699544] kmsan_internal_chain_origin+0x136/0x240 [ 826.704646] __msan_chain_origin+0x6d/0xb0 [ 826.708875] __save_stack_trace+0x8be/0xc60 [ 826.713189] save_stack_trace+0xc6/0x110 [ 826.717241] kmsan_internal_chain_origin+0x136/0x240 [ 826.722336] kmsan_memcpy_origins+0x13d/0x190 [ 826.726822] __msan_memcpy+0x6f/0x80 [ 826.730545] pskb_expand_head+0x436/0x1d20 [ 826.734775] gre_tap_xmit+0x4e3/0x910 [ 826.738572] dev_hard_start_xmit+0x6dc/0xde0 [ 826.742974] sch_direct_xmit+0x59b/0x890 [ 826.747028] __qdisc_run+0x1bac/0x3600 [ 826.750908] __dev_queue_xmit+0x2131/0x3e00 [ 826.755221] dev_queue_xmit+0x4b/0x60 [ 826.759014] ip_finish_output2+0x136d/0x1560 [ 826.763412] ip_finish_output+0xd93/0x10f0 [ 826.767638] ip_mc_output+0xf25/0x10f0 [ 826.771514] ip_send_skb+0x178/0x370 [ 826.775227] udp_send_skb+0x1439/0x1920 [ 826.779192] udp_sendmsg+0x399a/0x4350 [ 826.783074] udpv6_sendmsg+0x123e/0x4960 [ 826.787140] inet_sendmsg+0x4e9/0x800 [ 826.790941] ___sys_sendmsg+0xe3b/0x1240 [ 826.794994] __sys_sendmmsg+0x56b/0xa90 [ 826.798956] __se_sys_sendmmsg+0xbd/0xe0 [ 826.803009] __x64_sys_sendmmsg+0x56/0x70 [ 826.807151] do_syscall_64+0xcf/0x110 [ 826.810944] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 826.816117] [ 826.817733] Local variable description: ----__ai_n2.i.i.i.i@kfree [ 826.823948] Variable was created at: [ 826.827658] kfree+0x12a/0x2fb0 [ 826.830932] skb_release_data+0xbcb/0xc90 04:50:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:50:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:50:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0xb}) 04:50:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 04:50:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x181, 0x307) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 826.960533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 827.062769] input: syz1 as /devices/virtual/input/input39 [ 827.092047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 827.110224] input: syz1 as /devices/virtual/input/input40 04:50:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) read(r0, &(0x7f00000001c0)=""/39, 0x7df9) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3af) 04:50:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 04:50:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc02, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:50:49 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad", 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8bcbacd52c76fbed9d534dfb5df34004ed295724d60c1b1c65d4ddd1d1759f7584a61", 0x53, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="0f060f01c9450f01c90f3566baa000b007eec744240085000000c74424021895c5b2c7442406000000000f011c2466baf80cb85e047280ef66bafc0c66b8955666ef460f00d7660ff19c9806000000c441b9d9649900", 0x56}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) [ 827.760874] input: syz1 as /devices/virtual/input/input41 04:50:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) read(r0, &(0x7f00000001c0)=""/39, 0x7df9) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3af) 04:50:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0x2c6, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0xc) 04:50:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) read(r0, &(0x7f00000001c0)=""/39, 0x7df9) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3af) 04:50:51 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad", 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8bcbacd52c76fbed9d534dfb5df34004ed295724d60c1b1c65d4ddd1d1759f7584a61", 0x53, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="0f060f01c9450f01c90f3566baa000b007eec744240085000000c74424021895c5b2c7442406000000000f011c2466baf80cb85e047280ef66bafc0c66b8955666ef460f00d7660ff19c9806000000c441b9d9649900", 0x56}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) 04:50:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x181, 0x307) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 04:50:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 04:50:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0x2c6, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0xc) [ 829.304077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:50:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0x2c6, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0xc) 04:50:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) read(r0, &(0x7f00000001c0)=""/39, 0x7df9) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3af) 04:50:51 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad", 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8bcbacd52c76fbed9d534dfb5df34004ed295724d60c1b1c65d4ddd1d1759f7584a61", 0x53, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="0f060f01c9450f01c90f3566baa000b007eec744240085000000c74424021895c5b2c7442406000000000f011c2466baf80cb85e047280ef66bafc0c66b8955666ef460f00d7660ff19c9806000000c441b9d9649900", 0x56}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) 04:50:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) unshare(0x400) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 04:50:52 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad", 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8bcbacd52c76fbed9d534dfb5df34004ed295724d60c1b1c65d4ddd1d1759f7584a61", 0x53, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="0f060f01c9450f01c90f3566baa000b007eec744240085000000c74424021895c5b2c7442406000000000f011c2466baf80cb85e047280ef66bafc0c66b8955666ef460f00d7660ff19c9806000000c441b9d9649900", 0x56}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) [ 831.016719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:50:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x181, 0x307) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 04:50:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0x2c6, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0xc) 04:50:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:53 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) unshare(0x400) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 831.364512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:50:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) [ 831.519527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.781527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 04:50:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:55 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) unshare(0x400) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 04:50:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 04:50:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 04:50:55 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) unshare(0x400) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 833.996616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 834.071101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 834.102416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:50:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 04:50:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) [ 834.517657] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 04:50:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 04:50:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) setrlimit(0x7, &(0x7f0000000000)) accept(r0, &(0x7f00000014c0)=@can, &(0x7f0000000240)=0x80) 04:50:58 executing program 2: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) [ 836.498222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 04:50:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) setrlimit(0x7, &(0x7f0000000000)) accept(r0, &(0x7f00000014c0)=@can, &(0x7f0000000240)=0x80) 04:50:58 executing program 2: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:58 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) setrlimit(0x7, &(0x7f0000000000)) accept(r0, &(0x7f00000014c0)=@can, &(0x7f0000000240)=0x80) 04:50:59 executing program 2: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) setrlimit(0x7, &(0x7f0000000000)) accept(r0, &(0x7f00000014c0)=@can, &(0x7f0000000240)=0x80) 04:50:59 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:59 executing program 2: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:50:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xff, 0x322) sendto$inet6(r0, &(0x7f0000000100)="0401320000c000ddb846000100005bc202938207d903fcbe398d5375c5f73f2e5506dc5712f29513f06f8f65eb7cdb75effdaba16f597756e195000062e07dc94cbddcb938a0589d44e3c99c99447870", 0x50, 0x0, &(0x7f00000000c0)={0xa, 0x100200000800, 0x8000000000005, @mcast2}, 0x1c) 04:50:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:50:59 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000000)='trusted\\selinux\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 04:51:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xff, 0x322) sendto$inet6(r0, &(0x7f0000000100)="0401320000c000ddb846000100005bc202938207d903fcbe398d5375c5f73f2e5506dc5712f29513f06f8f65eb7cdb75effdaba16f597756e195000062e07dc94cbddcb938a0589d44e3c99c99447870", 0x50, 0x0, &(0x7f00000000c0)={0xa, 0x100200000800, 0x8000000000005, @mcast2}, 0x1c) 04:51:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8001, 0x4) 04:51:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 04:51:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, 0x14) rt_sigsuspend(&(0x7f0000000180), 0x8) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 04:51:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xff, 0x322) sendto$inet6(r0, &(0x7f0000000100)="0401320000c000ddb846000100005bc202938207d903fcbe398d5375c5f73f2e5506dc5712f29513f06f8f65eb7cdb75effdaba16f597756e195000062e07dc94cbddcb938a0589d44e3c99c99447870", 0x50, 0x0, &(0x7f00000000c0)={0xa, 0x100200000800, 0x8000000000005, @mcast2}, 0x1c) 04:51:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8001, 0x4) 04:51:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 04:51:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3f00) 04:51:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xff, 0x322) sendto$inet6(r0, &(0x7f0000000100)="0401320000c000ddb846000100005bc202938207d903fcbe398d5375c5f73f2e5506dc5712f29513f06f8f65eb7cdb75effdaba16f597756e195000062e07dc94cbddcb938a0589d44e3c99c99447870", 0x50, 0x0, &(0x7f00000000c0)={0xa, 0x100200000800, 0x8000000000005, @mcast2}, 0x1c) 04:51:01 executing program 3: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8001, 0x4) 04:51:01 executing program 3: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 04:51:01 executing program 4: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:01 executing program 3: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:01 executing program 4: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 04:51:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8001, 0x4) [ 839.807405] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 04:51:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 04:51:02 executing program 3: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:02 executing program 4: creat(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x2040500, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:51:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3f00) 04:51:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 04:51:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:02 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 840.363381] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 04:51:02 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x400000000f44c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:51:02 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 04:51:02 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:51:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:02 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x400000000f44c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 840.867294] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 04:51:03 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 841.309883] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 04:51:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3f00) 04:51:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:51:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x400000000f44c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:51:03 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:03 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x400000000f44c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:51:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:51:03 executing program 1: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:04 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3f00) 04:51:04 executing program 3: clock_settime(0xfffffffffffffff2, &(0x7f0000000100)={0x0, 0x989680}) 04:51:04 executing program 1: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:04 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 04:51:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:05 executing program 1: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 04:51:05 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:05 executing program 4: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 843.254521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 04:51:05 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) preadv(r0, &(0x7f0000003580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0) 04:51:05 executing program 1: r0 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000119777dd7911b3f1f205cff03f8d236fdc2b677f"], 