DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) close(r2) close(r1) [ 762.651530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:13:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) read(r2, &(0x7f0000000040)=""/153, 0x99) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)}}, 0x20) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24, @rand_addr=0xffffffff}}) 17:13:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0xffffffffffffff83) 17:13:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) fcntl$getflags(r0, 0x40b) close(r3) close(r2) 17:13:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x0, 0x0, {0x1803}}, 0x14}}, 0x0) 17:13:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000bacb42006a0d5d02c7685492c92392585aa3fdd5cf4bc6282fe1c37ee6a245c4faf2ba086b7c575613589be5e105d44a31ef6bd43c9c283a58bfdd00000000365da857884f0ad4e8898511981bbc7e73fb16756440cbdfc07709b0615014ba141eefc8dcc82ffa223617494887474707dda05a2fa31b3577579b7e3e3cae534986aa6ec074a88dbf0db8830fd09ff6ce2befc727282d833c552a407a687d97cf4adfa08b2b4a9f3b4051623512783acf350ee8"], &(0x7f0000000040)) 17:13:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:04 executing program 2: [ 765.080197] not chained 1310000 origins [ 765.084254] CPU: 1 PID: 19130 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 765.091552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.100930] Call Trace: [ 765.103568] dump_stack+0x32d/0x480 [ 765.107240] kmsan_internal_chain_origin+0x222/0x240 [ 765.112409] ? save_stack_trace+0xc6/0x110 [ 765.116693] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 765.121833] ? kmsan_internal_chain_origin+0x90/0x240 [ 765.127077] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 765.132488] ? is_bpf_text_address+0x49e/0x4d0 [ 765.137120] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 765.142611] ? in_task_stack+0x12c/0x210 [ 765.146716] __msan_chain_origin+0x6d/0xb0 [ 765.150996] ? kmsan_internal_chain_origin+0x136/0x240 [ 765.156296] __save_stack_trace+0x8be/0xc60 [ 765.160665] ? kmsan_internal_chain_origin+0x136/0x240 [ 765.165977] save_stack_trace+0xc6/0x110 [ 765.170076] kmsan_internal_chain_origin+0x136/0x240 [ 765.175229] ? kmsan_internal_chain_origin+0x136/0x240 [ 765.180552] ? kmsan_memcpy_origins+0x13d/0x190 [ 765.185279] ? __msan_memcpy+0x6f/0x80 [ 765.189200] ? pskb_expand_head+0x436/0x1d20 [ 765.193643] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 765.197817] ? pppol2tp_sendmsg+0x79a/0xba0 [ 765.202176] ? ___sys_sendmsg+0xe3b/0x1240 [ 765.206434] ? __sys_sendmmsg+0x56b/0xa90 [ 765.210622] ? __se_sys_sendmmsg+0xbd/0xe0 [ 765.214888] ? __x64_sys_sendmmsg+0x56/0x70 [ 765.219246] ? do_syscall_64+0xcf/0x110 [ 765.223260] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.228665] ? __msan_poison_alloca+0x1e0/0x270 [ 765.233408] ? __msan_get_context_state+0x9/0x20 [ 765.238220] ? INIT_INT+0xc/0x30 [ 765.241617] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 765.247033] kmsan_memcpy_origins+0x13d/0x190 [ 765.251572] __msan_memcpy+0x6f/0x80 [ 765.255331] pskb_expand_head+0x436/0x1d20 [ 765.259639] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.263695] pppol2tp_sendmsg+0x79a/0xba0 [ 765.267918] ___sys_sendmsg+0xe3b/0x1240 [ 765.272021] ? pppol2tp_getsockopt+0x1060/0x1060 [ 765.276849] ? __msan_poison_alloca+0x1e0/0x270 [ 765.281562] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 765.287002] ? rcu_all_qs+0x3b/0x2b0 [ 765.290737] ? _cond_resched+0x59/0x120 [ 765.294745] ? rcu_all_qs+0x53/0x2b0 [ 765.298484] ? _cond_resched+0x37/0x120 [ 765.302487] ? __sys_sendmmsg+0x7c9/0xa90 [ 765.306661] ? _cond_resched+0x59/0x120 [ 765.310657] __sys_sendmmsg+0x56b/0xa90 [ 765.314692] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 765.320163] ? prepare_exit_to_usermode+0x182/0x4c0 [ 765.325229] __se_sys_sendmmsg+0xbd/0xe0 [ 765.329321] __x64_sys_sendmmsg+0x56/0x70 [ 765.333501] do_syscall_64+0xcf/0x110 [ 765.337330] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.342535] RIP: 0033:0x457569 [ 765.345746] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.364679] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 765.372420] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 765.379742] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 765.387025] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 765.394310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 765.401609] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 765.408929] Uninit was stored to memory at: [ 765.413293] kmsan_internal_chain_origin+0x136/0x240 [ 765.418411] __msan_chain_origin+0x6d/0xb0 [ 765.422669] __save_stack_trace+0x8be/0xc60 [ 765.427003] save_stack_trace+0xc6/0x110 [ 765.431084] kmsan_internal_chain_origin+0x136/0x240 [ 765.436205] kmsan_memcpy_origins+0x13d/0x190 [ 765.440717] __msan_memcpy+0x6f/0x80 [ 765.444456] pskb_expand_head+0x436/0x1d20 [ 765.448708] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.452705] pppol2tp_sendmsg+0x79a/0xba0 [ 765.456865] ___sys_sendmsg+0xe3b/0x1240 [ 765.460994] __sys_sendmmsg+0x56b/0xa90 [ 765.464993] __se_sys_sendmmsg+0xbd/0xe0 [ 765.469073] __x64_sys_sendmmsg+0x56/0x70 [ 765.473252] do_syscall_64+0xcf/0x110 [ 765.477129] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.482319] [ 765.483952] Uninit was stored to memory at: [ 765.488305] kmsan_internal_chain_origin+0x136/0x240 [ 765.493422] __msan_chain_origin+0x6d/0xb0 [ 765.498223] __save_stack_trace+0x8be/0xc60 [ 765.502562] save_stack_trace+0xc6/0x110 [ 765.506638] kmsan_internal_chain_origin+0x136/0x240 [ 765.511765] kmsan_memcpy_origins+0x13d/0x190 [ 765.516289] __msan_memcpy+0x6f/0x80 [ 765.520022] pskb_expand_head+0x436/0x1d20 [ 765.524272] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.528256] pppol2tp_sendmsg+0x79a/0xba0 [ 765.532418] ___sys_sendmsg+0xe3b/0x1240 [ 765.536517] __sys_sendmmsg+0x56b/0xa90 [ 765.540502] __se_sys_sendmmsg+0xbd/0xe0 [ 765.544575] __x64_sys_sendmmsg+0x56/0x70 [ 765.548737] do_syscall_64+0xcf/0x110 [ 765.552561] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.557757] [ 765.559394] Uninit was stored to memory at: [ 765.563733] kmsan_internal_chain_origin+0x136/0x240 [ 765.568850] __msan_chain_origin+0x6d/0xb0 [ 765.573105] __save_stack_trace+0x8be/0xc60 [ 765.577443] save_stack_trace+0xc6/0x110 [ 765.581532] kmsan_internal_chain_origin+0x136/0x240 [ 765.586653] kmsan_memcpy_origins+0x13d/0x190 [ 765.591162] __msan_memcpy+0x6f/0x80 [ 765.594892] pskb_expand_head+0x436/0x1d20 [ 765.599143] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.603131] pppol2tp_sendmsg+0x79a/0xba0 [ 765.607296] ___sys_sendmsg+0xe3b/0x1240 [ 765.611375] __sys_sendmmsg+0x56b/0xa90 [ 765.615363] __se_sys_sendmmsg+0xbd/0xe0 [ 765.619439] __x64_sys_sendmmsg+0x56/0x70 [ 765.623614] do_syscall_64+0xcf/0x110 [ 765.627437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.632641] [ 765.634271] Uninit was stored to memory at: [ 765.638609] kmsan_internal_chain_origin+0x136/0x240 [ 765.643727] __msan_chain_origin+0x6d/0xb0 [ 765.647984] __save_stack_trace+0x8be/0xc60 [ 765.652323] save_stack_trace+0xc6/0x110 [ 765.656430] kmsan_internal_chain_origin+0x136/0x240 [ 765.661561] kmsan_memcpy_origins+0x13d/0x190 [ 765.666094] __msan_memcpy+0x6f/0x80 [ 765.669819] pskb_expand_head+0x436/0x1d20 [ 765.674083] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.678134] pppol2tp_sendmsg+0x79a/0xba0 [ 765.682301] ___sys_sendmsg+0xe3b/0x1240 [ 765.686375] __sys_sendmmsg+0x56b/0xa90 [ 765.690362] __se_sys_sendmmsg+0xbd/0xe0 [ 765.694436] __x64_sys_sendmmsg+0x56/0x70 [ 765.698612] do_syscall_64+0xcf/0x110 [ 765.702431] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.707631] [ 765.709264] Uninit was stored to memory at: [ 765.713605] kmsan_internal_chain_origin+0x136/0x240 [ 765.718728] __msan_chain_origin+0x6d/0xb0 [ 765.722982] __save_stack_trace+0x8be/0xc60 [ 765.727319] save_stack_trace+0xc6/0x110 [ 765.731394] kmsan_internal_chain_origin+0x136/0x240 [ 765.736512] kmsan_memcpy_origins+0x13d/0x190 [ 765.741022] __msan_memcpy+0x6f/0x80 [ 765.744754] pskb_expand_head+0x436/0x1d20 [ 765.749003] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.752992] pppol2tp_sendmsg+0x79a/0xba0 [ 765.757151] ___sys_sendmsg+0xe3b/0x1240 [ 765.761222] __sys_sendmmsg+0x56b/0xa90 [ 765.765207] __se_sys_sendmmsg+0xbd/0xe0 [ 765.769284] __x64_sys_sendmmsg+0x56/0x70 [ 765.773457] do_syscall_64+0xcf/0x110 [ 765.777277] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.782477] [ 765.784108] Uninit was stored to memory at: [ 765.788460] kmsan_internal_chain_origin+0x136/0x240 [ 765.793579] __msan_chain_origin+0x6d/0xb0 [ 765.797827] __save_stack_trace+0x8be/0xc60 [ 765.802164] save_stack_trace+0xc6/0x110 [ 765.806245] kmsan_internal_chain_origin+0x136/0x240 [ 765.811364] kmsan_memcpy_origins+0x13d/0x190 [ 765.815877] __msan_memcpy+0x6f/0x80 [ 765.819611] pskb_expand_head+0x436/0x1d20 [ 765.823863] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.827850] pppol2tp_sendmsg+0x79a/0xba0 [ 765.832014] ___sys_sendmsg+0xe3b/0x1240 [ 765.836092] __sys_sendmmsg+0x56b/0xa90 [ 765.840081] __se_sys_sendmmsg+0xbd/0xe0 [ 765.844155] __x64_sys_sendmmsg+0x56/0x70 [ 765.848332] do_syscall_64+0xcf/0x110 [ 765.852153] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.857351] [ 765.858987] Uninit was stored to memory at: [ 765.863325] kmsan_internal_chain_origin+0x136/0x240 [ 765.868447] __msan_chain_origin+0x6d/0xb0 [ 765.872708] __save_stack_trace+0x8be/0xc60 [ 765.877043] save_stack_trace+0xc6/0x110 [ 765.881121] kmsan_internal_chain_origin+0x136/0x240 [ 765.886259] kmsan_memcpy_origins+0x13d/0x190 [ 765.890768] __msan_memcpy+0x6f/0x80 [ 765.894496] pskb_expand_head+0x436/0x1d20 [ 765.898747] l2tp_xmit_skb+0x5a7/0x24b0 [ 765.902733] pppol2tp_sendmsg+0x79a/0xba0 [ 765.906892] ___sys_sendmsg+0xe3b/0x1240 [ 765.910973] __sys_sendmmsg+0x56b/0xa90 [ 765.914960] __se_sys_sendmmsg+0xbd/0xe0 [ 765.919041] __x64_sys_sendmmsg+0x56/0x70 [ 765.923204] do_syscall_64+0xcf/0x110 [ 765.927029] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.932219] 17:13:05 executing program 2: 17:13:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x0, 0x0, {0x1803}}, 0x14}}, 0x0) [ 765.933858] Local variable description: ----iph@ip_vs_out [ 765.939397] Variable was created at: [ 765.943143] ip_vs_out+0x1bf/0x4570 [ 765.946785] ip_vs_local_reply6+0xec/0x130 [ 766.046076] not chained 1320000 origins [ 766.050111] CPU: 0 PID: 19130 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 766.057399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.066768] Call Trace: [ 766.069393] dump_stack+0x32d/0x480 [ 766.073073] kmsan_internal_chain_origin+0x222/0x240 [ 766.078242] ? save_stack_trace+0xc6/0x110 [ 766.082517] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 766.087654] ? kmsan_internal_chain_origin+0x90/0x240 [ 766.092888] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 766.098277] ? is_bpf_text_address+0x49e/0x4d0 [ 766.102894] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 766.108376] ? in_task_stack+0x12c/0x210 [ 766.112495] __msan_chain_origin+0x6d/0xb0 [ 766.116766] ? do_syscall_64+0xcf/0x110 [ 766.120770] __save_stack_trace+0x8be/0xc60 [ 766.125150] ? do_syscall_64+0xcf/0x110 [ 766.129161] save_stack_trace+0xc6/0x110 [ 766.133261] kmsan_internal_chain_origin+0x136/0x240 [ 766.138404] ? kmsan_internal_chain_origin+0x136/0x240 [ 766.143708] ? kmsan_memcpy_origins+0x13d/0x190 [ 766.148402] ? __msan_memcpy+0x6f/0x80 [ 766.152334] ? pskb_expand_head+0x436/0x1d20 [ 766.156768] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 766.160946] ? pppol2tp_sendmsg+0x79a/0xba0 [ 766.165317] ? ___sys_sendmsg+0xe3b/0x1240 [ 766.169577] ? __sys_sendmmsg+0x56b/0xa90 [ 766.173748] ? __se_sys_sendmmsg+0xbd/0xe0 [ 766.178040] ? __x64_sys_sendmmsg+0x56/0x70 [ 766.182382] ? do_syscall_64+0xcf/0x110 [ 766.186401] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.191802] ? __msan_poison_alloca+0x1e0/0x270 17:13:06 executing program 2: listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f00000000c0), 0x10000000000003e9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x0, "03e09d87a2ca26bc"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:13:06 executing program 4: execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)=',\x00', &(0x7f00000000c0)='/)\x00', &(0x7f0000000140)='\x00'], &(0x7f0000000340)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='posix_acl_access)\x00', &(0x7f00000002c0), &(0x7f0000000300)='\'\'wlan0\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0xc]}) [ 766.196553] ? __msan_get_context_state+0x9/0x20 [ 766.201340] ? INIT_INT+0xc/0x30 [ 766.204911] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 766.210328] kmsan_memcpy_origins+0x13d/0x190 [ 766.214871] __msan_memcpy+0x6f/0x80 [ 766.218615] pskb_expand_head+0x436/0x1d20 [ 766.222910] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.226955] pppol2tp_sendmsg+0x79a/0xba0 [ 766.231176] ___sys_sendmsg+0xe3b/0x1240 [ 766.235265] ? pppol2tp_getsockopt+0x1060/0x1060 [ 766.240080] ? __msan_poison_alloca+0x1e0/0x270 [ 766.244777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.250181] ? rcu_all_qs+0x3b/0x2b0 [ 766.253928] ? _cond_resched+0x59/0x120 [ 766.257939] ? rcu_all_qs+0x53/0x2b0 [ 766.261709] ? _cond_resched+0x37/0x120 [ 766.265704] ? __sys_sendmmsg+0x7c9/0xa90 [ 766.269883] ? _cond_resched+0x59/0x120 [ 766.273901] __sys_sendmmsg+0x56b/0xa90 [ 766.277970] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 766.283482] ? prepare_exit_to_usermode+0x182/0x4c0 [ 766.288541] __se_sys_sendmmsg+0xbd/0xe0 [ 766.292639] __x64_sys_sendmmsg+0x56/0x70 [ 766.296820] do_syscall_64+0xcf/0x110 [ 766.300655] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.305866] RIP: 0033:0x457569 [ 766.309085] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.328005] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.335742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 766.343035] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 766.350326] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 766.357620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 766.365397] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 766.372702] Uninit was stored to memory at: [ 766.377062] kmsan_internal_chain_origin+0x136/0x240 [ 766.382194] __msan_chain_origin+0x6d/0xb0 [ 766.386473] __save_stack_trace+0x8be/0xc60 [ 766.390822] save_stack_trace+0xc6/0x110 [ 766.394912] kmsan_internal_chain_origin+0x136/0x240 [ 766.400045] kmsan_memcpy_origins+0x13d/0x190 [ 766.404595] __msan_memcpy+0x6f/0x80 [ 766.408339] pskb_expand_head+0x436/0x1d20 [ 766.412599] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.416596] pppol2tp_sendmsg+0x79a/0xba0 [ 766.420770] ___sys_sendmsg+0xe3b/0x1240 [ 766.424854] __sys_sendmmsg+0x56b/0xa90 [ 766.428852] __se_sys_sendmmsg+0xbd/0xe0 [ 766.432941] __x64_sys_sendmmsg+0x56/0x70 [ 766.437117] do_syscall_64+0xcf/0x110 [ 766.440951] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.446149] 17:13:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d", 0x4}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) [ 766.447794] Uninit was stored to memory at: [ 766.452140] kmsan_internal_chain_origin+0x136/0x240 [ 766.457268] __msan_chain_origin+0x6d/0xb0 [ 766.461529] __save_stack_trace+0x8be/0xc60 [ 766.465877] save_stack_trace+0xc6/0x110 [ 766.469971] kmsan_internal_chain_origin+0x136/0x240 [ 766.475114] kmsan_memcpy_origins+0x13d/0x190 [ 766.479636] __msan_memcpy+0x6f/0x80 [ 766.483385] pskb_expand_head+0x436/0x1d20 [ 766.487648] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.491644] pppol2tp_sendmsg+0x79a/0xba0 [ 766.495818] ___sys_sendmsg+0xe3b/0x1240 [ 766.500671] __sys_sendmmsg+0x56b/0xa90 [ 766.504667] __se_sys_sendmmsg+0xbd/0xe0 [ 766.508762] __x64_sys_sendmmsg+0x56/0x70 [ 766.512933] do_syscall_64+0xcf/0x110 [ 766.516765] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.521991] [ 766.523641] Uninit was stored to memory at: [ 766.527994] kmsan_internal_chain_origin+0x136/0x240 [ 766.533124] __msan_chain_origin+0x6d/0xb0 [ 766.537389] __save_stack_trace+0x8be/0xc60 [ 766.541735] save_stack_trace+0xc6/0x110 17:13:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setflags(r3, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x100) close(r3) close(r2) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x40000) mknodat(r4, &(0x7f00000000c0)='./file0\x00', 0x800, 0x3) [ 766.545827] kmsan_internal_chain_origin+0x136/0x240 [ 766.550969] kmsan_memcpy_origins+0x13d/0x190 [ 766.555505] __msan_memcpy+0x6f/0x80 [ 766.559246] pskb_expand_head+0x436/0x1d20 [ 766.563508] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.567518] pppol2tp_sendmsg+0x79a/0xba0 [ 766.571691] ___sys_sendmsg+0xe3b/0x1240 [ 766.575809] __sys_sendmmsg+0x56b/0xa90 [ 766.579810] __se_sys_sendmmsg+0xbd/0xe0 [ 766.583898] __x64_sys_sendmmsg+0x56/0x70 [ 766.588071] do_syscall_64+0xcf/0x110 [ 766.591904] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.597105] [ 766.598749] Uninit was stored to memory at: [ 766.603101] kmsan_internal_chain_origin+0x136/0x240 [ 766.608225] __msan_chain_origin+0x6d/0xb0 [ 766.612505] __save_stack_trace+0x8be/0xc60 [ 766.616857] save_stack_trace+0xc6/0x110 [ 766.620952] kmsan_internal_chain_origin+0x136/0x240 [ 766.626138] kmsan_memcpy_origins+0x13d/0x190 [ 766.630660] __msan_memcpy+0x6f/0x80 [ 766.634405] pskb_expand_head+0x436/0x1d20 [ 766.638677] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.642678] pppol2tp_sendmsg+0x79a/0xba0 [ 766.646854] ___sys_sendmsg+0xe3b/0x1240 [ 766.650939] __sys_sendmmsg+0x56b/0xa90 [ 766.654945] __se_sys_sendmmsg+0xbd/0xe0 [ 766.659048] __x64_sys_sendmmsg+0x56/0x70 [ 766.663225] do_syscall_64+0xcf/0x110 [ 766.667057] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.672261] [ 766.673902] Uninit was stored to memory at: [ 766.678251] kmsan_internal_chain_origin+0x136/0x240 [ 766.683383] __msan_chain_origin+0x6d/0xb0 [ 766.687647] __save_stack_trace+0x8be/0xc60 [ 766.691995] save_stack_trace+0xc6/0x110 [ 766.696128] kmsan_internal_chain_origin+0x136/0x240 [ 766.701261] kmsan_memcpy_origins+0x13d/0x190 [ 766.705787] __msan_memcpy+0x6f/0x80 [ 766.709530] pskb_expand_head+0x436/0x1d20 [ 766.713797] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.717799] pppol2tp_sendmsg+0x79a/0xba0 [ 766.722006] ___sys_sendmsg+0xe3b/0x1240 [ 766.726156] __sys_sendmmsg+0x56b/0xa90 [ 766.730172] __se_sys_sendmmsg+0xbd/0xe0 [ 766.734255] __x64_sys_sendmmsg+0x56/0x70 [ 766.738434] do_syscall_64+0xcf/0x110 [ 766.742292] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.747508] [ 766.749152] Uninit was stored to memory at: [ 766.753516] kmsan_internal_chain_origin+0x136/0x240 [ 766.758647] __msan_chain_origin+0x6d/0xb0 [ 766.762915] __save_stack_trace+0x8be/0xc60 [ 766.767296] save_stack_trace+0xc6/0x110 [ 766.771389] kmsan_internal_chain_origin+0x136/0x240 [ 766.776518] kmsan_memcpy_origins+0x13d/0x190 [ 766.781039] __msan_memcpy+0x6f/0x80 [ 766.784781] pskb_expand_head+0x436/0x1d20 [ 766.789044] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.793049] pppol2tp_sendmsg+0x79a/0xba0 [ 766.797234] ___sys_sendmsg+0xe3b/0x1240 [ 766.801332] __sys_sendmmsg+0x56b/0xa90 [ 766.805313] __se_sys_sendmmsg+0xbd/0xe0 [ 766.809384] __x64_sys_sendmmsg+0x56/0x70 [ 766.813545] do_syscall_64+0xcf/0x110 [ 766.817357] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.822555] [ 766.824197] Uninit was stored to memory at: [ 766.828570] kmsan_internal_chain_origin+0x136/0x240 [ 766.833700] __msan_chain_origin+0x6d/0xb0 [ 766.837961] __save_stack_trace+0x8be/0xc60 [ 766.842314] save_stack_trace+0xc6/0x110 [ 766.846403] kmsan_internal_chain_origin+0x136/0x240 [ 766.851575] kmsan_memcpy_origins+0x13d/0x190 [ 766.856133] __msan_memcpy+0x6f/0x80 [ 766.859874] pskb_expand_head+0x436/0x1d20 [ 766.864136] l2tp_xmit_skb+0x5a7/0x24b0 [ 766.868178] pppol2tp_sendmsg+0x79a/0xba0 [ 766.872350] ___sys_sendmsg+0xe3b/0x1240 [ 766.876438] __sys_sendmmsg+0x56b/0xa90 [ 766.880474] __se_sys_sendmmsg+0xbd/0xe0 [ 766.884587] __x64_sys_sendmmsg+0x56/0x70 [ 766.888758] do_syscall_64+0xcf/0x110 [ 766.892589] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.897793] [ 766.899432] Local variable description: ----iph@ip_vs_out [ 766.904996] Variable was created at: [ 766.908733] ip_vs_out+0x1bf/0x4570 [ 766.912379] ip_vs_local_reply6+0xec/0x130 17:13:07 executing program 4: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2080, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x8000) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80, 0x20000) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x18000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x400, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x414040, 0x0) dup2(r1, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200800) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffefffc) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x4000000000001, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x0, 0x0, {0x1803}}, 0x14}}, 0x0) 17:13:07 executing program 2: listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f00000000c0), 0x10000000000003e9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x0, "03e09d87a2ca26bc"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 767.584402] not chained 1330000 origins [ 767.588462] CPU: 0 PID: 19130 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 767.595756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.605126] Call Trace: [ 767.607749] dump_stack+0x32d/0x480 [ 767.611424] kmsan_internal_chain_origin+0x222/0x240 [ 767.616607] ? save_stack_trace+0xc6/0x110 [ 767.620878] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 767.626047] ? kmsan_internal_chain_origin+0x90/0x240 [ 767.631302] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 767.636693] ? is_bpf_text_address+0x49e/0x4d0 [ 767.641314] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 767.646792] ? in_task_stack+0x12c/0x210 [ 767.650898] __msan_chain_origin+0x6d/0xb0 [ 767.655163] ? kmsan_internal_chain_origin+0x136/0x240 [ 767.660481] __save_stack_trace+0x8be/0xc60 [ 767.664863] ? kmsan_internal_chain_origin+0x136/0x240 [ 767.670181] save_stack_trace+0xc6/0x110 [ 767.674280] kmsan_internal_chain_origin+0x136/0x240 [ 767.679424] ? kmsan_internal_chain_origin+0x136/0x240 [ 767.684738] ? kmsan_memcpy_origins+0x13d/0x190 [ 767.689432] ? __msan_memcpy+0x6f/0x80 [ 767.693362] ? pskb_expand_head+0x436/0x1d20 [ 767.697794] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 767.701961] ? pppol2tp_sendmsg+0x79a/0xba0 [ 767.706304] ? ___sys_sendmsg+0xe3b/0x1240 [ 767.710561] ? __sys_sendmmsg+0x56b/0xa90 [ 767.714729] ? __se_sys_sendmmsg+0xbd/0xe0 [ 767.718988] ? __x64_sys_sendmmsg+0x56/0x70 [ 767.723358] ? do_syscall_64+0xcf/0x110 [ 767.727363] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 767.732761] ? __msan_poison_alloca+0x1e0/0x270 [ 767.737513] ? __msan_get_context_state+0x9/0x20 [ 767.742305] ? INIT_INT+0xc/0x30 [ 767.745703] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 767.751114] kmsan_memcpy_origins+0x13d/0x190 [ 767.755649] __msan_memcpy+0x6f/0x80 [ 767.759398] pskb_expand_head+0x436/0x1d20 [ 767.763702] l2tp_xmit_skb+0x5a7/0x24b0 [ 767.767750] pppol2tp_sendmsg+0x79a/0xba0 [ 767.771973] ___sys_sendmsg+0xe3b/0x1240 [ 767.776073] ? pppol2tp_getsockopt+0x1060/0x1060 [ 767.780894] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 767.786295] ? kmsan_set_origin+0x7f/0x100 [ 767.790569] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 767.795981] ? _cond_resched+0xc7/0x120 [ 767.799990] __sys_sendmmsg+0x56b/0xa90 [ 767.804029] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 767.809523] ? prepare_exit_to_usermode+0x182/0x4c0 [ 767.814612] __se_sys_sendmmsg+0xbd/0xe0 [ 767.818721] __x64_sys_sendmmsg+0x56/0x70 [ 767.822902] do_syscall_64+0xcf/0x110 [ 767.826742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 767.831959] RIP: 0033:0x457569 [ 767.835197] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.854123] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 767.861850] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 767.869146] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 767.876429] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.883724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 767.891007] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 767.898310] Uninit was stored to memory at: [ 767.902656] kmsan_internal_chain_origin+0x136/0x240 [ 767.907776] __msan_chain_origin+0x6d/0xb0 [ 767.912033] __save_stack_trace+0x8be/0xc60 [ 767.916369] save_stack_trace+0xc6/0x110 [ 767.920449] kmsan_internal_chain_origin+0x136/0x240 [ 767.925584] kmsan_memcpy_origins+0x13d/0x190 [ 767.930093] __msan_memcpy+0x6f/0x80 [ 767.933824] pskb_expand_head+0x436/0x1d20 [ 767.938080] l2tp_xmit_skb+0x5a7/0x24b0 [ 767.942066] pppol2tp_sendmsg+0x79a/0xba0 [ 767.946227] ___sys_sendmsg+0xe3b/0x1240 [ 767.950300] __sys_sendmmsg+0x56b/0xa90 [ 767.954287] __se_sys_sendmmsg+0xbd/0xe0 [ 767.958361] __x64_sys_sendmmsg+0x56/0x70 [ 767.962528] do_syscall_64+0xcf/0x110 [ 767.966345] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 767.971535] [ 767.973174] Uninit was stored to memory at: [ 767.977515] kmsan_internal_chain_origin+0x136/0x240 [ 767.982636] __msan_chain_origin+0x6d/0xb0 [ 767.986889] __save_stack_trace+0x8be/0xc60 [ 767.991222] save_stack_trace+0xc6/0x110 [ 767.995300] kmsan_internal_chain_origin+0x136/0x240 [ 768.000419] kmsan_memcpy_origins+0x13d/0x190 [ 768.004942] __msan_memcpy+0x6f/0x80 [ 768.008682] pskb_expand_head+0x436/0x1d20 [ 768.012958] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.016950] pppol2tp_sendmsg+0x79a/0xba0 [ 768.021111] ___sys_sendmsg+0xe3b/0x1240 [ 768.025185] __sys_sendmmsg+0x56b/0xa90 [ 768.029176] __se_sys_sendmmsg+0xbd/0xe0 [ 768.033249] __x64_sys_sendmmsg+0x56/0x70 [ 768.037409] do_syscall_64+0xcf/0x110 [ 768.041230] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.046425] [ 768.048068] Uninit was stored to memory at: [ 768.052408] kmsan_internal_chain_origin+0x136/0x240 [ 768.057529] __msan_chain_origin+0x6d/0xb0 [ 768.061781] __save_stack_trace+0x8be/0xc60 [ 768.066119] save_stack_trace+0xc6/0x110 [ 768.070192] kmsan_internal_chain_origin+0x136/0x240 [ 768.075309] kmsan_memcpy_origins+0x13d/0x190 [ 768.079820] __msan_memcpy+0x6f/0x80 [ 768.083557] pskb_expand_head+0x436/0x1d20 [ 768.087812] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.091797] pppol2tp_sendmsg+0x79a/0xba0 [ 768.095956] ___sys_sendmsg+0xe3b/0x1240 [ 768.100028] __sys_sendmmsg+0x56b/0xa90 [ 768.104019] __se_sys_sendmmsg+0xbd/0xe0 [ 768.108092] __x64_sys_sendmmsg+0x56/0x70 [ 768.112259] do_syscall_64+0xcf/0x110 [ 768.116079] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.121270] [ 768.122904] Uninit was stored to memory at: [ 768.127243] kmsan_internal_chain_origin+0x136/0x240 [ 768.132363] __msan_chain_origin+0x6d/0xb0 [ 768.136625] __save_stack_trace+0x8be/0xc60 [ 768.140961] save_stack_trace+0xc6/0x110 [ 768.145040] kmsan_internal_chain_origin+0x136/0x240 [ 768.150157] kmsan_memcpy_origins+0x13d/0x190 [ 768.154670] __msan_memcpy+0x6f/0x80 [ 768.158403] pskb_expand_head+0x436/0x1d20 [ 768.162658] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.166644] pppol2tp_sendmsg+0x79a/0xba0 [ 768.170803] ___sys_sendmsg+0xe3b/0x1240 [ 768.174889] __sys_sendmmsg+0x56b/0xa90 [ 768.178879] __se_sys_sendmmsg+0xbd/0xe0 [ 768.182956] __x64_sys_sendmmsg+0x56/0x70 [ 768.187136] do_syscall_64+0xcf/0x110 [ 768.190970] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.196178] [ 768.197810] Uninit was stored to memory at: [ 768.202162] kmsan_internal_chain_origin+0x136/0x240 [ 768.207293] __msan_chain_origin+0x6d/0xb0 [ 768.211544] __save_stack_trace+0x8be/0xc60 [ 768.215882] save_stack_trace+0xc6/0x110 [ 768.219964] kmsan_internal_chain_origin+0x136/0x240 [ 768.225082] kmsan_memcpy_origins+0x13d/0x190 [ 768.229593] __msan_memcpy+0x6f/0x80 [ 768.233330] pskb_expand_head+0x436/0x1d20 [ 768.237585] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.241572] pppol2tp_sendmsg+0x79a/0xba0 [ 768.245738] ___sys_sendmsg+0xe3b/0x1240 [ 768.249815] __sys_sendmmsg+0x56b/0xa90 [ 768.253802] __se_sys_sendmmsg+0xbd/0xe0 [ 768.257887] __x64_sys_sendmmsg+0x56/0x70 [ 768.262079] do_syscall_64+0xcf/0x110 [ 768.265901] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.271089] [ 768.272725] Uninit was stored to memory at: [ 768.277064] kmsan_internal_chain_origin+0x136/0x240 [ 768.282185] __msan_chain_origin+0x6d/0xb0 [ 768.286447] __save_stack_trace+0x8be/0xc60 [ 768.290803] save_stack_trace+0xc6/0x110 [ 768.294883] kmsan_internal_chain_origin+0x136/0x240 [ 768.300004] kmsan_memcpy_origins+0x13d/0x190 [ 768.304520] __msan_memcpy+0x6f/0x80 [ 768.308249] pskb_expand_head+0x436/0x1d20 [ 768.312519] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.316510] pppol2tp_sendmsg+0x79a/0xba0 [ 768.320675] ___sys_sendmsg+0xe3b/0x1240 [ 768.324748] __sys_sendmmsg+0x56b/0xa90 [ 768.328733] __se_sys_sendmmsg+0xbd/0xe0 [ 768.332811] __x64_sys_sendmmsg+0x56/0x70 [ 768.336971] do_syscall_64+0xcf/0x110 [ 768.340790] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.345983] [ 768.347619] Uninit was stored to memory at: [ 768.351962] kmsan_internal_chain_origin+0x136/0x240 [ 768.357084] __msan_chain_origin+0x6d/0xb0 [ 768.361334] __save_stack_trace+0x8be/0xc60 [ 768.366190] save_stack_trace+0xc6/0x110 [ 768.370266] kmsan_internal_chain_origin+0x136/0x240 [ 768.375386] kmsan_memcpy_origins+0x13d/0x190 [ 768.379897] __msan_memcpy+0x6f/0x80 [ 768.383640] pskb_expand_head+0x436/0x1d20 [ 768.387894] l2tp_xmit_skb+0x5a7/0x24b0 [ 768.391881] pppol2tp_sendmsg+0x79a/0xba0 [ 768.396044] ___sys_sendmsg+0xe3b/0x1240 [ 768.400119] __sys_sendmmsg+0x56b/0xa90 [ 768.404108] __se_sys_sendmmsg+0xbd/0xe0 [ 768.408182] __x64_sys_sendmmsg+0x56/0x70 [ 768.412350] do_syscall_64+0xcf/0x110 [ 768.416174] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.421386] [ 768.423025] Local variable description: ----iph@ip_vs_out [ 768.428563] Variable was created at: [ 768.432299] ip_vs_out+0x1bf/0x4570 [ 768.435942] ip_vs_local_reply6+0xec/0x130 17:13:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0x4}]}, 0x18}}, 0x0) 17:13:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r0) close(r2) 17:13:08 executing program 4: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x4, 0xf201, 0x1, 0x5, 0xa, [{0x8000, 0xff, 0x0, 0x0, 0x0, 0x400}, {0x100, 0x5, 0xfff, 0x0, 0x0, 0xc}, {0x3f5a, 0x8, 0x2, 0x0, 0x0, 0x80}, {0x1000, 0x7, 0x8}, {0xfffffffffffffff9, 0x8, 0xef, 0x0, 0x0, 0x200}, {0x1, 0xfffffffffffffffb, 0x2, 0x0, 0x0, 0x1402}, {0x8000, 0x200, 0x9, 0x0, 0x0, 0x220b}, {0x80, 0xfff, 0x7, 0x0, 0x0, 0x800}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {0x100, 0x1, 0x3, 0x0, 0x0, 0x2}]}) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:08 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) close(r0) 17:13:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0x4}]}, 0x18}}, 0x0) [ 768.895266] not chained 1340000 origins [ 768.899322] CPU: 0 PID: 19199 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 768.906621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.915993] Call Trace: [ 768.918621] dump_stack+0x32d/0x480 [ 768.922320] kmsan_internal_chain_origin+0x222/0x240 [ 768.927513] ? save_stack_trace+0xc6/0x110 [ 768.931786] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 768.936927] ? kmsan_internal_chain_origin+0x90/0x240 [ 768.942169] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 768.947563] ? is_bpf_text_address+0x49e/0x4d0 [ 768.952193] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 768.957681] ? in_task_stack+0x12c/0x210 [ 768.961807] __msan_chain_origin+0x6d/0xb0 [ 768.966080] ? do_syscall_64+0xcf/0x110 [ 768.970091] __save_stack_trace+0x8be/0xc60 [ 768.974498] ? do_syscall_64+0xcf/0x110 [ 768.978540] save_stack_trace+0xc6/0x110 [ 768.982646] kmsan_internal_chain_origin+0x136/0x240 [ 768.987797] ? kmsan_internal_chain_origin+0x136/0x240 [ 768.993108] ? kmsan_memcpy_origins+0x13d/0x190 [ 768.997808] ? __msan_memcpy+0x6f/0x80 [ 769.001729] ? pskb_expand_head+0x436/0x1d20 [ 769.006170] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 769.010349] ? pppol2tp_sendmsg+0x79a/0xba0 [ 769.014694] ? ___sys_sendmsg+0xe3b/0x1240 [ 769.018951] ? __sys_sendmmsg+0x56b/0xa90 [ 769.023132] ? __se_sys_sendmmsg+0xbd/0xe0 [ 769.027389] ? __x64_sys_sendmmsg+0x56/0x70 [ 769.031732] ? do_syscall_64+0xcf/0x110 [ 769.035740] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.041141] ? __msan_poison_alloca+0x1e0/0x270 [ 769.045871] ? __msan_get_context_state+0x9/0x20 [ 769.050648] ? INIT_INT+0xc/0x30 [ 769.054036] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 769.059437] kmsan_memcpy_origins+0x13d/0x190 [ 769.063983] __msan_memcpy+0x6f/0x80 [ 769.067731] pskb_expand_head+0x436/0x1d20 [ 769.072025] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.076063] pppol2tp_sendmsg+0x79a/0xba0 [ 769.080266] ___sys_sendmsg+0xe3b/0x1240 [ 769.084350] ? pppol2tp_getsockopt+0x1060/0x1060 [ 769.089155] ? __msan_poison_alloca+0x1e0/0x270 [ 769.093851] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 769.099247] ? rcu_all_qs+0x3b/0x2b0 [ 769.102983] ? _cond_resched+0x59/0x120 [ 769.106991] ? rcu_all_qs+0x53/0x2b0 [ 769.110723] ? _cond_resched+0x37/0x120 [ 769.114729] ? __sys_sendmmsg+0x7c9/0xa90 [ 769.118903] ? _cond_resched+0x59/0x120 [ 769.122903] __sys_sendmmsg+0x56b/0xa90 [ 769.126934] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 769.132443] ? prepare_exit_to_usermode+0x182/0x4c0 [ 769.137538] __se_sys_sendmmsg+0xbd/0xe0 [ 769.141637] __x64_sys_sendmmsg+0x56/0x70 [ 769.145808] do_syscall_64+0xcf/0x110 [ 769.149638] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.154865] RIP: 0033:0x457569 [ 769.158080] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.176995] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 769.184783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 769.192071] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 769.199351] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.206634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 769.213922] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 769.221224] Uninit was stored to memory at: [ 769.225577] kmsan_internal_chain_origin+0x136/0x240 [ 769.230697] __msan_chain_origin+0x6d/0xb0 [ 769.234954] __save_stack_trace+0x8be/0xc60 [ 769.239293] save_stack_trace+0xc6/0x110 [ 769.243387] kmsan_internal_chain_origin+0x136/0x240 [ 769.248530] kmsan_memcpy_origins+0x13d/0x190 [ 769.253041] __msan_memcpy+0x6f/0x80 [ 769.256773] pskb_expand_head+0x436/0x1d20 [ 769.261071] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.265063] pppol2tp_sendmsg+0x79a/0xba0 [ 769.269223] ___sys_sendmsg+0xe3b/0x1240 [ 769.273295] __sys_sendmmsg+0x56b/0xa90 [ 769.277283] __se_sys_sendmmsg+0xbd/0xe0 [ 769.281371] __x64_sys_sendmmsg+0x56/0x70 [ 769.285537] do_syscall_64+0xcf/0x110 [ 769.289357] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.294550] [ 769.296182] Uninit was stored to memory at: [ 769.300523] kmsan_internal_chain_origin+0x136/0x240 [ 769.305641] __msan_chain_origin+0x6d/0xb0 [ 769.309895] __save_stack_trace+0x8be/0xc60 [ 769.314230] save_stack_trace+0xc6/0x110 [ 769.318310] kmsan_internal_chain_origin+0x136/0x240 [ 769.323450] kmsan_memcpy_origins+0x13d/0x190 [ 769.327981] __msan_memcpy+0x6f/0x80 [ 769.331712] pskb_expand_head+0x436/0x1d20 [ 769.335962] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.339947] pppol2tp_sendmsg+0x79a/0xba0 [ 769.344116] ___sys_sendmsg+0xe3b/0x1240 [ 769.348194] __sys_sendmmsg+0x56b/0xa90 [ 769.352182] __se_sys_sendmmsg+0xbd/0xe0 [ 769.356262] __x64_sys_sendmmsg+0x56/0x70 [ 769.360428] do_syscall_64+0xcf/0x110 [ 769.364263] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.369452] [ 769.371096] Uninit was stored to memory at: [ 769.375441] kmsan_internal_chain_origin+0x136/0x240 [ 769.380572] __msan_chain_origin+0x6d/0xb0 [ 769.384850] __save_stack_trace+0x8be/0xc60 [ 769.389196] save_stack_trace+0xc6/0x110 [ 769.393274] kmsan_internal_chain_origin+0x136/0x240 [ 769.398391] kmsan_memcpy_origins+0x13d/0x190 [ 769.402900] __msan_memcpy+0x6f/0x80 [ 769.406633] pskb_expand_head+0x436/0x1d20 [ 769.410898] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.414888] pppol2tp_sendmsg+0x79a/0xba0 [ 769.419051] ___sys_sendmsg+0xe3b/0x1240 [ 769.423125] __sys_sendmmsg+0x56b/0xa90 [ 769.427110] __se_sys_sendmmsg+0xbd/0xe0 [ 769.431188] __x64_sys_sendmmsg+0x56/0x70 [ 769.435358] do_syscall_64+0xcf/0x110 [ 769.439180] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.444392] [ 769.446040] Uninit was stored to memory at: [ 769.450392] kmsan_internal_chain_origin+0x136/0x240 [ 769.455516] __msan_chain_origin+0x6d/0xb0 [ 769.459765] __save_stack_trace+0x8be/0xc60 [ 769.464119] save_stack_trace+0xc6/0x110 [ 769.468214] kmsan_internal_chain_origin+0x136/0x240 [ 769.473334] kmsan_memcpy_origins+0x13d/0x190 [ 769.477843] __msan_memcpy+0x6f/0x80 [ 769.481592] pskb_expand_head+0x436/0x1d20 [ 769.485851] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.489836] pppol2tp_sendmsg+0x79a/0xba0 [ 769.493999] ___sys_sendmsg+0xe3b/0x1240 [ 769.498299] __sys_sendmmsg+0x56b/0xa90 [ 769.502287] __se_sys_sendmmsg+0xbd/0xe0 [ 769.506360] __x64_sys_sendmmsg+0x56/0x70 [ 769.510534] do_syscall_64+0xcf/0x110 [ 769.514354] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.519543] [ 769.521172] Uninit was stored to memory at: [ 769.525513] kmsan_internal_chain_origin+0x136/0x240 [ 769.530632] __msan_chain_origin+0x6d/0xb0 [ 769.534885] __save_stack_trace+0x8be/0xc60 [ 769.539222] save_stack_trace+0xc6/0x110 [ 769.543306] kmsan_internal_chain_origin+0x136/0x240 [ 769.548441] kmsan_memcpy_origins+0x13d/0x190 [ 769.552965] __msan_memcpy+0x6f/0x80 [ 769.556700] pskb_expand_head+0x436/0x1d20 [ 769.560953] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.564940] pppol2tp_sendmsg+0x79a/0xba0 [ 769.569103] ___sys_sendmsg+0xe3b/0x1240 [ 769.573182] __sys_sendmmsg+0x56b/0xa90 [ 769.577170] __se_sys_sendmmsg+0xbd/0xe0 [ 769.581243] __x64_sys_sendmmsg+0x56/0x70 [ 769.585427] do_syscall_64+0xcf/0x110 [ 769.589261] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.594452] [ 769.596969] Uninit was stored to memory at: [ 769.601314] kmsan_internal_chain_origin+0x136/0x240 [ 769.606436] __msan_chain_origin+0x6d/0xb0 [ 769.610704] __save_stack_trace+0x8be/0xc60 [ 769.615040] save_stack_trace+0xc6/0x110 [ 769.619119] kmsan_internal_chain_origin+0x136/0x240 [ 769.624236] kmsan_memcpy_origins+0x13d/0x190 [ 769.628746] __msan_memcpy+0x6f/0x80 [ 769.632494] pskb_expand_head+0x436/0x1d20 [ 769.636751] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.640738] pppol2tp_sendmsg+0x79a/0xba0 [ 769.644899] ___sys_sendmsg+0xe3b/0x1240 [ 769.648970] __sys_sendmmsg+0x56b/0xa90 [ 769.653002] __se_sys_sendmmsg+0xbd/0xe0 [ 769.657092] __x64_sys_sendmmsg+0x56/0x70 [ 769.661252] do_syscall_64+0xcf/0x110 [ 769.665071] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.670263] [ 769.671896] Uninit was stored to memory at: [ 769.676237] kmsan_internal_chain_origin+0x136/0x240 [ 769.681355] __msan_chain_origin+0x6d/0xb0 [ 769.685613] __save_stack_trace+0x8be/0xc60 [ 769.689952] save_stack_trace+0xc6/0x110 [ 769.694078] kmsan_internal_chain_origin+0x136/0x240 [ 769.699198] kmsan_memcpy_origins+0x13d/0x190 [ 769.703719] __msan_memcpy+0x6f/0x80 [ 769.707454] pskb_expand_head+0x436/0x1d20 [ 769.711722] l2tp_xmit_skb+0x5a7/0x24b0 [ 769.715714] pppol2tp_sendmsg+0x79a/0xba0 [ 769.719872] ___sys_sendmsg+0xe3b/0x1240 [ 769.723980] __sys_sendmmsg+0x56b/0xa90 [ 769.727969] __se_sys_sendmmsg+0xbd/0xe0 [ 769.732049] __x64_sys_sendmmsg+0x56/0x70 [ 769.736255] do_syscall_64+0xcf/0x110 [ 769.740076] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.745281] 17:13:09 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x10200, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r2, r3, 0x1, 0xcf, &(0x7f0000000140)="bd11d267800c612103b3b25138e762d1d68de723e28b6fb03e630dff2a", 0x1, 0xffffffffffffffff, 0x10000, 0x8000, 0x800, 0x5, 0x8000, "03c8ebee22c35fc9118f8368bd71076405ee5798886e5dae86ec48c75a2ac0d495465d697f7f7422c2eaa55594ba9790e4cc207df124d36d6a7dbc9921cdd1dff0e249d6a8e444759d103536c890b5d414e6b86f44ca48091bcaaf0e172ab4bf614651cefdd62e732c4b061c2f8761aace02faadd1fc7bfa8652535c2a6048146b6c08d00e5470ab10eadbd11aabec02c615d1c00a3d1cebdbef787c2e77d28ef8c4771e28875ccfedc18b97402f2cc24f284295e61208e601fffb93e5d750cd53"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x104001ff) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r5) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) ioctl(r6, 0x4f283589, &(0x7f0000000280)="6422fd72b37d55e04f6e25a4176ba861c78b37bcc970c2daef66440bf316c46cddc013c6092c94b756c5743f1172c99c293136e8d760a6de948110b2f3f7cc325f8df983f92c6e5e6a5cf82a03e8e8eb920571d67d0f") syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x2000) [ 769.746922] Local variable description: ----iph@ip_vs_out [ 769.752475] Variable was created at: [ 769.756211] ip_vs_out+0x1bf/0x4570 [ 769.759853] ip_vs_local_reply6+0xec/0x130 17:13:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x229, &(0x7f0000000440)={@local, @link_local, [], {@mpls_mc={0x8848, {[{0x7, 0x1, 0x2, 0x80}, {0xfffffffffffffffb, 0x20, 0x6, 0x753}, {0x401, 0x100000000, 0x1, 0x10001}, {0x800, 0xff, 0x80000001, 0xfffffffffffffff9}, {0x7, 0x1fffc000, 0x1, 0x9}, {0x7, 0x9, 0x27f2}, {0x8, 0xffffffffffffffff, 0x7, 0x7fffffff}], @ipv6={0x7, 0x6, "49aa22", 0x1d7, 0x2f, 0x22, @empty, @loopback, {[@routing={0x1d, 0x4, 0x0, 0x10000, 0x0, [@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, @empty]}, @dstopts={0x7c, 0x5, [], [@pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000}, @generic={0x8, 0x13, "ffb1fb9b014bedd2978e0faa6e0333df4bb9bc"}, @enc_lim={0x4, 0x1, 0x7f}]}, @routing={0xaf, 0xe, 0x2, 0x1f, 0x0, [@mcast2, @ipv4={[], [], @broadcast}, @mcast2, @local, @mcast2, @dev={0xfe, 0x80, [], 0x1e}, @local]}], @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xf, 0x90e0, "1fc576", 0x7fffffff, "01216f"}, "9f7c613591333f8afd5f203b0f8a3d5e400084909f0af2dcd408628d8cf481878ce109efc85041dff303c610d1ee98bd0cb8d238404fd0aff08b89e1c5cd4dd9535911e0f2ec795936cfbdde01c1769416122977107ac597c3c6b4992ecc6e76b9dcec0880f867454cfc5be3ec3e09a688338caee907019b6b82a0df7635a17dfa2c5442e96fbf1fb0c6f6ca839dd6f97fb7ddefabbd71d5baff8927d25ecebb022bc7df41e88225c0e74fad528c0db385eed100e59168777c423ab524614e2c54f02881a5a9f31900a7412a6bdb4c162d5ced79ad69bab7817da632b3f48e4110d53e2fcfe856f7dc27241162662a"}}}}}}}, &(0x7f0000000040)) 17:13:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0xf8, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={0xfffffffffffffffd}, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11f}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)={0xe, 0x0, 0xffffffffffffffff, 0x5, 0xef, "02981e2c893bf04203a99bb000d20ad881075bab3a5b02ecd37736442267e59144fb4a15d50c4b1f8fbb46b782d9ce7b751757ab787847ec7bff4730f22d1cf33caa6b7476141be7bdcf6c11c678be690ff31792f10186d6227dc2b3f74d56163050148c55e5d33e5a0ded32b86a75903d3f7991d943a67de00a413009042f87887bebe33acd9ea937320c16adfb75629e752e0553caa473a64ffb1435a49a6281251830ce3b231b13143340ddb637af9d0fe029cdadd428bbea32156d8eadb122668b3180ec7ada840001ee25d9a65f372824dd55d59825f95be7b2f26cbda95a997566eb7a36efbaae5098bb5923"}, 0xfb) 17:13:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x3385) 17:13:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0x4}]}, 0x18}}, 0x0) [ 770.166611] not chained 1350000 origins [ 770.170656] CPU: 0 PID: 19199 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 770.177970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.187339] Call Trace: [ 770.189962] dump_stack+0x32d/0x480 [ 770.193643] kmsan_internal_chain_origin+0x222/0x240 [ 770.198821] ? save_stack_trace+0xc6/0x110 [ 770.203094] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 770.208233] ? kmsan_internal_chain_origin+0x90/0x240 [ 770.213486] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 770.218882] ? is_bpf_text_address+0x49e/0x4d0 [ 770.223519] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 770.228998] ? in_task_stack+0x12c/0x210 [ 770.233106] __msan_chain_origin+0x6d/0xb0 [ 770.237403] ? pppol2tp_sendmsg+0x79a/0xba0 [ 770.241752] __save_stack_trace+0x8be/0xc60 [ 770.246139] ? pppol2tp_sendmsg+0x79a/0xba0 [ 770.250512] save_stack_trace+0xc6/0x110 [ 770.254617] kmsan_internal_chain_origin+0x136/0x240 [ 770.259765] ? kmsan_internal_chain_origin+0x136/0x240 [ 770.265088] ? kmsan_memcpy_origins+0x13d/0x190 [ 770.269785] ? __msan_memcpy+0x6f/0x80 [ 770.273718] ? pskb_expand_head+0x436/0x1d20 [ 770.278159] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 770.282338] ? pppol2tp_sendmsg+0x79a/0xba0 [ 770.286695] ? ___sys_sendmsg+0xe3b/0x1240 [ 770.290959] ? __sys_sendmmsg+0x56b/0xa90 [ 770.295149] ? __se_sys_sendmmsg+0xbd/0xe0 [ 770.299420] ? __x64_sys_sendmmsg+0x56/0x70 [ 770.303788] ? do_syscall_64+0xcf/0x110 [ 770.307813] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.313227] ? __msan_poison_alloca+0x1e0/0x270 [ 770.317966] ? __msan_get_context_state+0x9/0x20 [ 770.322752] ? INIT_INT+0xc/0x30 [ 770.326145] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 770.331562] kmsan_memcpy_origins+0x13d/0x190 [ 770.336110] __msan_memcpy+0x6f/0x80 [ 770.339861] pskb_expand_head+0x436/0x1d20 [ 770.344161] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.348205] pppol2tp_sendmsg+0x79a/0xba0 [ 770.352417] ___sys_sendmsg+0xe3b/0x1240 [ 770.356525] ? pppol2tp_getsockopt+0x1060/0x1060 [ 770.361344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 770.367258] ? kmsan_set_origin+0x7f/0x100 [ 770.371530] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 770.376947] ? _cond_resched+0xc7/0x120 [ 770.380955] __sys_sendmmsg+0x56b/0xa90 [ 770.384998] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 770.390503] ? prepare_exit_to_usermode+0x182/0x4c0 [ 770.395567] __se_sys_sendmmsg+0xbd/0xe0 [ 770.399670] __x64_sys_sendmmsg+0x56/0x70 [ 770.403856] do_syscall_64+0xcf/0x110 [ 770.407694] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.412905] RIP: 0033:0x457569 [ 770.416128] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.435053] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.442793] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 770.450091] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 770.457383] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.464675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 770.471973] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 770.479297] Uninit was stored to memory at: [ 770.483650] kmsan_internal_chain_origin+0x136/0x240 [ 770.488777] __msan_chain_origin+0x6d/0xb0 [ 770.493038] __save_stack_trace+0x8be/0xc60 [ 770.497397] save_stack_trace+0xc6/0x110 [ 770.502232] kmsan_internal_chain_origin+0x136/0x240 [ 770.507361] kmsan_memcpy_origins+0x13d/0x190 [ 770.511881] __msan_memcpy+0x6f/0x80 [ 770.515624] pskb_expand_head+0x436/0x1d20 [ 770.519887] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.523886] pppol2tp_sendmsg+0x79a/0xba0 [ 770.528063] ___sys_sendmsg+0xe3b/0x1240 [ 770.532151] __sys_sendmmsg+0x56b/0xa90 [ 770.536148] __se_sys_sendmmsg+0xbd/0xe0 [ 770.540230] __x64_sys_sendmmsg+0x56/0x70 [ 770.544399] do_syscall_64+0xcf/0x110 [ 770.548230] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.553426] [ 770.555083] Uninit was stored to memory at: [ 770.559432] kmsan_internal_chain_origin+0x136/0x240 [ 770.564570] __msan_chain_origin+0x6d/0xb0 [ 770.568834] __save_stack_trace+0x8be/0xc60 [ 770.573182] save_stack_trace+0xc6/0x110 [ 770.577273] kmsan_internal_chain_origin+0x136/0x240 [ 770.582408] kmsan_memcpy_origins+0x13d/0x190 [ 770.586923] __msan_memcpy+0x6f/0x80 [ 770.590680] pskb_expand_head+0x436/0x1d20 [ 770.594936] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.598928] pppol2tp_sendmsg+0x79a/0xba0 [ 770.603095] ___sys_sendmsg+0xe3b/0x1240 [ 770.607179] __sys_sendmmsg+0x56b/0xa90 [ 770.611177] __se_sys_sendmmsg+0xbd/0xe0 [ 770.615256] __x64_sys_sendmmsg+0x56/0x70 [ 770.619437] do_syscall_64+0xcf/0x110 [ 770.623284] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.628506] [ 770.630150] Uninit was stored to memory at: [ 770.634529] kmsan_internal_chain_origin+0x136/0x240 [ 770.639657] __msan_chain_origin+0x6d/0xb0 [ 770.643922] __save_stack_trace+0x8be/0xc60 [ 770.648302] save_stack_trace+0xc6/0x110 [ 770.652387] kmsan_internal_chain_origin+0x136/0x240 [ 770.657555] kmsan_memcpy_origins+0x13d/0x190 [ 770.662081] __msan_memcpy+0x6f/0x80 [ 770.665826] pskb_expand_head+0x436/0x1d20 [ 770.670091] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.674087] pppol2tp_sendmsg+0x79a/0xba0 [ 770.678263] ___sys_sendmsg+0xe3b/0x1240 [ 770.682350] __sys_sendmmsg+0x56b/0xa90 [ 770.686350] __se_sys_sendmmsg+0xbd/0xe0 [ 770.690431] __x64_sys_sendmmsg+0x56/0x70 [ 770.694625] do_syscall_64+0xcf/0x110 [ 770.698454] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.703674] [ 770.705317] Uninit was stored to memory at: [ 770.709666] kmsan_internal_chain_origin+0x136/0x240 [ 770.714794] __msan_chain_origin+0x6d/0xb0 [ 770.719068] __save_stack_trace+0x8be/0xc60 [ 770.723420] save_stack_trace+0xc6/0x110 [ 770.727534] kmsan_internal_chain_origin+0x136/0x240 [ 770.732670] kmsan_memcpy_origins+0x13d/0x190 [ 770.737190] __msan_memcpy+0x6f/0x80 [ 770.740928] pskb_expand_head+0x436/0x1d20 [ 770.745191] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.749189] pppol2tp_sendmsg+0x79a/0xba0 [ 770.753362] ___sys_sendmsg+0xe3b/0x1240 [ 770.757448] __sys_sendmmsg+0x56b/0xa90 [ 770.761514] __se_sys_sendmmsg+0xbd/0xe0 [ 770.765606] __x64_sys_sendmmsg+0x56/0x70 [ 770.769781] do_syscall_64+0xcf/0x110 [ 770.773614] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.778817] [ 770.780478] Uninit was stored to memory at: [ 770.784839] kmsan_internal_chain_origin+0x136/0x240 [ 770.789969] __msan_chain_origin+0x6d/0xb0 [ 770.794230] __save_stack_trace+0x8be/0xc60 [ 770.798575] save_stack_trace+0xc6/0x110 [ 770.802666] kmsan_internal_chain_origin+0x136/0x240 [ 770.807793] kmsan_memcpy_origins+0x13d/0x190 [ 770.812311] __msan_memcpy+0x6f/0x80 [ 770.816054] pskb_expand_head+0x436/0x1d20 [ 770.820314] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.824313] pppol2tp_sendmsg+0x79a/0xba0 [ 770.828500] ___sys_sendmsg+0xe3b/0x1240 [ 770.832588] __sys_sendmmsg+0x56b/0xa90 [ 770.836587] __se_sys_sendmmsg+0xbd/0xe0 [ 770.840674] __x64_sys_sendmmsg+0x56/0x70 [ 770.844844] do_syscall_64+0xcf/0x110 [ 770.848671] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.853884] [ 770.855539] Uninit was stored to memory at: [ 770.859890] kmsan_internal_chain_origin+0x136/0x240 [ 770.865037] __msan_chain_origin+0x6d/0xb0 [ 770.869303] __save_stack_trace+0x8be/0xc60 [ 770.873652] save_stack_trace+0xc6/0x110 [ 770.877745] kmsan_internal_chain_origin+0x136/0x240 [ 770.882871] kmsan_memcpy_origins+0x13d/0x190 [ 770.887376] __msan_memcpy+0x6f/0x80 [ 770.891103] pskb_expand_head+0x436/0x1d20 [ 770.895348] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.899332] pppol2tp_sendmsg+0x79a/0xba0 [ 770.903499] ___sys_sendmsg+0xe3b/0x1240 [ 770.907575] __sys_sendmmsg+0x56b/0xa90 [ 770.911573] __se_sys_sendmmsg+0xbd/0xe0 [ 770.915659] __x64_sys_sendmmsg+0x56/0x70 [ 770.919828] do_syscall_64+0xcf/0x110 [ 770.923656] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.928853] [ 770.930500] Uninit was stored to memory at: [ 770.934845] kmsan_internal_chain_origin+0x136/0x240 [ 770.939971] __msan_chain_origin+0x6d/0xb0 [ 770.944233] __save_stack_trace+0x8be/0xc60 [ 770.948576] save_stack_trace+0xc6/0x110 [ 770.952657] kmsan_internal_chain_origin+0x136/0x240 [ 770.957786] kmsan_memcpy_origins+0x13d/0x190 [ 770.962306] __msan_memcpy+0x6f/0x80 [ 770.966047] pskb_expand_head+0x436/0x1d20 [ 770.970316] l2tp_xmit_skb+0x5a7/0x24b0 [ 770.974327] pppol2tp_sendmsg+0x79a/0xba0 [ 770.978517] ___sys_sendmsg+0xe3b/0x1240 [ 770.982595] __sys_sendmmsg+0x56b/0xa90 [ 770.986603] __se_sys_sendmmsg+0xbd/0xe0 [ 770.990682] __x64_sys_sendmmsg+0x56/0x70 [ 770.994844] do_syscall_64+0xcf/0x110 [ 770.998661] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.003857] [ 771.005510] Local variable description: ----iph@ip_vs_out [ 771.011053] Variable was created at: [ 771.014789] ip_vs_out+0x1bf/0x4570 17:13:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @u32}]}]}, 0x20}}, 0x0) 17:13:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) [ 771.018436] ip_vs_local_reply6+0xec/0x130 17:13:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x50001) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 771.260222] not chained 1360000 origins [ 771.264276] CPU: 0 PID: 19199 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 771.271570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.280947] Call Trace: [ 771.283575] dump_stack+0x32d/0x480 [ 771.287241] ? save_stack_trace+0xc6/0x110 [ 771.291536] kmsan_internal_chain_origin+0x222/0x240 [ 771.296697] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 771.302269] ? is_bpf_text_address+0x49e/0x4d0 [ 771.306889] ? INIT_INT+0xc/0x30 [ 771.310296] ? __msan_warning+0x76/0xc0 [ 771.314310] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 771.319792] ? __save_stack_trace+0x9f2/0xc60 [ 771.324346] __msan_chain_origin+0x6d/0xb0 [ 771.328620] save_stack_trace+0xfa/0x110 [ 771.332739] kmsan_internal_chain_origin+0x136/0x240 [ 771.337885] ? kmsan_internal_chain_origin+0x136/0x240 [ 771.343189] ? kmsan_memcpy_origins+0x13d/0x190 [ 771.347884] ? __msan_memcpy+0x6f/0x80 [ 771.351800] ? pskb_expand_head+0x436/0x1d20 [ 771.356233] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 771.360406] ? pppol2tp_sendmsg+0x79a/0xba0 [ 771.365239] ? ___sys_sendmsg+0xe3b/0x1240 [ 771.369512] ? __sys_sendmmsg+0x56b/0xa90 [ 771.373682] ? __se_sys_sendmmsg+0xbd/0xe0 [ 771.377942] ? __x64_sys_sendmmsg+0x56/0x70 [ 771.382290] ? do_syscall_64+0xcf/0x110 [ 771.386290] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.391685] ? __msan_poison_alloca+0x1e0/0x270 [ 771.396419] ? __msan_get_context_state+0x9/0x20 [ 771.401222] ? INIT_INT+0xc/0x30 [ 771.404617] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 771.410032] kmsan_memcpy_origins+0x13d/0x190 [ 771.414569] __msan_memcpy+0x6f/0x80 [ 771.418325] pskb_expand_head+0x436/0x1d20 [ 771.422631] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.426678] pppol2tp_sendmsg+0x79a/0xba0 [ 771.430895] ___sys_sendmsg+0xe3b/0x1240 [ 771.434990] ? pppol2tp_getsockopt+0x1060/0x1060 [ 771.439806] ? __msan_poison_alloca+0x1e0/0x270 [ 771.444525] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 771.449930] ? rcu_all_qs+0x3b/0x2b0 [ 771.453672] ? _cond_resched+0x59/0x120 [ 771.457680] ? rcu_all_qs+0x53/0x2b0 [ 771.461421] ? _cond_resched+0x37/0x120 [ 771.465444] ? __sys_sendmmsg+0x7c9/0xa90 [ 771.469650] ? _cond_resched+0x59/0x120 [ 771.473651] __sys_sendmmsg+0x56b/0xa90 [ 771.477693] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 771.483183] ? prepare_exit_to_usermode+0x182/0x4c0 [ 771.488252] __se_sys_sendmmsg+0xbd/0xe0 [ 771.492355] __x64_sys_sendmmsg+0x56/0x70 [ 771.496675] do_syscall_64+0xcf/0x110 [ 771.500522] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.505732] RIP: 0033:0x457569 [ 771.508947] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.527867] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 771.535596] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 771.542883] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 771.550170] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 771.557477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 771.564768] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 771.572076] Uninit was stored to memory at: [ 771.576431] kmsan_internal_chain_origin+0x136/0x240 [ 771.581581] __msan_chain_origin+0x6d/0xb0 [ 771.585847] save_stack_trace+0xfa/0x110 [ 771.589932] kmsan_internal_chain_origin+0x136/0x240 [ 771.595060] kmsan_memcpy_origins+0x13d/0x190 [ 771.599581] __msan_memcpy+0x6f/0x80 [ 771.603323] pskb_expand_head+0x436/0x1d20 [ 771.607589] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.611587] pppol2tp_sendmsg+0x79a/0xba0 [ 771.615761] ___sys_sendmsg+0xe3b/0x1240 [ 771.619851] __sys_sendmmsg+0x56b/0xa90 [ 771.623840] __se_sys_sendmmsg+0xbd/0xe0 [ 771.627893] __x64_sys_sendmmsg+0x56/0x70 [ 771.632058] do_syscall_64+0xcf/0x110 [ 771.635885] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.641080] [ 771.642697] Uninit was stored to memory at: [ 771.647042] kmsan_internal_chain_origin+0x136/0x240 [ 771.652176] __msan_chain_origin+0x6d/0xb0 [ 771.656441] __save_stack_trace+0x833/0xc60 [ 771.660791] save_stack_trace+0xc6/0x110 [ 771.664863] kmsan_internal_chain_origin+0x136/0x240 [ 771.669960] kmsan_memcpy_origins+0x13d/0x190 [ 771.674484] __msan_memcpy+0x6f/0x80 [ 771.678228] pskb_expand_head+0x436/0x1d20 [ 771.682485] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.686466] pppol2tp_sendmsg+0x79a/0xba0 [ 771.690617] ___sys_sendmsg+0xe3b/0x1240 [ 771.694689] __sys_sendmmsg+0x56b/0xa90 [ 771.698675] __se_sys_sendmmsg+0xbd/0xe0 [ 771.702729] __x64_sys_sendmmsg+0x56/0x70 [ 771.706874] do_syscall_64+0xcf/0x110 [ 771.710683] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.715886] [ 771.717522] Uninit was stored to memory at: [ 771.721841] kmsan_internal_chain_origin+0x136/0x240 [ 771.726958] __msan_chain_origin+0x6d/0xb0 [ 771.731205] save_stack_trace+0xfa/0x110 [ 771.735263] kmsan_internal_chain_origin+0x136/0x240 [ 771.740361] kmsan_memcpy_origins+0x13d/0x190 [ 771.744852] __msan_memcpy+0x6f/0x80 [ 771.748563] pskb_expand_head+0x436/0x1d20 [ 771.752796] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.756766] pppol2tp_sendmsg+0x79a/0xba0 [ 771.760920] ___sys_sendmsg+0xe3b/0x1240 [ 771.764998] __sys_sendmmsg+0x56b/0xa90 [ 771.768966] __se_sys_sendmmsg+0xbd/0xe0 [ 771.773039] __x64_sys_sendmmsg+0x56/0x70 [ 771.777199] do_syscall_64+0xcf/0x110 [ 771.781012] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.786186] [ 771.787800] Uninit was stored to memory at: [ 