0x28}, 0x0) [ 843.476858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000000), 0x4) 04:51:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 04:51:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 04:51:05 executing program 1: r0 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000119777dd7911b3f1f205cff03f8d236fdc2b677f"], 0x28}, 0x0) 04:51:06 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:06 executing program 1: r0 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000119777dd7911b3f1f205cff03f8d236fdc2b677f"], 0x28}, 0x0) 04:51:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000000), 0x4) 04:51:07 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:07 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 04:51:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000000), 0x4) 04:51:07 executing program 1: r0 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000119777dd7911b3f1f205cff03f8d236fdc2b677f"], 0x28}, 0x0) 04:51:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 04:51:07 executing program 2: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) [ 845.472340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:07 executing program 1: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000000), 0x4) 04:51:07 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) [ 845.602687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.682590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.767350] IPv6: ADDRCONF(NETDEV_UP): tap0: link is not ready [ 845.854782] IPv6: ADDRCONF(NETDEV_UP): tap1: link is not ready [ 845.975613] IPv6: ADDRCONF(NETDEV_UP): tap2: link is not ready 04:51:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 846.130602] IPv6: ADDRCONF(NETDEV_UP): tap3: link is not ready 04:51:08 executing program 4: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:10 executing program 4: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 04:51:10 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:10 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:10 executing program 2: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) [ 848.351140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:10 executing program 1: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) [ 848.476942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:10 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) 04:51:10 executing program 4: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 04:51:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='system\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x20000102000007) 04:51:11 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) 04:51:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) 04:51:11 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) [ 850.602469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:12 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='system\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x20000102000007) 04:51:12 executing program 2: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:12 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) 04:51:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) [ 851.032955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 851.075144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:13 executing program 1: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 04:51:13 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9}, {}], 0x2) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 04:51:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='system\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x20000102000007) 04:51:13 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xff7fffffff7fffff) fallocate(r0, 0x0, 0x0, 0x1000f4) ftruncate(r0, 0x0) 04:51:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='system\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x20000102000007) 04:51:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:14 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x3, @output}) [ 853.516028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:51:15 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9}, {}], 0x2) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 04:51:15 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x3, @output}) 04:51:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000d3, &(0x7f0000000080), 0x4) 04:51:16 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x3, @output}) 04:51:16 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9}, {}], 0x2) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 04:51:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000d3, &(0x7f0000000080), 0x4) 04:51:16 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x3, @output}) 04:51:16 executing program 4: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000d3, &(0x7f0000000080), 0x4) 04:51:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:16 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9}, {}], 0x2) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 04:51:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000d3, &(0x7f0000000080), 0x4) 04:51:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000240)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) 04:51:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000240)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) 04:51:17 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000240)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) 04:51:17 executing program 4: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:18 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xff5c) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) 04:51:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000240)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) 04:51:18 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:18 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:19 executing program 4: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:19 executing program 0: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:19 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:19 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:19 executing program 3: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat$cgroup(r0, &(0x7f00000000c0)="302d0a3fd0", 0x1ff) 04:51:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:19 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x1, 0x622d4996) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) 04:51:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat$cgroup(r0, &(0x7f00000000c0)="302d0a3fd0", 0x1ff) 04:51:20 executing program 4: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:20 executing program 0: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat$cgroup(r0, &(0x7f00000000c0)="302d0a3fd0", 0x1ff) 04:51:20 executing program 3: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat$cgroup(r0, &(0x7f00000000c0)="302d0a3fd0", 0x1ff) 04:51:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:21 executing program 0: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) shutdown(r0, 0x0) 04:51:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:21 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x3}) 04:51:22 executing program 3: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x7fffffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 04:51:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:22 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:22 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:22 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x3}) 04:51:22 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:22 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x3}) 04:51:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:22 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:23 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x3}) 04:51:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:23 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:23 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:23 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = getpgrp(0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 04:51:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)) 04:51:24 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "1df105fc45e3188a3d026de1a9c8f3de55df5841185e7477c64ebfce9467d3a90cba9f1cab65b8321e4c69f9"}) 04:51:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)) 04:51:24 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "1df105fc45e3188a3d026de1a9c8f3de55df5841185e7477c64ebfce9467d3a90cba9f1cab65b8321e4c69f9"}) 04:51:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)) 04:51:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 04:51:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)) 04:51:25 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "1df105fc45e3188a3d026de1a9c8f3de55df5841185e7477c64ebfce9467d3a90cba9f1cab65b8321e4c69f9"}) 04:51:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:25 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 04:51:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 04:51:25 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "1df105fc45e3188a3d026de1a9c8f3de55df5841185e7477c64ebfce9467d3a90cba9f1cab65b8321e4c69f9"}) 04:51:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:25 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 04:51:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 04:51:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 04:51:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)) 04:51:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:26 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 04:51:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:26 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 04:51:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 04:51:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)) 04:51:27 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[]}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 04:51:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)) 04:51:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 04:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x24}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:51:28 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f00000013c0), &(0x7f0000001400)=""/53, 0x35, &(0x7f0000001500)={&(0x7f0000001440)={'crct10dif\x00'}, &(0x7f0000001480)="ebaae2b221afeeb2bde2e740e801222661516f2daa844252eb9dc6a2e720766912974423a7d976fe6f2c55a5f22301e60e8d010de88e4c7444e19540518804a5e4", 0x41}) 04:51:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)) 04:51:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:28 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f00000013c0), &(0x7f0000001400)=""/53, 0x35, &(0x7f0000001500)={&(0x7f0000001440)={'crct10dif\x00'}, &(0x7f0000001480)="ebaae2b221afeeb2bde2e740e801222661516f2daa844252eb9dc6a2e720766912974423a7d976fe6f2c55a5f22301e60e8d010de88e4c7444e19540518804a5e4", 0x41}) 04:51:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x24}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:29 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f00000013c0), &(0x7f0000001400)=""/53, 0x35, &(0x7f0000001500)={&(0x7f0000001440)={'crct10dif\x00'}, &(0x7f0000001480)="ebaae2b221afeeb2bde2e740e801222661516f2daa844252eb9dc6a2e720766912974423a7d976fe6f2c55a5f22301e60e8d010de88e4c7444e19540518804a5e4", 0x41}) 04:51:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0xf0f024}) close(r0) 04:51:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x24}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:51:30 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:30 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:30 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f00000013c0), &(0x7f0000001400)=""/53, 0x35, &(0x7f0000001500)={&(0x7f0000001440)={'crct10dif\x00'}, &(0x7f0000001480)="ebaae2b221afeeb2bde2e740e801222661516f2daa844252eb9dc6a2e720766912974423a7d976fe6f2c55a5f22301e60e8d010de88e4c7444e19540518804a5e4", 0x41}) 04:51:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x24}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:51:31 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:32 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:32 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/90) 04:51:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 04:51:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/90) [ 871.825597] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 871.825597] |0öaW©j®? β) failed (rc=-13) 04:51:33 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_ENTRY(r1, &(0x7f0000001280)={0x90}, 0xfffffcfb) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 871.942693] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) [ 872.044284] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 872.044284] |0öaW©j®? β) failed (rc=-13) [ 872.142845] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 04:51:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/90) 04:51:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) [ 872.672034] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 872.672034] |0öaW©j®? β) failed (rc=-13) 04:51:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) [ 873.103581] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 873.103581] |0öaW©j®? β) failed (rc=-13) 04:51:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/90) [ 873.283204] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 04:51:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) [ 873.953572] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 873.953572] |0öaW©j®? β) failed (rc=-13) [ 874.103027] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 04:51:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 04:51:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl(r0, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r0, &(0x7f00000092c0), 0x8ba, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/12, 0xc, 0x1, 0x0, 0x0) 04:51:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000e046c1440000000005000600000000000a0000000000000000000000000000005500000000000009000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff02000000000000000000000000004100f5ffffff000000"], 0x98}}, 0x0) [ 874.802056] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈûG%ºÖ³w€fùѬŠW:B÷ [ 874.802056] |0öaW©j®? β) failed (rc=-13) 04:51:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) [ 874.943541] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 04:51:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)) 04:51:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x10000000000081, 0x0, [0x3]}) 04:51:37 executing program 0: unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 04:51:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000003480)="0a5c2d0240316285717070") unshare(0x20400) r1 = socket(0x10, 0x802, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 04:51:37 executing program 0: unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 04:51:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000e046c1440000000005000600000000000a0000000000000000000000000000005500000000000009000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff02000000000000000000000000004100f5ffffff000000"], 0x98}}, 0x0) 04:51:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000003c0)={0x0, 0x7, @ioapic}) 04:51:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)) 04:51:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 04:51:38 executing program 0: unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 04:51:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000e046c1440000000005000600000000000a0000000000000000000000000000005500000000000009000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff02000000000000000000000000004100f5ffffff000000"], 0x98}}, 0x0) 04:51:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000003c0)={0x0, 0x7, @ioapic}) 04:51:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000003480)="0a5c2d0240316285717070") unshare(0x20400) r1 = socket(0x10, 0x802, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 04:51:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000e046c1440000000005000600000000000a0000000000000000000000000000005500000000000009000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff02000000000000000000000000004100f5ffffff000000"], 0x98}}, 0x0) 04:51:39 executing program 0: unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 04:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000003c0)={0x0, 0x7, @ioapic}) 04:51:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 04:51:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)) 04:51:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 04:51:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000003480)="0a5c2d0240316285717070") unshare(0x20400) r1 = socket(0x10, 0x802, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 04:51:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a452d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)) 04:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000003c0)={0x0, 0x7, @ioapic}) 04:51:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x3}}}, &(0x7f0000000180)=0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:51:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)) 04:51:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a452d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)) 04:51:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 04:51:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000003480)="0a5c2d0240316285717070") unshare(0x20400) r1 = socket(0x10, 0x802, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 04:51:40 executing program 5: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xc}, 0x1c) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x2a5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:51:40 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a452d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)) 04:51:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x3}}}, &(0x7f0000000180)=0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:51:41 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6272696467653000000100"}) 04:51:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000005e0007081dfffd940101830020200a000900000006000000600000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 879.039649] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.046857] bridge0: port 1(bridge_slave_0) entered disabled state 04:51:41 executing program 5: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xc}, 0x1c) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x2a5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:51:41 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a452d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)) 04:51:41 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:41 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x3}}}, &(0x7f0000000180)=0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:51:42 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:42 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:42 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) dup2(r0, r1) 04:51:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3}) [ 881.186753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 04:51:43 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6272696467653000000100"}) 04:51:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3}) 04:51:43 executing program 5: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xc}, 0x1c) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x2a5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:51:43 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0xfdf5}], 0x1) 04:51:43 executing program 2: close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='teql0\x00'}, 0x10) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'teql0\x00'}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0xef, &(0x7f0000000580), &(0x7f0000000640)=""/239}, 0x28) connect(0xffffffffffffffff, &(0x7f00000031c0)=@hci, 0x236) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) creat(&(0x7f0000001140)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 04:51:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x3}}}, &(0x7f0000000180)=0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:51:43 executing program 5: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xc}, 0x1c) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x2a5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:51:43 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6272696467653000000100"}) 04:51:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3}) 04:51:44 executing program 2: close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='teql0\x00'}, 0x10) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'teql0\x00'}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0xef, &(0x7f0000000580), &(0x7f0000000640)=""/239}, 0x28) connect(0xffffffffffffffff, &(0x7f00000031c0)=@hci, 0x236) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) creat(&(0x7f0000001140)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 04:51:44 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6272696467653000000100"}) 04:51:44 executing program 5: unshare(0x20400) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 04:51:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000a0c0900fcff0000040e05a5", 0x58}], 0x1) [ 882.838882] vivid-000: kernel_thread() failed 04:51:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3}) 04:51:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000a0c0900fcff0000040e05a5", 0x58}], 0x1) 04:51:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 04:51:45 executing program 2: close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='teql0\x00'}, 0x10) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'teql0\x00'}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0xef, &(0x7f0000000580), &(0x7f0000000640)=""/239}, 0x28) connect(0xffffffffffffffff, &(0x7f00000031c0)=@hci, 0x236) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) creat(&(0x7f0000001140)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 04:51:45 executing program 5: unshare(0x20400) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) [ 883.380466] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:51:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="220000002000070700be0000090007010300001e00003c0000fb0404050016008000", 0x22) 04:51:45 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x5}) 04:51:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000a0c0900fcff0000040e05a5", 0x58}], 0x1) 04:51:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="220000002000070700be0000090007010300001e00003c0000fb0404050016008000", 0x22) 04:51:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 04:51:46 executing program 5: unshare(0x20400) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 04:51:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x5}) 04:51:46 executing program 2: close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='teql0\x00'}, 0x10) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'teql0\x00'}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0xef, &(0x7f0000000580), &(0x7f0000000640)=""/239}, 0x28) connect(0xffffffffffffffff, &(0x7f00000031c0)=@hci, 0x236) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) creat(&(0x7f0000001140)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 04:51:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000a0c0900fcff0000040e05a5", 0x58}], 0x1) [ 884.069460] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:51:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 04:51:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x5}) [ 884.453261] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:51:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="220000002000070700be0000090007010300001e00003c0000fb0404050016008000", 0x22) 04:51:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:46 executing program 5: unshare(0x20400) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 04:51:46 executing program 4: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)=0x20a) 04:51:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 04:51:47 executing program 4: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)=0x20a) 04:51:47 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x5}) 04:51:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="220000002000070700be0000090007010300001e00003c0000fb0404050016008000", 0x22) [ 885.120028] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:51:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x38dd97d9307dc125}, 0x98) 04:51:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"32bb1fe0e78ab438029abbbec3546ccdb471172c59bdd1087446ed467b6ea3f6de0dc7b83a20499c42dbeda4e10ea25326f39e4aec9946b994ec151d7e6c52695e368be028ef2e71b5678902130d1fcf59d6e846f467bc0f896ae5ccae2d71b0856c86dc9633bcdfe4ea8d4e903d983718655386f67f7b3377248bc636db3e7f7d4171ae9901dd38830d591f442dd8eb05f51b700bc08d5e2f55043d441ae23100c1028394c33f64b6dfcff796fe8605eb77979cb90e6272337981269a13aa3c81a253278d8a4e258971e6c5eaff3ca3b5951b2f83c9744993896fa5c26aa7fb3517ab9159817f1b5a2671502c138ebb1d13aa384dec766859acf3c6a7278717bf8f2c38700d4c57329b2c637fd97c3479052c5477cdeffe2de006a5dfec8245fa673d9c973136acf05e1b31dcf9db9d738b71cc87e84fdb0474bbbff7769f85a355ad7a424b014a736fcbc3d2494a2e8d71d1f732c21e3a8867a328b5c1aef16ae137114870991fa4e7055f0bd991cad9deea897435b3ca86286d776978e28e32c10f828a4a16b6192aa2649355ebf8eb5dd7a3cd555a7d8a079339515e4318d096ffe35468b27bdcf254bafa371d23b9608a3c5a8da5eeb2fcf86f682df0f31d6d2eed5f1e648c89ce05ca542a74b17be61517e4d280cd31cdc760b83dcf5128ef042e1c2b2704156967f1780abe6ae2263081bda205d0db3ed38ade70b1b81e3654a8d6a4add8a5b88dd0108a1004df4e2b66894aa32d5ee64cec22c7749a95e45fe944627fd89fb8e525ee8a65a56625e4a32d40475179552dbe699cda25c5b07dfc1bbf7c36a279b47e3732de035e4c4831667cf48ad220bdb342c4167deaad51b982e6fb21d44326667d228f6263820d91cf19780d66922d80ceaecf6fd8a19724aabdd1f6a574cd4e860ccb0882d10bfb1cd003aaa32f4820d1e5be492e763dff92fcc70fe4140aa646702e9ceeb8dcf44b10773be5c2bf02e76ce7a28f3f3c216f176d89d83f4b88ad0064095871f3256cda52dcb114953ca593a9f1f3ed95ae18c20a03da8bed0b8d9129d546436010eea98a57591aa7ac0c5b3cbe2ce4aac444fc06bbafab36698965769d30b6d30db63917e05127df28e3bac691a73376b9f0d76f2c9e45ab37eb5f6b2a30b013e2b2b9ac13610e5ea88f96859bbd11b63d24ac5ba278eaa65ad1f757f7386fe8cae89127d6e395405ba5be499e928b85b93fb3d42625ff833d8dbef98f831601c88671e42801dae80653ff6789c9a01ea5c206c6686b82c3097aa94c42fb496d1e0df999d56a6034c4c526926e5e304c4e471d1a761a6ff31a6a1b134cba006e70c2b1364f77883cbf68f461997d26ca2465e42f1c22ea21cadb7936c0817ac9b15623e1f3b145b7b4008f8f97ca68f47d6f82916c0653782891908c944fca906204733f950b6dc43e6ad1a9f9"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:47 