771.792130] kmsan_internal_chain_origin+0x136/0x240 [ 771.797243] __msan_chain_origin+0x6d/0xb0 [ 771.801486] __save_stack_trace+0x833/0xc60 [ 771.805816] save_stack_trace+0xc6/0x110 [ 771.809888] kmsan_internal_chain_origin+0x136/0x240 [ 771.814989] kmsan_memcpy_origins+0x13d/0x190 [ 771.819510] __msan_memcpy+0x6f/0x80 [ 771.823252] pskb_expand_head+0x436/0x1d20 [ 771.827502] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.831482] pppol2tp_sendmsg+0x79a/0xba0 [ 771.835637] ___sys_sendmsg+0xe3b/0x1240 [ 771.839709] __sys_sendmmsg+0x56b/0xa90 [ 771.843675] __se_sys_sendmmsg+0xbd/0xe0 [ 771.847727] __x64_sys_sendmmsg+0x56/0x70 [ 771.851888] do_syscall_64+0xcf/0x110 [ 771.855708] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.860884] [ 771.862502] Uninit was stored to memory at: [ 771.866832] kmsan_internal_chain_origin+0x136/0x240 [ 771.871944] __msan_chain_origin+0x6d/0xb0 [ 771.876190] save_stack_trace+0xfa/0x110 [ 771.880263] kmsan_internal_chain_origin+0x136/0x240 [ 771.885358] kmsan_memcpy_origins+0x13d/0x190 [ 771.889845] __msan_memcpy+0x6f/0x80 [ 771.893553] pskb_expand_head+0x436/0x1d20 [ 771.897781] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.901747] pppol2tp_sendmsg+0x79a/0xba0 [ 771.905887] ___sys_sendmsg+0xe3b/0x1240 [ 771.909938] __sys_sendmmsg+0x56b/0xa90 [ 771.913909] __se_sys_sendmmsg+0xbd/0xe0 [ 771.917976] __x64_sys_sendmmsg+0x56/0x70 [ 771.922125] do_syscall_64+0xcf/0x110 [ 771.925921] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.931093] [ 771.932705] Uninit was stored to memory at: [ 771.937019] kmsan_internal_chain_origin+0x136/0x240 [ 771.942129] __msan_chain_origin+0x6d/0xb0 [ 771.946354] __save_stack_trace+0x833/0xc60 [ 771.950683] save_stack_trace+0xc6/0x110 [ 771.954754] kmsan_internal_chain_origin+0x136/0x240 [ 771.959866] kmsan_memcpy_origins+0x13d/0x190 [ 771.964352] __msan_memcpy+0x6f/0x80 [ 771.968058] pskb_expand_head+0x436/0x1d20 [ 771.972285] l2tp_xmit_skb+0x5a7/0x24b0 [ 771.976249] pppol2tp_sendmsg+0x79a/0xba0 [ 771.980385] ___sys_sendmsg+0xe3b/0x1240 [ 771.984455] __sys_sendmmsg+0x56b/0xa90 [ 771.988434] __se_sys_sendmmsg+0xbd/0xe0 [ 771.992495] __x64_sys_sendmmsg+0x56/0x70 [ 771.996632] do_syscall_64+0xcf/0x110 [ 772.000437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.005618] [ 772.007233] Uninit was stored to memory at: [ 772.011554] kmsan_internal_chain_origin+0x136/0x240 [ 772.016690] __msan_chain_origin+0x6d/0xb0 [ 772.020918] save_stack_trace+0xfa/0x110 [ 772.024976] kmsan_internal_chain_origin+0x136/0x240 [ 772.030071] kmsan_memcpy_origins+0x13d/0x190 [ 772.034574] __msan_memcpy+0x6f/0x80 [ 772.038282] pskb_expand_head+0x436/0x1d20 [ 772.042511] l2tp_xmit_skb+0x5a7/0x24b0 [ 772.046483] pppol2tp_sendmsg+0x79a/0xba0 [ 772.050622] ___sys_sendmsg+0xe3b/0x1240 [ 772.054673] __sys_sendmmsg+0x56b/0xa90 [ 772.058640] __se_sys_sendmmsg+0xbd/0xe0 [ 772.062696] __x64_sys_sendmmsg+0x56/0x70 [ 772.066838] do_syscall_64+0xcf/0x110 [ 772.070634] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.075823] [ 772.077442] Local variable description: ----iph@ip_vs_out [ 772.082970] Variable was created at: [ 772.086675] ip_vs_out+0x1bf/0x4570 [ 772.090333] ip_vs_local_reply6+0xec/0x130 17:13:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @u32}]}]}, 0x20}}, 0x0) 17:13:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0xa7100100, &(0x7f0000000800)}) 17:13:12 executing program 4: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080048009078ac00ac1414bb000000000000000000000038b093f1440e0c84673d4e26dbf9d01bb96a41265d6859ed70af9954e0f7e45bf657bec72d4b1f460b85e9d4392c5d4697f51c81789e48451b5db999017e58a3e8505895ac1b77a8c3b0232d66e627732afc94c87a528d7edafd11c85e3867800148c62beba966934047fe07fa7ae18004369c2d4baddc58d7b52c6da453f33293345558322d13d53f970a7ae20000c089b5c60000000000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000001d309dcb0090780000"], &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x880, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000200)) 17:13:12 executing program 5: socketpair$unix(0x1, 0x200000004, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) [ 772.451821] not chained 1370000 origins [ 772.455875] CPU: 0 PID: 19263 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 772.463169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.472539] Call Trace: [ 772.475170] dump_stack+0x32d/0x480 [ 772.478850] kmsan_internal_chain_origin+0x222/0x240 [ 772.484015] ? save_stack_trace+0xc6/0x110 [ 772.488294] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 772.493432] ? kmsan_internal_chain_origin+0x90/0x240 [ 772.498684] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 772.504074] ? is_bpf_text_address+0x49e/0x4d0 [ 772.508687] ? apic_timer_interrupt+0xa/0x20 [ 772.513130] ? __entry_text_end+0x7/0x7 [ 772.517165] __msan_chain_origin+0x6d/0xb0 [ 772.521438] ? ___sys_sendmsg+0xe3b/0x1240 [ 772.525715] __save_stack_trace+0x8be/0xc60 [ 772.530099] ? ___sys_sendmsg+0xe3b/0x1240 [ 772.534368] save_stack_trace+0xc6/0x110 [ 772.538498] kmsan_internal_chain_origin+0x136/0x240 [ 772.543650] ? kmsan_internal_chain_origin+0x136/0x240 [ 772.548956] ? kmsan_memcpy_origins+0x13d/0x190 [ 772.553653] ? __msan_memcpy+0x6f/0x80 [ 772.557579] ? pskb_expand_head+0x436/0x1d20 [ 772.562025] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 772.566206] ? pppol2tp_sendmsg+0x79a/0xba0 [ 772.570558] ? ___sys_sendmsg+0xe3b/0x1240 [ 772.574848] ? __sys_sendmmsg+0x56b/0xa90 [ 772.579033] ? __se_sys_sendmmsg+0xbd/0xe0 [ 772.583294] ? __x64_sys_sendmmsg+0x56/0x70 [ 772.587649] ? do_syscall_64+0xcf/0x110 [ 772.591663] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.597071] ? __msan_poison_alloca+0x1e0/0x270 [ 772.601826] ? __msan_get_context_state+0x9/0x20 [ 772.606651] ? INIT_INT+0xc/0x30 [ 772.610057] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 772.615510] kmsan_memcpy_origins+0x13d/0x190 [ 772.620062] __msan_memcpy+0x6f/0x80 [ 772.623823] pskb_expand_head+0x436/0x1d20 [ 772.628139] l2tp_xmit_skb+0x5a7/0x24b0 [ 772.632197] pppol2tp_sendmsg+0x79a/0xba0 [ 772.636422] ___sys_sendmsg+0xe3b/0x1240 [ 772.640557] ? pppol2tp_getsockopt+0x1060/0x1060 [ 772.645383] ? __msan_poison_alloca+0x1e0/0x270 [ 772.650092] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 772.655518] ? rcu_all_qs+0x3b/0x2b0 [ 772.659279] ? _cond_resched+0x59/0x120 [ 772.663300] ? rcu_all_qs+0x53/0x2b0 [ 772.667046] ? _cond_resched+0x37/0x120 [ 772.671058] ? __sys_sendmmsg+0x7c9/0xa90 [ 772.675251] ? _cond_resched+0x59/0x120 [ 772.679270] __sys_sendmmsg+0x56b/0xa90 [ 772.683323] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 772.688813] ? prepare_exit_to_usermode+0x182/0x4c0 [ 772.693875] __se_sys_sendmmsg+0xbd/0xe0 [ 772.697991] __x64_sys_sendmmsg+0x56/0x70 [ 772.702176] do_syscall_64+0xcf/0x110 [ 772.706022] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.711243] RIP: 0033:0x457569 [ 772.714488] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.733417] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 772.741169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 772.748455] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 772.755753] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 772.763036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 772.770318] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 772.777619] Uninit was stored to memory at: [ 772.781967] kmsan_internal_chain_origin+0x136/0x240 [ 772.787087] __msan_chain_origin+0x6d/0xb0 [ 772.791335] __save_stack_trace+0x8be/0xc60 [ 772.795672] save_stack_trace+0xc6/0x110 [ 772.799748] kmsan_internal_chain_origin+0x136/0x240 [ 772.804867] kmsan_memcpy_origins+0x13d/0x190 [ 772.809375] __msan_memcpy+0x6f/0x80 [ 772.813110] pskb_expand_head+0x436/0x1d20 [ 772.817361] l2tp_xmit_skb+0x5a7/0x24b0 [ 772.821353] pppol2tp_sendmsg+0x79a/0xba0 [ 772.825518] ___sys_sendmsg+0xe3b/0x1240 [ 772.829590] __sys_sendmmsg+0x56b/0xa90 [ 772.833580] __se_sys_sendmmsg+0xbd/0xe0 [ 772.837654] __x64_sys_sendmmsg+0x56/0x70 [ 772.841823] do_syscall_64+0xcf/0x110 [ 772.845642] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.850857] [ 772.852501] Uninit was stored to memory at: [ 772.856839] kmsan_internal_chain_origin+0x136/0x240 [ 772.861960] __msan_chain_origin+0x6d/0xb0 [ 772.866213] __save_stack_trace+0x8be/0xc60 [ 772.870551] save_stack_trace+0xc6/0x110 [ 772.874627] kmsan_internal_chain_origin+0x136/0x240 [ 772.879744] kmsan_memcpy_origins+0x13d/0x190 [ 772.884253] __msan_memcpy+0x6f/0x80 [ 772.887981] pskb_expand_head+0x436/0x1d20 [ 772.892238] l2tp_xmit_skb+0x5a7/0x24b0 [ 772.896223] pppol2tp_sendmsg+0x79a/0xba0 [ 772.900382] ___sys_sendmsg+0xe3b/0x1240 [ 772.904458] __sys_sendmmsg+0x56b/0xa90 [ 772.908458] __se_sys_sendmmsg+0xbd/0xe0 [ 772.912548] __x64_sys_sendmmsg+0x56/0x70 [ 772.916711] do_syscall_64+0xcf/0x110 [ 772.920528] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.925717] [ 772.927346] Uninit was stored to memory at: [ 772.931684] kmsan_internal_chain_origin+0x136/0x240 [ 772.936809] __msan_chain_origin+0x6d/0xb0 [ 772.941060] __save_stack_trace+0x8be/0xc60 [ 772.945398] save_stack_trace+0xc6/0x110 [ 772.949486] kmsan_internal_chain_origin+0x136/0x240 [ 772.954610] kmsan_memcpy_origins+0x13d/0x190 [ 772.959118] __msan_memcpy+0x6f/0x80 [ 772.962856] pskb_expand_head+0x436/0x1d20 [ 772.967109] l2tp_xmit_skb+0x5a7/0x24b0 [ 772.971093] pppol2tp_sendmsg+0x79a/0xba0 [ 772.975255] ___sys_sendmsg+0xe3b/0x1240 [ 772.979326] __sys_sendmmsg+0x56b/0xa90 [ 772.983315] __se_sys_sendmmsg+0xbd/0xe0 [ 772.987404] __x64_sys_sendmmsg+0x56/0x70 [ 772.991573] do_syscall_64+0xcf/0x110 [ 772.995399] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.000594] [ 773.002226] Uninit was stored to memory at: [ 773.006565] kmsan_internal_chain_origin+0x136/0x240 [ 773.011687] __msan_chain_origin+0x6d/0xb0 [ 773.015943] __save_stack_trace+0x8be/0xc60 [ 773.020279] save_stack_trace+0xc6/0x110 [ 773.024361] kmsan_internal_chain_origin+0x136/0x240 [ 773.029490] kmsan_memcpy_origins+0x13d/0x190 [ 773.034002] __msan_memcpy+0x6f/0x80 [ 773.037737] pskb_expand_head+0x436/0x1d20 [ 773.041990] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.045977] pppol2tp_sendmsg+0x79a/0xba0 [ 773.050145] ___sys_sendmsg+0xe3b/0x1240 [ 773.054220] __sys_sendmmsg+0x56b/0xa90 [ 773.058210] __se_sys_sendmmsg+0xbd/0xe0 [ 773.062288] __x64_sys_sendmmsg+0x56/0x70 [ 773.066450] do_syscall_64+0xcf/0x110 [ 773.070294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.075504] [ 773.077141] Uninit was stored to memory at: [ 773.081488] kmsan_internal_chain_origin+0x136/0x240 [ 773.086618] __msan_chain_origin+0x6d/0xb0 [ 773.090871] __save_stack_trace+0x8be/0xc60 [ 773.095214] save_stack_trace+0xc6/0x110 [ 773.099294] kmsan_internal_chain_origin+0x136/0x240 [ 773.104424] kmsan_memcpy_origins+0x13d/0x190 [ 773.108949] __msan_memcpy+0x6f/0x80 [ 773.112683] pskb_expand_head+0x436/0x1d20 [ 773.116932] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.120919] pppol2tp_sendmsg+0x79a/0xba0 [ 773.125083] ___sys_sendmsg+0xe3b/0x1240 [ 773.129157] __sys_sendmmsg+0x56b/0xa90 [ 773.133148] __se_sys_sendmmsg+0xbd/0xe0 [ 773.137223] __x64_sys_sendmmsg+0x56/0x70 [ 773.141384] do_syscall_64+0xcf/0x110 [ 773.145205] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.150396] [ 773.152033] Uninit was stored to memory at: [ 773.156377] kmsan_internal_chain_origin+0x136/0x240 [ 773.161511] __msan_chain_origin+0x6d/0xb0 [ 773.165762] __save_stack_trace+0x8be/0xc60 [ 773.170095] save_stack_trace+0xc6/0x110 [ 773.174174] kmsan_internal_chain_origin+0x136/0x240 [ 773.179290] kmsan_memcpy_origins+0x13d/0x190 [ 773.183803] __msan_memcpy+0x6f/0x80 [ 773.187536] pskb_expand_head+0x436/0x1d20 [ 773.191790] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.195783] pppol2tp_sendmsg+0x79a/0xba0 [ 773.199945] ___sys_sendmsg+0xe3b/0x1240 [ 773.204023] __sys_sendmmsg+0x56b/0xa90 [ 773.208008] __se_sys_sendmmsg+0xbd/0xe0 [ 773.212083] __x64_sys_sendmmsg+0x56/0x70 [ 773.216243] do_syscall_64+0xcf/0x110 [ 773.220065] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.225261] [ 773.226892] Uninit was stored to memory at: [ 773.231229] kmsan_internal_chain_origin+0x136/0x240 [ 773.236347] __msan_chain_origin+0x6d/0xb0 [ 773.240602] __save_stack_trace+0x8be/0xc60 [ 773.244941] save_stack_trace+0xc6/0x110 [ 773.249020] kmsan_internal_chain_origin+0x136/0x240 [ 773.254140] kmsan_memcpy_origins+0x13d/0x190 [ 773.258654] __msan_memcpy+0x6f/0x80 [ 773.262391] pskb_expand_head+0x436/0x1d20 [ 773.266645] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.270631] pppol2tp_sendmsg+0x79a/0xba0 [ 773.274794] ___sys_sendmsg+0xe3b/0x1240 [ 773.278871] __sys_sendmmsg+0x56b/0xa90 [ 773.282863] __se_sys_sendmmsg+0xbd/0xe0 [ 773.286940] __x64_sys_sendmmsg+0x56/0x70 [ 773.291103] do_syscall_64+0xcf/0x110 [ 773.294927] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.300121] 17:13:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080048141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x121) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x20, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)=0x837) 17:13:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @u32}]}]}, 0x20}}, 0x0) 17:13:12 executing program 2: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x0, 0x30}, &(0x7f0000000200)=0x18) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/163) clone(0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) [ 773.301757] Local variable description: ----iph@ip_vs_out [ 773.307294] Variable was created at: [ 773.311026] ip_vs_out+0x1bf/0x4570 [ 773.314668] ip_vs_local_reply6+0xec/0x130 17:13:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) close(r1) [ 773.567280] not chained 1380000 origins [ 773.571319] CPU: 1 PID: 19263 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 773.578610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.587985] Call Trace: [ 773.590604] dump_stack+0x32d/0x480 [ 773.594284] kmsan_internal_chain_origin+0x222/0x240 [ 773.599452] ? save_stack_trace+0xc6/0x110 [ 773.603731] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 773.608866] ? kmsan_internal_chain_origin+0x90/0x240 [ 773.614104] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 773.619501] ? is_bpf_text_address+0x49e/0x4d0 [ 773.624118] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 773.629597] ? in_task_stack+0x12c/0x210 [ 773.633704] __msan_chain_origin+0x6d/0xb0 [ 773.637968] ? do_syscall_64+0xcf/0x110 [ 773.641987] __save_stack_trace+0x8be/0xc60 [ 773.646376] ? do_syscall_64+0xcf/0x110 [ 773.650382] save_stack_trace+0xc6/0x110 [ 773.654490] kmsan_internal_chain_origin+0x136/0x240 [ 773.659634] ? kmsan_internal_chain_origin+0x136/0x240 [ 773.664939] ? kmsan_memcpy_origins+0x13d/0x190 [ 773.669637] ? __msan_memcpy+0x6f/0x80 [ 773.673556] ? pskb_expand_head+0x436/0x1d20 [ 773.677999] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 773.682168] ? pppol2tp_sendmsg+0x79a/0xba0 [ 773.686518] ? ___sys_sendmsg+0xe3b/0x1240 [ 773.690774] ? __sys_sendmmsg+0x56b/0xa90 [ 773.694945] ? __se_sys_sendmmsg+0xbd/0xe0 [ 773.699224] ? __x64_sys_sendmmsg+0x56/0x70 [ 773.703584] ? do_syscall_64+0xcf/0x110 [ 773.707588] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.712995] ? __msan_poison_alloca+0x1e0/0x270 [ 773.717731] ? __msan_get_context_state+0x9/0x20 [ 773.722513] ? INIT_INT+0xc/0x30 [ 773.725923] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 773.731338] kmsan_memcpy_origins+0x13d/0x190 [ 773.735880] __msan_memcpy+0x6f/0x80 [ 773.739627] pskb_expand_head+0x436/0x1d20 [ 773.743924] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.747967] pppol2tp_sendmsg+0x79a/0xba0 [ 773.752187] ___sys_sendmsg+0xe3b/0x1240 [ 773.756292] ? pppol2tp_getsockopt+0x1060/0x1060 [ 773.761093] ? __msan_poison_alloca+0x1e0/0x270 [ 773.765797] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 773.771188] ? rcu_all_qs+0x3b/0x2b0 [ 773.774917] ? _cond_resched+0x59/0x120 [ 773.778920] ? rcu_all_qs+0x53/0x2b0 [ 773.782653] ? _cond_resched+0x37/0x120 [ 773.786643] ? __sys_sendmmsg+0x7c9/0xa90 [ 773.790818] ? _cond_resched+0x59/0x120 [ 773.794818] __sys_sendmmsg+0x56b/0xa90 [ 773.798852] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 773.804324] ? prepare_exit_to_usermode+0x182/0x4c0 [ 773.809373] __se_sys_sendmmsg+0xbd/0xe0 [ 773.813471] __x64_sys_sendmmsg+0x56/0x70 [ 773.817639] do_syscall_64+0xcf/0x110 [ 773.821462] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.826680] RIP: 0033:0x457569 [ 773.829890] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.848804] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 773.856532] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 773.863829] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 773.871112] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 773.878392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 773.885674] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 773.892980] Uninit was stored to memory at: [ 773.897323] kmsan_internal_chain_origin+0x136/0x240 [ 773.902451] __msan_chain_origin+0x6d/0xb0 [ 773.906711] __save_stack_trace+0x8be/0xc60 [ 773.911061] save_stack_trace+0xc6/0x110 [ 773.915143] kmsan_internal_chain_origin+0x136/0x240 [ 773.920265] kmsan_memcpy_origins+0x13d/0x190 [ 773.924785] __msan_memcpy+0x6f/0x80 [ 773.928521] pskb_expand_head+0x436/0x1d20 [ 773.932772] l2tp_xmit_skb+0x5a7/0x24b0 [ 773.936758] pppol2tp_sendmsg+0x79a/0xba0 [ 773.940917] ___sys_sendmsg+0xe3b/0x1240 [ 773.944996] __sys_sendmmsg+0x56b/0xa90 [ 773.948988] __se_sys_sendmmsg+0xbd/0xe0 [ 773.953064] __x64_sys_sendmmsg+0x56/0x70 [ 773.957235] do_syscall_64+0xcf/0x110 [ 773.961057] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.966247] [ 773.967877] Uninit was stored to memory at: [ 773.972232] kmsan_internal_chain_origin+0x136/0x240 [ 773.977359] __msan_chain_origin+0x6d/0xb0 [ 773.981618] __save_stack_trace+0x8be/0xc60 [ 773.985961] save_stack_trace+0xc6/0x110 [ 773.990044] kmsan_internal_chain_origin+0x136/0x240 [ 773.995172] kmsan_memcpy_origins+0x13d/0x190 [ 773.999681] __msan_memcpy+0x6f/0x80 [ 774.003431] pskb_expand_head+0x436/0x1d20 [ 774.007690] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.011678] pppol2tp_sendmsg+0x79a/0xba0 [ 774.015837] ___sys_sendmsg+0xe3b/0x1240 [ 774.019910] __sys_sendmmsg+0x56b/0xa90 [ 774.023900] __se_sys_sendmmsg+0xbd/0xe0 [ 774.027987] __x64_sys_sendmmsg+0x56/0x70 [ 774.032151] do_syscall_64+0xcf/0x110 [ 774.035970] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.041177] [ 774.042817] Uninit was stored to memory at: [ 774.047156] kmsan_internal_chain_origin+0x136/0x240 [ 774.052275] __msan_chain_origin+0x6d/0xb0 [ 774.056527] __save_stack_trace+0x8be/0xc60 [ 774.060866] save_stack_trace+0xc6/0x110 [ 774.064945] kmsan_internal_chain_origin+0x136/0x240 [ 774.070072] kmsan_memcpy_origins+0x13d/0x190 [ 774.074581] __msan_memcpy+0x6f/0x80 [ 774.078311] pskb_expand_head+0x436/0x1d20 [ 774.082563] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.086552] pppol2tp_sendmsg+0x79a/0xba0 [ 774.090714] ___sys_sendmsg+0xe3b/0x1240 [ 774.094791] __sys_sendmmsg+0x56b/0xa90 [ 774.098780] __se_sys_sendmmsg+0xbd/0xe0 [ 774.102860] __x64_sys_sendmmsg+0x56/0x70 [ 774.107022] do_syscall_64+0xcf/0x110 [ 774.110840] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.116033] [ 774.117668] Uninit was stored to memory at: [ 774.122034] kmsan_internal_chain_origin+0x136/0x240 [ 774.127157] __msan_chain_origin+0x6d/0xb0 [ 774.131413] __save_stack_trace+0x8be/0xc60 [ 774.135750] save_stack_trace+0xc6/0x110 [ 774.139824] kmsan_internal_chain_origin+0x136/0x240 [ 774.144942] kmsan_memcpy_origins+0x13d/0x190 [ 774.149474] __msan_memcpy+0x6f/0x80 [ 774.153219] pskb_expand_head+0x436/0x1d20 [ 774.157483] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.161478] pppol2tp_sendmsg+0x79a/0xba0 [ 774.165642] ___sys_sendmsg+0xe3b/0x1240 [ 774.169721] __sys_sendmmsg+0x56b/0xa90 [ 774.173713] __se_sys_sendmmsg+0xbd/0xe0 [ 774.177790] __x64_sys_sendmmsg+0x56/0x70 [ 774.181957] do_syscall_64+0xcf/0x110 [ 774.185782] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.190974] [ 774.192616] Uninit was stored to memory at: [ 774.196963] kmsan_internal_chain_origin+0x136/0x240 [ 774.202090] __msan_chain_origin+0x6d/0xb0 [ 774.206341] __save_stack_trace+0x8be/0xc60 [ 774.210677] save_stack_trace+0xc6/0x110 [ 774.214758] kmsan_internal_chain_origin+0x136/0x240 [ 774.219877] kmsan_memcpy_origins+0x13d/0x190 [ 774.224390] __msan_memcpy+0x6f/0x80 [ 774.228124] pskb_expand_head+0x436/0x1d20 [ 774.232377] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.236370] pppol2tp_sendmsg+0x79a/0xba0 [ 774.240536] ___sys_sendmsg+0xe3b/0x1240 [ 774.244610] __sys_sendmmsg+0x56b/0xa90 [ 774.248598] __se_sys_sendmmsg+0xbd/0xe0 [ 774.252675] __x64_sys_sendmmsg+0x56/0x70 [ 774.256838] do_syscall_64+0xcf/0x110 [ 774.261029] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.266221] [ 774.267859] Uninit was stored to memory at: [ 774.272201] kmsan_internal_chain_origin+0x136/0x240 [ 774.277332] __msan_chain_origin+0x6d/0xb0 [ 774.281589] __save_stack_trace+0x8be/0xc60 [ 774.285928] save_stack_trace+0xc6/0x110 [ 774.290020] kmsan_internal_chain_origin+0x136/0x240 [ 774.295141] kmsan_memcpy_origins+0x13d/0x190 [ 774.299650] __msan_memcpy+0x6f/0x80 [ 774.303387] pskb_expand_head+0x436/0x1d20 [ 774.307642] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.311655] pppol2tp_sendmsg+0x79a/0xba0 [ 774.315824] ___sys_sendmsg+0xe3b/0x1240 [ 774.319901] __sys_sendmmsg+0x56b/0xa90 [ 774.323895] __se_sys_sendmmsg+0xbd/0xe0 [ 774.327979] __x64_sys_sendmmsg+0x56/0x70 [ 774.332146] do_syscall_64+0xcf/0x110 [ 774.335964] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.341159] [ 774.342791] Uninit was stored to memory at: [ 774.347134] kmsan_internal_chain_origin+0x136/0x240 [ 774.352256] __msan_chain_origin+0x6d/0xb0 [ 774.356522] __save_stack_trace+0x8be/0xc60 [ 774.360860] save_stack_trace+0xc6/0x110 [ 774.365229] kmsan_internal_chain_origin+0x136/0x240 [ 774.370360] kmsan_memcpy_origins+0x13d/0x190 [ 774.374869] __msan_memcpy+0x6f/0x80 [ 774.378601] pskb_expand_head+0x436/0x1d20 [ 774.382858] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.386844] pppol2tp_sendmsg+0x79a/0xba0 [ 774.391011] ___sys_sendmsg+0xe3b/0x1240 [ 774.395086] __sys_sendmmsg+0x56b/0xa90 [ 774.399074] __se_sys_sendmmsg+0xbd/0xe0 [ 774.403152] __x64_sys_sendmmsg+0x56/0x70 [ 774.407315] do_syscall_64+0xcf/0x110 [ 774.411139] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.416330] 17:13:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r0, 0xa}, 0xf) [ 774.417964] Local variable description: ----iph@ip_vs_out [ 774.423512] Variable was created at: [ 774.427241] ip_vs_out+0x1bf/0x4570 [ 774.430883] ip_vs_local_reply6+0xec/0x130 [ 774.802915] not chained 1390000 origins [ 774.806956] CPU: 0 PID: 19263 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 774.814250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.823622] Call Trace: [ 774.826245] dump_stack+0x32d/0x480 [ 774.829926] kmsan_internal_chain_origin+0x222/0x240 [ 774.835096] ? save_stack_trace+0xc6/0x110 [ 774.839358] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 774.844508] ? kmsan_internal_chain_origin+0x90/0x240 [ 774.849742] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 774.855137] ? is_bpf_text_address+0x49e/0x4d0 [ 774.859756] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 774.865235] ? in_task_stack+0x12c/0x210 [ 774.869336] __msan_chain_origin+0x6d/0xb0 [ 774.873604] ? pppol2tp_sendmsg+0x79a/0xba0 [ 774.877951] __save_stack_trace+0x8be/0xc60 [ 774.882327] ? pppol2tp_sendmsg+0x79a/0xba0 [ 774.886676] save_stack_trace+0xc6/0x110 [ 774.890769] kmsan_internal_chain_origin+0x136/0x240 [ 774.895906] ? kmsan_internal_chain_origin+0x136/0x240 [ 774.901201] ? kmsan_memcpy_origins+0x13d/0x190 [ 774.905893] ? __msan_memcpy+0x6f/0x80 [ 774.909804] ? pskb_expand_head+0x436/0x1d20 [ 774.914233] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 774.918396] ? pppol2tp_sendmsg+0x79a/0xba0 [ 774.922734] ? ___sys_sendmsg+0xe3b/0x1240 [ 774.926983] ? __sys_sendmmsg+0x56b/0xa90 [ 774.931148] ? __se_sys_sendmmsg+0xbd/0xe0 [ 774.935407] ? __x64_sys_sendmmsg+0x56/0x70 [ 774.939764] ? do_syscall_64+0xcf/0x110 [ 774.943765] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 774.949154] ? __msan_poison_alloca+0x1e0/0x270 [ 774.953875] ? __msan_get_context_state+0x9/0x20 [ 774.958646] ? INIT_INT+0xc/0x30 [ 774.962034] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 774.967434] kmsan_memcpy_origins+0x13d/0x190 [ 774.971973] __msan_memcpy+0x6f/0x80 [ 774.975716] pskb_expand_head+0x436/0x1d20 [ 774.980002] l2tp_xmit_skb+0x5a7/0x24b0 [ 774.984034] pppol2tp_sendmsg+0x79a/0xba0 [ 774.988234] ___sys_sendmsg+0xe3b/0x1240 [ 774.992319] ? pppol2tp_getsockopt+0x1060/0x1060 [ 774.997119] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 775.002521] ? kmsan_set_origin+0x7f/0x100 [ 775.006786] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 775.012204] ? _cond_resched+0xc7/0x120 [ 775.016204] __sys_sendmmsg+0x56b/0xa90 [ 775.020232] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 775.025703] ? prepare_exit_to_usermode+0x182/0x4c0 [ 775.030751] __se_sys_sendmmsg+0xbd/0xe0 [ 775.034842] __x64_sys_sendmmsg+0x56/0x70 [ 775.039009] do_syscall_64+0xcf/0x110 [ 775.042835] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.048040] RIP: 0033:0x457569 [ 775.051255] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.070172] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 775.077897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 775.085181] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 775.092462] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 775.099760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 775.107047] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 775.114364] Uninit was stored to memory at: [ 775.118705] kmsan_internal_chain_origin+0x136/0x240 [ 775.123828] __msan_chain_origin+0x6d/0xb0 [ 775.128079] __save_stack_trace+0x8be/0xc60 [ 775.132414] save_stack_trace+0xc6/0x110 [ 775.136501] kmsan_internal_chain_origin+0x136/0x240 [ 775.141625] kmsan_memcpy_origins+0x13d/0x190 [ 775.146143] __msan_memcpy+0x6f/0x80 [ 775.149875] pskb_expand_head+0x436/0x1d20 [ 775.154127] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.158113] pppol2tp_sendmsg+0x79a/0xba0 [ 775.162279] ___sys_sendmsg+0xe3b/0x1240 [ 775.166358] __sys_sendmmsg+0x56b/0xa90 [ 775.170343] __se_sys_sendmmsg+0xbd/0xe0 [ 775.174423] __x64_sys_sendmmsg+0x56/0x70 [ 775.178586] do_syscall_64+0xcf/0x110 [ 775.182437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.187642] [ 775.189276] Uninit was stored to memory at: [ 775.193614] kmsan_internal_chain_origin+0x136/0x240 [ 775.198734] __msan_chain_origin+0x6d/0xb0 [ 775.202987] __save_stack_trace+0x8be/0xc60 [ 775.207328] save_stack_trace+0xc6/0x110 [ 775.211410] kmsan_internal_chain_origin+0x136/0x240 [ 775.216532] kmsan_memcpy_origins+0x13d/0x190 [ 775.221062] __msan_memcpy+0x6f/0x80 [ 775.224795] pskb_expand_head+0x436/0x1d20 [ 775.229046] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.233033] pppol2tp_sendmsg+0x79a/0xba0 [ 775.237196] ___sys_sendmsg+0xe3b/0x1240 [ 775.241268] __sys_sendmmsg+0x56b/0xa90 [ 775.245260] __se_sys_sendmmsg+0xbd/0xe0 [ 775.249332] __x64_sys_sendmmsg+0x56/0x70 [ 775.253508] do_syscall_64+0xcf/0x110 [ 775.257333] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.262525] [ 775.264159] Uninit was stored to memory at: [ 775.268507] kmsan_internal_chain_origin+0x136/0x240 [ 775.273630] __msan_chain_origin+0x6d/0xb0 [ 775.277881] __save_stack_trace+0x8be/0xc60 [ 775.282218] save_stack_trace+0xc6/0x110 [ 775.286304] kmsan_internal_chain_origin+0x136/0x240 [ 775.291421] kmsan_memcpy_origins+0x13d/0x190 [ 775.295931] __msan_memcpy+0x6f/0x80 [ 775.299662] pskb_expand_head+0x436/0x1d20 [ 775.303915] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.307902] pppol2tp_sendmsg+0x79a/0xba0 [ 775.312076] ___sys_sendmsg+0xe3b/0x1240 [ 775.316152] __sys_sendmmsg+0x56b/0xa90 [ 775.320139] __se_sys_sendmmsg+0xbd/0xe0 [ 775.324217] __x64_sys_sendmmsg+0x56/0x70 [ 775.328384] do_syscall_64+0xcf/0x110 [ 775.332209] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.337402] [ 775.339034] Uninit was stored to memory at: [ 775.343376] kmsan_internal_chain_origin+0x136/0x240 [ 775.348511] __msan_chain_origin+0x6d/0xb0 [ 775.352766] __save_stack_trace+0x8be/0xc60 [ 775.357106] save_stack_trace+0xc6/0x110 [ 775.361190] kmsan_internal_chain_origin+0x136/0x240 [ 775.366564] kmsan_memcpy_origins+0x13d/0x190 [ 775.371094] __msan_memcpy+0x6f/0x80 [ 775.374826] pskb_expand_head+0x436/0x1d20 [ 775.379079] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.383071] pppol2tp_sendmsg+0x79a/0xba0 [ 775.387229] ___sys_sendmsg+0xe3b/0x1240 [ 775.391321] __sys_sendmmsg+0x56b/0xa90 [ 775.395308] __se_sys_sendmmsg+0xbd/0xe0 [ 775.399399] __x64_sys_sendmmsg+0x56/0x70 [ 775.403561] do_syscall_64+0xcf/0x110 [ 775.407383] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.412574] [ 