executing program 4: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)=0x20a) 04:51:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0xfec3}}, 0x0) 04:51:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x38dd97d9307dc125}, 0x98) 04:51:48 executing program 4: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)=0x20a) 04:51:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"32bb1fe0e78ab438029abbbec3546ccdb471172c59bdd1087446ed467b6ea3f6de0dc7b83a20499c42dbeda4e10ea25326f39e4aec9946b994ec151d7e6c52695e368be028ef2e71b5678902130d1fcf59d6e846f467bc0f896ae5ccae2d71b0856c86dc9633bcdfe4ea8d4e903d983718655386f67f7b3377248bc636db3e7f7d4171ae9901dd38830d591f442dd8eb05f51b700bc08d5e2f55043d441ae23100c1028394c33f64b6dfcff796fe8605eb77979cb90e6272337981269a13aa3c81a253278d8a4e258971e6c5eaff3ca3b5951b2f83c9744993896fa5c26aa7fb3517ab9159817f1b5a2671502c138ebb1d13aa384dec766859acf3c6a7278717bf8f2c38700d4c57329b2c637fd97c3479052c5477cdeffe2de006a5dfec8245fa673d9c973136acf05e1b31dcf9db9d738b71cc87e84fdb0474bbbff7769f85a355ad7a424b014a736fcbc3d2494a2e8d71d1f732c21e3a8867a328b5c1aef16ae137114870991fa4e7055f0bd991cad9deea897435b3ca86286d776978e28e32c10f828a4a16b6192aa2649355ebf8eb5dd7a3cd555a7d8a079339515e4318d096ffe35468b27bdcf254bafa371d23b9608a3c5a8da5eeb2fcf86f682df0f31d6d2eed5f1e648c89ce05ca542a74b17be61517e4d280cd31cdc760b83dcf5128ef042e1c2b2704156967f1780abe6ae2263081bda205d0db3ed38ade70b1b81e3654a8d6a4add8a5b88dd0108a1004df4e2b66894aa32d5ee64cec22c7749a95e45fe944627fd89fb8e525ee8a65a56625e4a32d40475179552dbe699cda25c5b07dfc1bbf7c36a279b47e3732de035e4c4831667cf48ad220bdb342c4167deaad51b982e6fb21d44326667d228f6263820d91cf19780d66922d80ceaecf6fd8a19724aabdd1f6a574cd4e860ccb0882d10bfb1cd003aaa32f4820d1e5be492e763dff92fcc70fe4140aa646702e9ceeb8dcf44b10773be5c2bf02e76ce7a28f3f3c216f176d89d83f4b88ad0064095871f3256cda52dcb114953ca593a9f1f3ed95ae18c20a03da8bed0b8d9129d546436010eea98a57591aa7ac0c5b3cbe2ce4aac444fc06bbafab36698965769d30b6d30db63917e05127df28e3bac691a73376b9f0d76f2c9e45ab37eb5f6b2a30b013e2b2b9ac13610e5ea88f96859bbd11b63d24ac5ba278eaa65ad1f757f7386fe8cae89127d6e395405ba5be499e928b85b93fb3d42625ff833d8dbef98f831601c88671e42801dae80653ff6789c9a01ea5c206c6686b82c3097aa94c42fb496d1e0df999d56a6034c4c526926e5e304c4e471d1a761a6ff31a6a1b134cba006e70c2b1364f77883cbf68f461997d26ca2465e42f1c22ea21cadb7936c0817ac9b15623e1f3b145b7b4008f8f97ca68f47d6f82916c0653782891908c944fca906204733f950b6dc43e6ad1a9f9"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0xfec3}}, 0x0) 04:51:49 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x38dd97d9307dc125}, 0x98) 04:51:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/18, 0x12) 04:51:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0xfec3}}, 0x0) 04:51:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"32bb1fe0e78ab438029abbbec3546ccdb471172c59bdd1087446ed467b6ea3f6de0dc7b83a20499c42dbeda4e10ea25326f39e4aec9946b994ec151d7e6c52695e368be028ef2e71b5678902130d1fcf59d6e846f467bc0f896ae5ccae2d71b0856c86dc9633bcdfe4ea8d4e903d983718655386f67f7b3377248bc636db3e7f7d4171ae9901dd38830d591f442dd8eb05f51b700bc08d5e2f55043d441ae23100c1028394c33f64b6dfcff796fe8605eb77979cb90e6272337981269a13aa3c81a253278d8a4e258971e6c5eaff3ca3b5951b2f83c9744993896fa5c26aa7fb3517ab9159817f1b5a2671502c138ebb1d13aa384dec766859acf3c6a7278717bf8f2c38700d4c57329b2c637fd97c3479052c5477cdeffe2de006a5dfec8245fa673d9c973136acf05e1b31dcf9db9d738b71cc87e84fdb0474bbbff7769f85a355ad7a424b014a736fcbc3d2494a2e8d71d1f732c21e3a8867a328b5c1aef16ae137114870991fa4e7055f0bd991cad9deea897435b3ca86286d776978e28e32c10f828a4a16b6192aa2649355ebf8eb5dd7a3cd555a7d8a079339515e4318d096ffe35468b27bdcf254bafa371d23b9608a3c5a8da5eeb2fcf86f682df0f31d6d2eed5f1e648c89ce05ca542a74b17be61517e4d280cd31cdc760b83dcf5128ef042e1c2b2704156967f1780abe6ae2263081bda205d0db3ed38ade70b1b81e3654a8d6a4add8a5b88dd0108a1004df4e2b66894aa32d5ee64cec22c7749a95e45fe944627fd89fb8e525ee8a65a56625e4a32d40475179552dbe699cda25c5b07dfc1bbf7c36a279b47e3732de035e4c4831667cf48ad220bdb342c4167deaad51b982e6fb21d44326667d228f6263820d91cf19780d66922d80ceaecf6fd8a19724aabdd1f6a574cd4e860ccb0882d10bfb1cd003aaa32f4820d1e5be492e763dff92fcc70fe4140aa646702e9ceeb8dcf44b10773be5c2bf02e76ce7a28f3f3c216f176d89d83f4b88ad0064095871f3256cda52dcb114953ca593a9f1f3ed95ae18c20a03da8bed0b8d9129d546436010eea98a57591aa7ac0c5b3cbe2ce4aac444fc06bbafab36698965769d30b6d30db63917e05127df28e3bac691a73376b9f0d76f2c9e45ab37eb5f6b2a30b013e2b2b9ac13610e5ea88f96859bbd11b63d24ac5ba278eaa65ad1f757f7386fe8cae89127d6e395405ba5be499e928b85b93fb3d42625ff833d8dbef98f831601c88671e42801dae80653ff6789c9a01ea5c206c6686b82c3097aa94c42fb496d1e0df999d56a6034c4c526926e5e304c4e471d1a761a6ff31a6a1b134cba006e70c2b1364f77883cbf68f461997d26ca2465e42f1c22ea21cadb7936c0817ac9b15623e1f3b145b7b4008f8f97ca68f47d6f82916c0653782891908c944fca906204733f950b6dc43e6ad1a9f9"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"32bb1fe0e78ab438029abbbec3546ccdb471172c59bdd1087446ed467b6ea3f6de0dc7b83a20499c42dbeda4e10ea25326f39e4aec9946b994ec151d7e6c52695e368be028ef2e71b5678902130d1fcf59d6e846f467bc0f896ae5ccae2d71b0856c86dc9633bcdfe4ea8d4e903d983718655386f67f7b3377248bc636db3e7f7d4171ae9901dd38830d591f442dd8eb05f51b700bc08d5e2f55043d441ae23100c1028394c33f64b6dfcff796fe8605eb77979cb90e6272337981269a13aa3c81a253278d8a4e258971e6c5eaff3ca3b5951b2f83c9744993896fa5c26aa7fb3517ab9159817f1b5a2671502c138ebb1d13aa384dec766859acf3c6a7278717bf8f2c38700d4c57329b2c637fd97c3479052c5477cdeffe2de006a5dfec8245fa673d9c973136acf05e1b31dcf9db9d738b71cc87e84fdb0474bbbff7769f85a355ad7a424b014a736fcbc3d2494a2e8d71d1f732c21e3a8867a328b5c1aef16ae137114870991fa4e7055f0bd991cad9deea897435b3ca86286d776978e28e32c10f828a4a16b6192aa2649355ebf8eb5dd7a3cd555a7d8a079339515e4318d096ffe35468b27bdcf254bafa371d23b9608a3c5a8da5eeb2fcf86f682df0f31d6d2eed5f1e648c89ce05ca542a74b17be61517e4d280cd31cdc760b83dcf5128ef042e1c2b2704156967f1780abe6ae2263081bda205d0db3ed38ade70b1b81e3654a8d6a4add8a5b88dd0108a1004df4e2b66894aa32d5ee64cec22c7749a95e45fe944627fd89fb8e525ee8a65a56625e4a32d40475179552dbe699cda25c5b07dfc1bbf7c36a279b47e3732de035e4c4831667cf48ad220bdb342c4167deaad51b982e6fb21d44326667d228f6263820d91cf19780d66922d80ceaecf6fd8a19724aabdd1f6a574cd4e860ccb0882d10bfb1cd003aaa32f4820d1e5be492e763dff92fcc70fe4140aa646702e9ceeb8dcf44b10773be5c2bf02e76ce7a28f3f3c216f176d89d83f4b88ad0064095871f3256cda52dcb114953ca593a9f1f3ed95ae18c20a03da8bed0b8d9129d546436010eea98a57591aa7ac0c5b3cbe2ce4aac444fc06bbafab36698965769d30b6d30db63917e05127df28e3bac691a73376b9f0d76f2c9e45ab37eb5f6b2a30b013e2b2b9ac13610e5ea88f96859bbd11b63d24ac5ba278eaa65ad1f757f7386fe8cae89127d6e395405ba5be499e928b85b93fb3d42625ff833d8dbef98f831601c88671e42801dae80653ff6789c9a01ea5c206c6686b82c3097aa94c42fb496d1e0df999d56a6034c4c526926e5e304c4e471d1a761a6ff31a6a1b134cba006e70c2b1364f77883cbf68f461997d26ca2465e42f1c22ea21cadb7936c0817ac9b15623e1f3b145b7b4008f8f97ca68f47d6f82916c0653782891908c944fca906204733f950b6dc43e6ad1a9f9"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x38dd97d9307dc125}, 0x98) 04:51:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0xfec3}}, 0x0) 04:51:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/18, 0x12) 04:51:53 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 04:51:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4000000) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 04:51:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/18, 0x12) 04:51:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/18, 0x12) 04:51:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4000000) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 04:51:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0x5c, 0x8, 0x0, 0x400, 0x8}}, 0xa) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000580)={0xe, 0x1, 0x20, 0x1}, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000900)={"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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r3, 0x220, 0x3f1e, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}]}, 0x64}}, 0x800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'tunl0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3906145d8dc556bae92245070000005fec0a0469123a7d1c3550d6011655f9b5862b587ba826ce7b739a1180216cca93d49e119024a0e13e53a1bb8cedd7e5a471feb00b8ba4d915c3947ac5d9bf90d506058ee44fc7b0ddc58985fd197ebd11fa4e3403953887e2322e14a68ee3476df60695f0623c678b308715b114f2729deed7e0179c21c37fe0e25beab5101a9e63cd99b916988d78b76f971987ced6fbe953141f87528c635102eb15685202e35b0474f5902bc3ca8c89cfac8894a8ec5b34075457236dc329a0693f5764f3991cfa5edf6208172f"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0xfffffffffffeffff, 0x8, 0x8, 0x8}, 0x10) 04:51:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 04:51:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4000000) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 04:51:56 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f00000000c0), 0x4) r1 = dup2(r0, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) [ 894.478054] binder: 29210:29213 ioctl c018620b 706000 returned -14 04:51:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f00000000c0), 0x4) r1 = dup2(r0, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 04:51:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 04:51:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f00000000c0), 0x4) r1 = dup2(r0, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 04:51:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4000000) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 04:51:57 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f00000000c0), 0x4) r1 = dup2(r0, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 04:51:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:57 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 04:51:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 896.012500] binder: 29250:29252 ioctl c018620b 706000 returned -14 [ 896.040887] binder: BINDER_SET_CONTEXT_MGR already set [ 896.046516] binder: 29243:29251 ioctl 40046207 0 returned -16 [ 896.057515] binder: BINDER_SET_CONTEXT_MGR already set [ 896.063200] binder: 29245:29249 ioctl 40046207 0 returned -16 [ 896.086298] binder: 29245:29249 ioctl c018620b 706000 returned -14 [ 896.113537] binder: 29243:29251 ioctl c018620b 706000 returned -14 [ 896.151196] binder: 29254:29256 ioctl c018620b 706000 returned -14 04:51:58 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 896.584182] binder: BINDER_SET_CONTEXT_MGR already set [ 896.589702] binder: 29265:29266 ioctl 40046207 0 returned -16 [ 896.601064] binder: 29263:29264 ioctl c018620b 706000 returned -14 [ 896.627511] binder: BINDER_SET_CONTEXT_MGR already set [ 896.633118] binder: 29261:29262 ioctl 40046207 0 returned -16 [ 896.644778] binder: 29265:29266 ioctl c018620b 706000 returned -14 [ 896.664831] binder: 29261:29262 ioctl c018620b 706000 returned -14 [ 896.705483] binder: 29269:29270 ioctl c018620b 706000 returned -14 [ 896.743608] binder: 29271:29273 ioctl c018620b 706000 returned -14 [ 896.806285] binder: 29274:29275 ioctl c018620b 706000 returned -14 04:51:58 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 897.143418] binder: 29283:29284 ioctl c018620b 706000 returned -14 [ 897.169901] binder: 29280:29285 ioctl c018620b 706000 returned -14 [ 897.178080] binder: BINDER_SET_CONTEXT_MGR already set [ 897.183626] binder: 29281:29282 ioctl 40046207 0 returned -16 04:51:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 897.234804] binder: 29281:29282 ioctl c018620b 706000 returned -14 04:51:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:51:59 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 897.446950] binder: 29291:29292 ioctl c018620b 706000 returned -14 04:51:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 897.519926] binder: BINDER_SET_CONTEXT_MGR already set [ 897.525736] binder: 29294:29296 ioctl 40046207 0 returned -16 [ 897.555775] binder: 29293:29295 ioctl c018620b 706000 returned -14 [ 897.604191] binder: 29294:29303 ioctl c018620b 706000 returned -14 [ 897.706720] binder: 29299:29301 ioctl c018620b 706000 returned -14 [ 897.738899] binder: BINDER_SET_CONTEXT_MGR already set [ 897.744533] binder: 29302:29304 ioctl 40046207 0 returned -16 04:51:59 executing program 1: pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") [ 897.779053] binder: 29302:29304 ioctl c018620b 706000 returned -14 [ 897.789059] binder: 29305:29306 ioctl c018620b 706000 returned -14 04:52:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:52:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") sendfile(r1, r1, &(0x7f00000001c0)=0x1fffffc, 0x100000010a0001fe) 04:52:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/19) 04:52:00 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:52:00 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) [ 898.254189] binder: 29317:29319 ioctl c018620b 706000 returned -14 [ 898.312502] binder: BINDER_SET_CONTEXT_MGR already set [ 898.318001] binder: 29320:29322 ioctl 40046207 0 returned -16 04:52:00 executing program 1: pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") [ 898.356417] binder: 29320:29322 ioctl c018620b 706000 returned -14 [ 898.476044] binder: 29328:29329 ioctl c018620b 706000 returned -14 04:52:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") sendfile(r1, r1, &(0x7f00000001c0)=0x1fffffc, 0x100000010a0001fe) 04:52:00 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e5eb3ed170e0495ef584f640d3eb652d46adef1924f3932e20db756485b61c4eaf0a73e9665e24c621716dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134909e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9ce4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf311168830ca3c186ad6156d571a273de9dc91c66b99d56f6932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67242246f7a23ebae0f8e8ceeeef172510f2d919df1418bb8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a6a3691a90fce305a6b09cb21b175ed2871209689493d5559d0fab0cc3f40beba9fd03564f7c2bfbda992f3e47a78fbb95a6edd9767a6be1127d35a0e56d00713d354e236a9812716a5616e5a1de6e394291fca181cad4fe994952d6aecd93adef4fe91a26cd9c5463709cf01bc872bdc3e9af523a9b18bbad2ff44a0a243b8c07d4b7eaa1dc1961275313e971b166c2543d728bc4bd258b527106cfdbd71f89fb4e3de06bc7f3bfab30dd"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:52:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/19) 04:52:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:00 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr}, 0x8001}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000840)="d279850d5e4df3886021a568f87f95b35d0afdaf1459a0a32cdd517187fbd357af476b4dc0fa700398f5cebd9e246099bcc26e5644da0ac90ef87bf5147f6038bcc658dc8c2d95772c255b2750ce2b27b61a9726b10fd6d996bb611b5f031082cbd4d6ad15399a475875e767c4f93dc4d5c414cb988210e12e96725ae663085c62eb59554abc656d59539f51e8b5829b8bb27ace5920a59b64d6ec6da62f919c7b7f374f088aae2e910b24a441fb5d9c26cf5c703857a06dc9cea198088803e240932af68fd872d96e9b8349f6670f96801a0ff1cb9a572e92c89c0f5353b34cfd1ee36690be42a53cfe05983a99756389e9bcd6c35019") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r8, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc018620b, 0x706000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 04:52:01 executing program 1: pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") [ 898.898858] binder: 29336:29338 ioctl c018620b 706000 returned -14 [ 898.987411] binder: 29344:29345 ioctl c018620b 706000 returned -14 04:52:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") sendfile(r1, r1, &(0x7f00000001c0)=0x1fffffc, 0x100000010a0001fe) 04:52:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000006, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000040)) 04:52:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/19) 04:52:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x9, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000080), 0x2}, 0x20) 04:52:01 executing program 1: pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") 04:52:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000006, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000040)) 04:52:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/19) 04:52:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") sendfile(r1, r1, &(0x7f00000001c0)=0x1fffffc, 0x100000010a0001fe) 04:52:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:02 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x3002, 0x0) close(r0) 04:52:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000006, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000040)) 04:52:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)="6e6574000000805f7479626c747300") exit(0x0) fstat(r0, &(0x7f0000000000)) 04:52:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000000), 0x4) 04:52:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:02 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x3002, 0x0) close(r0) 04:52:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000006, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000040)) 04:52:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000000), 0x4) 04:52:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 04:52:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000000), 0x4) 04:52:03 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x3002, 0x0) close(r0) 04:52:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x2000]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000100)={0x0, 0x80000001, 0x81, 0x1bf3, 0x3, 0x0, 0x3ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390200000007000100010039", 0x1f) 04:52:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)="6e6574000000805f7479626c747300") exit(0x0) fstat(r0, &(0x7f0000000000)) 04:52:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(r0, 0x3a, 0x1, &(0x7f0000000100)='i', 0x1) 04:52:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000000), 0x4) [ 901.585211] PF_BRIDGE: br_mdb_parse() with non-bridge [ 901.609801] PF_BRIDGE: br_mdb_parse() with non-bridge 04:52:03 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x3002, 0x0) close(r0) 04:52:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390200000007000100010039", 0x1f) 04:52:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) 04:52:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x2000]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000100)={0x0, 0x80000001, 0x81, 0x1bf3, 0x3, 0x0, 0x3ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(r0, 0x3a, 0x1, &(0x7f0000000100)='i', 0x1) [ 902.230883] PF_BRIDGE: br_mdb_parse() with non-bridge 04:52:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/28, 0xfffffc4f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x99}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 04:52:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) fcntl$dupfd(r0, 0x0, r0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000300), 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 04:52:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390200000007000100010039", 0x1f) 04:52:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(r0, 0x3a, 0x1, &(0x7f0000000100)='i', 0x1) [ 902.739177] PF_BRIDGE: br_mdb_parse() with non-bridge 04:52:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)="6e6574000000805f7479626c747300") exit(0x0) fstat(r0, &(0x7f0000000000)) 04:52:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) fcntl$dupfd(r0, 0x0, r0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000300), 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 04:52:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(r0, 0x3a, 0x1, &(0x7f0000000100)='i', 0x1) 04:52:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/28, 0xfffffc4f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x99}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 04:52:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390200000007000100010039", 0x1f) 04:52:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x2000]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000100)={0x0, 0x80000001, 0x81, 0x1bf3, 0x3, 0x0, 0x3ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:05 executing program 5: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000400)='./bus\x00', 0x2, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 903.298498] PF_BRIDGE: br_mdb_parse() with non-bridge 04:52:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) fcntl$dupfd(r0, 0x0, r0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000300), 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 04:52:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) 04:52:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/28, 0xfffffc4f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x99}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 04:52:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) fcntl$dupfd(r0, 0x0, r0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000300), 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 04:52:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)="6e6574000000805f7479626c747300") exit(0x0) fstat(r0, &(0x7f0000000000)) 04:52:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) 04:52:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/28, 0xfffffc4f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x99}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 04:52:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x8}]}}}]}, 0x44}}, 0x0) 04:52:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x2000]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000100)={0x0, 0x80000001, 0x81, 0x1bf3, 0x3, 0x0, 0x3ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) [ 904.614962] netlink: 'syz-executor4': attribute type 8 has an invalid length. 04:52:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 904.684531] netlink: 'syz-executor4': attribute type 8 has an invalid length. 04:52:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x8}]}}}]}, 0x44}}, 0x0) 04:52:07 executing program 1: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'eql\x00'}, 0x18) 04:52:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) [ 905.154490] netlink: 'syz-executor4': attribute type 8 has an invalid length. 04:52:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 04:52:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000000)) close(r0) 04:52:07 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x101}) 04:52:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x800000093c, 0x4) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x32, 0xc5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0x2c5}], 0x1) 04:52:07 executing program 1: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'eql\x00'}, 0x18) 04:52:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x8}]}}}]}, 0x44}}, 0x0) 04:52:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 905.810056] netlink: 'syz-executor4': attribute type 8 has an invalid length. 04:52:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x800000093c, 0x4) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x32, 0xc5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0x2c5}], 0x1) 04:52:08 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x101}) 04:52:08 executing program 1: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'eql\x00'}, 0x18) 04:52:08 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000000)) close(r0) 04:52:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 04:52:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x8}]}}}]}, 0x44}}, 0x0) 04:52:08 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x101}) [ 906.418411] netlink: 'syz-executor4': attribute type 8 has an invalid length. 04:52:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x800000093c, 0x4) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x32, 0xc5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0x2c5}], 0x1) 04:52:08 executing program 1: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'eql\x00'}, 0x18) 04:52:08 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x101}) 04:52:08 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000000)) close(r0) 04:52:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x800000093c, 0x4) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x32, 0xc5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0x2c5}], 0x1) 04:52:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 04:52:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 04:52:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0, 0x0) 04:52:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340), 0x0) 04:52:09 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 04:52:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000000)) close(r0) 04:52:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0, 0x0) 04:52:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340), 0x0) 04:52:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 04:52:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340), 0x0) 04:52:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0, 0x0) 04:52:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:10 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340), 0x0) 04:52:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 04:52:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0, 0x0) 04:52:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:11 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:11 executing program 1: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fa, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000040, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) 04:52:11 executing program 4: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:11 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:11 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:12 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:12 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:12 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:12 executing program 4: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:12 executing program 1: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:13 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:13 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:13 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:13 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:13 executing program 4: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) [ 912.108028] not chained 440000 origins [ 912.111990] CPU: 1 PID: 29792 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #89 [ 912.119277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.128642] Call Trace: [ 912.131276] dump_stack+0x32d/0x480 [ 912.134953] kmsan_internal_chain_origin+0x222/0x240 [ 912.140127] ? __msan_get_context_state+0x9/0x20 [ 912.144908] ? INIT_INT+0xc/0x30 [ 912.148301] ? pick_next_task_fair+0x20c6/0x3060 [ 