775.414226] Uninit was stored to memory at: [ 775.418566] kmsan_internal_chain_origin+0x136/0x240 [ 775.423685] __msan_chain_origin+0x6d/0xb0 [ 775.427957] __save_stack_trace+0x8be/0xc60 [ 775.432296] save_stack_trace+0xc6/0x110 [ 775.436379] kmsan_internal_chain_origin+0x136/0x240 [ 775.441508] kmsan_memcpy_origins+0x13d/0x190 [ 775.446029] __msan_memcpy+0x6f/0x80 [ 775.449764] pskb_expand_head+0x436/0x1d20 [ 775.454019] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.458007] pppol2tp_sendmsg+0x79a/0xba0 [ 775.462173] ___sys_sendmsg+0xe3b/0x1240 [ 775.466246] __sys_sendmmsg+0x56b/0xa90 [ 775.470231] __se_sys_sendmmsg+0xbd/0xe0 [ 775.474338] __x64_sys_sendmmsg+0x56/0x70 [ 775.478517] do_syscall_64+0xcf/0x110 [ 775.482341] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.487553] [ 775.489186] Uninit was stored to memory at: [ 775.493525] kmsan_internal_chain_origin+0x136/0x240 [ 775.498842] __msan_chain_origin+0x6d/0xb0 [ 775.503099] __save_stack_trace+0x8be/0xc60 [ 775.507434] save_stack_trace+0xc6/0x110 [ 775.511525] kmsan_internal_chain_origin+0x136/0x240 [ 775.516649] kmsan_memcpy_origins+0x13d/0x190 [ 775.521158] __msan_memcpy+0x6f/0x80 [ 775.524902] pskb_expand_head+0x436/0x1d20 [ 775.529151] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.533140] pppol2tp_sendmsg+0x79a/0xba0 [ 775.537298] ___sys_sendmsg+0xe3b/0x1240 [ 775.541370] __sys_sendmmsg+0x56b/0xa90 [ 775.545354] __se_sys_sendmmsg+0xbd/0xe0 [ 775.549432] __x64_sys_sendmmsg+0x56/0x70 [ 775.553613] do_syscall_64+0xcf/0x110 [ 775.557433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.562639] [ 775.564271] Uninit was stored to memory at: [ 775.568613] kmsan_internal_chain_origin+0x136/0x240 [ 775.573732] __msan_chain_origin+0x6d/0xb0 [ 775.577979] __save_stack_trace+0x8be/0xc60 [ 775.582343] save_stack_trace+0xc6/0x110 [ 775.586423] kmsan_internal_chain_origin+0x136/0x240 [ 775.591543] kmsan_memcpy_origins+0x13d/0x190 [ 775.596057] __msan_memcpy+0x6f/0x80 [ 775.599793] pskb_expand_head+0x436/0x1d20 [ 775.604046] l2tp_xmit_skb+0x5a7/0x24b0 [ 775.608037] pppol2tp_sendmsg+0x79a/0xba0 [ 775.612199] ___sys_sendmsg+0xe3b/0x1240 [ 775.616275] __sys_sendmmsg+0x56b/0xa90 [ 775.620263] __se_sys_sendmmsg+0xbd/0xe0 [ 775.624336] __x64_sys_sendmmsg+0x56/0x70 [ 775.628510] do_syscall_64+0xcf/0x110 [ 775.632335] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.637529] [ 775.639163] Local variable description: ----iph@ip_vs_out [ 775.644702] Variable was created at: [ 775.648432] ip_vs_out+0x1bf/0x4570 [ 775.652109] ip_vs_local_reply6+0xec/0x130 17:13:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x28113e26) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x400000000002052, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000000)='\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 17:13:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x2000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x7ff, 0x6, 0x4, 0x8, 0x9, [{0xffffffff, 0x5, 0x3, 0x0, 0x0, 0x6}, {0x2, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {0x5, 0x6, 0x3, 0x0, 0x0, 0x2000}, {0x8, 0x80, 0x51, 0x0, 0x0, 0x406}, {0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x3, 0x0, 0x0, 0x1000}, {0x800, 0x8, 0x4, 0x0, 0x0, 0x88}, {0x2, 0x7f, 0x9, 0x0, 0x0, 0x205}, {0x7f, 0x8000, 0x9, 0x0, 0x0, 0x105}]}) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa04aab764d909189f48434ae97677c3aa0080c2000000000000000034d245170781a7b75675edb86f406b0e00000000000090bb440c0500ac143f8b5c9a76", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) 17:13:15 executing program 3: syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3f347aac442019dccd3195be1") socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup2(r2, r1) recvfrom$inet6(r3, &(0x7f0000000040)=""/244, 0xf4, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 17:13:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = semget(0x3, 0x4, 0x0) semop(r2, &(0x7f0000000100)=[{0x3, 0xd}, {0x2, 0x596, 0x1800}], 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e20}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) r4 = creat(&(0x7f0000000140)='./file0\x00', 0xca) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000180)={0x400, 0x7, 0x4}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000040)=0x6814, 0x4) 17:13:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(0xffffffffffffffff) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 17:13:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000002c0)={@empty, @broadcast}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r3, &(0x7f00000004c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000001c0)=""/57, 0x39}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000480)=0xe63, 0x4) connect$can_bcm(r3, &(0x7f0000000500)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000500000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800020000000000000003000000000000000000000000e92907d71fd1f09ae541a881e5254300000000000000000000000000000000000000f80000000000000000000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae90082485a5a22"], 0xb0) execveat(r2, &(0x7f0000000080)='\x00', &(0x7f00000003c0)=[&(0x7f0000000480)='keyring\\+eth0\'}proc\x00', &(0x7f0000000140)="00000600", &(0x7f0000000000)='\\@mime_typeA+\x00', &(0x7f0000000300)="00000600", &(0x7f0000000400)="0000abfa6775d0f9d80b408f01206b06003c7f0577c47abaaba89490fbe97a450fac0e64cef1e97dbc483d06ee3e0f0000000038d28336be4e86e5d2b3ffc0d81d95e5e747e91920", &(0x7f0000000380)="00000600"], &(0x7f0000000500), 0x1000) syz_emit_ethernet(0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804c00000008004800000e1400008b00009078ac141400ac1414bb440c0500ac1414bb833e000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x838, 0x0, 0xcfa]}) 17:13:16 executing program 2: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000140)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441097daab2700f70b"}], 0x20}, 0x0) 17:13:16 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt(0xffffffffffffffff, 0x954, 0x83, &(0x7f00000000c0)=""/222, &(0x7f0000000040)=0xde) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf, 0x4000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x8, 0x5, 0x24b, 0x4dfda0d3, 0xd0}, 0x98) fstatfs(r2, &(0x7f00000001c0)=""/122) close(r0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0x9, 0x3ff, 0x2, 0x21, "410f3965f32949c4bc224f0954d39cf0dab205cfa6d81ebc6b86be01c68a932a52"}, 0x2d) 17:13:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:13:16 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x11d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 17:13:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x82001, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000580)={0x0, @bt={0xe0, 0x8, 0x1, 0x1, 0xd667, 0x7f, 0x10000, 0x9, 0x6, 0x1000, 0x1f, 0x1f, 0x51, 0x7, 0x3, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$alg(r2, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="8f4d14a145e5993481f9f998", 0xc}, {&(0x7f0000000140)="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", 0xfc}], 0x2, 0x0, 0x0, 0x4040000}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="6d664902084b53dfb2f89290160ebbb5d0461f7eb9ebee1e1e33aeee670011", 0x1f}], 0x1, &(0x7f0000000300)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0xb0}, @assoc={0x18}, @op={0x18}], 0xc0, 0x20000080}], 0x2, 0x15) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000003c0)=0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) close(r4) close(r3) 17:13:17 executing program 4: pause() r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a219cce40bed953e61a693189366f01c8fb31fdcb3b28e6431904b4a3bb09b60d0194282f96f8e97e7a1aba040600f9306db8217a5d93ca10509fb05a9492a39c44d133321ee4b4f0054c1bae09207ee29baf8ddf468eb66953ec7f04c51c65e59bf817c65ca7e8d6ddf6fa163a1cb3abaf8d8fa85345ca0e38171368ba1691a0ce56c01caee4002000000299139058066fc1fd22768c5a28dbee5f25e1e3153e8dd920007"], &(0x7f0000000040)) 17:13:17 executing program 2: r0 = socket$inet(0x2, 0x4000000803, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f00000036c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003780)={r1, @rand_addr, @dev}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000380)) 17:13:17 executing program 3: 17:13:17 executing program 1: 17:13:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:17 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x8000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80804) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x18f, &(0x7f0000000100)=[@in6={0xa, 0xce8, 0x1b7, @mcast1, 0x7}]}, &(0x7f00000004c0)=0x10) close(r4) getsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)) 17:13:17 executing program 2: [ 777.751974] not chained 1400000 origins [ 777.756039] CPU: 1 PID: 19378 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 777.763331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.772701] Call Trace: [ 777.775325] dump_stack+0x32d/0x480 [ 777.779007] ? save_stack_trace+0xc6/0x110 [ 777.783286] kmsan_internal_chain_origin+0x222/0x240 [ 777.788446] ? kmsan_internal_chain_origin+0x136/0x240 [ 777.793772] ? __msan_chain_origin+0x6d/0xb0 [ 777.798211] ? __save_stack_trace+0x8be/0xc60 [ 777.802734] ? save_stack_trace+0xc6/0x110 [ 777.807008] ? kmsan_internal_chain_origin+0x136/0x240 [ 777.812314] ? kmsan_memcpy_origins+0x13d/0x190 [ 777.817019] ? __msan_memcpy+0x6f/0x80 [ 777.820942] ? skb_copy_bits+0x1d2/0xc90 [ 777.825038] ? skb_copy+0x56c/0xba0 [ 777.828696] ? tcp_send_synack+0x7a3/0x18f0 [ 777.833047] ? tcp_rcv_state_process+0x275d/0x6c60 [ 777.838011] ? tcp_v4_do_rcv+0xb25/0xd80 [ 777.842110] ? __release_sock+0x32d/0x750 [ 777.846290] ? release_sock+0x99/0x2a0 [ 777.850212] ? __inet_stream_connect+0xdff/0x15d0 [ 777.855092] ? inet_stream_connect+0xff/0x170 [ 777.859614] ? __sys_connect+0x745/0x860 [ 777.863710] ? __se_sys_connect+0x8d/0xb0 [ 777.867880] ? __x64_sys_connect+0x4a/0x70 [ 777.872143] ? do_syscall_64+0xcf/0x110 [ 777.876155] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 777.881548] ? is_bpf_text_address+0x49e/0x4d0 [ 777.886189] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 777.891581] ? __module_address+0x6a/0x5f0 [ 777.895863] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 777.901251] ? is_bpf_text_address+0x49e/0x4d0 [ 777.905874] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 777.911350] ? in_task_stack+0x12c/0x210 [ 777.915459] __msan_chain_origin+0x6d/0xb0 [ 777.919747] ? inet_stream_connect+0xff/0x170 [ 777.924272] __save_stack_trace+0x8be/0xc60 [ 777.928680] ? inet_stream_connect+0xff/0x170 [ 777.933216] save_stack_trace+0xc6/0x110 [ 777.937319] kmsan_internal_chain_origin+0x136/0x240 [ 777.942466] ? kmsan_internal_chain_origin+0x136/0x240 [ 777.947782] ? kmsan_memcpy_origins+0x13d/0x190 [ 777.952496] ? __msan_memcpy+0x6f/0x80 [ 777.956419] ? skb_copy_bits+0x1d2/0xc90 [ 777.960516] ? skb_copy+0x56c/0xba0 [ 777.964174] ? tcp_send_synack+0x7a3/0x18f0 [ 777.968524] ? tcp_rcv_state_process+0x275d/0x6c60 [ 777.973491] ? tcp_v4_do_rcv+0xb25/0xd80 [ 777.977585] ? __release_sock+0x32d/0x750 [ 777.981761] ? release_sock+0x99/0x2a0 [ 777.985679] ? __inet_stream_connect+0xdff/0x15d0 [ 777.990558] ? inet_stream_connect+0xff/0x170 [ 777.995075] ? __sys_connect+0x745/0x860 [ 777.999158] ? __se_sys_connect+0x8d/0xb0 [ 778.003333] ? __x64_sys_connect+0x4a/0x70 [ 778.007594] ? do_syscall_64+0xcf/0x110 [ 778.011626] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.017065] ? __msan_get_context_state+0x9/0x20 [ 778.021845] ? INIT_INT+0xc/0x30 [ 778.025240] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 778.030632] ? __msan_get_context_state+0x9/0x20 [ 778.035433] kmsan_memcpy_origins+0x13d/0x190 [ 778.039992] __msan_memcpy+0x6f/0x80 [ 778.043746] skb_copy_bits+0x1d2/0xc90 [ 778.047696] skb_copy+0x56c/0xba0 [ 778.051214] tcp_send_synack+0x7a3/0x18f0 [ 778.055400] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 778.060911] tcp_rcv_state_process+0x275d/0x6c60 [ 778.065753] tcp_v4_do_rcv+0xb25/0xd80 [ 778.069686] ? inet_sk_rx_dst_set+0x200/0x200 [ 778.074209] __release_sock+0x32d/0x750 [ 778.078237] release_sock+0x99/0x2a0 [ 778.082002] __inet_stream_connect+0xdff/0x15d0 [ 778.086731] ? wait_woken+0x5b0/0x5b0 [ 778.090565] inet_stream_connect+0xff/0x170 [ 778.094921] ? __inet_stream_connect+0x15d0/0x15d0 [ 778.099873] __sys_connect+0x745/0x860 [ 778.103803] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 778.109546] ? prepare_exit_to_usermode+0x182/0x4c0 [ 778.114605] __se_sys_connect+0x8d/0xb0 [ 778.118615] __x64_sys_connect+0x4a/0x70 [ 778.122709] do_syscall_64+0xcf/0x110 [ 778.126542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.131752] RIP: 0033:0x457569 [ 778.134977] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.153913] RSP: 002b:00007f07b7bcbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 778.161649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 778.168941] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 778.176237] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 778.183531] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07b7bcc6d4 [ 778.190826] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 778.198136] Uninit was stored to memory at: 17:13:18 executing program 3: 17:13:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_pts(0xffffffffffffff9c, 0x10002) ioctl$KDADDIO(r2, 0x4b34, 0x6) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:13:18 executing program 2: 17:13:18 executing program 1: [ 778.202495] kmsan_internal_chain_origin+0x136/0x240 [ 778.207625] __msan_chain_origin+0x6d/0xb0 [ 778.211885] __save_stack_trace+0x8be/0xc60 [ 778.216243] save_stack_trace+0xc6/0x110 [ 778.220328] kmsan_internal_chain_origin+0x136/0x240 [ 778.225462] kmsan_memcpy_origins+0x13d/0x190 [ 778.230002] __msan_memcpy+0x6f/0x80 [ 778.233748] skb_copy_bits+0x1d2/0xc90 [ 778.237663] skb_copy+0x56c/0xba0 [ 778.241142] tcp_send_synack+0x7a3/0x18f0 [ 778.245315] tcp_rcv_state_process+0x275d/0x6c60 [ 778.250094] tcp_v4_do_rcv+0xb25/0xd80 [ 778.254012] __release_sock+0x32d/0x750 [ 778.258013] release_sock+0x99/0x2a0 [ 778.261757] __inet_stream_connect+0xdff/0x15d0 [ 778.266490] inet_stream_connect+0xff/0x170 [ 778.270836] __sys_connect+0x745/0x860 [ 778.274746] __se_sys_connect+0x8d/0xb0 [ 778.278746] __x64_sys_connect+0x4a/0x70 [ 778.282834] do_syscall_64+0xcf/0x110 [ 778.286662] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.291862] [ 778.293506] Uninit was stored to memory at: [ 778.297854] kmsan_internal_chain_origin+0x136/0x240 [ 778.302990] __msan_chain_origin+0x6d/0xb0 [ 778.307256] __save_stack_trace+0x8be/0xc60 [ 778.311604] save_stack_trace+0xc6/0x110 [ 778.315693] kmsan_internal_chain_origin+0x136/0x240 [ 778.320828] kmsan_memcpy_origins+0x13d/0x190 [ 778.325347] __msan_memcpy+0x6f/0x80 [ 778.329085] skb_copy_bits+0x1d2/0xc90 [ 778.332997] skb_copy+0x56c/0xba0 [ 778.336466] tcp_send_synack+0x7a3/0x18f0 [ 778.340641] tcp_rcv_state_process+0x275d/0x6c60 [ 778.345414] tcp_v4_do_rcv+0xb25/0xd80 [ 778.349320] __release_sock+0x32d/0x750 [ 778.353313] release_sock+0x99/0x2a0 [ 778.357049] __inet_stream_connect+0xdff/0x15d0 [ 778.361732] inet_stream_connect+0xff/0x170 [ 778.366349] __sys_connect+0x745/0x860 [ 778.370250] __se_sys_connect+0x8d/0xb0 [ 778.374237] __x64_sys_connect+0x4a/0x70 [ 778.378314] do_syscall_64+0xcf/0x110 [ 778.382135] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.387325] [ 778.388955] Uninit was stored to memory at: [ 778.393298] kmsan_internal_chain_origin+0x136/0x240 [ 778.398417] __msan_chain_origin+0x6d/0xb0 [ 778.402672] __save_stack_trace+0x8be/0xc60 [ 778.407010] save_stack_trace+0xc6/0x110 [ 778.411093] kmsan_internal_chain_origin+0x136/0x240 [ 778.416213] kmsan_memcpy_origins+0x13d/0x190 [ 778.420747] __msan_memcpy+0x6f/0x80 [ 778.424490] skb_copy_bits+0x1d2/0xc90 [ 778.428400] skb_copy+0x56c/0xba0 [ 778.431877] tcp_send_synack+0x7a3/0x18f0 [ 778.436049] tcp_rcv_state_process+0x275d/0x6c60 [ 778.440819] tcp_v4_do_rcv+0xb25/0xd80 [ 778.444723] __release_sock+0x32d/0x750 [ 778.448710] release_sock+0x99/0x2a0 [ 778.452445] __inet_stream_connect+0xdff/0x15d0 [ 778.457137] inet_stream_connect+0xff/0x170 [ 778.461479] __sys_connect+0x745/0x860 [ 778.465383] __se_sys_connect+0x8d/0xb0 [ 778.469371] __x64_sys_connect+0x4a/0x70 [ 778.473460] do_syscall_64+0xcf/0x110 [ 778.477289] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.482488] [ 778.484125] Uninit was stored to memory at: [ 778.488480] kmsan_internal_chain_origin+0x136/0x240 [ 778.493601] __msan_chain_origin+0x6d/0xb0 [ 778.498314] __save_stack_trace+0x8be/0xc60 [ 778.502651] save_stack_trace+0xc6/0x110 [ 778.506735] kmsan_internal_chain_origin+0x136/0x240 [ 778.511855] kmsan_memcpy_origins+0x13d/0x190 [ 778.516368] __msan_memcpy+0x6f/0x80 [ 778.520101] skb_copy_bits+0x1d2/0xc90 [ 778.524011] skb_copy+0x56c/0xba0 [ 778.527488] tcp_send_synack+0x7a3/0x18f0 [ 778.531658] tcp_rcv_state_process+0x275d/0x6c60 [ 778.536431] tcp_v4_do_rcv+0xb25/0xd80 [ 778.540343] __release_sock+0x32d/0x750 [ 778.544334] release_sock+0x99/0x2a0 [ 778.548066] __inet_stream_connect+0xdff/0x15d0 [ 778.552773] inet_stream_connect+0xff/0x170 [ 778.557109] __sys_connect+0x745/0x860 [ 778.561015] __se_sys_connect+0x8d/0xb0 [ 778.565008] __x64_sys_connect+0x4a/0x70 [ 778.569083] do_syscall_64+0xcf/0x110 [ 778.572906] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.578098] [ 778.579735] Uninit was stored to memory at: [ 778.584074] kmsan_internal_chain_origin+0x136/0x240 [ 778.589193] __msan_chain_origin+0x6d/0xb0 [ 778.593448] __save_stack_trace+0x8be/0xc60 [ 778.597792] save_stack_trace+0xc6/0x110 [ 778.601869] kmsan_internal_chain_origin+0x136/0x240 [ 778.606992] kmsan_memcpy_origins+0x13d/0x190 [ 778.611514] __msan_memcpy+0x6f/0x80 [ 778.615246] skb_copy_bits+0x1d2/0xc90 [ 778.619170] skb_copy+0x56c/0xba0 [ 778.622644] tcp_send_synack+0x7a3/0x18f0 [ 778.626805] tcp_rcv_state_process+0x275d/0x6c60 [ 778.631579] tcp_v4_do_rcv+0xb25/0xd80 [ 778.635499] __release_sock+0x32d/0x750 [ 778.639500] release_sock+0x99/0x2a0 [ 778.643233] __inet_stream_connect+0xdff/0x15d0 [ 778.647916] inet_stream_connect+0xff/0x170 [ 778.652252] __sys_connect+0x745/0x860 [ 778.656150] __se_sys_connect+0x8d/0xb0 [ 778.660140] __x64_sys_connect+0x4a/0x70 [ 778.664220] do_syscall_64+0xcf/0x110 [ 778.668071] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.673263] [ 778.674897] Uninit was stored to memory at: [ 778.679237] kmsan_internal_chain_origin+0x136/0x240 [ 778.684358] __msan_chain_origin+0x6d/0xb0 [ 778.688613] __save_stack_trace+0x8be/0xc60 [ 778.692952] save_stack_trace+0xc6/0x110 [ 778.697036] kmsan_internal_chain_origin+0x136/0x240 [ 778.702161] kmsan_memcpy_origins+0x13d/0x190 [ 778.706674] __msan_memcpy+0x6f/0x80 [ 778.710404] skb_copy_bits+0x1d2/0xc90 [ 778.714328] skb_copy+0x56c/0xba0 [ 778.717798] tcp_send_synack+0x7a3/0x18f0 [ 778.721962] tcp_rcv_state_process+0x275d/0x6c60 [ 778.726735] tcp_v4_do_rcv+0xb25/0xd80 [ 778.730638] __release_sock+0x32d/0x750 [ 778.734626] release_sock+0x99/0x2a0 [ 778.738356] __inet_stream_connect+0xdff/0x15d0 [ 778.743041] inet_stream_connect+0xff/0x170 [ 778.747373] __sys_connect+0x745/0x860 [ 778.751273] __se_sys_connect+0x8d/0xb0 [ 778.755258] __x64_sys_connect+0x4a/0x70 [ 778.759333] do_syscall_64+0xcf/0x110 [ 778.763158] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.768368] [ 778.770008] Uninit was stored to memory at: [ 778.774347] kmsan_internal_chain_origin+0x136/0x240 [ 778.779463] __msan_chain_origin+0x6d/0xb0 [ 778.783723] __save_stack_trace+0x8be/0xc60 [ 778.788062] save_stack_trace+0xc6/0x110 [ 778.792141] kmsan_internal_chain_origin+0x136/0x240 [ 778.797259] kmsan_memcpy_origins+0x13d/0x190 [ 778.801770] __msan_memcpy+0x6f/0x80 [ 778.805512] skb_copy_bits+0x1d2/0xc90 [ 778.809413] skb_copy+0x56c/0xba0 [ 778.812883] tcp_send_synack+0x7a3/0x18f0 [ 778.817046] tcp_rcv_state_process+0x275d/0x6c60 [ 778.821818] tcp_v4_do_rcv+0xb25/0xd80 [ 778.825720] __release_sock+0x32d/0x750 [ 778.829708] release_sock+0x99/0x2a0 [ 778.833438] __inet_stream_connect+0xdff/0x15d0 [ 778.838129] inet_stream_connect+0xff/0x170 [ 778.842463] __sys_connect+0x745/0x860 [ 778.846374] __se_sys_connect+0x8d/0xb0 [ 778.850359] __x64_sys_connect+0x4a/0x70 [ 778.854440] do_syscall_64+0xcf/0x110 [ 778.858271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 778.863461] [ 778.865103] Local variable description: ----_tcph.i@ip_vs_in [ 778.870900] Variable was created at: [ 778.874634] ip_vs_in+0xe9/0x3250 [ 778.878104] ip_vs_local_request4+0xec/0x130 17:13:19 executing program 1: 17:13:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x244f9dfa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:19 executing program 2: 17:13:19 executing program 3: 17:13:19 executing program 1: 17:13:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80, 0x600000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x29, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:19 executing program 3: 17:13:19 executing program 2: 17:13:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006d246e985cb806f0b7c5273eb781fa5543ba64f92b6f4c132f2a4e9a25ac0f36976d106af8c406cf827a9422a2f1b96941533a3928350c80fd6dbc4f1e117caaebb660af1eb8655503737c8024492d8a38c134fd2cffc997885f2b490d7c4c0562fccad588350e4a4f434a7324f94e0e13473ee2f4422119d1a6559b6d8cc5e20b680ab2ab6ab6a3e5d0ed7e01"], &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x8) 17:13:19 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1c, 0x0, 0x8018}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0xd5d) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) 17:13:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) syz_execute_func(&(0x7f0000000180)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@remote}) 17:13:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xfff, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 17:13:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x88082, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x190) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) [ 780.473891] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:13:20 executing program 3: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d4b36b", 0x18, 0xffffff84, 0x0, @local, @ipv4={[], [], @loopback}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, &(0x7f0000000140)) 17:13:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ec230090780020"], &(0x7f0000000040)) 17:13:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) setsockopt$inet6_buf(r2, 0x29, 0x3f, &(0x7f00000000c0)="b6467b6437165a6cfd42f7e0c0e7653dcdf3c1fe031184eea6e1f87e33ac0a801d3e79b327cf797737d144a3f3700708843455d983751ab557655ea7c75b4ea2cdc5f9b56bf3e958c3f308", 0x4b) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:13:21 executing program 4: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000efffffff8f78ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) 17:13:21 executing program 3: sched_setaffinity(0x0, 0x2, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$get_persistent(0x16, r2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0xffffffffffffff19) fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000540)) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000002c0)={0x6000, 0x3000}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 17:13:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000100100000009076000000020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = socket$inet6(0xa, 0x0, 0x3ff) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) read(r2, &(0x7f0000000040)=""/153, 0x99) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)}}, 0x20) 17:13:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d", 0xcd}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) 17:13:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0xa4) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/252, 0xfc, 0x5cfa00000000, 0x8, 0x9, 0xff, 0xffffffffffffffc0}, 0x120) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x1) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x65ff, 0x42000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) 17:13:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) syz_emit_ethernet(0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080048f7003400004a00c5ab4e63c743ef000000009078ac141400ac1414bb440c0500ac1414bb00000000000000000d1a9f6cfe95d93ccb7e74952483f7ea014bc8330198f3de93a057b13f0164976567acab8a71ad73b8a78a8d59ccd2f59b0c75bf1ec405423f5c14e53c7e71e40882288dd3d9bc497b1024f96b16c195e4dfce22debd41586a48b3f2aea1d3ef5433d09e0ce90ba9bdeaefc9e16f42", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50f9af57c2780000"], &(0x7f0000000040)={0x8000001, 0x0, [0x6ca, 0x0, 0x43b]}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) lchown(&(0x7f00000003c0)='./file0\x00', r1, r2) msgget(0x2, 0x994042219d9ad989) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x100, @mcast1, 0x3}, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @rand_addr=0x6}, 0x1ff}}}, 0x118) 17:13:22 executing program 3: sched_setaffinity(0x0, 0x2, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$get_persistent(0x16, r2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0xffffffffffffff19) fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000540)) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000002c0)={0x6000, 0x3000}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 17:13:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f74", 0xa4}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000040)='(mime_type\\\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') mmap$perf(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x140012, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:22 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40480, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7f) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c054a2e1410bb00f4ff0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x4}) 17:13:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 782.618472] FAULT_INJECTION: forcing a failure. [ 782.618472] name failslab, interval 1, probability 0, space 0, times 0 [ 782.630105] CPU: 0 PID: 19521 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 782.637442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.646863] Call Trace: [ 782.649538] dump_stack+0x32d/0x480 [ 782.653258] should_fail+0x11e5/0x13c0 [ 782.657243] __should_failslab+0x278/0x2a0 [ 782.661566] should_failslab+0x29/0x70 [ 782.665539] kmem_cache_alloc_node+0x164/0xec0 [ 782.670197] ? __alloc_skb+0x32e/0xeb0 [ 782.674216] __alloc_skb+0x32e/0xeb0 [ 782.678032] ? __msan_poison_alloca+0x1e0/0x270 [ 782.682787] sock_wmalloc+0x1e3/0x740 [ 782.686665] pppol2tp_sendmsg+0x34d/0xba0 [ 782.690931] ? pkcs7_validate_trust+0x442/0xe00 [ 782.695683] ___sys_sendmsg+0xe3b/0x1240 [ 782.699817] ? pppol2tp_getsockopt+0x1060/0x1060 [ 782.704685] ? __fget+0x8f5/0x940 [ 782.708255] ? __fdget+0x329/0x440 [ 782.711902] __sys_sendmmsg+0x56b/0xa90 [ 782.716015] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 782.721584] ? prepare_exit_to_usermode+0x182/0x4c0 [ 782.726690] __se_sys_sendmmsg+0xbd/0xe0 [ 782.730823] __x64_sys_sendmmsg+0x56/0x70 [ 782.735038] do_syscall_64+0xcf/0x110 [ 782.738918] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 782.744191] RIP: 0033:0x457569 [ 782.747454] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.766435] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.774280] RAX: ffffffffffffffda RBX: 00007f2cd6737c90 RCX: 0000000000457569 [ 782.781632] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 782.788954] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 782.796293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 782.803618] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 0000000000000007 17:13:22 executing program 3 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 783.030842] FAULT_INJECTION: forcing a failure. [ 783.030842] name failslab, interval 1, probability 0, space 0, times 0 [ 783.042476] CPU: 1 PID: 19531 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 783.049825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.059237] Call Trace: [ 783.061917] dump_stack+0x32d/0x480 [ 783.065643] should_fail+0x11e5/0x13c0 [ 783.069682] __should_failslab+0x278/0x2a0 [ 783.074020] should_failslab+0x29/0x70 [ 783.078013] kmem_cache_alloc_node+0x164/0xec0 [ 783.082711] ? __alloc_skb+0x32e/0xeb0 [ 783.086692] __alloc_skb+0x32e/0xeb0 [ 783.090535] netlink_sendmsg+0xc9e/0x1440 [ 783.094808] ___sys_sendmsg+0xe3b/0x1240 [ 783.098938] ? netlink_getsockopt+0x1910/0x1910 [ 783.103750] ? __fdget+0x329/0x440 [ 783.107364] __se_sys_sendmsg+0x305/0x460 [ 783.111612] __x64_sys_sendmsg+0x4a/0x70 [ 783.115748] do_syscall_64+0xcf/0x110 [ 783.119628] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 783.124884] RIP: 0033:0x457569 [ 783.128143] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.147126] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.154910] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 