912.153098] ? apic_timer_interrupt+0xa/0x20 [ 912.157541] __msan_chain_origin+0x6d/0xb0 [ 912.161833] skcipher_walk_next+0x1099/0x2d00 [ 912.166400] skcipher_walk_done+0x95a/0x1070 [ 912.170925] crypto_cbc_decrypt+0x875/0x940 [ 912.175289] ? cipher_encrypt_unaligned+0x310/0x310 [ 912.180355] ? crypto_cbc_encrypt+0x7c0/0x7c0 [ 912.184890] skcipher_recvmsg+0x130e/0x1880 [ 912.189277] skcipher_recvmsg_nokey+0x129/0x160 [ 912.194013] ? skcipher_sendmsg_nokey+0x1f0/0x1f0 [ 912.198877] sock_read_iter+0x45b/0x4e0 [ 912.202914] ? kernel_sock_ip_overhead+0x340/0x340 [ 912.207882] __vfs_read+0x874/0xb00 [ 912.211574] vfs_read+0x380/0x6b0 [ 912.215103] __se_sys_read+0x17a/0x370 [ 912.219038] __x64_sys_read+0x4a/0x70 [ 912.222871] do_syscall_64+0xcf/0x110 [ 912.226703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.231935] RIP: 0033:0x457569 [ 912.235156] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.254095] RSP: 002b:00007ff423d9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.261831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 912.269125] RDX: 0000000100000104 RSI: 00000000200003c0 RDI: 0000000000000004 [ 912.276412] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 912.283709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff423d9f6d4 [ 912.291011] R13: 00000000004c292a R14: 00000000004d5db8 R15: 00000000ffffffff [ 912.298331] Uninit was stored to memory at: [ 912.302684] kmsan_internal_chain_origin+0x136/0x240 [ 912.307822] __msan_chain_origin+0x6d/0xb0 [ 912.312094] skcipher_walk_next+0x1099/0x2d00 [ 912.316661] skcipher_walk_done+0x95a/0x1070 [ 912.321117] crypto_cbc_decrypt+0x875/0x940 [ 912.325470] skcipher_recvmsg+0x130e/0x1880 [ 912.329813] skcipher_recvmsg_nokey+0x129/0x160 [ 912.334505] sock_read_iter+0x45b/0x4e0 [ 912.338502] __vfs_read+0x874/0xb00 [ 912.342149] vfs_read+0x380/0x6b0 [ 912.345625] __se_sys_read+0x17a/0x370 [ 912.349531] __x64_sys_read+0x4a/0x70 [ 912.353383] do_syscall_64+0xcf/0x110 [ 912.357215] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.362431] [ 912.364075] Uninit was stored to memory at: [ 912.368447] kmsan_internal_chain_origin+0x136/0x240 [ 912.373582] __msan_chain_origin+0x6d/0xb0 [ 912.377847] skcipher_walk_next+0x1099/0x2d00 [ 912.382378] skcipher_walk_done+0x95a/0x1070 [ 912.386814] crypto_cbc_decrypt+0x875/0x940 [ 912.391159] skcipher_recvmsg+0x130e/0x1880 [ 912.395514] skcipher_recvmsg_nokey+0x129/0x160 [ 912.400214] sock_read_iter+0x45b/0x4e0 [ 912.404213] __vfs_read+0x874/0xb00 [ 912.407854] vfs_read+0x380/0x6b0 [ 912.411368] __se_sys_read+0x17a/0x370 [ 912.415270] __x64_sys_read+0x4a/0x70 [ 912.419088] do_syscall_64+0xcf/0x110 [ 912.422923] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.428128] [ 912.429787] Uninit was stored to memory at: [ 912.434134] kmsan_internal_chain_origin+0x136/0x240 [ 912.439282] __msan_chain_origin+0x6d/0xb0 [ 912.443562] skcipher_walk_next+0x1099/0x2d00 [ 912.448080] skcipher_walk_done+0x95a/0x1070 [ 912.452509] crypto_cbc_decrypt+0x875/0x940 [ 912.456876] skcipher_recvmsg+0x130e/0x1880 [ 912.461230] skcipher_recvmsg_nokey+0x129/0x160 [ 912.465923] sock_read_iter+0x45b/0x4e0 [ 912.469916] __vfs_read+0x874/0xb00 [ 912.473588] vfs_read+0x380/0x6b0 [ 912.477063] __se_sys_read+0x17a/0x370 [ 912.480968] __x64_sys_read+0x4a/0x70 [ 912.484789] do_syscall_64+0xcf/0x110 [ 912.488635] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.493829] [ 912.495470] Uninit was stored to memory at: [ 912.499821] kmsan_internal_chain_origin+0x136/0x240 [ 912.504972] __msan_chain_origin+0x6d/0xb0 [ 912.509246] skcipher_walk_next+0x1099/0x2d00 [ 912.513764] skcipher_walk_done+0x95a/0x1070 [ 912.518202] crypto_cbc_decrypt+0x875/0x940 [ 912.522559] skcipher_recvmsg+0x130e/0x1880 [ 912.526942] skcipher_recvmsg_nokey+0x129/0x160 [ 912.531653] sock_read_iter+0x45b/0x4e0 [ 912.535641] __vfs_read+0x874/0xb00 [ 912.539283] vfs_read+0x380/0x6b0 [ 912.542767] __se_sys_read+0x17a/0x370 [ 912.546672] __x64_sys_read+0x4a/0x70 [ 912.550507] do_syscall_64+0xcf/0x110 [ 912.554324] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.559555] [ 912.561227] Uninit was stored to memory at: [ 912.565570] kmsan_internal_chain_origin+0x136/0x240 [ 912.570688] __msan_chain_origin+0x6d/0xb0 [ 912.574941] skcipher_walk_virt+0xa4e/0xaa0 [ 912.579279] crypto_cbc_decrypt+0xd3/0x940 [ 912.583566] skcipher_recvmsg+0x130e/0x1880 [ 912.587909] skcipher_recvmsg_nokey+0x129/0x160 [ 912.592610] sock_read_iter+0x45b/0x4e0 [ 912.596604] __vfs_read+0x874/0xb00 [ 912.600270] vfs_read+0x380/0x6b0 [ 912.603755] __se_sys_read+0x17a/0x370 [ 912.607660] __x64_sys_read+0x4a/0x70 [ 912.611478] do_syscall_64+0xcf/0x110 [ 912.615302] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.620529] [ 912.622167] Uninit was stored to memory at: [ 912.626521] kmsan_internal_chain_origin+0x136/0x240 [ 912.631668] __msan_chain_origin+0x6d/0xb0 [ 912.635927] skcipher_walk_next+0x1099/0x2d00 [ 912.640457] skcipher_walk_first+0x168/0x6a0 [ 912.644901] skcipher_walk_virt+0x8d1/0xaa0 [ 912.649266] crypto_cbc_decrypt+0xd3/0x940 [ 912.653557] skcipher_recvmsg+0x130e/0x1880 [ 912.657902] skcipher_recvmsg_nokey+0x129/0x160 [ 912.662588] sock_read_iter+0x45b/0x4e0 [ 912.666594] __vfs_read+0x874/0xb00 [ 912.670244] vfs_read+0x380/0x6b0 [ 912.673728] __se_sys_read+0x17a/0x370 [ 912.677630] __x64_sys_read+0x4a/0x70 [ 912.681471] do_syscall_64+0xcf/0x110 [ 912.685297] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.690498] [ 912.692142] Uninit was stored to memory at: [ 912.696495] kmsan_internal_chain_origin+0x136/0x240 [ 912.701623] __msan_chain_origin+0x6d/0xb0 [ 912.705885] skcipher_walk_virt+0x6e6/0xaa0 [ 912.710233] crypto_cbc_decrypt+0xd3/0x940 [ 912.714496] skcipher_recvmsg+0x130e/0x1880 [ 912.718845] skcipher_recvmsg_nokey+0x129/0x160 [ 912.723535] sock_read_iter+0x45b/0x4e0 [ 912.727529] __vfs_read+0x874/0xb00 [ 912.731182] vfs_read+0x380/0x6b0 [ 912.734670] __se_sys_read+0x17a/0x370 [ 912.738584] __x64_sys_read+0x4a/0x70 [ 912.742417] do_syscall_64+0xcf/0x110 [ 912.746257] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 912.751492] [ 912.753163] Local variable description: ----walk@crypto_cbc_decrypt 04:52:14 executing program 1: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 04:52:14 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/9, 0x9) sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) [ 912.759588] Variable was created at: [ 912.763327] crypto_cbc_decrypt+0x70/0x940 [ 912.767590] skcipher_recvmsg+0x130e/0x1880 04:52:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0xfffffffffffffffb}) 04:52:15 executing program 4: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={"6e6174003f0000000000000000000000000000000000000000000000000200", 0x19, 0x2, 0x90, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000800000000000000000000000000000000000000000000000000000000000000000000000000000030000feffffff00000000"]}, 0x108) 04:52:15 executing program 0: r0 = socket(0x200000000000011, 0x803, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) [ 913.238705] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 04:52:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0xfffffffffffffffb}) 04:52:15 executing program 4: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={"6e6174003f0000000000000000000000000000000000000000000000000200", 0x19, 0x2, 0x90, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000800000000000000000000000000000000000000000000000000000000000000000000000000000030000feffffff00000000"]}, 0x108) 04:52:15 executing program 0: r0 = socket(0x200000000000011, 0x803, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) [ 913.685094] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 04:52:16 executing program 0: r0 = socket(0x200000000000011, 0x803, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) 04:52:16 executing program 4: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={"6e6174003f0000000000000000000000000000000000000000000000000200", 0x19, 0x2, 0x90, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000800000000000000000000000000000000000000000000000000000000000000000000000000000030000feffffff00000000"]}, 0x108) 04:52:16 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0xfffffffffffffffb}) 04:52:16 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) 04:52:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) [ 914.082103] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 04:52:16 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) shutdown(r1, 0x1) close(r1) 04:52:16 executing program 4: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={"6e6174003f0000000000000000000000000000000000000000000000000200", 0x19, 0x2, 0x90, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000800000000000000000000000000000000000000000000000000000000000000000000000000000030000feffffff00000000"]}, 0x108) 04:52:16 executing program 0: r0 = socket(0x200000000000011, 0x803, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) 04:52:16 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0xfffffffffffffffb}) 04:52:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x20, 0x18, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) [ 914.558751] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 04:52:16 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) shutdown(r1, 0x1) close(r1) 04:52:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 04:52:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 04:52:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) dup3(r0, r1, 0x0) 04:52:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:52:17 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 04:52:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) dup3(r0, r1, 0x0) 04:52:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 04:52:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 04:52:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) shutdown(r1, 0x1) close(r1) 04:52:17 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 04:52:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) dup3(r0, r1, 0x0) 04:52:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:52:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 04:52:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 04:52:18 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 04:52:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) dup3(r0, r1, 0x0) 04:52:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) shutdown(r1, 0x1) close(r1) 04:52:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:52:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 04:52:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x40) 04:52:19 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 04:52:19 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 04:52:19 executing program 0: unshare(0x2000400) bpf$MAP_CREATE(0x4, &(0x7f00000000c0)={0x80000000003}, 0x2c) 04:52:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 04:52:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000580)={0x903}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) 04:52:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x40) 04:52:19 executing program 0: unshare(0x2000400) bpf$MAP_CREATE(0x4, &(0x7f00000000c0)={0x80000000003}, 0x2c) 04:52:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x4d, @time}) socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000014) 04:52:20 executing program 0: unshare(0x2000400) bpf$MAP_CREATE(0x4, &(0x7f00000000c0)={0x80000000003}, 0x2c) 04:52:20 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 04:52:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x40) 04:52:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000580)={0x903}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) 04:52:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x40) 04:52:20 executing program 0: unshare(0x2000400) bpf$MAP_CREATE(0x4, &(0x7f00000000c0)={0x80000000003}, 0x2c) 04:52:20 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 04:52:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000580)={0x903}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) 04:52:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x4d, @time}) socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000014) 04:52:21 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:21 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:21 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 04:52:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000580)={0x903}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) 04:52:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x1, 0x2) 04:52:22 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:22 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:22 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:22 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x4d, @time}) socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000014) 04:52:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000001140)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 04:52:22 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:23 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:23 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:24 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000001140)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 04:52:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x4d, @time}) socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000014) 04:52:24 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:25 