783.162238] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 783.169558] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 17:13:23 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x802, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x7ff}, {0x6, 0x9}, {0xf50, 0xfffffffffffffffa}, {0x3ff, 0xfffffffffffff904}, {0x10001, 0xa59}, {0x6992, 0x2}, {0x9, 0x3}]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfffffffffffffede, &(0x7f0000000300)={@broadcast, @broadcast, [{[], {0x8100, 0x3a, 0x200, 0x3}}], {@canfd={0xd, {{0x3, 0x9, 0x44, 0x1}, 0x22, 0x2, 0x0, 0x0, "884112252dd0b9e9413538db9aae096db6ed0252a450a40f548a1a3a56a3c39cc32dae7e7f35a42889c77e4f4d6622b86c7ec704b4d81a8530a0dafd23fcef7b"}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0x0, 0x0, 0x1]}) [ 783.176882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 783.184206] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 17:13:23 executing program 1 (fault-call:7 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x6, 0x7, @time={0x0, 0x989680}, {0x4, 0x7fffffff}, {0x7, 0xd9}, @quote={{0x2}, 0x1ff, &(0x7f0000000000)={0xffffffff, 0x1, 0x2, 0x3, @tick=0x16200000000, {0x7, 0x7}, {0xbf6, 0x2}, @queue={0x3, {0x2, 0x8}}}}}], 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) 17:13:23 executing program 4: socketpair$unix(0x1, 0x4000000000007, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 783.474627] FAULT_INJECTION: forcing a failure. [ 783.474627] name failslab, interval 1, probability 0, space 0, times 0 [ 783.486134] CPU: 0 PID: 19541 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 783.493473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.503136] Call Trace: [ 783.505805] dump_stack+0x32d/0x480 [ 783.509578] should_fail+0x11e5/0x13c0 [ 783.513627] __should_failslab+0x278/0x2a0 [ 783.517959] should_failslab+0x29/0x70 [ 783.521928] __kmalloc_node_track_caller+0x279/0x14e0 [ 783.527238] ? __msan_get_context_state+0x9/0x20 [ 783.532065] ? INIT_INT+0xc/0x30 [ 783.535519] ? kmem_cache_alloc_node+0x27b/0xec0 [ 783.540349] ? sock_wmalloc+0x1e3/0x740 [ 783.544450] ? sock_wmalloc+0x1e3/0x740 [ 783.548570] __alloc_skb+0x42b/0xeb0 [ 783.552407] ? __msan_poison_alloca+0x1e0/0x270 [ 783.557173] sock_wmalloc+0x1e3/0x740 [ 783.561060] pppol2tp_sendmsg+0x34d/0xba0 [ 783.565337] ? pkcs7_validate_trust+0x442/0xe00 [ 783.570088] ___sys_sendmsg+0xe3b/0x1240 [ 783.574219] ? pppol2tp_getsockopt+0x1060/0x1060 [ 783.579092] ? __fget+0x8f5/0x940 [ 783.582674] ? __fdget+0x329/0x440 [ 783.586332] __sys_sendmmsg+0x56b/0xa90 [ 783.590457] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 783.596034] ? prepare_exit_to_usermode+0x182/0x4c0 [ 783.601138] __se_sys_sendmmsg+0xbd/0xe0 [ 783.605287] __x64_sys_sendmmsg+0x56/0x70 [ 783.609525] do_syscall_64+0xcf/0x110 [ 783.613413] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 783.618663] RIP: 0033:0x457569 [ 783.621924] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.640888] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 783.648679] RAX: ffffffffffffffda RBX: 00007f2cd6737c90 RCX: 0000000000457569 [ 783.656012] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 783.663337] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 17:13:23 executing program 3 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 783.670659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 783.677987] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 0000000000000007 17:13:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 783.787906] FAULT_INJECTION: forcing a failure. [ 783.787906] name failslab, interval 1, probability 0, space 0, times 0 [ 783.799406] CPU: 0 PID: 19549 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 783.806740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.816147] Call Trace: [ 783.818819] dump_stack+0x32d/0x480 [ 783.822618] should_fail+0x11e5/0x13c0 [ 783.826656] __should_failslab+0x278/0x2a0 [ 783.831021] should_failslab+0x29/0x70 [ 783.834987] __kmalloc_node_track_caller+0x279/0x14e0 [ 783.840256] ? __msan_get_context_state+0x9/0x20 [ 783.845127] ? INIT_INT+0xc/0x30 [ 783.848595] ? kmem_cache_alloc_node+0x27b/0xec0 [ 783.853460] ? netlink_sendmsg+0xc9e/0x1440 [ 783.857937] ? netlink_sendmsg+0xc9e/0x1440 [ 783.862340] __alloc_skb+0x42b/0xeb0 [ 783.866183] netlink_sendmsg+0xc9e/0x1440 [ 783.870466] ___sys_sendmsg+0xe3b/0x1240 [ 783.874623] ? netlink_getsockopt+0x1910/0x1910 [ 783.879449] ? __fdget+0x329/0x440 [ 783.883095] __se_sys_sendmsg+0x305/0x460 [ 783.887342] __x64_sys_sendmsg+0x4a/0x70 [ 783.891477] do_syscall_64+0xcf/0x110 [ 783.895387] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 783.900646] RIP: 0033:0x457569 [ 783.903913] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.922881] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.930664] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 783.937996] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 783.945330] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 783.952663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 783.958822] not chained 1410000 origins [ 783.959990] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 [ 783.971290] CPU: 1 PID: 19553 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 783.978580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.987953] Call Trace: [ 783.990581] dump_stack+0x32d/0x480 [ 783.994249] ? save_stack_trace+0xc6/0x110 [ 783.998536] kmsan_internal_chain_origin+0x222/0x240 [ 784.003691] ? kmsan_internal_chain_origin+0x136/0x240 [ 784.009019] ? __msan_chain_origin+0x6d/0xb0 [ 784.013455] ? __save_stack_trace+0x8be/0xc60 [ 784.017980] ? save_stack_trace+0xc6/0x110 [ 784.022251] ? kmsan_internal_chain_origin+0x136/0x240 [ 784.027560] ? kmsan_memcpy_origins+0x13d/0x190 [ 784.032265] ? __msan_memcpy+0x6f/0x80 [ 784.036187] ? skb_copy_bits+0x1d2/0xc90 [ 784.040280] ? skb_copy+0x56c/0xba0 [ 784.043930] ? tcp_send_synack+0x7a3/0x18f0 [ 784.048279] ? tcp_rcv_state_process+0x275d/0x6c60 [ 784.053231] ? tcp_v4_do_rcv+0xb25/0xd80 [ 784.057326] ? __release_sock+0x32d/0x750 [ 784.061508] ? release_sock+0x99/0x2a0 [ 784.065428] ? __inet_stream_connect+0xdff/0x15d0 [ 784.070293] ? inet_stream_connect+0xff/0x170 [ 784.074811] ? __sys_connect+0x745/0x860 [ 784.078891] ? __se_sys_connect+0x8d/0xb0 [ 784.083061] ? __x64_sys_connect+0x4a/0x70 [ 784.087316] ? do_syscall_64+0xcf/0x110 [ 784.091316] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.096705] ? is_bpf_text_address+0x49e/0x4d0 [ 784.101328] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 784.106717] ? __module_address+0x6a/0x5f0 [ 784.111018] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 784.116441] ? is_bpf_text_address+0x49e/0x4d0 [ 784.121088] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 784.126580] ? in_task_stack+0x12c/0x210 [ 784.130691] __msan_chain_origin+0x6d/0xb0 [ 784.134958] ? __msan_memcpy+0x6f/0x80 17:13:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f74", 0xa4}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="d6fbd34b58ba0850112f12cdd80b425b1a8a68077d7a2ec39e2ce5fcbed74ddf7679934d68246d3691b9338f4af659ac44b9f72803c5cf6985a81c600bcabcb0b00b5e54b5554d61bee086a100aa091a3d9d07a450e30a86b32e2dda79", 0x5d}, {&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x2, 0x0, 0x0, 0x4000010}, 0x0) 17:13:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb00000000000000000ca459eccef9f6921f631afaf08dbcfe6e28ea22f7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) [ 784.138882] __save_stack_trace+0x8be/0xc60 [ 784.143268] ? __msan_memcpy+0x6f/0x80 [ 784.147196] save_stack_trace+0xc6/0x110 [ 784.151309] kmsan_internal_chain_origin+0x136/0x240 [ 784.156468] ? kmsan_internal_chain_origin+0x136/0x240 [ 784.161789] ? kmsan_memcpy_origins+0x13d/0x190 [ 784.166504] ? __msan_memcpy+0x6f/0x80 [ 784.170425] ? skb_copy_bits+0x1d2/0xc90 [ 784.174525] ? skb_copy+0x56c/0xba0 [ 784.178212] ? tcp_send_synack+0x7a3/0x18f0 [ 784.182582] ? tcp_rcv_state_process+0x275d/0x6c60 [ 784.187549] ? tcp_v4_do_rcv+0xb25/0xd80 [ 784.191642] ? __release_sock+0x32d/0x750 [ 784.195818] ? release_sock+0x99/0x2a0 [ 784.199734] ? __inet_stream_connect+0xdff/0x15d0 [ 784.204605] ? inet_stream_connect+0xff/0x170 [ 784.209129] ? __sys_connect+0x745/0x860 [ 784.213213] ? __se_sys_connect+0x8d/0xb0 [ 784.217383] ? __x64_sys_connect+0x4a/0x70 [ 784.221643] ? do_syscall_64+0xcf/0x110 [ 784.225647] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.231089] ? __msan_get_context_state+0x9/0x20 [ 784.235865] ? INIT_INT+0xc/0x30 17:13:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fffffff, 0x20000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x2, 0x2ff6}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x7, 0x30}, &(0x7f0000000140)=0xc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r4) close(r1) [ 784.239257] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 784.244650] ? __msan_get_context_state+0x9/0x20 [ 784.249457] kmsan_memcpy_origins+0x13d/0x190 [ 784.254016] __msan_memcpy+0x6f/0x80 [ 784.257766] skb_copy_bits+0x1d2/0xc90 [ 784.261711] skb_copy+0x56c/0xba0 [ 784.265225] tcp_send_synack+0x7a3/0x18f0 [ 784.269400] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 784.274894] tcp_rcv_state_process+0x275d/0x6c60 [ 784.279717] tcp_v4_do_rcv+0xb25/0xd80 [ 784.283639] ? inet_sk_rx_dst_set+0x200/0x200 [ 784.288156] __release_sock+0x32d/0x750 [ 784.292175] release_sock+0x99/0x2a0 [ 784.295918] __inet_stream_connect+0xdff/0x15d0 [ 784.300636] ? wait_woken+0x5b0/0x5b0 [ 784.304463] inet_stream_connect+0xff/0x170 [ 784.308823] ? __inet_stream_connect+0x15d0/0x15d0 [ 784.313770] __sys_connect+0x745/0x860 [ 784.317691] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 784.323160] ? prepare_exit_to_usermode+0x182/0x4c0 [ 784.328211] __se_sys_connect+0x8d/0xb0 [ 784.332214] __x64_sys_connect+0x4a/0x70 [ 784.336294] do_syscall_64+0xcf/0x110 [ 784.340124] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.345328] RIP: 0033:0x457569 [ 784.348540] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.367680] RSP: 002b:00007f07b7bcbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 784.375407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 784.382697] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 784.389978] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 784.397269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07b7bcc6d4 [ 784.404558] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 784.411859] Uninit was stored to memory at: [ 784.416201] kmsan_internal_chain_origin+0x136/0x240 [ 784.421322] __msan_chain_origin+0x6d/0xb0 [ 784.425575] __save_stack_trace+0x8be/0xc60 [ 784.429916] save_stack_trace+0xc6/0x110 [ 784.433998] kmsan_internal_chain_origin+0x136/0x240 [ 784.439123] kmsan_memcpy_origins+0x13d/0x190 [ 784.443640] __msan_memcpy+0x6f/0x80 [ 784.447372] skb_copy_bits+0x1d2/0xc90 [ 784.451289] skb_copy+0x56c/0xba0 [ 784.454759] tcp_send_synack+0x7a3/0x18f0 [ 784.458922] tcp_rcv_state_process+0x275d/0x6c60 [ 784.463697] tcp_v4_do_rcv+0xb25/0xd80 [ 784.467619] __release_sock+0x32d/0x750 [ 784.471614] release_sock+0x99/0x2a0 [ 784.475352] __inet_stream_connect+0xdff/0x15d0 [ 784.480055] inet_stream_connect+0xff/0x170 [ 784.484407] __sys_connect+0x745/0x860 [ 784.488309] __se_sys_connect+0x8d/0xb0 [ 784.492298] __x64_sys_connect+0x4a/0x70 [ 784.496373] do_syscall_64+0xcf/0x110 [ 784.500191] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.505400] [ 784.507039] Uninit was stored to memory at: [ 784.511376] kmsan_internal_chain_origin+0x136/0x240 [ 784.516503] __msan_chain_origin+0x6d/0xb0 [ 784.520759] __save_stack_trace+0x8be/0xc60 [ 784.525109] save_stack_trace+0xc6/0x110 [ 784.529200] kmsan_internal_chain_origin+0x136/0x240 [ 784.534319] kmsan_memcpy_origins+0x13d/0x190 [ 784.538834] __msan_memcpy+0x6f/0x80 [ 784.542566] skb_copy_bits+0x1d2/0xc90 [ 784.546468] skb_copy+0x56c/0xba0 [ 784.549947] tcp_send_synack+0x7a3/0x18f0 [ 784.554109] tcp_rcv_state_process+0x275d/0x6c60 [ 784.558878] tcp_v4_do_rcv+0xb25/0xd80 [ 784.562785] __release_sock+0x32d/0x750 [ 784.566772] release_sock+0x99/0x2a0 [ 784.570512] __inet_stream_connect+0xdff/0x15d0 [ 784.575197] inet_stream_connect+0xff/0x170 [ 784.579530] __sys_connect+0x745/0x860 [ 784.583433] __se_sys_connect+0x8d/0xb0 [ 784.587423] __x64_sys_connect+0x4a/0x70 [ 784.591506] do_syscall_64+0xcf/0x110 [ 784.595326] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.600516] [ 784.602149] Uninit was stored to memory at: [ 784.606501] kmsan_internal_chain_origin+0x136/0x240 [ 784.611626] __msan_chain_origin+0x6d/0xb0 [ 784.615880] __save_stack_trace+0x8be/0xc60 [ 784.620219] save_stack_trace+0xc6/0x110 [ 784.624298] kmsan_internal_chain_origin+0x136/0x240 [ 784.629415] kmsan_memcpy_origins+0x13d/0x190 [ 784.633927] __msan_memcpy+0x6f/0x80 [ 784.637656] skb_copy_bits+0x1d2/0xc90 [ 784.641560] skb_copy+0x56c/0xba0 [ 784.645035] tcp_send_synack+0x7a3/0x18f0 [ 784.649193] tcp_rcv_state_process+0x275d/0x6c60 [ 784.653964] tcp_v4_do_rcv+0xb25/0xd80 [ 784.657868] __release_sock+0x32d/0x750 [ 784.661854] release_sock+0x99/0x2a0 [ 784.665585] __inet_stream_connect+0xdff/0x15d0 [ 784.670271] inet_stream_connect+0xff/0x170 [ 784.674607] __sys_connect+0x745/0x860 [ 784.678513] __se_sys_connect+0x8d/0xb0 [ 784.682534] __x64_sys_connect+0x4a/0x70 [ 784.686613] do_syscall_64+0xcf/0x110 [ 784.690433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.695626] [ 784.697256] Uninit was stored to memory at: [ 784.701594] kmsan_internal_chain_origin+0x136/0x240 [ 784.706722] __msan_chain_origin+0x6d/0xb0 [ 784.710971] __save_stack_trace+0x8be/0xc60 [ 784.715316] save_stack_trace+0xc6/0x110 [ 784.719393] kmsan_internal_chain_origin+0x136/0x240 [ 784.724522] kmsan_memcpy_origins+0x13d/0x190 [ 784.729035] __msan_memcpy+0x6f/0x80 [ 784.732767] skb_copy_bits+0x1d2/0xc90 [ 784.736671] skb_copy+0x56c/0xba0 [ 784.740139] tcp_send_synack+0x7a3/0x18f0 [ 784.744300] tcp_rcv_state_process+0x275d/0x6c60 [ 784.749071] tcp_v4_do_rcv+0xb25/0xd80 [ 784.752973] __release_sock+0x32d/0x750 [ 784.756970] release_sock+0x99/0x2a0 [ 784.760705] __inet_stream_connect+0xdff/0x15d0 [ 784.765389] inet_stream_connect+0xff/0x170 [ 784.769722] __sys_connect+0x745/0x860 [ 784.773622] __se_sys_connect+0x8d/0xb0 [ 784.777611] __x64_sys_connect+0x4a/0x70 [ 784.781690] do_syscall_64+0xcf/0x110 [ 784.785515] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.790708] [ 784.792339] Uninit was stored to memory at: [ 784.796679] kmsan_internal_chain_origin+0x136/0x240 [ 784.801799] __msan_chain_origin+0x6d/0xb0 [ 784.806049] __save_stack_trace+0x8be/0xc60 [ 784.810385] save_stack_trace+0xc6/0x110 [ 784.814489] kmsan_internal_chain_origin+0x136/0x240 [ 784.819624] kmsan_memcpy_origins+0x13d/0x190 [ 784.824136] __msan_memcpy+0x6f/0x80 [ 784.827869] skb_copy_bits+0x1d2/0xc90 [ 784.831774] skb_copy+0x56c/0xba0 [ 784.835243] tcp_send_synack+0x7a3/0x18f0 [ 784.839404] tcp_rcv_state_process+0x275d/0x6c60 [ 784.844177] tcp_v4_do_rcv+0xb25/0xd80 [ 784.848077] __release_sock+0x32d/0x750 [ 784.852064] release_sock+0x99/0x2a0 [ 784.855798] __inet_stream_connect+0xdff/0x15d0 [ 784.860489] inet_stream_connect+0xff/0x170 [ 784.864823] __sys_connect+0x745/0x860 [ 784.868724] __se_sys_connect+0x8d/0xb0 [ 784.872713] __x64_sys_connect+0x4a/0x70 [ 784.876787] do_syscall_64+0xcf/0x110 [ 784.880605] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.885797] [ 784.887429] Uninit was stored to memory at: [ 784.891769] kmsan_internal_chain_origin+0x136/0x240 [ 784.896887] __msan_chain_origin+0x6d/0xb0 [ 784.901137] __save_stack_trace+0x8be/0xc60 [ 784.905474] save_stack_trace+0xc6/0x110 [ 784.909562] kmsan_internal_chain_origin+0x136/0x240 [ 784.914682] kmsan_memcpy_origins+0x13d/0x190 [ 784.919201] __msan_memcpy+0x6f/0x80 [ 784.922931] skb_copy_bits+0x1d2/0xc90 [ 784.926838] skb_copy+0x56c/0xba0 [ 784.930306] tcp_send_synack+0x7a3/0x18f0 [ 784.934468] tcp_rcv_state_process+0x275d/0x6c60 [ 784.939247] tcp_v4_do_rcv+0xb25/0xd80 [ 784.943149] __release_sock+0x32d/0x750 [ 784.947138] release_sock+0x99/0x2a0 [ 784.950872] __inet_stream_connect+0xdff/0x15d0 [ 784.955556] inet_stream_connect+0xff/0x170 [ 784.959896] __sys_connect+0x745/0x860 [ 784.963798] __se_sys_connect+0x8d/0xb0 [ 784.967782] __x64_sys_connect+0x4a/0x70 [ 784.971857] do_syscall_64+0xcf/0x110 [ 784.975678] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 784.980873] [ 784.982511] Uninit was stored to memory at: [ 784.986853] kmsan_internal_chain_origin+0x136/0x240 [ 784.991974] __msan_chain_origin+0x6d/0xb0 [ 784.996233] __save_stack_trace+0x8be/0xc60 [ 785.000570] save_stack_trace+0xc6/0x110 [ 785.004648] kmsan_internal_chain_origin+0x136/0x240 [ 785.009768] kmsan_memcpy_origins+0x13d/0x190 [ 785.014277] __msan_memcpy+0x6f/0x80 [ 785.018010] skb_copy_bits+0x1d2/0xc90 [ 785.021918] skb_copy+0x56c/0xba0 [ 785.025384] tcp_send_synack+0x7a3/0x18f0 [ 785.029546] tcp_rcv_state_process+0x275d/0x6c60 [ 785.034321] tcp_v4_do_rcv+0xb25/0xd80 [ 785.038227] __release_sock+0x32d/0x750 [ 785.042213] release_sock+0x99/0x2a0 [ 785.045942] __inet_stream_connect+0xdff/0x15d0 [ 785.050626] inet_stream_connect+0xff/0x170 [ 785.054961] __sys_connect+0x745/0x860 [ 785.058869] __se_sys_connect+0x8d/0xb0 [ 785.062854] __x64_sys_connect+0x4a/0x70 [ 785.066946] do_syscall_64+0xcf/0x110 [ 785.070765] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 785.075958] [ 785.077629] Local variable description: ----_tcph.i@ip_vs_in [ 785.083431] Variable was created at: [ 785.087161] ip_vs_in+0xe9/0x3250 [ 785.090629] ip_vs_local_request4+0xec/0x130 17:13:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket(0x1f, 0x3, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x6, 0x1, 0xff, 0x1, 0x100, 0x4, 0x7}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) dup3(r3, r0, 0x80000) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) 17:13:25 executing program 1 (fault-call:7 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:25 executing program 3 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x44c1acddde3de20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x7fffffff, 0x0, 0x7fff, 0x0, 0x9, 0x1, 0x0, 0x8, 0x6, 0x2, 0x4, 0x2, 0x9, 0xd59, 0x2, 0x6, 0x3f, 0x20, 0x6, 0x4, 0x20080000000, 0xa65, 0x200, 0x6, 0x9, 0x9, 0x1, 0x200, 0x7, 0x4abc, 0x4, 0x60000000000000, 0x0, 0x9, 0x1ea, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1, 0x8, 0x1ff, 0x3, 0x101, 0x0, 0x1}, 0xffffffffffffff9c, 0xf, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 785.629249] FAULT_INJECTION: forcing a failure. [ 785.629249] name failslab, interval 1, probability 0, space 0, times 0 [ 785.640708] CPU: 1 PID: 19577 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 785.648046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.657452] Call Trace: [ 785.660138] dump_stack+0x32d/0x480 [ 785.663866] should_fail+0x11e5/0x13c0 [ 785.667898] __should_failslab+0x278/0x2a0 [ 785.672258] should_failslab+0x29/0x70 [ 785.676225] __kmalloc+0xcf/0x4d0 [ 785.679801] ? genl_rcv_msg+0xcf7/0x1aa0 [ 785.683943] ? idr_find+0x9a/0xc0 [ 785.687493] genl_rcv_msg+0xcf7/0x1aa0 [ 785.691538] ? kmsan_set_origin+0x7f/0x100 [ 785.695898] netlink_rcv_skb+0x394/0x640 [ 785.700079] ? genl_unbind+0x390/0x390 [ 785.704062] genl_rcv+0x63/0x80 [ 785.707446] netlink_unicast+0x1699/0x1740 [ 785.711793] ? genl_pernet_exit+0x90/0x90 [ 785.716047] netlink_sendmsg+0x13c7/0x1440 [ 785.720423] ___sys_sendmsg+0xe3b/0x1240 [ 785.724576] ? netlink_getsockopt+0x1910/0x1910 [ 785.729394] ? __fdget+0x329/0x440 [ 785.733021] __se_sys_sendmsg+0x305/0x460 [ 785.737262] __x64_sys_sendmsg+0x4a/0x70 [ 785.741398] do_syscall_64+0xcf/0x110 [ 785.745282] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 785.750541] RIP: 0033:0x457569 [ 785.753811] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:13:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d", 0x4}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = dup2(r1, r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) [ 785.772781] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.780569] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 785.787897] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 785.795227] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 785.802560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 785.809886] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 [ 785.857829] FAULT_INJECTION: forcing a failure. [ 785.857829] name failslab, interval 1, probability 0, space 0, times 0 [ 785.869308] CPU: 1 PID: 19579 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 785.876644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.886054] Call Trace: [ 785.888729] dump_stack+0x32d/0x480 [ 785.892456] should_fail+0x11e5/0x13c0 [ 785.896477] __should_failslab+0x278/0x2a0 [ 785.900824] should_failslab+0x29/0x70 [ 785.904790] __kmalloc_node_track_caller+0x279/0x14e0 [ 785.910089] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 785.914340] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 785.918573] pskb_expand_head+0x30e/0x1d20 [ 785.922884] ? kmsan_set_origin+0x7f/0x100 [ 785.927270] l2tp_xmit_skb+0x5a7/0x24b0 [ 785.931356] pppol2tp_sendmsg+0x79a/0xba0 [ 785.935612] ___sys_sendmsg+0xe3b/0x1240 [ 785.939746] ? pppol2tp_getsockopt+0x1060/0x1060 [ 785.944620] ? __fget+0x8f5/0x940 [ 785.948205] ? __fdget+0x329/0x440 [ 785.951862] __sys_sendmmsg+0x56b/0xa90 [ 785.955985] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 785.961563] ? prepare_exit_to_usermode+0x182/0x4c0 [ 785.966669] __se_sys_sendmmsg+0xbd/0xe0 [ 785.970810] __x64_sys_sendmmsg+0x56/0x70 [ 785.975044] do_syscall_64+0xcf/0x110 [ 785.978938] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 785.984205] RIP: 0033:0x457569 [ 785.987474] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 786.006459] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 786.014259] RAX: ffffffffffffffda RBX: 00007f2cd6737c90 RCX: 0000000000457569 [ 786.021595] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 786.028930] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 786.036271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 786.043623] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 0000000000000007 17:13:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = msgget$private(0x0, 0x401) r2 = fcntl$getown(r0, 0x9) migrate_pages(r2, 0x8000, &(0x7f00000000c0)=0xfffffffffffffffc, &(0x7f0000000140)=0x101) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000200)=""/4096) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaac2000000080048000400000000000000907800141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) getsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f00000001c0), &(0x7f0000001280)=0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001200)={0x400, 0x80, 0x10000, {r4, r5+30000000}, 0xffff, 0x4}) 17:13:26 executing program 2 (fault-call:9 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) r3 = getpgrp(0xffffffffffffffff) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) waitid(0x3, r3, &(0x7f00000000c0), 0x20000000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000280)=0xe8) getgroups(0x6, &(0x7f00000002c0)=[0xee00, 0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r4, r5) 17:13:26 executing program 3 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d", 0x4}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 786.523022] FAULT_INJECTION: forcing a failure. [ 786.523022] name failslab, interval 1, probability 0, space 0, times 0 [ 786.534502] CPU: 1 PID: 19599 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #85 [ 786.541841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.551243] Call Trace: [ 786.553920] dump_stack+0x32d/0x480 [ 786.557648] should_fail+0x11e5/0x13c0 [ 786.561654] __should_failslab+0x278/0x2a0 [ 786.565982] should_failslab+0x29/0x70 [ 786.569956] __kmalloc_node+0x257/0x1520 [ 786.574148] ? __msan_poison_alloca+0x1e0/0x270 [ 786.578894] ? vmemdup_user+0xcd/0x430 [ 786.582882] vmemdup_user+0xcd/0x430 [ 786.586695] sctp_getsockopt+0x9519/0x186f0 [ 786.591100] ? aa_label_sk_perm+0x6d6/0x960 [ 786.595507] ? kmsan_set_origin+0x7f/0x100 [ 786.599903] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 786.605380] ? aa_sk_perm+0x7ab/0x9e0 [ 786.609318] ? aa_sock_opt_perm+0x132/0x2b0 [ 786.613762] ? sctp_setsockopt+0x13030/0x13030 [ 786.618428] sock_common_getsockopt+0x13f/0x180 [ 786.623200] ? sock_recv_errqueue+0x990/0x990 [ 786.626675] FAULT_INJECTION: forcing a failure. [ 786.626675] name failslab, interval 1, probability 0, space 0, times 0 [ 786.627760] __sys_getsockopt+0x489/0x550 [ 786.627826] __se_sys_getsockopt+0xe1/0x100 [ 786.627884] __x64_sys_getsockopt+0x62/0x80 [ 786.627953] do_syscall_64+0xcf/0x110 [ 786.655786] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 786.661035] RIP: 0033:0x457569 [ 786.664291] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 786.683248] RSP: 002b:00007f093f0c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 786.691026] RAX: ffffffffffffffda RBX: 00007f093f0c6c90 RCX: 0000000000457569 [ 786.698344] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 786.705665] RBP: 000000000072c040 R08: 00000000200004c0 R09: 0000000000000000 [ 786.712983] R10: 0000000020000480 R11: 0000000000000246 R12: 00007f093f0c76d4 [ 786.720309] R13: 00000000004c7d38 R14: 00000000004cdee8 R15: 0000000000000007 [ 786.727669] CPU: 0 PID: 19606 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 786.735003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.744405] Call Trace: [ 786.747070] dump_stack+0x32d/0x480 [ 786.750835] should_fail+0x11e5/0x13c0 [ 786.754866] __should_failslab+0x278/0x2a0 [ 786.759184] should_failslab+0x29/0x70 [ 786.763221] kmem_cache_alloc_node+0x164/0xec0 [ 786.767889] ? __alloc_skb+0x32e/0xeb0 [ 786.771865] ? __msan_poison_alloca+0x1e0/0x270 [ 786.776633] __alloc_skb+0x32e/0xeb0 [ 786.780451] ovs_ct_limit_cmd_get+0x287/0x17f0 [ 786.785170] ? __nla_parse+0x532/0x7f0 [ 786.789174] ? ovs_ct_limit_cmd_del+0xe00/0xe00 [ 786.793924] genl_rcv_msg+0x189e/0x1aa0 [ 786.798045] ? kmsan_set_origin+0x7f/0x100 [ 786.802404] netlink_rcv_skb+0x394/0x640 [ 786.806597] ? genl_unbind+0x390/0x390 [ 786.810593] genl_rcv+0x63/0x80 [ 786.813984] netlink_unicast+0x1699/0x1740 [ 786.818320] ? genl_pernet_exit+0x90/0x90 [ 786.822571] netlink_sendmsg+0x13c7/0x1440 [ 786.826940] ___sys_sendmsg+0xe3b/0x1240 [ 786.831101] ? netlink_getsockopt+0x1910/0x1910 [ 786.835923] ? __fdget+0x329/0x440 [ 786.839562] __se_sys_sendmsg+0x305/0x460 [ 786.843805] __x64_sys_sendmsg+0x4a/0x70 [ 786.847932] do_syscall_64+0xcf/0x110 [ 786.851809] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 786.857058] RIP: 0033:0x457569 [ 786.860329] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 786.879286] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.887081] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 786.894412] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 786.901769] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 786.909092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 786.916417] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 17:13:26 executing program 1 (fault-call:7 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 786.917107] FAULT_INJECTION: forcing a failure. [ 786.917107] name failslab, interval 1, probability 0, space 0, times 0 [ 786.936005] CPU: 1 PID: 19609 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 786.943334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.952735] Call Trace: [ 786.955401] dump_stack+0x32d/0x480 [ 786.959157] should_fail+0x11e5/0x13c0 [ 786.963180] __should_failslab+0x278/0x2a0 [ 786.967510] should_failslab+0x29/0x70 [ 786.971510] kmem_cache_alloc_node+0x164/0xec0 [ 786.976209] ? __alloc_skb+0x32e/0xeb0 [ 786.980226] __alloc_skb+0x32e/0xeb0 [ 786.984077] ? __msan_poison_alloca+0x1e0/0x270 [ 786.988837] sock_wmalloc+0x1e3/0x740 [ 786.992726] pppol2tp_sendmsg+0x34d/0xba0 [ 786.996990] ? pkcs7_validate_trust+0x442/0xe00 [ 787.001763] ___sys_sendmsg+0xe3b/0x1240 [ 787.005904] ? pppol2tp_getsockopt+0x1060/0x1060 [ 787.010801] ? __msan_poison_alloca+0x1e0/0x270 [ 787.015599] ? rcu_all_qs+0x3b/0x2b0 [ 787.019470] ? _cond_resched+0x59/0x120 [ 787.023581] ? rcu_all_qs+0x53/0x2b0 [ 787.027396] ? _cond_resched+0x37/0x120 [ 787.031463] ? __sys_sendmmsg+0x7c9/0xa90 [ 787.035738] ? _cond_resched+0x59/0x120 [ 787.039812] __sys_sendmmsg+0x56b/0xa90 [ 787.043937] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 787.049512] ? prepare_exit_to_usermode+0x182/0x4c0 [ 787.054619] __se_sys_sendmmsg+0xbd/0xe0 [ 787.058759] __x64_sys_sendmmsg+0x56/0x70 [ 787.062978] do_syscall_64+0xcf/0x110 [ 787.066870] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 787.072118] RIP: 0033:0x457569 [ 787.075384] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.094347] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 787.102125] RAX: ffffffffffffffda RBX: 00007f2cd6737c90 RCX: 0000000000457569 [ 787.109460] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 787.116799] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 17:13:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, [{[], {0x8100, 0x1f, 0x2}}], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0xb9a]}) 17:13:27 executing program 2 (fault-call:9 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 787.124125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 787.131452] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 0000000000000007 17:13:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x10000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x68, 0x10, &(0x7f0000000100)=[@fda={0x66646185, 0x1, 0x2, 0x26}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x2, 0x30}], &(0x7f0000000180)=[0x20, 0x28]}, 0x9}}], 0xb3, 0x0, &(0x7f0000000240)="4f2d22831cc69cf971cd1bd9ba39947be75b29ab6837400678e1be796982321c6ffe8211c2ef91f9ad28ba1cd4d45c01a330852fd98dd96601fdb79fb8a885d1265ca1884d8d310e73e78d8f77eb0c9bea008698b9c9da82964d1bfcdea4305571fbe9f0ba79bee9059f7dc2ed996f0b7fbb2f0564d8d194d90664edc14cf993f733ea5a9bab67bce47cfbe31a73c96502fefa76ad6945d45030a3bb883b796b626986f2b44561f329a5234159630233727782"}) 17:13:27 executing program 3 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 787.495923] FAULT_INJECTION: forcing a failure. [ 787.495923] name failslab, interval 1, probability 0, space 0, times 0 [ 787.507961] CPU: 1 PID: 19625 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 787.515306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.524715] Call Trace: [ 787.527396] dump_stack+0x32d/0x480 [ 787.531161] should_fail+0x11e5/0x13c0 [ 787.535164] __should_failslab+0x278/0x2a0 [ 787.539548] should_failslab+0x29/0x70 [ 787.543525] __kmalloc_node_track_caller+0x279/0x14e0 [ 787.548799] ? __msan_get_context_state+0x9/0x20 [ 787.553630] ? INIT_INT+0xc/0x30 [ 787.557103] ? kmem_cache_alloc_node+0x27b/0xec0 [ 787.562016] ? ovs_ct_limit_cmd_get+0x287/0x17f0 [ 787.566903] ? ovs_ct_limit_cmd_get+0x287/0x17f0 [ 787.571740] __alloc_skb+0x42b/0xeb0 [ 787.575569] ovs_ct_limit_cmd_get+0x287/0x17f0 [ 787.580271] ? __nla_parse+0x532/0x7f0 [ 787.584274] ? ovs_ct_limit_cmd_del+0xe00/0xe00 [ 787.589025] genl_rcv_msg+0x189e/0x1aa0 [ 787.593139] ? apic_timer_interrupt+0xa/0x20 [ 787.597656] netlink_rcv_skb+0x394/0x640 [ 787.601834] ? genl_unbind+0x390/0x390 [ 787.605821] genl_rcv+0x63/0x80 [ 787.609213] netlink_unicast+0x1699/0x1740 [ 787.613565] ? genl_pernet_exit+0x90/0x90 [ 787.617840] netlink_sendmsg+0x13c7/0x1440 [ 787.622209] ___sys_sendmsg+0xe3b/0x1240 [ 787.626353] ? netlink_getsockopt+0x1910/0x1910 [ 787.631170] ? __fdget+0x329/0x440 [ 787.634794] __se_sys_sendmsg+0x305/0x460 [ 787.639050] __x64_sys_sendmsg+0x4a/0x70 [ 787.643184] do_syscall_64+0xcf/0x110 [ 787.647073] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 787.652325] RIP: 0033:0x457569 [ 787.655595] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.674564] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.682351] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 787.689681] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 787.697017] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 787.704353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 787.711685] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 17:13:27 executing program 1 (fault-call:7 fault-nth:4): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2b, 0x7}, &(0x7f0000000040)=0x0) timer_delete(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:13:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1bc5, 0x40) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x179, 0x900) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0xe8d1, 0x7, 0x4, 0x7fff, 0x0, 0x80, 0x20200, 0x2, 0x0, 0x0, 0x9, 0x4, 0xffffffffffffff81, 0xfffffffffffffffc, 0x6, 0xe8f, 0x40, 0x4, 0x4, 0x749a, 0x7, 0x7, 0x9, 0x7ff, 0x3, 0x9, 0x6, 0x6621, 0x8, 0x7ff, 0x9, 0x1500000000000, 0xed, 0xed, 0x7, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000200), 0x8}, 0x8000, 0x6, 0x57, 0x7, 0x3f, 0xffff, 0x6}, 0x0, 0x10, 0xffffffffffffff9c, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x2c00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xd8c5) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)={0x9, 0x2}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x141080, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x3ff, 0xd, 0x1, "0b737b12b3c3ba504252235408632b6011a072fdbcc08c92d3729d0b245323a7", 0x34324142}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7fff) close(r2) close(r1) [ 788.197477] Unknown ioctl 35090 17:13:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d", 0x4}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 788.248384] Unknown ioctl 35090 17:13:28 executing program 3 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x80000) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000080)={0x10, 0x9, {0x57, 0xfffffffffffffffc, 0x9, {0x101, 0x8}, {0x2b3, 0xc7c}, @cond=[{0x5, 0x9, 0x5, 0x1, 0x5, 0x2}, {0x9, 0xcdd8, 0x3, 0x0, 0x5, 0x2}]}, {0x53, 0x82fc, 0x3ff, {0x7ff, 0x100000000}, {0x4, 0x6}, @cond=[{0x80000001, 0x7ff, 0x0, 0x3, 0x7, 0x101}, {0x55, 0x8, 0x1000, 0x210, 0x0, 0x7fffffff}]}}) 17:13:28 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}, {0x3, 0x20}, {0x3, 0x9}], 0x3, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x5, 0x8001, 0xfffffffffffff801, 0x5, 0x0, 0x4, 0x100, 0x2, 0x2e08, 0x8, 0x1, 0x80000000, 0x8a, 0x59, 0x800, 0x17ba4952, 0xfffffffffffffffc, 0x9, 0x10000, 0x5, 0x0, 0x7, 0x100000000, 0xfffffffffffffffa, 0x0, 0x8, 0x800, 0x10001, 0xc6, 0xfffffffffffff801, 0xff, 0x5, 0x9b7b, 0x7f, 0x400, 0x4, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2142, 0x81, 0x5, 0xb, 0x7fff, 0x4, 0x401}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 788.543902] netlink: get zone limit has 4 unknown bytes [ 788.549591] FAULT_INJECTION: forcing a failure. [ 788.549591] name failslab, interval 1, probability 0, space 0, times 0 [ 788.561118] CPU: 1 PID: 19664 Comm: syz-executor3 Not tainted 4.20.0-rc2+ #85 [ 788.568452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.577864] Call Trace: [ 788.580545] dump_stack+0x32d/0x480 [ 788.584279] should_fail+0x11e5/0x13c0 [ 788.588268] __should_failslab+0x278/0x2a0 [ 788.592588] should_failslab+0x29/0x70 [ 788.596561] __kmalloc_node_track_caller+0x279/0x14e0 [ 788.601864] ? netlink_trim+0x47f/0x4e0 [ 788.605937] ? netlink_trim+0x47f/0x4e0 [ 788.610021] pskb_expand_head+0x30e/0x1d20 [ 788.614331] netlink_trim+0x47f/0x4e0 [ 788.618191] netlink_unicast+0x122/0x1740 [ 788.622432] ovs_ct_limit_cmd_get+0x121a/0x17f0 [ 788.627188] ? ovs_ct_limit_cmd_del+0xe00/0xe00 [ 788.631913] genl_rcv_msg+0x189e/0x1aa0 [ 788.636055] ? kmsan_set_origin+0x7f/0x100 [ 788.640407] netlink_rcv_skb+0x394/0x640 [ 788.644591] ? genl_unbind+0x390/0x390 [ 788.648577] genl_rcv+0x63/0x80 [ 788.651969] netlink_unicast+0x1699/0x1740 [ 788.656427] ? genl_pernet_exit+0x90/0x90 [ 788.660681] netlink_sendmsg+0x13c7/0x1440 [ 788.665106] ___sys_sendmsg+0xe3b/0x1240 [ 788.669296] ? netlink_getsockopt+0x1910/0x1910 [ 788.674124] ? __fdget+0x329/0x440 [ 788.677747] __se_sys_sendmsg+0x305/0x460 [ 788.681993] __x64_sys_sendmsg+0x4a/0x70 [ 788.686135] do_syscall_64+0xcf/0x110 [ 788.690028] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 788.695276] RIP: 0033:0x457569 [ 788.698589] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.717549] RSP: 002b:00007f584717ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.725322] RAX: ffffffffffffffda RBX: 00007f584717ec90 RCX: 0000000000457569 [ 788.732670] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 17:13:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x1, 0x30240) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000240)=0x1d, 0x4) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdb00002c0003000808bcc079470d000300020000000800010003000000080008004400000008000500000000000000000098c59f3639a91847de00001ea0272bb8dc2400deadcd62efd1b04a0000000000000000b23ee422b58b9320fda3ff966056c976d6fc7e7caaf51a8bd9a1cdb258b36fb1c2a09889571591b2af1bab3df0ffffffff8e8fe035d2646912e978dbb6c4fa9eb3e2fa62304f77743b52fac6a0d718d9b9e9a23d9e5385a28a1d7cea1f3b85897af01e2ea654d43b83fd0b34a493d616439b17e38658f916510a2ab0ee88204a33bb4d18"], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) close(r1) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) 17:13:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) [ 788.739990] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 788.747316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f584717f6d4 [ 788.754638] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000006 17:13:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) socketpair(0x8, 0x806, 0x9, &(0x7f0000000000)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200680, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) write$input_event(r3, &(0x7f0000000240)={{0x0, 0x7530}, 0x16, 0x415d, 0x5}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffd) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) 17:13:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x41) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000600)=@v3={0x3000000, [{0x5cbf}, {0x6, 0x4}], r2}, 0x18, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="e5ee053c496d147d4afa87e320e76d8a1040cddfdbe05ea72268d5c90e32e1e39b2baa8fcf940fc0cea9284fdc7862db0121c254028457a21557d443abf6f6ca9f2b8a890a6bfdc37affeb3b766ab112b6c977f0b79e76467df98a044683bb604aa899da214afe1a") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000f3ff09692682c77a35770289a5243cb637f65218769c4225ab4dfdcce259752fa3c5a47c2becd8d7b4aef45500c909a9860cfaf8191998ad2ac3d7801344e7e82be64023e4bd6cb65ff8283da8d1626787644eb064338de83551fde4a6c791111a42fa05ab6756102dad6713620b1999a5879fef635a2589cb44db6e845b51b92b56713041df160e021b7b4d06871e8a1d651c12ba380b8b9317610b0d6f47d58d93a7d7d53cd0e90a3fb8e55df1ade36523d8d749a5dfa7258815f2320e2533732e55ac1ee45e9f9734565041228b36afaf7f1c6ce6dbcc0d36c8214394cc23b7e076f4ebe8b1e6175c81b1d337590c62ce585c252de5a1ffab"], &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10400, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000400)={[], 0x5, 0x8, 0x6, 0x0, 0x6, 0xf002, 0xf001, [], 0x20}) 17:13:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000001c0)={0xe04e, "b507dfd874cc1ce8b1d333ecb5203865a05078373658484d367b8329be95f9ca", 0x2, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) acct(&(0x7f0000000340)='./file0\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0xb18166a6b2ab0877) r5 = dup2(r2, r3) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f00000002c0)) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x4, 0x2b, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0x6, 0x7, 0x100, 0x7, 0x20, 0x3, 0x2dd4, 0x10000, 0x6, 0xbe, 0x8, 0x7, 0x8, 0x5, 0x1, 0x1, 0x753cd800, 0x1f, 0x4, 0x7, 0x81, 0x0, 0x1, 0x7, 0x26ea, 0x6, 0x8, 0x3, 0x7fffffff, 0x0, 0x4, 0x3, @perf_config_ext={0xc12, 0x291}, 0x180, 0xc3, 0x1, 0x3, 0x4, 0x0, 0x1f}, r4, 0x7, r5, 0xb) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000300)={0x7, 0x20363159, 0x3, @discrete={0x3, 0x2}}) close(r2) sendto(r3, &(0x7f00000000c0)="b853437b0e2dd73ae3d851161ba8e57ba72e1f6c784dda58f124339df732eb224ce8b94300798631d2add446a5c87772155febc6fe6794148c20aba95e91cf66abf8778630591d3c3f5d897ebdc70b1706f2fdf2c406bf8ff59ddd39dc9e321a53506bd2874274a0e991462624caf0b59b0757c507a6c32fc9d752cb631c22bb7af0e625bd", 0x85, 0x20000000, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x7882, 0x9, "bd71bef9f2ceff79addd85b0f6ec086a96681f764f0d3fb8c399c9f83fda73aa6fbdac69ab779bcfec6fd3596422ddc4a79970b1f26e693d8772a669ebdeed", 0xf}, 0x80) 17:13:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e23, 0x5, 0x4e22, 0x7f, 0x2, 0xa0, 0xa0, 0x3c, 0x0, r1}, {0x81, 0x8, 0x100000001, 0x3ff, 0x7b93, 0x2574, 0x101, 0x1b}, {0x5, 0x882, 0x2, 0x4}, 0x8001, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x3506, 0x0, 0x2, 0x3d, 0x9, 0xffff, 0x29}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet6_buf(r2, 0x29, 0xee, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$adsp(&(0x7f0000001e40)='/dev/adsp#\x00', 0x1, 0x400b00) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001e80)=0x100000000, 0x4) sendmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="8d44869fa1bc43bf5a039023e212236e2d60964883ff4cd68daf660c4ab4326eb0e834c01bef77e2a248131d8cbef1d1534a67a60782028e84d6c1b11422a6e3fb767543ae56f5bec5af867bb41af4429140433c42ab4c81707a240e9720eb70a6b58dc21ba6fac98df605e8a1691fe9106f959bac3a35c29819e8ad941b777720d45c8368b1cb3a06599eb1149fa5c1f03dbdfc78a17533e5cd6b2ddb028f4f7f376f7649fe89f23873", 0xaa}, {&(0x7f0000000100)="fc32a9f7c3922752fb6614a08761", 0xe}, {&(0x7f00000001c0)="04a7111a2e01067735f1f066647b8efec8da94637dc9ed1ec1d5435910215d1ef3b8a689041613bb8fa4127a60519d8dd828329b5b5432c0f07b26528c8d5f7e724a4ae227de77abcbcb7e806a2686991346c93676a7abd06e27abab7d8f6c37e330973b31d23bb8566a1858dc6d215d82ceee6afd0742185f08a91d8328e6e05d884475de12e11ca835196f65bb9c1aeafb19e280299c7e14afe3bb29afe862aba00ec6ae01f905b34bcc12b7e11772ac8e5f38f819f7f50d5e2df41d16d6dd64c49f1c097df0e9a1ec63", 0xcb}], 0x267, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x10c8, 0x400c800}, 0x4}, {{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20}, 0x1, 0x4, 0x4, 0x4}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001580)="a09dfecfc7064fffa45a909d373d49b64e4ded9e", 0x14}, {&(0x7f00000015c0)="d9ce6f4f9dd0b554053582a40e2a38a56f798e2773c8e317d7947b846c9fad22f23d8a2c70545423901431fd52fbdc4d63bc702274224529ff90f41bd6116700e7ec697fd802ea73ff371cd7da8649865c952d2df064587e952f24127acd7a9f2525d614c4d6b4bb855ff12b4d18c800cfe0c11434637d9443176a9cc0291906e57b4ede254b5015a6495db1c54455da074348728fe9560d608bfc5f23b1789141a5c8eb9e1095675c6da6d526737bc51a59a0715817937d78242c83cbfc16a526f7e2958f8415a5032b9c8681454b2089d5e89f82131f277afbe4f11b54ec", 0xdf}, {&(0x7f00000016c0)="d1cfd3006ab4b933e5ffc55f6a9350ca872d", 0x12}, {&(0x7f0000001700)="2ba3536f75dc7b623f4229c46b6ae38b33323001fa012222275f155a9ec9a92a81e489ab4b2bef440cf28fe2046aa728299503f9863dda323c8bc6bd8a536ab3c4c6f9dc48d527f8fa6cf3a93aba10c16cd73cb8f5122c1541b3e8e284ca8a75c1b0ee14cfc6bf12062b02931bed3dff4d434d6e729f154082fb1b2f2b5d490fd38b3d8630b270139a2752286d40f7e393d0386f6d72068b35756a065760570d54f119415b19105f1bd05924aeeb20110ec3975627a32c36ebf6ecada5c53f50ac975143ebb74d3b16710cbeb5fc9f5f538b335ab807605deb9a643c3fc1ff70bb25bde9", 0xe4}, {&(0x7f0000001800)="ccd74152c1c69627544e22", 0xb}, {&(0x7f0000001840)="baedf405551e642ae0eb19a0cbb2e981c5cc0fbbd27195a4e48dd9bdb8b0efadbb3eb73205dcd1c74cc443e66c7f64e615c196c963a05324110d9c40da9cc9dfb29224093e6d4a6eb6090ad21624c0e24e631b6b6204570fde0e02c86563f7ac10db76f89ec6844671f85977bb242a571bf70bee1023387f5480de7af7329222f9fe65827fba2907e3d055d7e1bed2da114c3833c085489f7fb16ca0e8bd3bd92c8ebe765797759d8f8521e323c554457fd9067222dfe9de5a4aca0d8b", 0xbd}, {&(0x7f0000001900)="e26296bbb0fd861513439fa73de7a9d0f41ecb5b10cd01727c7afad6", 0x1c}, {&(0x7f0000001940)="91047f4e0af63320f2197933a26af5cf1ae220674366e843618a11141705826fafb787e6d31b89c451b0ec34b4d91eae9b6e337e36ab1d09033b7553760d728810f54191291572e3edbb780a51e2e533baaad1e3de2ae772614c616a47110906e62c61e21f9e4c3fd6383135173cbe8de5349ef1871c103d1e6f20bec4", 0x7d}], 0x8, &(0x7f0000001a40)=[{0xb8, 0x103, 0x74, "1cd4d8d427721bb9226232ee29fd2b8ba8bc1f2b793d1e6b046ac201287e02c304a27ebe113d0b571162be93ae0cfaebdada450fb44488c3fa7d109b0a33763399c505100024882a6900d22fad50f1f820dcba6672941bba5a0463b468cf0c7bfca0ddb8dcf569c2bd441873531290e2f4ac5a49e635a0c6773ff85ebb8b4d861393b92f02171a755d1fa161eafc0c04dbd96341216d56dcad6c40a3b89866063047de88bf16"}, {0x60, 0x105, 0x40, "2f4552c7a51e752359c3cf428b22eac7515d3f5d31570336d328df8d1acb95853c9e3a1b08bd7e4266263460bc1d8f04fb7d38f1f83923716012d5fd8c7f5766b47c48d228a446a5803a1d0a"}, {0x60, 0x112, 0x5, "75c8decb8d16232080f2560b829412dfa52195f32a7eb36de3980b0ca335ed1006820b588ed40fc5bfdc5fcd82305036474ac55cd0759cb9de110f9abc9472d0afebc8528defaa0cfbdb97907116ec77"}, {0xd8, 0x3a, 0x1, "ad1c4a33d55d7e832bdd9383b735474903ad8fc3d6b74177e97ce64bfb44a9ea71a0c7866b951f69614cbfdf7810272b36434e6ce6bdc08d710dd2bd30e60cdf30c92f1fe31b28e078bb974b9aed83a5f2142263c0eb56d253b3b2564bf3106839dff6003a7192002f4224cb3f4a3d612f7344e361bfab3b4e3757c64159c1bd368b5456805a824b246785c8b14675d4231274aa34bfd7cb54ac36b2c2c231415976154feb7c515f5063af8475935dffcffcfeff7329e37a8a3bc1b9488e2e7262d88ac62d65f5bd"}, {0x108, 0x115, 0x0, "a111f2cf97cf2fa5ce4b2ec60544ddfc9bedb3b6cf41bd635a027b40955a7de50d3320fe4d693ce6d4fae8d4b2e4b318af7064998808303f8a23dc7141539370693c76ad137be98895a094ac36370a4da62b4dd513c299884b3b79fa073f94c44ce6d73bb01ee364de5d5aeaab865bc5fb495f6d0b46eaf772df026b81d804000d8495927836e23b7c1e4cb469fafea192f1da3fb554198f98cc26a95e83f35de53a3fe7701159776f3a8386cb98c375c22d73e578d920996ed8b8b13e66c5980fef9677eeb15ef991a7298149ac7b056af0fd6a4b628ef895e4e62383bd298e89bc6816909bc682a9267ec601b648c621593e5ca4"}], 0x358, 0x80}, 0x7b}], 0x2, 0x0) 17:13:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)={0x0, 0xffffffffffffffff, [0x0, 0xbc9]}) [ 789.904965] netlink: get zone limit has 4 unknown bytes [ 789.955455] netlink: get zone limit has 4 unknown bytes 17:13:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r1, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0xfff}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x9}, r3}}, 0x38) sendmsg$nl_generic(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x0) fgetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6fec09000000"], &(0x7f0000000240)=""/191, 0xbf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x5000, 0x4, 0x7000, 0x7000], 0xb8, 0x26, 0x10001}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000000c0)="3a96c235d5313eb16938505215fb7f51114234c0011df96de3b4fbe52088e15e17488257799fee45d6ddac4213df284bbdf90ea9730bdc18ecd73377eb76d52d7263e487322b06ebd7b3eea6b4634d928c5d3aac124860dface9a5bd8ff46d1ac763469c3fc845f721b6f5b26a0832a1f5aa091a6a27d0a6a8221872d0788548944dafa41711becab4e16f2fdb70", 0x8e, 0x800, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @empty, 0x908}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r0) 17:13:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179", 0x6}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 790.424542] netlink: get zone limit has 4 unknown bytes 17:13:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) membarrier(0x40, 0x0) close(r2) close(r1) 17:13:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$eventfd(r2, &(0x7f0000000140)=0x3, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) ptrace$peekuser(0x3, r4, 0x40) 17:13:30 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x1, 0x8000, 0x1, 0x81}) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080048001f000000000000009078ac14e7c17d4e1400ac1414bb440c0500ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 17:13:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 791.007962] netlink: get zone limit has 4 unknown bytes [ 791.042860] netlink: get zone limit has 4 unknown bytes 17:13:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x10104}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x1032, 0x117, 0x0, 0x25dfdbfe, {0xf}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17:13:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xe4, &(0x7f0000000200)={@local, @empty, [], {@x25={0x805, {0x2, 0x8, 0xb, "12ec53b5c7862e7bf9950b2e051ae46094c7a2dbe9c30f812c43c3a4f8ba3dc0aebe4bd8abb91a6ed8f2a5748b6772e5318334d1b50eedd5b4b67861bf0ecfd596440b2eafcede893f28a040ad65547851044f4f82865c1ae6a00f5e4d85cc4c3768cbf4807cf130568c0d042278add65f24ec04a8af91adbbde5378d6875c366969a0bbe4c7ae5ecc13d786fa6ee590c69069b998a60bad65244ba3e50021e680f92b728d070869b4aee3006efb71cbe94c0a81d0330a6c47dccd7d942181a7375ae78e3e1edd2ae582a0c1c4e8a38bc88432"}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfffffffffffffffd, 0x322, 0x0, 0xfffffffffffffffe]}) 17:13:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1, @empty, 0x62ef}, @in6={0xa, 0x4e21, 0xffffffffffff0001, @local, 0x8}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x3}], 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) fstatfs(r0, &(0x7f0000000040)=""/6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @rand_addr=0x5}, 0x100, 0x0, 0x0, 0x1, 0x3f, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$inet6(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x1c) 17:13:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = dup(r1) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x1, {0xa78d, 0x7fff, 0x0, 0x5}}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)=""/190) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:13:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50806200001424ff1b0d4d3420161f51e0eae55d200000000000"], &(0x7f0000000040)) remap_file_pages(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x2, 0x9f8, 0x8000) 17:13:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e24, @remote}}) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) r3 = accept4(r0, &(0x7f0000000000)=@sco, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x2, 0x41, 0xdd13}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'ip_vti0\x00', 0x100}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r4, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0x9}, 0x1) close(r4) close(r2) [ 792.024429] netlink: get zone limit has 4 unknown bytes [ 792.053116] netlink: get zone limit has 4 unknown bytes 17:13:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1}}, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x44040, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffff) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d617920", 0x7}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xbd, 0x224480) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@get={0xe8, 0x13, 0x404, 0x70bd26, 0x25dfdbfc, {{'poly1305\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) [ 792.875317] not chained 1420000 origins [ 792.879398] CPU: 0 PID: 19824 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 792.886691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.896066] Call Trace: [ 792.898703] dump_stack+0x32d/0x480 [ 792.902377] ? save_stack_trace+0xc6/0x110 [ 792.906667] kmsan_internal_chain_origin+0x222/0x240 [ 792.911857] ? kmsan_internal_chain_origin+0x136/0x240 [ 792.917170] ? __msan_chain_origin+0x6d/0xb0 [ 792.921616] ? __save_stack_trace+0x8be/0xc60 [ 792.926143] ? save_stack_trace+0xc6/0x110 [ 792.930409] ? kmsan_internal_chain_origin+0x136/0x240 [ 792.935721] ? kmsan_memcpy_origins+0x13d/0x190 [ 792.940421] ? __msan_memcpy+0x6f/0x80 [ 792.944339] ? skb_copy_bits+0x1d2/0xc90 [ 792.948431] ? skb_copy+0x56c/0xba0 [ 792.952091] ? tcp_send_synack+0x7a3/0x18f0 [ 792.956441] ? tcp_rcv_state_process+0x275d/0x6c60 [ 792.961397] ? tcp_v4_do_rcv+0xb25/0xd80 [ 792.965484] ? __release_sock+0x32d/0x750 [ 792.969673] ? release_sock+0x99/0x2a0 [ 792.973591] ? __inet_stream_connect+0xdff/0x15d0 [ 792.978468] ? inet_stream_connect+0xff/0x170 [ 792.983008] ? __sys_connect+0x745/0x860 [ 792.987101] ? __se_sys_connect+0x8d/0xb0 [ 792.991280] ? __x64_sys_connect+0x4a/0x70 [ 792.995552] ? do_syscall_64+0xcf/0x110 [ 792.999603] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.005000] ? is_bpf_text_address+0x49e/0x4d0 [ 793.009631] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 793.015028] ? __module_address+0x6a/0x5f0 [ 793.019326] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 793.024722] ? is_bpf_text_address+0x49e/0x4d0 [ 793.029354] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 793.034841] ? in_task_stack+0x12c/0x210 [ 793.038963] __msan_chain_origin+0x6d/0xb0 [ 793.043273] ? __release_sock+0x32d/0x750 [ 793.047457] __save_stack_trace+0x8be/0xc60 [ 793.051864] ? __release_sock+0x32d/0x750 [ 793.056055] save_stack_trace+0xc6/0x110 [ 793.060168] kmsan_internal_chain_origin+0x136/0x240 [ 793.065320] ? kmsan_internal_chain_origin+0x136/0x240 [ 793.070635] ? kmsan_memcpy_origins+0x13d/0x190 [ 793.075356] ? __msan_memcpy+0x6f/0x80 [ 793.079282] ? skb_copy_bits+0x1d2/0xc90 [ 793.083375] ? skb_copy+0x56c/0xba0 [ 793.087034] ? tcp_send_synack+0x7a3/0x18f0 [ 793.091418] ? tcp_rcv_state_process+0x275d/0x6c60 [ 793.096380] ? tcp_v4_do_rcv+0xb25/0xd80 [ 793.100490] ? __release_sock+0x32d/0x750 [ 793.104685] ? release_sock+0x99/0x2a0 [ 793.108609] ? __inet_stream_connect+0xdff/0x15d0 [ 793.113488] ? inet_stream_connect+0xff/0x170 [ 793.118035] ? __sys_connect+0x745/0x860 [ 793.122130] ? __se_sys_connect+0x8d/0xb0 [ 793.126312] ? __x64_sys_connect+0x4a/0x70 [ 793.130580] ? do_syscall_64+0xcf/0x110 [ 793.134591] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.140032] ? __msan_get_context_state+0x9/0x20 [ 793.144829] ? INIT_INT+0xc/0x30 [ 793.148229] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 793.153636] ? __msan_get_context_state+0x9/0x20 [ 793.158444] kmsan_memcpy_origins+0x13d/0x190 [ 793.163008] __msan_memcpy+0x6f/0x80 [ 793.166765] skb_copy_bits+0x1d2/0xc90 [ 793.170739] skb_copy+0x56c/0xba0 [ 793.174264] tcp_send_synack+0x7a3/0x18f0 [ 793.178450] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 793.183980] tcp_rcv_state_process+0x275d/0x6c60 [ 793.188828] tcp_v4_do_rcv+0xb25/0xd80 [ 793.192760] ? inet_sk_rx_dst_set+0x200/0x200 [ 793.197294] __release_sock+0x32d/0x750 [ 793.201314] release_sock+0x99/0x2a0 [ 793.205068] __inet_stream_connect+0xdff/0x15d0 [ 793.209783] ? wait_woken+0x5b0/0x5b0 [ 793.213612] inet_stream_connect+0xff/0x170 [ 793.217962] ? __inet_stream_connect+0x15d0/0x15d0 [ 793.222908] __sys_connect+0x745/0x860 [ 793.226836] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 793.232320] ? prepare_exit_to_usermode+0x182/0x4c0 [ 793.237369] __se_sys_connect+0x8d/0xb0 [ 793.241370] __x64_sys_connect+0x4a/0x70 [ 793.245453] do_syscall_64+0xcf/0x110 [ 793.249304] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.254526] RIP: 0033:0x457569 [ 793.257737] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.276658] RSP: 002b:00007f07b7bcbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 793.284409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 793.291692] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 793.298976] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 793.306265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07b7bcc6d4 [ 793.313550] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 793.320856] Uninit was stored to memory at: [ 793.325202] kmsan_internal_chain_origin+0x136/0x240 [ 793.330323] __msan_chain_origin+0x6d/0xb0 [ 793.334580] __save_stack_trace+0x8be/0xc60 [ 793.338915] save_stack_trace+0xc6/0x110 [ 793.343006] kmsan_internal_chain_origin+0x136/0x240 [ 793.348146] kmsan_memcpy_origins+0x13d/0x190 [ 793.352666] __msan_memcpy+0x6f/0x80 [ 793.356397] skb_copy_bits+0x1d2/0xc90 [ 793.360300] skb_copy+0x56c/0xba0 [ 793.363768] tcp_send_synack+0x7a3/0x18f0 [ 793.367928] tcp_rcv_state_process+0x275d/0x6c60 [ 793.372698] tcp_v4_do_rcv+0xb25/0xd80 [ 793.376604] __release_sock+0x32d/0x750 [ 793.380592] release_sock+0x99/0x2a0 [ 793.384322] __inet_stream_connect+0xdff/0x15d0 [ 793.389010] inet_stream_connect+0xff/0x170 [ 793.393343] __sys_connect+0x745/0x860 [ 793.397242] __se_sys_connect+0x8d/0xb0 [ 793.401227] __x64_sys_connect+0x4a/0x70 [ 793.405306] do_syscall_64+0xcf/0x110 [ 793.409124] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.414318] [ 793.415951] Uninit was stored to memory at: [ 793.420288] kmsan_internal_chain_origin+0x136/0x240 [ 793.425407] __msan_chain_origin+0x6d/0xb0 [ 793.429666] __save_stack_trace+0x8be/0xc60 [ 793.434003] save_stack_trace+0xc6/0x110 [ 793.438083] kmsan_internal_chain_origin+0x136/0x240 [ 793.443200] kmsan_memcpy_origins+0x13d/0x190 [ 793.447721] __msan_memcpy+0x6f/0x80 [ 793.451451] skb_copy_bits+0x1d2/0xc90 [ 793.455358] skb_copy+0x56c/0xba0 [ 793.458868] tcp_send_synack+0x7a3/0x18f0 [ 793.463033] tcp_rcv_state_process+0x275d/0x6c60 [ 793.467822] tcp_v4_do_rcv+0xb25/0xd80 [ 793.471742] __release_sock+0x32d/0x750 [ 793.475735] release_sock+0x99/0x2a0 [ 793.479467] __inet_stream_connect+0xdff/0x15d0 [ 793.484180] inet_stream_connect+0xff/0x170 [ 793.488525] __sys_connect+0x745/0x860 [ 793.492432] __se_sys_connect+0x8d/0xb0 [ 793.496633] __x64_sys_connect+0x4a/0x70 [ 793.501697] do_syscall_64+0xcf/0x110 [ 793.505540] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.510733] [ 793.512367] Uninit was stored to memory at: [ 793.516708] kmsan_internal_chain_origin+0x136/0x240 [ 793.521828] __msan_chain_origin+0x6d/0xb0 [ 793.526078] __save_stack_trace+0x8be/0xc60 [ 793.530416] save_stack_trace+0xc6/0x110 [ 793.534502] kmsan_internal_chain_origin+0x136/0x240 [ 793.539628] kmsan_memcpy_origins+0x13d/0x190 [ 793.544139] __msan_memcpy+0x6f/0x80 [ 793.547870] skb_copy_bits+0x1d2/0xc90 [ 793.551777] skb_copy+0x56c/0xba0 [ 793.555247] tcp_send_synack+0x7a3/0x18f0 [ 793.559410] tcp_rcv_state_process+0x275d/0x6c60 [ 793.564181] tcp_v4_do_rcv+0xb25/0xd80 [ 793.568083] __release_sock+0x32d/0x750 [ 793.572072] release_sock+0x99/0x2a0 [ 793.575808] __inet_stream_connect+0xdff/0x15d0 [ 793.580503] inet_stream_connect+0xff/0x170 [ 793.584847] __sys_connect+0x745/0x860 [ 793.588748] __se_sys_connect+0x8d/0xb0 [ 793.592737] __x64_sys_connect+0x4a/0x70 [ 793.596813] do_syscall_64+0xcf/0x110 [ 793.600636] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.605828] [ 793.607462] Uninit was stored to memory at: [ 793.611815] kmsan_internal_chain_origin+0x136/0x240 [ 793.616935] __msan_chain_origin+0x6d/0xb0 [ 793.621186] __save_stack_trace+0x8be/0xc60 [ 793.625553] save_stack_trace+0xc6/0x110 [ 793.629631] kmsan_internal_chain_origin+0x136/0x240 [ 793.634748] kmsan_memcpy_origins+0x13d/0x190 [ 793.639259] __msan_memcpy+0x6f/0x80 [ 793.642989] skb_copy_bits+0x1d2/0xc90 [ 793.646894] skb_copy+0x56c/0xba0 [ 793.650364] tcp_send_synack+0x7a3/0x18f0 [ 793.654539] tcp_rcv_state_process+0x275d/0x6c60 [ 793.659340] tcp_v4_do_rcv+0xb25/0xd80 [ 793.663243] __release_sock+0x32d/0x750 [ 793.667235] release_sock+0x99/0x2a0 [ 793.670970] __inet_stream_connect+0xdff/0x15d0 [ 793.675660] inet_stream_connect+0xff/0x170 [ 793.680014] __sys_connect+0x745/0x860 [ 793.683917] __se_sys_connect+0x8d/0xb0 [ 793.687903] __x64_sys_connect+0x4a/0x70 [ 793.691996] do_syscall_64+0xcf/0x110 [ 793.695817] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.701008] [ 793.702648] Uninit was stored to memory at: [ 793.706987] kmsan_internal_chain_origin+0x136/0x240 [ 793.712107] __msan_chain_origin+0x6d/0xb0 [ 793.716356] __save_stack_trace+0x8be/0xc60 [ 793.720691] save_stack_trace+0xc6/0x110 [ 793.724776] kmsan_internal_chain_origin+0x136/0x240 [ 793.729906] kmsan_memcpy_origins+0x13d/0x190 [ 793.734417] __msan_memcpy+0x6f/0x80 [ 793.738147] skb_copy_bits+0x1d2/0xc90 [ 793.742053] skb_copy+0x56c/0xba0 [ 793.745534] tcp_send_synack+0x7a3/0x18f0 [ 793.749700] tcp_rcv_state_process+0x275d/0x6c60 [ 793.754474] tcp_v4_do_rcv+0xb25/0xd80 [ 793.758391] __release_sock+0x32d/0x750 [ 793.762384] release_sock+0x99/0x2a0 [ 793.766114] __inet_stream_connect+0xdff/0x15d0 [ 793.770796] inet_stream_connect+0xff/0x170 [ 793.775130] __sys_connect+0x745/0x860 [ 793.779028] __se_sys_connect+0x8d/0xb0 [ 793.783019] __x64_sys_connect+0x4a/0x70 [ 793.787115] do_syscall_64+0xcf/0x110 [ 793.790938] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.796127] [ 793.797772] Uninit was stored to memory at: [ 793.802115] kmsan_internal_chain_origin+0x136/0x240 [ 793.807235] __msan_chain_origin+0x6d/0xb0 [ 793.811512] __save_stack_trace+0x8be/0xc60 [ 793.815879] save_stack_trace+0xc6/0x110 [ 793.819955] kmsan_internal_chain_origin+0x136/0x240 [ 793.825101] kmsan_memcpy_origins+0x13d/0x190 [ 793.829616] __msan_memcpy+0x6f/0x80 [ 793.833351] skb_copy_bits+0x1d2/0xc90 [ 793.837256] skb_copy+0x56c/0xba0 [ 793.840723] tcp_send_synack+0x7a3/0x18f0 [ 793.844888] tcp_rcv_state_process+0x275d/0x6c60 [ 793.849659] tcp_v4_do_rcv+0xb25/0xd80 [ 793.853561] __release_sock+0x32d/0x750 [ 793.857553] release_sock+0x99/0x2a0 [ 793.861288] __inet_stream_connect+0xdff/0x15d0 [ 793.865973] inet_stream_connect+0xff/0x170 [ 793.870312] __sys_connect+0x745/0x860 [ 793.874215] __se_sys_connect+0x8d/0xb0 [ 793.878201] __x64_sys_connect+0x4a/0x70 [ 793.882280] do_syscall_64+0xcf/0x110 [ 793.886099] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.891296] [ 793.892928] Uninit was stored to memory at: [ 793.897265] kmsan_internal_chain_origin+0x136/0x240 [ 793.902385] __msan_chain_origin+0x6d/0xb0 [ 793.906662] __save_stack_trace+0x8be/0xc60 [ 793.910997] save_stack_trace+0xc6/0x110 [ 793.915080] kmsan_internal_chain_origin+0x136/0x240 [ 793.920198] kmsan_memcpy_origins+0x13d/0x190 [ 793.924707] __msan_memcpy+0x6f/0x80 [ 793.928448] skb_copy_bits+0x1d2/0xc90 [ 793.932391] skb_copy+0x56c/0xba0 [ 793.935863] tcp_send_synack+0x7a3/0x18f0 [ 793.940023] tcp_rcv_state_process+0x275d/0x6c60 [ 793.944793] tcp_v4_do_rcv+0xb25/0xd80 [ 793.948695] __release_sock+0x32d/0x750 [ 793.952683] release_sock+0x99/0x2a0 [ 793.956429] __inet_stream_connect+0xdff/0x15d0 [ 793.961117] inet_stream_connect+0xff/0x170 [ 793.965452] __sys_connect+0x745/0x860 [ 793.969352] __se_sys_connect+0x8d/0xb0 [ 793.973342] __x64_sys_connect+0x4a/0x70 17:13:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x408880) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0xffffffff, 0x4) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:13:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x32, 0xffffffffffffffff, 0x4000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ustat(0xfffffffffffffe8a, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) userfaultfd(0x800) close(r1) 17:13:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000200)=""/253) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 793.977420] do_syscall_64+0xcf/0x110 [ 793.981266] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 793.986459] [ 793.988119] Local variable description: ----_tcph.i@ip_vs_in [ 793.993934] Variable was created at: [ 793.997664] ip_vs_in+0xe9/0x3250 [ 794.001133] ip_vs_local_request4+0xec/0x130 [ 794.118294] netlink: get zone limit has 4 unknown bytes 17:13:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xbf16) 17:13:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast1, 0x4e21, 0x7, 0x4e21, 0x6, 0x2, 0x20, 0x80, 0x7f, r4, r5}, {0x20, 0x101, 0x97af, 0x9, 0x4, 0xa086, 0x95, 0x7fff}, {0x127, 0x400, 0x3}, 0x1, 0x6e6bbf, 0x3, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x6, 0x4d6}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x3502, 0x3, 0x0, 0x7, 0x81, 0xb, 0x4}}, 0xe8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000002c0)={0x9, 0x6, 0x8d2}) close(r2) close(r1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) 17:13:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000080)=@random={'system.', "706f7369785f61636c5f616363657373706f7369785f61636c5f6163636573732dcd2f282a00"}, &(0x7f00000000c0)=""/48, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) close(r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000040)={0x55, 0x9, 0x200, 0x3ff, 0x9, 0x5}) close(r2) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={r3, 0x7, 0x100000000, 0x7e, 0x800, 0x1, 0xfff, 0x2, {r3, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x3, 0x10001, 0x5a876f3c, 0x40}}, &(0x7f0000000000)=0xb0) 17:13:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1}, 0x0) 17:13:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x8000) write$P9_RSETATTR(r1, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000001c0)={0x1, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={[], 0x1d}, [{[], {0x8100, 0x80000001, 0x6a, 0x1}}], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x202200, 0x0) fanotify_mark(r2, 0x8, 0x8, r3, &(0x7f00000000c0)='./file0\x00') [ 794.867601] netlink: get zone limit has 4 unknown bytes 17:13:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x0, 0x0) 17:13:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r0) close(r1) 17:13:35 executing program 3: socketpair$unix(0x1, 0x1005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x402000) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x9, 0x7fffffff, 0xfffffffffffffffc, 0x0, 0x1ff, 0x8}) [ 795.325366] netlink: get zone limit has 4 unknown bytes [ 795.357619] netlink: get zone limit has 4 unknown bytes 17:13:35 executing program 1: syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x200400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x300) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x99f, 0x9ae, 0x9, 0x10000, 0x0, 0x0, 0x12000, 0x8, 0x4, 0x8, 0x100000000, 0x3, 0x0, 0x5, 0x100, 0x8, 0xfffffffffffffffe, 0x4000000000000000, 0x9222, 0x3, 0x0, 0x28, 0x2, 0x7, 0x1ff, 0x100, 0x3, 0x3, 0x5, 0x77fe, 0x2, 0x9, 0xfffffffeffffffff, 0xfffffffffffffff7, 0xd9d3, 0x7, 0x0, 0xe5, 0x2, @perf_config_ext={0xff, 0x377}, 0x1000, 0x7, 0x3, 0x0, 0x2, 0x0, 0x3}, r2, 0x8, r3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:35 executing program 3: r0 = msgget$private(0x0, 0x114) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/62) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x620100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000000c0)) r3 = userfaultfd(0x0) setsockopt(r0, 0xfffffffffffffffa, 0x8, &(0x7f0000000500)="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", 0x1000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r4, 0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r4) close(r2) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e22}, {0x2, 0x4e22}, 0x100, 0x8, 0x2, 0x2, 0x5, &(0x7f0000000180)='bcsh0\x00', 0x4}) 17:13:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x7, 0x434542) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) 17:13:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1}, 0x0) [ 795.755985] netlink: get zone limit has 4 unknown bytes [ 795.823030] netlink: get zone limit has 4 unknown bytes 17:13:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x200000, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000240)={0x3, 0xfff, 0x7fffffff, 0x7fffffff, 0xfff, 0xfffffffffffffffb, 0x0, 0x1, 0x6, 0x100000000}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = getgid() setresgid(r5, r6, r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/121, &(0x7f00000000c0)=0x79) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x40, @ipv4={[], [], @multicast2}, 0x1dc000000000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) close(r2) 17:13:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 17:13:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1}, 0x0) 17:13:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000200)="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", 0x1000) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xdf, 0x4, 0x0, "650f8e1c5797ed0a5fd1388980de2d63", "d397462445d3d1e6366e8400cbf65bc9118da16f46231848f5ccbebf06db70e46e6ddde35189d3eac9e7cecfccc76527b8e63f54a13c5ccde364f99b26a3b945cd9b61043036858745a8882cba755c91e8fa5ffabe698a7fb1a0362d4b7b83aa7325b7e02a6b85f1da19596879dc1498e01f599934ce23d930a923b41cc74e343ba97b5340ca9b48796659a1510db4af3e8f8a35d6451c2b0bf03e119a6c6566b76da2ca91a9162a050095308e23cb242fa358054725d047aed976749b9b75c5f61a6d6330fa4ac87407"}, 0xdf, 0x3) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 796.285027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 17:13:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x2, 0x0) getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f0000000480)={0x0, 0x29, 0x4, @thr={&(0x7f00000004c0)="74693433ae3919e2267ba7b5c7464ba59bd72fd34101fa52aa25e270565d1ba0dd2e1074035372a3497a7d258483a65d82e37bbaa10dbb4b55dddedb0c52364b50e430d85ae3419c3fa309cc7edae76a86a4e082e63eb18e1518a8624ef8b3914f8a8b64a62a8eb24f54090d71b264decc70ae6c86cb7349dd2a6895add7dfbc0eb4a78e543dfdc35fd7228bf06573e172b014559b55ba3a7cf9776d00fef8ad48495902c081116ec0cf191a55e4e3ca7e03655cb1037f8641e7d32a1aaf8e4dbce8e68fa4a07db5fb9eeb403a32d5168c047e2136f1f0", &(0x7f00000005c0)="b56e2ae57abedc5cd74cdcd0e8fcfaec4c32d982f46256063190ca10d3d571e0730404ec960eba8012c8a2dba0a165ae7966a2c8ac8a1484715bd96a90776a04a523bc55807681818c504f2d0d4e3a459e8d8d891fd6e5bcf5e1777e7fffab447128d9821e82f0b8ad7ccb163fe7e0f0d27808cd99d89f641d5f2a98a8072eda4776b3ce5cdc662e785b39b38624ae9bfc4a6454cb806b2d5519068633a408d7c3d6c441fe07fecda37afc5551a0566948aab48f4052403a5ad0b7763dcf"}}) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032001901000000000000000c0000000800010000000000"], 0x20}}, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xc481, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000200)={0x0, 0x10000, 0x20, 0x1}) 17:13:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) fchmod(r2, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) close(r1) 17:13:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x9, 0x3, 0x4, 0x800, 0x3, 0x7ff, 0x1000, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x0, 0x2, 0x5, 0x6}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x400, 0x20}, 0xc) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x800, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e22, 0x8000, @local, 0x7}}, 0x4, 0x7}, &(0x7f00000000c0)=0x90) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000906400c6"], &(0x7f0000000040)) 17:13:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x8}, 0xf) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000000c0)={0x9, {{0xa, 0x4e23, 0x200, @mcast2, 0x5}}, {{0xa, 0x4e20, 0x100000001, @local, 0x1}}}, 0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r3, 0x1}, 0x8) close(r1) close(r1) 17:13:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000004e26, 0x0, @mcast2, 0xa}, 0x86) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000000c0)={'nat\x00', 0x0, 0x4, 0x88, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)=""/136}, &(0x7f0000000280)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x501001, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) ioctl$TCSBRK(r1, 0x5409, 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 797.188806] netlink: get zone limit has 4 unknown bytes 17:13:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) close(r2) close(r1) 17:13:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xaa, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x96de53f9b8cf900}, [], {@llc_tr={0x11, {@llc={0xfc, 0x1, 'f', "6bbc1cc66770c72ac0700b5c0756c653ae54eb2ddc8171e6d0998e1d6f106b7bc14db44e8c0018064bab7a9b698054493671cd0cc13af08f6ead4118e4316381e3e8d6efa40c9b9c5ef293503f854641ff006ee6d219897b9f7d4c40a4ad8a6a18bc88954edc1ac1d537e13c5a0531546f29e2be32e2e67ec16fa8fb3e32373a98bed2e016d0d572a331e95221182a376d1f52d750a88ccc7a"}}}}}, &(0x7f0000000000)={0x1, 0x2, [0xfb2, 0x104, 0x831, 0x6c3]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 797.289171] netlink: get zone limit has 4 unknown bytes 17:13:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x400000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0xfffffffffffff800, 0x4) 17:13:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x2) 17:13:37 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032001901000000000000000003000000c4e400000800010000000000"], 0x20}}, 0x0) 17:13:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000200)=[0xee00, 0xee01, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000300)=[r1, r2, r3, r4]) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x4, 0x810, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x200) prctl$getname(0x10, &(0x7f0000000340)=""/81) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r5) 17:13:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000904f6c50588a4dfe4ca5626ef7d8ed03f87e591b1a71780000"], &(0x7f0000000040)) 17:13:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 797.966123] netlink: get zone limit has 4 unknown bytes [ 798.032205] netlink: get zone limit has 4 unknown bytes 17:13:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x3, 0x40000) socketpair$inet(0x2, 0xa, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40, 0x68040) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x4]}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000280)={0x1, r2}) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@md5={0x1, "a13d2ce631f37e29321277abc91689dd"}, 0x11, 0x3) 17:13:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x301080) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x33e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x7fff, @local, 0xfff}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0xf}, 0x3}, @in={0x2, 0x4e23, @remote}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r4, 0x7f}, 0x8) 17:13:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:38 executing program 3: r0 = getuid() ioprio_set$uid(0x3, r0, 0x200000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x149000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:13:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000040), r1, &(0x7f0000000080), 0x400, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xa0001, 0x0) write$P9_RWALK(r4, &(0x7f0000000100)={0x30, 0x6f, 0x2, {0x3, [{0x20, 0x0, 0x3}, {0x42, 0x3, 0x5}, {0x12, 0x0, 0x4}]}}, 0x30) 17:13:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xfffffffffffffca5, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000001c0)={0x1, 0x4}) close(r2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x22002, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0xb2, 0x4}]}, 0xc, 0x1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000040)={0x2, 0x1}) close(r1) 17:13:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000a142427628c5b28de3c3519dac2f8ae2bd572c487c3c081b6c5111e65e67bf5bb5c3aa6312ba883ecfcabf56c4771e610776bb547fb2e605756fcd"], &(0x7f0000000040)) 17:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0xffffffffffffffff) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9, 0x7, 0x0, 0x8, 0xab, 0x5, 0x4e0, {0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x5}}, 0x81, 0x9, 0x6, 0x1f, 0x1000}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={r4, 0x4f3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r5, 0x1, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r0) close(r2) 17:13:39 executing program 3: r0 = socket(0x10, 0xb, 0xb6d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x3, 0x9}, &(0x7f00000001c0)=0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x800, 0x20000) write$P9_RLINK(r4, &(0x7f0000000240)={0x7, 0x47, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) write$P9_RLINK(r5, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) 17:13:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xcf, &(0x7f0000000040)="03952eb1c9b6e5e40e09", 0xa) close(r2) close(r1) 17:13:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 799.366852] netlink: get zone limit has 4 unknown bytes 17:13:39 executing program 4: socketpair$unix(0x1, 0x80004, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb000000000000000091d0929695ca4b1992c3c645c433fa29a561effeb3b4cd1a13865fb1031d7f7162c289458ab935228bdfc7dd5a4ab34753a6f1d24f4560610da9e7be1f09cf15f4b6de452fbc80fe686eea9c03499c29cd3a272c13979e5a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) 17:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:39 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) fcntl$setflags(r0, 0x2, 0x1) 17:13:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000440)=0x3259) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) futex(&(0x7f00000005c0), 0x8c, 0x1, &(0x7f0000000600)={0x0, 0x989680}, &(0x7f0000000640)=0x2, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0400c8c800000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="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"], @ANYBLOB="09010100f300ba9104000000030000003aa935a2d45c7b1d495ee9bc187e6f237a845f79e7b2cc22fd13a5acc260ac0568bd2e53cb8063eda00844dc3379c1517b7c75ce00ff10c0dbd89630be1f6ddeb18fe4952d3a3ed1c3259c0038a0eb995c4ed011fe271a619feba48d373a169b24d1b26208e026c215903622f8725d47c6866aa5ca244c1b98"]) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @ipv4={[], [], @multicast2}, 0x5}}, 0x400, 0x9}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={r6, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x1c}, 0x2}]}, &(0x7f00000004c0)=0x10) close(r4) close(r3) getpeername(r5, &(0x7f0000000500)=@sco, &(0x7f0000000580)=0x62) 17:13:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x82, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) fremovexattr(r2, &(0x7f0000000180)=@random={'osx.', 'self-cpuset&selinux/(!(\x00'}) syz_emit_ethernet(0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r2], &(0x7f0000000040)={0x0, 0x3}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/102, &(0x7f0000000280)=0x66) r3 = accept4(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80, 0x80800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000140)=0x87ed, 0x4) [ 799.891035] netlink: get zone limit has 4 unknown bytes [ 799.939064] netlink: get zone limit has 4 unknown bytes 17:13:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x43, 0x0, 0x0, 0x0, 0x800000000000000a, 0x0, 0x0, 0x0, 0x0, r3}, {0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, {}, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000001c0)={0x0, 0x1, 0x7, 'queue1\x00', 0x1}) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x6ad623e56f9e4e45}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 17:13:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 800.396205] netlink: get zone limit has 4 unknown bytes 17:13:40 executing program 2: socketpair$unix(0x1, 0x100d, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, r4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="145f4200002cfde9375b8fbcb9d6866470000000000007ff000000000300140006000000000000000000000000000000000008000500ac1414"], 0x1}}, 0x81) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="75030000", @ANYRES16=0x0, @ANYBLOB="00000b9d69e835031c66e87ab3b802d1223eb3489fe8e6a50800000046845699d2d5db33acf0c623602e7fe8a83f1ac1b1d356e419cd020d120280584c35309d8d733c768ebb25f575499988cefb3c3cf6f27325287b4ef121532f38a7567e89abf0d9347373a55d0000"], 0x14}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000540)="660f694907b9800000c00f3235008000000f300f01d1660f381e3f36660f7d1ccc8fc830b66698f06498b9d6090000b800600000ba000000000f30b8010000000f01c1f2f33232"}], 0xaaaadb4, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1f1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="811c08e6a8f849d2e8d7fbcac986b0f6405f00000000000000000038294dbce094f100686b7e90b24ab0a28fea6c0fb6f07a123a18e1f18e45644e78ed95951b3121e5d4bee0d4333435c0d9eab422c114fe32cd2141035e7022343a0979af62d804359919a21d33ccc96e360793b79acd9ab3e83f5d391640a2b1027807b8fada5ea57da614e17db7458148f268ccb25f61bb0d36cf358bda90687b9499c05b24b60323def9c8f10579a112a9b6b8dd64662df38d"]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 800.492396] netlink: get zone limit has 4 unknown bytes 17:13:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000002c0)={{0x0, 0x5, 0x6, 0xfffffffffffffffc, '\x00', 0x5}, 0x3, 0x0, 0x4, r4, 0x1, 0x2, 'syz0\x00', &(0x7f0000000280)=['eth0!@vmnet0\x00'], 0xd, [], [0x401, 0x3f, 0x2, 0x1]}) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="093b6500efffffff"], &(0x7f0000000040)) r5 = accept4(r0, 0x0, &(0x7f0000000080), 0x80000) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) 17:13:40 executing program 3: r0 = open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x0) ioctl$TIOCNXCL(r0, 0x540d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x501200, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x240000, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x200, 0x43) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000880)={&(0x7f00000006c0), 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc4, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40800}, 0x20004044) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x70, 0x81, 0x200, 0x0, 0x0, 0x0, 0x9, 0x9012, 0x0, 0x3c, 0x643, 0x5, 0x4, 0x9, 0x4, 0x800, 0x9, 0x6ec94eaa, 0x5, 0x673f, 0x1, 0xbe, 0x0, 0x0, 0x3, 0xffffffff, 0x10001, 0x9405, 0x8, 0x40, 0x5, 0x100000000, 0x0, 0x1, 0x80000001, 0x81, 0x8, 0x0, 0xe6cb, 0x6, @perf_bp={&(0x7f0000000240), 0x4}, 0x8080, 0xffffffffffffffda, 0x8000, 0x0, 0x8, 0x2, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x0, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x1, 0x480) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xbf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x8c, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@generic="e71e99dcc856d965a45e1ad7ec78d5c291add7ca78ed8f3998f6525bc79f81974fad4d2296c27af554d13d4e5c004156bad8c32329bb6d0a3dba68d24b331ab90b6b1cf5c15b27f4465cbe49b50bc873e91d84055b8f524d7614027968d1d6702db5124bd6184fb4fcda73580df3bf6a9d560635e5d3"]}, 0x8c}}, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x8) getpeername(r3, &(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in=@multicast2, 0x4e23, 0x4, 0x4e24, 0x1000, 0x2, 0xa0, 0x20, 0xff, r7, r8}, {0x7, 0x9, 0x6, 0x7, 0x1, 0x735, 0x7f, 0x6}, {0x10000, 0x10001, 0xfffffffffffffffa, 0x101}, 0x8, 0x6e6bc0, 0x3, 0x0, 0x1}, {{@in=@rand_addr=0x5, 0x4d3, 0x6c}, 0xa, @in6=@local, 0x3504, 0x0, 0x3, 0x2, 0x2, 0x401, 0x1}}, 0xe8) 17:13:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20002, 0x0) ioctl$TIOCCBRK(r6, 0x5428) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x100000000, 0x0, 0x2, "d1efbac316f98273868b9ae86de91a654a94b6a13aa658b6a940896d6e7017d4", 0x32315241}) 17:13:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000000)='proc\x00', 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xffffffff00000001, 0x4, [0x8, 0x7aa8, 0xffff, 0x8]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r2, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 801.143084] netlink: 116 bytes leftover after parsing attributes in process `syz-executor3'. 17:13:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x9) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) pwrite64(r0, &(0x7f0000000000)="5d22952d5f87a25383eb4d1a286cd4d58065fd9a0b2e178d2d92b420c7cff2ee0ce5ab8eb90998be70f668a78de1b554dfd00294e847464c4ebd0403744e546e2c4b7a3e81312f5c1cd332caa22930440c9f0fd89b8e784c68fe", 0x5a, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xd94e, 0x300) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0xffffffffffff8001, 0x3d58}) close(r3) close(r2) [ 801.269448] netlink: 116 bytes leftover after parsing attributes in process `syz-executor3'. 