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000001140)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 04:52:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) 04:52:26 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f0000000040)='security\x00') rmdir(&(0x7f0000000280)='./file0/bus\x00') 04:52:26 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f0000000040)='security\x00') rmdir(&(0x7f0000000280)='./file0/bus\x00') 04:52:26 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f0000000040)='security\x00') rmdir(&(0x7f0000000280)='./file0/bus\x00') 04:52:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000001140)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 04:52:27 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f0000000040)='security\x00') rmdir(&(0x7f0000000280)='./file0/bus\x00') 04:52:27 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:29 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) 04:52:29 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:29 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) get_mempolicy(&(0x7f0000001c00), &(0x7f0000001c40), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) dup2(r0, r1) 04:52:29 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:52:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 04:52:29 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:52:29 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x383, 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 927.942349] not chained 450000 origins [ 927.946322] CPU: 0 PID: 30241 Comm: syz-executor1 Not tainted 4.20.0-rc3+ #89 [ 927.953606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.962975] Call Trace: [ 927.965596] dump_stack+0x32d/0x480 [ 927.969273] kmsan_internal_chain_origin+0x222/0x240 [ 927.974470] ? save_stack_trace+0xc6/0x110 [ 927.978752] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 927.983889] ? kmsan_internal_chain_origin+0x90/0x240 [ 927.989155] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 927.994564] ? is_bpf_text_address+0x49e/0x4d0 [ 927.999193] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 928.004667] ? in_task_stack+0x12c/0x210 [ 928.008815] __msan_chain_origin+0x6d/0xb0 [ 928.013088] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.018513] __save_stack_trace+0x8be/0xc60 [ 928.022903] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.028300] save_stack_trace+0xc6/0x110 [ 928.032422] kmsan_internal_chain_origin+0x136/0x240 [ 928.037610] ? do_syscall_64+0xcf/0x110 [ 928.041634] ? kmsan_internal_chain_origin+0x136/0x240 [ 928.046954] ? kmsan_memcpy_origins+0x13d/0x190 [ 928.051668] ? __msan_memcpy+0x6f/0x80 [ 928.055609] ? skb_copy_bits+0x1d2/0xc90 [ 928.059705] ? skb_copy+0x56c/0xba0 [ 928.063374] ? tcp_send_synack+0x7a3/0x18f0 [ 928.067740] ? tcp_rcv_state_process+0x275d/0x6c60 [ 928.072707] ? tcp_v6_do_rcv+0x112b/0x21b0 [ 928.076976] ? __release_sock+0x32d/0x750 [ 928.081150] ? release_sock+0x99/0x2a0 [ 928.085069] ? __inet_stream_connect+0xdff/0x15d0 [ 928.090000] ? tcp_sendmsg_locked+0x6655/0x6c30 [ 928.094695] ? tcp_sendmsg+0xb2/0x100 [ 928.098542] ? inet_sendmsg+0x4e9/0x800 [ 928.102542] ? __sys_sendto+0x940/0xb80 [ 928.106544] ? __se_sys_sendto+0x107/0x130 [ 928.110842] ? __x64_sys_sendto+0x6e/0x90 [ 928.115026] ? do_syscall_64+0xcf/0x110 [ 928.119063] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.124511] ? memcg_kmem_put_cache+0x73/0x460 [ 928.129150] ? __msan_get_context_state+0x9/0x20 [ 928.133977] ? INIT_INT+0xc/0x30 [ 928.137390] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 928.142815] ? __msan_get_context_state+0x9/0x20 [ 928.147613] kmsan_memcpy_origins+0x13d/0x190 [ 928.152156] __msan_memcpy+0x6f/0x80 [ 928.155916] skb_copy_bits+0x1d2/0xc90 [ 928.159863] skb_copy+0x56c/0xba0 [ 928.163376] tcp_send_synack+0x7a3/0x18f0 [ 928.167565] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 928.173063] ? nldev_port_get_dumpit+0xa62/0xba0 [ 928.177861] ? nldev_port_get_dumpit+0xa62/0xba0 [ 928.182667] tcp_rcv_state_process+0x275d/0x6c60 [ 928.187471] ? tcp_connect+0x544e/0x6220 [ 928.191606] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.195723] ? tcp_v6_destroy_sock+0x60/0x60 [ 928.200162] __release_sock+0x32d/0x750 [ 928.204185] release_sock+0x99/0x2a0 [ 928.207935] __inet_stream_connect+0xdff/0x15d0 [ 928.212660] ? wait_woken+0x5b0/0x5b0 [ 928.216513] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.221061] ? aa_label_sk_perm+0xda/0x960 [ 928.225338] ? kmsan_set_origin+0x7f/0x100 [ 928.229604] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 928.235007] ? __msan_poison_alloca+0x1e0/0x270 [ 928.239813] ? __local_bh_enable_ip+0x46/0x260 [ 928.244461] ? __msan_poison_alloca+0x1e0/0x270 [ 928.249205] tcp_sendmsg+0xb2/0x100 [ 928.252876] ? tcp_sendmsg_locked+0x6c30/0x6c30 [ 928.257590] inet_sendmsg+0x4e9/0x800 [ 928.261426] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 928.266830] ? security_socket_sendmsg+0x1bd/0x200 [ 928.271803] ? inet_getname+0x490/0x490 [ 928.275839] __sys_sendto+0x940/0xb80 [ 928.279702] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 928.285179] ? prepare_exit_to_usermode+0x182/0x4c0 [ 928.290250] __se_sys_sendto+0x107/0x130 [ 928.294364] __x64_sys_sendto+0x6e/0x90 [ 928.298366] do_syscall_64+0xcf/0x110 [ 928.302193] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.307402] RIP: 0033:0x457569 [ 928.310632] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.329583] RSP: 002b:00007fb402514c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 928.337339] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 928.344639] RDX: 00000000000002bd RSI: 0000000020e77fff RDI: 0000000000000003 [ 928.351921] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 928.359206] R10: 0000000020000008 R11: 0000000000000246 R12: 00007fb4025156d4 [ 928.366563] R13: 00000000004c407b R14: 00000000004d6910 R15: 00000000ffffffff [ 928.373867] Uninit was stored to memory at: [ 928.378214] kmsan_internal_chain_origin+0x136/0x240 [ 928.383336] __msan_chain_origin+0x6d/0xb0 [ 928.387604] __save_stack_trace+0x8be/0xc60 [ 928.391992] save_stack_trace+0xc6/0x110 [ 928.396070] kmsan_internal_chain_origin+0x136/0x240 [ 928.401183] kmsan_memcpy_origins+0x13d/0x190 [ 928.405694] __msan_memcpy+0x6f/0x80 [ 928.409472] skb_copy_bits+0x1d2/0xc90 [ 928.413377] skb_copy+0x56c/0xba0 [ 928.416867] tcp_send_synack+0x7a3/0x18f0 [ 928.421068] tcp_rcv_state_process+0x275d/0x6c60 [ 928.425865] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.429945] __release_sock+0x32d/0x750 [ 928.433936] release_sock+0x99/0x2a0 [ 928.437662] __inet_stream_connect+0xdff/0x15d0 [ 928.442345] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.446851] tcp_sendmsg+0xb2/0x100 [ 928.450525] inet_sendmsg+0x4e9/0x800 [ 928.454375] __sys_sendto+0x940/0xb80 [ 928.458209] __se_sys_sendto+0x107/0x130 [ 928.462285] __x64_sys_sendto+0x6e/0x90 [ 928.466276] do_syscall_64+0xcf/0x110 [ 928.470125] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.475327] [ 928.476979] Uninit was stored to memory at: [ 928.481341] kmsan_internal_chain_origin+0x136/0x240 [ 928.486494] __msan_chain_origin+0x6d/0xb0 [ 928.490770] __save_stack_trace+0x8be/0xc60 [ 928.495142] save_stack_trace+0xc6/0x110 [ 928.499217] kmsan_internal_chain_origin+0x136/0x240 [ 928.504353] kmsan_memcpy_origins+0x13d/0x190 [ 928.508879] __msan_memcpy+0x6f/0x80 [ 928.512613] skb_copy_bits+0x1d2/0xc90 [ 928.516517] skb_copy+0x56c/0xba0 [ 928.519989] tcp_send_synack+0x7a3/0x18f0 [ 928.524160] tcp_rcv_state_process+0x275d/0x6c60 [ 928.528938] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.533017] __release_sock+0x32d/0x750 [ 928.537009] release_sock+0x99/0x2a0 [ 928.540756] __inet_stream_connect+0xdff/0x15d0 [ 928.545457] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.549986] tcp_sendmsg+0xb2/0x100 [ 928.553635] inet_sendmsg+0x4e9/0x800 [ 928.557463] __sys_sendto+0x940/0xb80 [ 928.561283] __se_sys_sendto+0x107/0x130 [ 928.565377] __x64_sys_sendto+0x6e/0x90 [ 928.569380] do_syscall_64+0xcf/0x110 [ 928.573219] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.578418] [ 928.580059] Uninit was stored to memory at: [ 928.584398] kmsan_internal_chain_origin+0x136/0x240 [ 928.589521] __msan_chain_origin+0x6d/0xb0 [ 928.593778] __save_stack_trace+0x8be/0xc60 [ 928.598138] save_stack_trace+0xc6/0x110 [ 928.602218] kmsan_internal_chain_origin+0x136/0x240 [ 928.607340] kmsan_memcpy_origins+0x13d/0x190 [ 928.611853] __msan_memcpy+0x6f/0x80 [ 928.615587] skb_copy_bits+0x1d2/0xc90 [ 928.619498] skb_copy+0x56c/0xba0 [ 928.622965] tcp_send_synack+0x7a3/0x18f0 [ 928.627137] tcp_rcv_state_process+0x275d/0x6c60 [ 928.631913] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.636018] __release_sock+0x32d/0x750 [ 928.640007] release_sock+0x99/0x2a0 [ 928.643742] __inet_stream_connect+0xdff/0x15d0 [ 928.648425] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.652996] tcp_sendmsg+0xb2/0x100 [ 928.656632] inet_sendmsg+0x4e9/0x800 [ 928.660441] __sys_sendto+0x940/0xb80 [ 928.664259] __se_sys_sendto+0x107/0x130 [ 928.668331] __x64_sys_sendto+0x6e/0x90 [ 928.672335] do_syscall_64+0xcf/0x110 [ 928.676153] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.681349] [ 928.682992] Uninit was stored to memory at: [ 928.687319] kmsan_internal_chain_origin+0x136/0x240 [ 928.692437] __msan_chain_origin+0x6d/0xb0 [ 928.696698] __save_stack_trace+0x8be/0xc60 [ 928.701040] save_stack_trace+0xc6/0x110 [ 928.705164] kmsan_internal_chain_origin+0x136/0x240 [ 928.710286] kmsan_memcpy_origins+0x13d/0x190 [ 928.714835] __msan_memcpy+0x6f/0x80 [ 928.718568] skb_copy_bits+0x1d2/0xc90 [ 928.722529] skb_copy+0x56c/0xba0 [ 928.726040] tcp_send_synack+0x7a3/0x18f0 [ 928.730210] tcp_rcv_state_process+0x275d/0x6c60 [ 928.735022] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.739123] __release_sock+0x32d/0x750 [ 928.743160] release_sock+0x99/0x2a0 [ 928.746905] __inet_stream_connect+0xdff/0x15d0 [ 928.751594] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.756100] tcp_sendmsg+0xb2/0x100 [ 928.759745] inet_sendmsg+0x4e9/0x800 [ 928.763562] __sys_sendto+0x940/0xb80 [ 928.767381] __se_sys_sendto+0x107/0x130 [ 928.771468] __x64_sys_sendto+0x6e/0x90 [ 928.775483] do_syscall_64+0xcf/0x110 [ 928.779315] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.784504] [ 928.786140] Uninit was stored to memory at: [ 928.790494] kmsan_internal_chain_origin+0x136/0x240 [ 928.795617] __msan_chain_origin+0x6d/0xb0 [ 928.799867] __save_stack_trace+0x8be/0xc60 [ 928.804213] save_stack_trace+0xc6/0x110 [ 928.808286] kmsan_internal_chain_origin+0x136/0x240 [ 928.813404] kmsan_memcpy_origins+0x13d/0x190 [ 928.817905] __msan_memcpy+0x6f/0x80 [ 928.821656] skb_copy_bits+0x1d2/0xc90 [ 928.825558] skb_copy+0x56c/0xba0 [ 928.829049] tcp_send_synack+0x7a3/0x18f0 [ 928.833220] tcp_rcv_state_process+0x275d/0x6c60 [ 928.837988] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.842074] __release_sock+0x32d/0x750 [ 928.846055] release_sock+0x99/0x2a0 [ 928.849776] __inet_stream_connect+0xdff/0x15d0 [ 928.854461] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.858962] tcp_sendmsg+0xb2/0x100 [ 928.862667] inet_sendmsg+0x4e9/0x800 [ 928.866501] __sys_sendto+0x940/0xb80 [ 928.870316] __se_sys_sendto+0x107/0x130 [ 928.874405] __x64_sys_sendto+0x6e/0x90 [ 928.878404] do_syscall_64+0xcf/0x110 [ 928.882227] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.887429] [ 928.889066] Uninit was stored to memory at: [ 928.893427] kmsan_internal_chain_origin+0x136/0x240 [ 928.898563] __msan_chain_origin+0x6d/0xb0 [ 928.902806] __save_stack_trace+0x8be/0xc60 [ 928.907147] save_stack_trace+0xc6/0x110 [ 928.911266] kmsan_internal_chain_origin+0x136/0x240 [ 928.916387] kmsan_memcpy_origins+0x13d/0x190 [ 928.920913] __msan_memcpy+0x6f/0x80 [ 928.924674] skb_copy_bits+0x1d2/0xc90 [ 928.928576] skb_copy+0x56c/0xba0 [ 928.932078] tcp_send_synack+0x7a3/0x18f0 [ 928.936240] tcp_rcv_state_process+0x275d/0x6c60 [ 928.941055] tcp_v6_do_rcv+0x112b/0x21b0 [ 928.945127] __release_sock+0x32d/0x750 [ 928.949108] release_sock+0x99/0x2a0 [ 928.952837] __inet_stream_connect+0xdff/0x15d0 [ 928.957523] tcp_sendmsg_locked+0x6655/0x6c30 [ 928.962035] tcp_sendmsg+0xb2/0x100 [ 928.965674] inet_sendmsg+0x4e9/0x800 [ 928.969508] __sys_sendto+0x940/0xb80 [ 928.973324] __se_sys_sendto+0x107/0x130 [ 928.977423] __x64_sys_sendto+0x6e/0x90 [ 928.981422] do_syscall_64+0xcf/0x110 [ 928.985259] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 928.990447] [ 928.992085] Uninit was stored to memory at: [ 928.996422] kmsan_internal_chain_origin+0x136/0x240 [ 929.001591] __msan_chain_origin+0x6d/0xb0 [ 929.005840] __save_stack_trace+0x8be/0xc60 [ 929.010179] save_stack_trace+0xc6/0x110 [ 929.014261] kmsan_internal_chain_origin+0x136/0x240 [ 929.019378] kmsan_memcpy_origins+0x13d/0x190 [ 929.023888] __msan_memcpy+0x6f/0x80 [ 929.027617] skb_copy_bits+0x1d2/0xc90 [ 929.031535] skb_copy+0x56c/0xba0 [ 929.035026] tcp_send_synack+0x7a3/0x18f0 [ 929.039189] tcp_rcv_state_process+0x275d/0x6c60 [ 929.043954] tcp_v6_do_rcv+0x112b/0x21b0 [ 929.048024] __release_sock+0x32d/0x750 [ 929.052003] release_sock+0x99/0x2a0 [ 929.055731] __inet_stream_connect+0xdff/0x15d0 [ 929.060411] tcp_sendmsg_locked+0x6655/0x6c30 [ 929.064914] tcp_sendmsg+0xb2/0x100 [ 929.068555] inet_sendmsg+0x4e9/0x800 [ 929.072366] __sys_sendto+0x940/0xb80 [ 929.076176] __se_sys_sendto+0x107/0x130 [ 929.080252] __x64_sys_sendto+0x6e/0x90 [ 929.084240] do_syscall_64+0xcf/0x110 [ 929.088055] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 929.093240] 04:52:30 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) [ 929.094871] Local variable description: ----state.i.i@ip6_finish_output2 [ 929.101709] Variable was created at: [ 929.105441] ip6_finish_output2+0x87/0x22d0 [ 929.109793] ip6_finish_output+0xc13/0xca0 04:52:31 executing program 2: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) 04:52:31 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:31 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:52:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) 04:52:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) [ 929.698918] *** Guest State *** [ 929.702646] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 929.711560] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 929.720638] CR3 = 0x0000000000000000 [ 929.724507] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 929.730533] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 929.736771] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 929.743613] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 929.751824] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 929.759872] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 929.768108] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 929.776322] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 929.784558] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 929.792697] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 929.800769] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 929.808958] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 929.817121] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 929.825345] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 929.832446] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 929.839963] Interruptibility = 00000000 ActivityState = 00000000 [ 929.846378] *** Host State *** [ 929.849624] RIP = 0xffffffff812cfa68 RSP = 0xffff8880a9bff378 [ 929.855809] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 929.862360] FSBase=00007fc913c90700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 929.870221] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 929.876302] CR0=0000000080050033 CR3=00000000a748f000 CR4=00000000001426e0 [ 929.883488] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260 [ 929.890254] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 929.896504] *** Control State *** [ 929.900024] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 929.906969] EntryControls=0000d1ff ExitControls=002fefff [ 929.912626] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 929.919622] VMEntry: intr_info=80000064 errcode=00000000 ilen=00000000 [ 929.926476] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 929.933201] reason=80000021 qualification=0000000000000000 [ 929.939569] IDTVectoring: info=00000000 errcode=00000000 [ 929.945281] TSC Offset = 0xfffffe089b799041 04:52:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 929.949647] TPR Threshold = 0x00 [ 929.953199] EPT pointer = 0x00000000ad5a501e 04:52:32 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) 04:52:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) 04:52:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) dup3(r2, r1, 0x0) 04:52:32 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) 04:52:32 executing program 2: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) [ 930.738842] ion_buffer_destroy: buffer still mapped in the kernel [ 930.802394] *** Guest State *** [ 930.805909] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 930.815026] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 930.824128] CR3 = 0x0000000000000000 [ 930.827891] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 930.834034] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 930.840164] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 930.847463] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 930.855587] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 930.863790] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 930.872003] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 930.880037] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 930.888229] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 04:52:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) dup3(r2, r1, 0x0) [ 930.896472] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 930.904654] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 930.912808] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 930.920847] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 930.929100] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 930.935654] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 930.943296] Interruptibility = 00000000 ActivityState = 00000000 [ 930.949568] *** Host State *** [ 930.952962] RIP = 0xffffffff812cfa68 RSP = 0xffff8880a7cff378 [ 930.959014] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 930.965660] FSBase=00007fc913c90700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 930.973604] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 930.979597] CR0=0000000080050033 CR3=00000000ac0a7000 CR4=00000000001426e0 [ 930.986874] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260 [ 930.993742] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 930.999852] *** Control State *** [ 931.003517] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 931.010271] EntryControls=0000d1ff ExitControls=002fefff [ 931.015920] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 931.023011] VMEntry: intr_info=80000064 errcode=00000000 ilen=00000000 [ 931.029733] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 931.036562] reason=80000021 qualification=0000000000000000 [ 931.043025] IDTVectoring: info=00000000 errcode=00000000 [ 931.048528] TSC Offset = 0xfffffe0803ee4640 04:52:33 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) 04:52:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) [ 931.053059] TPR Threshold = 0x00 [ 931.056487] EPT pointer = 0x00000000a7d5401e 04:52:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) dup3(r2, r1, 0x0) 04:52:33 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) 04:52:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) 04:52:33 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) 04:52:33 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:52:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) dup3(r2, r1, 0x0) 04:52:33 executing program 2: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x64a90]) semop(r0, &(0x7f0000000100), 0xba) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x8a, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/22) [ 931.882101] ================================================================== [ 931.889526] BUG: KMSAN: uninit-value in native_apic_mem_read+0x54/0x60 [ 931.896204] CPU: 0 PID: 30335 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #89 [ 931.903493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.912858] Call Trace: [ 931.915540] [ 931.917728] dump_stack+0x32d/0x480 [ 931.921384] ? native_apic_mem_read+0x54/0x60 [ 931.925921] kmsan_report+0x19f/0x300 [ 931.929764] ? native_apic_mem_write+0xa0/0xa0 [ 931.934435] __msan_warning+0x76/0xc0 [ 931.938293] native_apic_mem_read+0x54/0x60 [ 931.942638] smp_spurious_interrupt+0x38e/0x770 [ 931.947377] spurious_interrupt+0xf/0x20 [ 931.951451] [ 931.953730] RIP: 0010:vmx_handle_external_intr+0x1e2/0x280 [ 931.959371] Code: e3 20 4c 09 fb 48 89 c1 48 c1 e1 20 4c 09 e9 0f 85 95 00 00 00 4c 89 f4 48 89 e0 48 83 e4 f0 6a 18 50 9c 6a 10 e8 ce ca f3 09 05 e8 17 f8 79 00 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 7d [ 931.978284] RSP: 0018:ffff8880a94ff538 EFLAGS: 00000086 ORIG_RAX: ffffffffffffff00 [ 931.986012] RAX: ffff8880a94ff538 RBX: ffffffff8b001520 RCX: 0000000000000000 [ 931.993300] RDX: ffffffff8c91d000 RSI: fffffe0080000ef8 RDI: 0000758000000ef8 [ 932.000587] RBP: ffff8880a94ff590 R08: ffff888000000000 R09: 0000000000000002 [ 932.007907] R10: 0000000000000000 R11: ffffffff812c9d50 R12: fffffe0000000ef8 [ 932.015213] R13: 0000000000000000 R14: ffff8880a94ff538 R15: 000000008b001520 [ 932.022514] ? error_interrupt+0x20/0x20 [ 932.026598] ? free_kvm_area+0x250/0x250 [ 932.030752] ? vmx_handle_external_intr+0x1b1/0x280 [ 932.035816] ? free_kvm_area+0x250/0x250 [ 932.039909] kvm_arch_vcpu_ioctl_run+0xac74/0x12040 [ 932.045094] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 932.050496] ? update_load_avg+0x12ae/0x1db0 [ 932.055011] ? kmsan_set_origin+0x7f/0x100 [ 932.059313] ? __msan_poison_alloca+0x1e0/0x270 [ 932.064013] ? kmsan_set_origin+0x7f/0x100 [ 932.068299] ? put_pid+0x71/0x410 [ 932.071776] ? kvm_vcpu_ioctl+0x1f85/0x1f90 [ 932.076122] ? put_pid+0x330/0x410 [ 932.079688] ? get_task_pid+0x19d/0x290 [ 932.083704] kvm_vcpu_ioctl+0xfb1/0x1f90 [ 932.087814] ? do_vfs_ioctl+0x184/0x2f70 [ 932.091888] ? __se_sys_ioctl+0x1da/0x270 [ 932.096100] ? kvm_vm_release+0x90/0x90 [ 932.100121] do_vfs_ioctl+0xfbc/0x2f70 [ 932.104095] ? security_file_ioctl+0x92/0x200 [ 932.108654] __se_sys_ioctl+0x1da/0x270 [ 932.112669] __x64_sys_ioctl+0x4a/0x70 [ 932.116594] do_syscall_64+0xcf/0x110 [ 932.120426] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 932.125643] RIP: 0033:0x457569 [ 932.128852] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.147795] RSP: 002b:00007fc913c8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.155519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 932.162861] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 932.170148] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 932.177434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc913c906d4 [ 932.184740] R13: 00000000004c034e R14: 00000000004d0d60 R15: 00000000ffffffff [ 932.192065] [ 932.193706] Local variable description: ----regs.i.i@vmx_vcpu_run [ 932.199949] Variable was created at: [ 932.203709] vmx_vcpu_run+0xb7/0x7d80 [ 932.207549] kvm_arch_vcpu_ioctl_run+0xa315/0x12040 [ 932.212602] ================================================================== [ 932.219974] Disabling lock debugging due to kernel taint [ 932.225450] Kernel panic - not syncing: panic_on_warn set ... [ 932.231368] CPU: 0 PID: 30335 Comm: syz-executor0 Tainted: G B 4.20.0-rc3+ #89 [ 932.240039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.249400] Call Trace: [ 932.252016] [ 932.254192] dump_stack+0x32d/0x480 [ 932.257861] panic+0x624/0xc08 [ 932.261164] kmsan_report+0x300/0x300 [ 932.264994] ? native_apic_mem_write+0xa0/0xa0 [ 932.269595] __msan_warning+0x76/0xc0 [ 932.273428] native_apic_mem_read+0x54/0x60 [ 932.277782] smp_spurious_interrupt+0x38e/0x770 [ 932.282489] spurious_interrupt+0xf/0x20 [ 932.286575] [ 932.288833] RIP: 0010:vmx_handle_external_intr+0x1e2/0x280 [ 932.294480] Code: e3 20 4c 09 fb 48 89 c1 48 c1 e1 20 4c 09 e9 0f 85 95 00 00 00 4c 89 f4 48 89 e0 48 83 e4 f0 6a 18 50 9c 6a 10 e8 ce ca f3 09 05 e8 17 f8 79 00 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 7d [ 932.313416] RSP: 0018:ffff8880a94ff538 EFLAGS: 00000086 ORIG_RAX: ffffffffffffff00 [ 932.321171] RAX: ffff8880a94ff538 RBX: ffffffff8b001520 RCX: 0000000000000000 [ 932.328472] RDX: ffffffff8c91d000 RSI: fffffe0080000ef8 RDI: 0000758000000ef8 [ 932.335764] RBP: ffff8880a94ff590 R08: ffff888000000000 R09: 0000000000000002 [ 932.343066] R10: 0000000000000000 R11: ffffffff812c9d50 R12: fffffe0000000ef8 [ 932.350394] R13: 0000000000000000 R14: ffff8880a94ff538 R15: 000000008b001520 [ 932.357708] ? error_interrupt+0x20/0x20 [ 932.361793] ? free_kvm_area+0x250/0x250 [ 932.365900] ? vmx_handle_external_intr+0x1b1/0x280 [ 932.370965] ? free_kvm_area+0x250/0x250 [ 932.375081] kvm_arch_vcpu_ioctl_run+0xac74/0x12040 [ 932.380307] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 932.385691] ? update_load_avg+0x12ae/0x1db0 [ 932.390239] ? kmsan_set_origin+0x7f/0x100 [ 932.394505] ? __msan_poison_alloca+0x1e0/0x270 [ 932.399188] ? kmsan_set_origin+0x7f/0x100 [ 932.403479] ? put_pid+0x71/0x410 [ 932.406982] ? kvm_vcpu_ioctl+0x1f85/0x1f90 [ 932.411339] ? put_pid+0x330/0x410 [ 932.414901] ? get_task_pid+0x19d/0x290 [ 932.418915] kvm_vcpu_ioctl+0xfb1/0x1f90 [ 932.423036] ? do_vfs_ioctl+0x184/0x2f70 [ 932.427112] ? __se_sys_ioctl+0x1da/0x270 [ 932.431281] ? kvm_vm_release+0x90/0x90 [ 932.435291] do_vfs_ioctl+0xfbc/0x2f70 [ 932.438631] *** Guest State *** [ 932.439233] ? security_file_ioctl+0x92/0x200 [ 932.442877] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 932.447071] __se_sys_ioctl+0x1da/0x270 [ 932.456050] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 932.459919] __x64_sys_ioctl+0x4a/0x70 [ 932.468810] CR3 = 0x0000000000000000 [ 932.472629] do_syscall_64+0xcf/0x110 [ 932.472655] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 932.472671] RIP: 0033:0x457569 [ 932.472689] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.472712] RSP: 002b:00007fc913c8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.476508] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 932.480217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 932.480243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 932.485565] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 932.488644] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 932.488676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc913c906d4 [ 932.507708] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 932.515276] R13: 00000000004c034e R14: 00000000004d0d60 R15: 00000000ffffffff [ 932.516385] Kernel Offset: disabled [ 932.574810] Rebooting in 86400 seconds..