17:13:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000440)=0x1000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0xfe83}}, 0x0) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x800000000000000, @remote, 0x3}, 0x1c) ioctl$LOOP_CLR_FD(r2, 0x4c01) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000240)="11f8dfb12272e82bee4e1cbc92c366791a0a7d51dd96cd7630e20d04080bad8504773d5918b650d2727607", 0x2b) pread64(r3, &(0x7f0000000400)=""/4, 0x4, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) fchmodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) socket$l2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000280)=0x99) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000001c0)) modify_ldt$write(0x1, &(0x7f0000000480)={0xffffffff, 0xffffffffffffffff, 0x400, 0x9, 0x8, 0x9, 0x3ff, 0x9, 0x4, 0x10000}, 0x10) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10003, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000240)={0x3, 0x0, 0x10001, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x100000000, r3, 0x2, 0x2}) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x10040) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup3(r1, r1, 0x80000) recvmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/23, 0x17, 0x2}, 0x40) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000000)={0xc, 0x7f46cdf5, {0x57, 0x1, 0xfffffffffffffffa, {0x7, 0x3}, {0x5, 0xf22}, @cond=[{0x8, 0x7f, 0x80, 0x2, 0x100000000, 0x6}, {0x4, 0x0, 0x100000000, 0xfff, 0x1, 0x4}]}, {0x55, 0x1ff, 0x5, {0x2, 0x5}, {0x1, 0x2}, @cond=[{0x3, 0x0, 0x7, 0x5, 0xce5, 0xfffffffffffffff7}, {0x101, 0x4, 0x1, 0x1, 0xfffffffffffffffe, 0x9}]}}) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f00000002c0)={0x1, 0xfffffffffffffffc, 0x7, 0x10001}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r0, 0xffffffffa0010000) accept4(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x60ab, @ipv4={[], [], @local}, 0x9}, 0x1c) close(r4) close(r1) 17:13:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 801.645976] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 801.769555] not chained 1430000 origins [ 801.773601] CPU: 1 PID: 20130 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 801.780895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.790267] Call Trace: [ 801.792890] dump_stack+0x32d/0x480 [ 801.796585] kmsan_internal_chain_origin+0x222/0x240 [ 801.801759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 801.807154] ? __module_address+0x6a/0x5f0 [ 801.811418] ? is_bpf_text_address+0x3e5/0x4d0 17:13:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x8, 0x0, [], [{0x2, 0x10001, 0x4, 0x100, 0x1, 0x6}, {0xff9, 0x74500000000000, 0x800, 0x3, 0x5}], [[], [], [], [], [], [], [], []]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) socketpair(0x1, 0x2, 0x400, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="4000110066edb6247d32543e87b7374d4c9fbc91d7cf96268fdbd1e94efe775f921d0a2506910f9cddb01bec5e0cdc60cc67bb2d84b72b38af64ba1b264e8b7981bec809"], &(0x7f00000000c0)=0x48) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x32e, 0x100000001, 0x310}, &(0x7f0000000140)=0x10) close(r2) close(r0) [ 801.816044] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 801.821438] ? is_bpf_text_address+0x49e/0x4d0 [ 801.826057] ? kmsan_internal_chain_origin+0x90/0x240 [ 801.831298] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 801.836692] ? is_bpf_text_address+0x49e/0x4d0 [ 801.841316] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 801.846798] ? in_task_stack+0x12c/0x210 [ 801.850912] __msan_chain_origin+0x6d/0xb0 [ 801.855189] __save_stack_trace+0x833/0xc60 [ 801.859588] ? save_stack_trace+0xc6/0x110 [ 801.863868] save_stack_trace+0xc6/0x110 [ 801.867981] kmsan_internal_chain_origin+0x136/0x240 [ 801.873159] ? kmsan_internal_chain_origin+0x136/0x240 [ 801.878478] ? kmsan_memcpy_origins+0x13d/0x190 [ 801.883199] ? __msan_memcpy+0x6f/0x80 [ 801.887122] ? pskb_expand_head+0x436/0x1d20 [ 801.891563] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 801.895743] ? pppol2tp_sendmsg+0x79a/0xba0 [ 801.900086] ? ___sys_sendmsg+0xe3b/0x1240 [ 801.904346] ? __sys_sendmmsg+0x56b/0xa90 [ 801.908538] ? __se_sys_sendmmsg+0xbd/0xe0 [ 801.912816] ? __x64_sys_sendmmsg+0x56/0x70 [ 801.917170] ? do_syscall_64+0xcf/0x110 [ 801.921184] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 801.926605] ? __msan_poison_alloca+0x1e0/0x270 [ 801.931350] ? __msan_get_context_state+0x9/0x20 [ 801.936137] ? INIT_INT+0xc/0x30 [ 801.939544] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 801.944962] kmsan_memcpy_origins+0x13d/0x190 [ 801.949502] __msan_memcpy+0x6f/0x80 [ 801.953263] pskb_expand_head+0x436/0x1d20 [ 801.957569] l2tp_xmit_skb+0x5a7/0x24b0 [ 801.961614] pppol2tp_sendmsg+0x79a/0xba0 [ 801.965836] ___sys_sendmsg+0xe3b/0x1240 [ 801.969934] ? pppol2tp_getsockopt+0x1060/0x1060 [ 801.974748] ? __msan_poison_alloca+0x1e0/0x270 [ 801.979443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 801.984844] ? rcu_all_qs+0x3b/0x2b0 [ 801.988596] ? _cond_resched+0x59/0x120 [ 801.992634] ? rcu_all_qs+0x53/0x2b0 [ 801.996376] ? _cond_resched+0x37/0x120 [ 802.000383] ? __sys_sendmmsg+0x7c9/0xa90 [ 802.004582] ? _cond_resched+0x59/0x120 [ 802.008590] __sys_sendmmsg+0x56b/0xa90 [ 802.012638] ? __msan_metadata_ptr_for_store_4+0x13/0x20 17:13:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 802.018116] ? prepare_exit_to_usermode+0x182/0x4c0 [ 802.023176] __se_sys_sendmmsg+0xbd/0xe0 [ 802.027280] __x64_sys_sendmmsg+0x56/0x70 [ 802.031453] do_syscall_64+0xcf/0x110 [ 802.035294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.040544] RIP: 0033:0x457569 [ 802.043769] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.062700] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 802.070445] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 802.077738] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 000000000000000a [ 802.085042] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 802.092337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 802.099633] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 802.106945] Uninit was stored to memory at: [ 802.111298] kmsan_internal_chain_origin+0x136/0x240 [ 802.116431] __msan_chain_origin+0x6d/0xb0 [ 802.120689] save_stack_trace+0xfa/0x110 [ 802.124782] kmsan_internal_chain_origin+0x136/0x240 [ 802.129929] kmsan_memcpy_origins+0x13d/0x190 [ 802.134460] __msan_memcpy+0x6f/0x80 [ 802.138214] pskb_expand_head+0x436/0x1d20 [ 802.142481] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.146489] pppol2tp_sendmsg+0x79a/0xba0 [ 802.150674] ___sys_sendmsg+0xe3b/0x1240 [ 802.154758] __sys_sendmmsg+0x56b/0xa90 [ 802.158755] __se_sys_sendmmsg+0xbd/0xe0 [ 802.162839] __x64_sys_sendmmsg+0x56/0x70 [ 802.167013] do_syscall_64+0xcf/0x110 [ 802.170852] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.176055] [ 802.177700] Uninit was stored to memory at: [ 802.182059] kmsan_internal_chain_origin+0x136/0x240 [ 802.187196] __msan_chain_origin+0x6d/0xb0 [ 802.191458] __save_stack_trace+0x833/0xc60 [ 802.195806] save_stack_trace+0xc6/0x110 [ 802.199895] kmsan_internal_chain_origin+0x136/0x240 [ 802.205035] kmsan_memcpy_origins+0x13d/0x190 [ 802.209561] __msan_memcpy+0x6f/0x80 [ 802.213307] pskb_expand_head+0x436/0x1d20 [ 802.217575] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.221597] pppol2tp_sendmsg+0x79a/0xba0 [ 802.225772] ___sys_sendmsg+0xe3b/0x1240 [ 802.229857] __sys_sendmmsg+0x56b/0xa90 [ 802.233860] __se_sys_sendmmsg+0xbd/0xe0 [ 802.237946] __x64_sys_sendmmsg+0x56/0x70 [ 802.242117] do_syscall_64+0xcf/0x110 [ 802.245952] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.251147] [ 802.252786] Uninit was stored to memory at: [ 802.257138] kmsan_internal_chain_origin+0x136/0x240 [ 802.262270] __msan_chain_origin+0x6d/0xb0 [ 802.266544] save_stack_trace+0xfa/0x110 [ 802.270645] kmsan_internal_chain_origin+0x136/0x240 [ 802.275777] kmsan_memcpy_origins+0x13d/0x190 [ 802.280302] __msan_memcpy+0x6f/0x80 [ 802.284046] pskb_expand_head+0x436/0x1d20 [ 802.288311] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.292311] pppol2tp_sendmsg+0x79a/0xba0 [ 802.296494] ___sys_sendmsg+0xe3b/0x1240 [ 802.300587] __sys_sendmmsg+0x56b/0xa90 [ 802.304600] __se_sys_sendmmsg+0xbd/0xe0 [ 802.308686] __x64_sys_sendmmsg+0x56/0x70 [ 802.312861] do_syscall_64+0xcf/0x110 [ 802.316695] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.321896] [ 802.323547] Uninit was stored to memory at: [ 802.327897] kmsan_internal_chain_origin+0x136/0x240 [ 802.333028] __msan_chain_origin+0x6d/0xb0 [ 802.337292] __save_stack_trace+0x833/0xc60 [ 802.341650] save_stack_trace+0xc6/0x110 [ 802.345738] kmsan_internal_chain_origin+0x136/0x240 [ 802.350867] kmsan_memcpy_origins+0x13d/0x190 [ 802.355385] __msan_memcpy+0x6f/0x80 [ 802.359131] pskb_expand_head+0x436/0x1d20 [ 802.363398] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.367745] pppol2tp_sendmsg+0x79a/0xba0 [ 802.371924] ___sys_sendmsg+0xe3b/0x1240 [ 802.376014] __sys_sendmmsg+0x56b/0xa90 [ 802.380018] __se_sys_sendmmsg+0xbd/0xe0 [ 802.384126] __x64_sys_sendmmsg+0x56/0x70 [ 802.388326] do_syscall_64+0xcf/0x110 [ 802.392174] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.397372] [ 802.399014] Uninit was stored to memory at: [ 802.403376] kmsan_internal_chain_origin+0x136/0x240 [ 802.408517] __msan_chain_origin+0x6d/0xb0 [ 802.412781] save_stack_trace+0xfa/0x110 [ 802.416875] kmsan_internal_chain_origin+0x136/0x240 [ 802.422006] kmsan_memcpy_origins+0x13d/0x190 [ 802.426546] __msan_memcpy+0x6f/0x80 [ 802.430286] pskb_expand_head+0x436/0x1d20 [ 802.434564] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.438575] pppol2tp_sendmsg+0x79a/0xba0 [ 802.442751] ___sys_sendmsg+0xe3b/0x1240 [ 802.446843] __sys_sendmmsg+0x56b/0xa90 [ 802.450841] __se_sys_sendmmsg+0xbd/0xe0 [ 802.454931] __x64_sys_sendmmsg+0x56/0x70 [ 802.459111] do_syscall_64+0xcf/0x110 [ 802.462943] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.468160] [ 802.469796] Uninit was stored to memory at: [ 802.474141] kmsan_internal_chain_origin+0x136/0x240 [ 802.479275] __msan_chain_origin+0x6d/0xb0 [ 802.483544] __save_stack_trace+0x833/0xc60 [ 802.487887] save_stack_trace+0xc6/0x110 [ 802.492004] kmsan_internal_chain_origin+0x136/0x240 [ 802.497137] kmsan_memcpy_origins+0x13d/0x190 [ 802.501659] __msan_memcpy+0x6f/0x80 [ 802.505405] pskb_expand_head+0x436/0x1d20 [ 802.509671] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.513675] pppol2tp_sendmsg+0x79a/0xba0 [ 802.517853] ___sys_sendmsg+0xe3b/0x1240 [ 802.521936] __sys_sendmmsg+0x56b/0xa90 [ 802.525930] __se_sys_sendmmsg+0xbd/0xe0 [ 802.530012] __x64_sys_sendmmsg+0x56/0x70 [ 802.534191] do_syscall_64+0xcf/0x110 [ 802.536118] not chained 1440000 origins [ 802.538019] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.541999] CPU: 0 PID: 6756 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 802.547174] [ 802.554361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.555981] Uninit was stored to memory at: [ 802.565332] Call Trace: [ 802.569664] kmsan_internal_chain_origin+0x136/0x240 [ 802.572246] [ 802.577350] __msan_chain_origin+0x6d/0xb0 [ 802.579494] dump_stack+0x32d/0x480 [ 802.583735] save_stack_trace+0xfa/0x110 [ 802.587371] kmsan_internal_chain_origin+0x222/0x240 [ 802.591443] kmsan_internal_chain_origin+0x136/0x240 [ 802.596581] ? set_irq_regs+0x79/0xc0 [ 802.601657] kmsan_memcpy_origins+0x13d/0x190 [ 802.605464] ? ret_from_intr+0x13/0x33 [ 802.609954] __msan_memcpy+0x6f/0x80 [ 802.613837] ? flat_init_apic_ldr+0x180/0x180 [ 802.617542] pskb_expand_head+0x436/0x1d20 [ 802.617570] l2tp_xmit_skb+0x5a7/0x24b0 [ 802.622070] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.626287] pppol2tp_sendmsg+0x79a/0xba0 [ 802.630257] ? __module_address+0x6a/0x5f0 [ 802.635614] ___sys_sendmsg+0xe3b/0x1240 [ 802.639762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 802.643985] __sys_sendmmsg+0x56b/0xa90 [ 802.648046] ? is_bpf_text_address+0x49e/0x4d0 [ 802.653401] __se_sys_sendmmsg+0xbd/0xe0 [ 802.657378] ? INIT_INT+0xc/0x30 [ 802.661944] __x64_sys_sendmmsg+0x56/0x70 [ 802.666011] __msan_chain_origin+0x6d/0xb0 [ 802.669360] do_syscall_64+0xcf/0x110 [ 802.673505] __save_stack_trace+0xaff/0xc60 [ 802.677744] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.681581] save_stack_trace+0xc6/0x110 [ 802.685841] [ 802.691046] kmsan_internal_chain_origin+0x136/0x240 [ 802.701838] ? __msan_poison_alloca+0x9f/0x270 [ 802.706453] ? kmsan_internal_chain_origin+0x136/0x240 [ 802.711748] ? kmsan_memcpy_origins+0x13d/0x190 [ 802.716436] ? __msan_memcpy+0x6f/0x80 [ 802.720346] ? pskb_expand_head+0x436/0x1d20 [ 802.724774] ? __tcp_retransmit_skb+0xdf6/0x46c0 [ 802.729558] ? tcp_retransmit_skb+0xa4/0x430 [ 802.733985] ? tcp_retransmit_timer+0x341b/0x4910 [ 802.738846] ? tcp_write_timer_handler+0x51d/0xe80 [ 802.743792] ? tcp_write_timer+0x139/0x250 [ 802.748046] ? call_timer_fn+0x356/0x7c0 [ 802.752126] ? __run_timers+0xe95/0x1300 [ 802.756205] ? run_timer_softirq+0x55/0xa0 [ 802.760454] ? __do_softirq+0x721/0xc7f [ 802.764445] ? irq_exit+0x305/0x340 [ 802.768092] ? exiting_irq+0xe/0x10 [ 802.771737] ? smp_apic_timer_interrupt+0x64/0x90 [ 802.776594] ? apic_timer_interrupt+0xf/0x20 [ 802.781021] ? __msan_poison_alloca+0x9f/0x270 [ 802.785618] ? wait_consider_task+0x12a/0x52b0 [ 802.790211] ? do_wait+0x81b/0xf80 [ 802.793763] ? kernel_wait4+0x3fa/0x620 [ 802.797753] ? __se_sys_wait4+0x15a/0x300 [ 802.801917] ? __x64_sys_wait4+0x56/0x70 [ 802.805993] ? do_syscall_64+0xcf/0x110 [ 802.809991] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 802.815401] ? __msan_get_context_state+0x9/0x20 [ 802.820173] ? INIT_INT+0xc/0x30 [ 802.823568] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 802.828951] ? ipv4_dst_check+0x1aa/0x2a0 [ 802.833134] kmsan_memcpy_origins+0x13d/0x190 [ 802.837659] __msan_memcpy+0x6f/0x80 [ 802.841395] pskb_expand_head+0x436/0x1d20 [ 802.845685] __tcp_retransmit_skb+0xdf6/0x46c0 [ 802.850295] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 802.855677] ? ktime_get_with_offset+0x344/0x4e0 [ 802.860495] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 802.865980] ? tcp_enter_loss+0x14f6/0x15b0 [ 802.870324] tcp_retransmit_skb+0xa4/0x430 [ 802.874592] tcp_retransmit_timer+0x341b/0x4910 [ 802.879307] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 802.884785] tcp_write_timer_handler+0x51d/0xe80 [ 802.889579] tcp_write_timer+0x139/0x250 [ 802.893669] call_timer_fn+0x356/0x7c0 [ 802.897581] ? tcp_init_xmit_timers+0x130/0x130 [ 802.902281] __run_timers+0xe95/0x1300 [ 802.906190] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.911573] ? tcp_init_xmit_timers+0x130/0x130 [ 802.916311] run_timer_softirq+0x55/0xa0 [ 802.920407] ? timers_dead_cpu+0xb70/0xb70 [ 802.924666] __do_softirq+0x721/0xc7f [ 802.928517] irq_exit+0x305/0x340 [ 802.931999] exiting_irq+0xe/0x10 [ 802.935470] smp_apic_timer_interrupt+0x64/0x90 [ 802.940187] apic_timer_interrupt+0xf/0x20 [ 802.944442] [ 802.946704] RIP: 0010:__msan_poison_alloca+0x9f/0x270 [ 802.951909] Code: 49 89 d7 49 89 fc 48 89 44 24 10 48 89 74 24 08 48 85 f6 74 6a 44 89 e0 25 ff 0f 00 00 bb 00 10 00 00 48 29 c3 4c 8b 74 24 08 <4c> 39 f3 49 0f 43 de 4d 89 e5 0f 1f 80 00 00 00 00 31 d2 4c 89 ef [ 802.970823] RSP: 0018:ffff888152d8f9c0 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff13 [ 802.978555] RAX: 0000000000000c08 RBX: 00000000000003f8 RCX: 0000000000000002 [ 802.985841] RDX: ffffffff8bea6d30 RSI: 0000000000000008 RDI: ffff888152d8fc08 [ 802.993126] RBP: ffff888152d8fa58 R08: 0000000000480020 R09: 0000000000000002 [ 803.000410] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888152d8fc08 [ 803.007695] R13: 0000000000000000 R14: 0000000000000008 R15: ffffffff8bea6d30 [ 803.015026] ? wait_consider_task+0x115/0x52b0 [ 803.019633] ? do_wait+0x81b/0xf80 [ 803.023195] wait_consider_task+0x12a/0x52b0 [ 803.027625] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 803.033030] ? __msan_get_context_state+0x9/0x20 [ 803.037820] ? INIT_BOOL+0xc/0x30 [ 803.041300] ? kmsan_set_origin+0x7f/0x100 [ 803.045585] ? _raw_read_lock+0x192/0x260 [ 803.049781] do_wait+0x81b/0xf80 [ 803.053228] kernel_wait4+0x3fa/0x620 [ 803.057063] ? __do_sys_exit_group+0x30/0x30 [ 803.061499] __se_sys_wait4+0x15a/0x300 [ 803.065547] ? syscall_return_slowpath+0xed/0x730 [ 803.070421] __x64_sys_wait4+0x56/0x70 [ 803.074329] do_syscall_64+0xcf/0x110 [ 803.078153] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.083355] RIP: 0033:0x41124a [ 803.086577] Code: 0f 83 1a 17 00 00 c3 66 0f 1f 84 00 00 00 00 00 8b 05 6e 4d 63 00 85 c0 75 36 45 31 d2 48 63 d2 48 63 ff b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 d4 ff ff ff f7 [ 803.105495] RSP: 002b:0000000000a3fd98 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 803.113234] RAX: ffffffffffffffda RBX: 00000000000c3ea9 RCX: 000000000041124a [ 803.120528] RDX: 0000000040000001 RSI: 0000000000a3fdd0 RDI: ffffffffffffffff [ 803.127819] RBP: 000000000000060f R08: 0000000000000001 R09: 00000000027e6940 [ 803.135114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 803.142399] R13: 00000000000c3c7d R14: 00000000000001e7 R15: 0000000000000000 [ 803.149708] Uninit was stored to memory at: [ 803.154058] kmsan_internal_chain_origin+0x136/0x240 [ 803.159193] __msan_chain_origin+0x6d/0xb0 [ 803.163442] __save_stack_trace+0x8be/0xc60 [ 803.167781] save_stack_trace+0xc6/0x110 [ 803.171856] kmsan_internal_chain_origin+0x136/0x240 [ 803.176974] kmsan_memcpy_origins+0x13d/0x190 [ 803.181507] __msan_memcpy+0x6f/0x80 [ 803.185263] pskb_expand_head+0x436/0x1d20 [ 803.189526] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.194122] tcp_retransmit_skb+0xa4/0x430 [ 803.198393] tcp_retransmit_timer+0x341b/0x4910 [ 803.203166] tcp_write_timer_handler+0x51d/0xe80 [ 803.207935] tcp_write_timer+0x139/0x250 [ 803.212015] call_timer_fn+0x356/0x7c0 [ 803.215923] __run_timers+0xe95/0x1300 [ 803.219825] run_timer_softirq+0x55/0xa0 [ 803.223905] __do_softirq+0x721/0xc7f [ 803.227708] [ 803.229342] Uninit was stored to memory at: [ 803.233684] kmsan_internal_chain_origin+0x136/0x240 [ 803.238802] __msan_chain_origin+0x6d/0xb0 [ 803.243050] __save_stack_trace+0x8be/0xc60 [ 803.247388] save_stack_trace+0xc6/0x110 [ 803.251465] kmsan_internal_chain_origin+0x136/0x240 [ 803.256582] kmsan_memcpy_origins+0x13d/0x190 [ 803.261093] __msan_memcpy+0x6f/0x80 [ 803.264845] pskb_expand_head+0x436/0x1d20 [ 803.269095] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.273691] tcp_retransmit_skb+0xa4/0x430 [ 803.277940] tcp_retransmit_timer+0x341b/0x4910 [ 803.282625] tcp_write_timer_handler+0x51d/0xe80 [ 803.287397] tcp_write_timer+0x139/0x250 [ 803.291476] call_timer_fn+0x356/0x7c0 [ 803.295394] __run_timers+0xe95/0x1300 [ 803.299296] run_timer_softirq+0x55/0xa0 [ 803.303374] __do_softirq+0x721/0xc7f [ 803.307173] [ 803.308808] Uninit was stored to memory at: [ 803.313151] kmsan_internal_chain_origin+0x136/0x240 [ 803.318269] __msan_chain_origin+0x6d/0xb0 [ 803.322536] __save_stack_trace+0x8be/0xc60 [ 803.326882] save_stack_trace+0xc6/0x110 [ 803.330960] kmsan_internal_chain_origin+0x136/0x240 [ 803.336079] kmsan_memcpy_origins+0x13d/0x190 [ 803.340592] __msan_memcpy+0x6f/0x80 [ 803.344327] pskb_expand_head+0x436/0x1d20 [ 803.348582] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.353180] tcp_retransmit_skb+0xa4/0x430 [ 803.357433] tcp_retransmit_timer+0x341b/0x4910 [ 803.362121] tcp_write_timer_handler+0x51d/0xe80 [ 803.367363] tcp_write_timer+0x139/0x250 [ 803.371441] call_timer_fn+0x356/0x7c0 [ 803.375343] __run_timers+0xe95/0x1300 [ 803.379247] run_timer_softirq+0x55/0xa0 [ 803.383348] __do_softirq+0x721/0xc7f [ 803.387149] [ 803.388790] Uninit was stored to memory at: [ 803.393140] kmsan_internal_chain_origin+0x136/0x240 [ 803.398281] __msan_chain_origin+0x6d/0xb0 [ 803.402545] __save_stack_trace+0x8be/0xc60 [ 803.406886] save_stack_trace+0xc6/0x110 [ 803.410969] kmsan_internal_chain_origin+0x136/0x240 [ 803.416089] kmsan_memcpy_origins+0x13d/0x190 [ 803.420602] __msan_memcpy+0x6f/0x80 [ 803.424352] pskb_expand_head+0x436/0x1d20 [ 803.428602] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.433198] tcp_retransmit_skb+0xa4/0x430 [ 803.437446] tcp_retransmit_timer+0x341b/0x4910 [ 803.442163] tcp_write_timer_handler+0x51d/0xe80 [ 803.446941] tcp_write_timer+0x139/0x250 [ 803.451037] call_timer_fn+0x356/0x7c0 [ 803.454947] __run_timers+0xe95/0x1300 [ 803.458854] run_timer_softirq+0x55/0xa0 [ 803.462942] __do_softirq+0x721/0xc7f [ 803.466748] [ 803.468382] Uninit was stored to memory at: [ 803.472719] kmsan_internal_chain_origin+0x136/0x240 [ 803.477838] __msan_chain_origin+0x6d/0xb0 [ 803.482096] __save_stack_trace+0x8be/0xc60 [ 803.486448] save_stack_trace+0xc6/0x110 [ 803.490537] kmsan_internal_chain_origin+0x136/0x240 [ 803.495733] kmsan_memcpy_origins+0x13d/0x190 [ 803.500236] __msan_memcpy+0x6f/0x80 [ 803.503968] pskb_expand_head+0x436/0x1d20 [ 803.508218] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.512816] tcp_retransmit_skb+0xa4/0x430 [ 803.517088] tcp_retransmit_timer+0x341b/0x4910 [ 803.521806] tcp_write_timer_handler+0x51d/0xe80 [ 803.526581] tcp_write_timer+0x139/0x250 [ 803.530658] call_timer_fn+0x356/0x7c0 [ 803.534568] __run_timers+0xe95/0x1300 [ 803.538469] run_timer_softirq+0x55/0xa0 [ 803.542562] __do_softirq+0x721/0xc7f [ 803.546366] [ 803.547997] Uninit was stored to memory at: [ 803.552343] kmsan_internal_chain_origin+0x136/0x240 [ 803.557461] __msan_chain_origin+0x6d/0xb0 [ 803.561719] __save_stack_trace+0x8be/0xc60 [ 803.566053] save_stack_trace+0xc6/0x110 [ 803.570135] kmsan_internal_chain_origin+0x136/0x240 [ 803.575256] kmsan_memcpy_origins+0x13d/0x190 [ 803.579768] __msan_memcpy+0x6f/0x80 [ 803.583538] pskb_expand_head+0x436/0x1d20 [ 803.587793] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.592393] tcp_retransmit_skb+0xa4/0x430 [ 803.596639] tcp_retransmit_timer+0x341b/0x4910 [ 803.601320] tcp_write_timer_handler+0x51d/0xe80 [ 803.606091] tcp_write_timer+0x139/0x250 [ 803.610179] call_timer_fn+0x356/0x7c0 [ 803.614083] __run_timers+0xe95/0x1300 [ 803.617986] run_timer_softirq+0x55/0xa0 [ 803.622065] __do_softirq+0x721/0xc7f [ 803.625878] [ 803.627527] Uninit was stored to memory at: [ 803.631868] kmsan_internal_chain_origin+0x136/0x240 [ 803.636993] __msan_chain_origin+0x6d/0xb0 [ 803.641245] __save_stack_trace+0x8be/0xc60 [ 803.645582] save_stack_trace+0xc6/0x110 [ 803.649664] kmsan_internal_chain_origin+0x136/0x240 [ 803.654788] kmsan_memcpy_origins+0x13d/0x190 [ 803.659317] __msan_memcpy+0x6f/0x80 [ 803.663046] pskb_expand_head+0x436/0x1d20 [ 803.667308] __tcp_retransmit_skb+0xdf6/0x46c0 [ 803.671902] tcp_retransmit_skb+0xa4/0x430 17:13:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xfe55, 0x32, 0x11c, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 803.676157] tcp_retransmit_timer+0x341b/0x4910 [ 803.680840] tcp_write_timer_handler+0x51d/0xe80 [ 803.685613] tcp_write_timer+0x139/0x250 [ 803.689690] call_timer_fn+0x356/0x7c0 [ 803.693596] __run_timers+0xe95/0x1300 [ 803.697496] run_timer_softirq+0x55/0xa0 [ 803.701586] __do_softirq+0x721/0xc7f [ 803.705392] [ 803.707029] Local variable description: ----v.addr.i.i.i@ipv4_conntrack_local [ 803.714302] Variable was created at: [ 803.718035] ipv4_conntrack_local+0x75/0x470 [ 803.722458] nf_hook_slow+0x15c/0x3d0 17:13:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000200320019010012000000000009030000000c0000000820012020000000"], 0x20}}, 0x0) 17:13:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 803.975696] not chained 1450000 origins [ 803.979754] CPU: 0 PID: 20130 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 803.987061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.996436] Call Trace: [ 803.999097] dump_stack+0x32d/0x480 [ 804.002781] kmsan_internal_chain_origin+0x222/0x240 [ 804.007945] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.013342] ? __module_address+0x6a/0x5f0 [ 804.017605] ? is_bpf_text_address+0x3e5/0x4d0 17:13:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x2, 0x0, &(0x7f00000000c0)=""/206, &(0x7f0000000040)=""/31, &(0x7f00000001c0)=""/173, 0x103000}) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) [ 804.022231] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 804.027628] ? is_bpf_text_address+0x49e/0x4d0 [ 804.032247] ? kmsan_internal_chain_origin+0x90/0x240 [ 804.037494] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 804.042916] ? is_bpf_text_address+0x49e/0x4d0 [ 804.047557] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 804.053043] ? in_task_stack+0x12c/0x210 [ 804.057149] __msan_chain_origin+0x6d/0xb0 [ 804.061420] ? __sys_sendmmsg+0x56b/0xa90 [ 804.065602] __save_stack_trace+0x8be/0xc60 [ 804.069987] ? __sys_sendmmsg+0x56b/0xa90 [ 804.074190] save_stack_trace+0xc6/0x110 [ 804.078293] kmsan_internal_chain_origin+0x136/0x240 [ 804.083442] ? kmsan_internal_chain_origin+0x136/0x240 [ 804.088750] ? kmsan_memcpy_origins+0x13d/0x190 [ 804.093449] ? __msan_memcpy+0x6f/0x80 [ 804.097370] ? pskb_expand_head+0x436/0x1d20 [ 804.101810] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 804.105980] ? pppol2tp_sendmsg+0x79a/0xba0 [ 804.110329] ? ___sys_sendmsg+0xe3b/0x1240 [ 804.114605] ? __sys_sendmmsg+0x56b/0xa90 [ 804.118792] ? __se_sys_sendmmsg+0xbd/0xe0 [ 804.123062] ? __x64_sys_sendmmsg+0x56/0x70 [ 804.127410] ? do_syscall_64+0xcf/0x110 [ 804.131432] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.136827] ? __msan_poison_alloca+0x1e0/0x270 [ 804.141611] ? __msan_get_context_state+0x9/0x20 [ 804.146398] ? INIT_INT+0xc/0x30 [ 804.149791] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 804.155208] kmsan_memcpy_origins+0x13d/0x190 [ 804.159747] __msan_memcpy+0x6f/0x80 [ 804.163498] pskb_expand_head+0x436/0x1d20 [ 804.167821] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.171870] pppol2tp_sendmsg+0x79a/0xba0 [ 804.176096] ___sys_sendmsg+0xe3b/0x1240 [ 804.180190] ? pppol2tp_getsockopt+0x1060/0x1060 [ 804.185013] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 804.190421] ? kmsan_set_origin+0x7f/0x100 [ 804.194695] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 804.200106] ? _cond_resched+0xc7/0x120 [ 804.204120] __sys_sendmmsg+0x56b/0xa90 [ 804.208162] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 804.213641] ? prepare_exit_to_usermode+0x182/0x4c0 [ 804.218711] __se_sys_sendmmsg+0xbd/0xe0 [ 804.222814] __x64_sys_sendmmsg+0x56/0x70 [ 804.226995] do_syscall_64+0xcf/0x110 [ 804.230834] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.236047] RIP: 0033:0x457569 [ 804.239278] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.258213] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 804.265953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 804.273243] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 000000000000000a [ 804.280570] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 804.287879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 804.295169] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 804.302478] Uninit was stored to memory at: [ 804.306855] kmsan_internal_chain_origin+0x136/0x240 [ 804.311982] __msan_chain_origin+0x6d/0xb0 [ 804.316265] __save_stack_trace+0x8be/0xc60 [ 804.320632] save_stack_trace+0xc6/0x110 [ 804.324719] kmsan_internal_chain_origin+0x136/0x240 [ 804.329849] kmsan_memcpy_origins+0x13d/0x190 [ 804.334365] __msan_memcpy+0x6f/0x80 [ 804.338104] pskb_expand_head+0x436/0x1d20 [ 804.342376] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.346373] pppol2tp_sendmsg+0x79a/0xba0 [ 804.350551] ___sys_sendmsg+0xe3b/0x1240 [ 804.354639] __sys_sendmmsg+0x56b/0xa90 [ 804.358641] __se_sys_sendmmsg+0xbd/0xe0 [ 804.362742] __x64_sys_sendmmsg+0x56/0x70 [ 804.367375] do_syscall_64+0xcf/0x110 [ 804.371208] entry_SYSCALL_64_after_hwframe+0x63/0xe7 17:13:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 804.376404] [ 804.378039] Uninit was stored to memory at: [ 804.382386] kmsan_internal_chain_origin+0x136/0x240 [ 804.387510] __msan_chain_origin+0x6d/0xb0 [ 804.391783] __save_stack_trace+0x8be/0xc60 [ 804.396125] save_stack_trace+0xc6/0x110 [ 804.400211] kmsan_internal_chain_origin+0x136/0x240 [ 804.405355] kmsan_memcpy_origins+0x13d/0x190 [ 804.409878] __msan_memcpy+0x6f/0x80 [ 804.413627] pskb_expand_head+0x436/0x1d20 [ 804.417921] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.421917] pppol2tp_sendmsg+0x79a/0xba0 [ 804.426093] ___sys_sendmsg+0xe3b/0x1240 [ 804.430201] __sys_sendmmsg+0x56b/0xa90 [ 804.434198] __se_sys_sendmmsg+0xbd/0xe0 [ 804.438282] __x64_sys_sendmmsg+0x56/0x70 [ 804.442452] do_syscall_64+0xcf/0x110 [ 804.446294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.451496] [ 804.453162] Uninit was stored to memory at: [ 804.457521] kmsan_internal_chain_origin+0x136/0x240 [ 804.462660] __msan_chain_origin+0x6d/0xb0 [ 804.466918] __save_stack_trace+0x8be/0xc60 [ 804.471268] save_stack_trace+0xc6/0x110 [ 804.475353] kmsan_internal_chain_origin+0x136/0x240 [ 804.480481] kmsan_memcpy_origins+0x13d/0x190 [ 804.485014] __msan_memcpy+0x6f/0x80 [ 804.488759] pskb_expand_head+0x436/0x1d20 [ 804.493022] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.497017] pppol2tp_sendmsg+0x79a/0xba0 [ 804.501193] ___sys_sendmsg+0xe3b/0x1240 [ 804.505280] __sys_sendmmsg+0x56b/0xa90 [ 804.509282] __se_sys_sendmmsg+0xbd/0xe0 [ 804.513369] __x64_sys_sendmmsg+0x56/0x70 [ 804.517556] do_syscall_64+0xcf/0x110 [ 804.521383] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.526589] [ 804.528246] Uninit was stored to memory at: [ 804.532600] kmsan_internal_chain_origin+0x136/0x240 [ 804.537726] __msan_chain_origin+0x6d/0xb0 [ 804.541986] __save_stack_trace+0x8be/0xc60 [ 804.546328] save_stack_trace+0xc6/0x110 [ 804.550418] kmsan_internal_chain_origin+0x136/0x240 [ 804.555578] kmsan_memcpy_origins+0x13d/0x190 [ 804.560102] __msan_memcpy+0x6f/0x80 [ 804.563840] pskb_expand_head+0x436/0x1d20 [ 804.568104] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.572103] pppol2tp_sendmsg+0x79a/0xba0 [ 804.576269] ___sys_sendmsg+0xe3b/0x1240 [ 804.580353] __sys_sendmmsg+0x56b/0xa90 [ 804.584344] __se_sys_sendmmsg+0xbd/0xe0 [ 804.588426] __x64_sys_sendmmsg+0x56/0x70 [ 804.592598] do_syscall_64+0xcf/0x110 [ 804.596427] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.601623] [ 804.603265] Uninit was stored to memory at: [ 804.607615] kmsan_internal_chain_origin+0x136/0x240 [ 804.612747] __msan_chain_origin+0x6d/0xb0 [ 804.617006] __save_stack_trace+0x8be/0xc60 [ 804.621355] save_stack_trace+0xc6/0x110 [ 804.625444] kmsan_internal_chain_origin+0x136/0x240 [ 804.630628] kmsan_memcpy_origins+0x13d/0x190 [ 804.635153] __msan_memcpy+0x6f/0x80 [ 804.638894] pskb_expand_head+0x436/0x1d20 [ 804.643161] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.647161] pppol2tp_sendmsg+0x79a/0xba0 [ 804.651352] ___sys_sendmsg+0xe3b/0x1240 [ 804.655443] __sys_sendmmsg+0x56b/0xa90 [ 804.659443] __se_sys_sendmmsg+0xbd/0xe0 [ 804.663540] __x64_sys_sendmmsg+0x56/0x70 [ 804.667719] do_syscall_64+0xcf/0x110 [ 804.671556] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.676763] [ 804.678408] Uninit was stored to memory at: [ 804.682784] kmsan_internal_chain_origin+0x136/0x240 [ 804.687914] __msan_chain_origin+0x6d/0xb0 [ 804.692171] __save_stack_trace+0x8be/0xc60 [ 804.696538] save_stack_trace+0xc6/0x110 [ 804.700629] kmsan_internal_chain_origin+0x136/0x240 [ 804.705754] kmsan_memcpy_origins+0x13d/0x190 [ 804.710270] __msan_memcpy+0x6f/0x80 [ 804.714011] pskb_expand_head+0x436/0x1d20 [ 804.718279] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.722274] pppol2tp_sendmsg+0x79a/0xba0 [ 804.726446] ___sys_sendmsg+0xe3b/0x1240 [ 804.730540] __sys_sendmmsg+0x56b/0xa90 [ 804.734548] __se_sys_sendmmsg+0xbd/0xe0 [ 804.738632] __x64_sys_sendmmsg+0x56/0x70 [ 804.742805] do_syscall_64+0xcf/0x110 [ 804.746632] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.751834] [ 804.753490] Uninit was stored to memory at: [ 804.757874] kmsan_internal_chain_origin+0x136/0x240 [ 804.763005] __msan_chain_origin+0x6d/0xb0 [ 804.767270] __save_stack_trace+0x8be/0xc60 [ 804.771619] save_stack_trace+0xc6/0x110 [ 804.775748] kmsan_internal_chain_origin+0x136/0x240 [ 804.780910] kmsan_memcpy_origins+0x13d/0x190 [ 804.785430] __msan_memcpy+0x6f/0x80 [ 804.789172] pskb_expand_head+0x436/0x1d20 [ 804.793447] l2tp_xmit_skb+0x5a7/0x24b0 [ 804.797448] pppol2tp_sendmsg+0x79a/0xba0 [ 804.801625] ___sys_sendmsg+0xe3b/0x1240 [ 804.805712] __sys_sendmmsg+0x56b/0xa90 [ 804.809718] __se_sys_sendmmsg+0xbd/0xe0 [ 804.813805] __x64_sys_sendmmsg+0x56/0x70 [ 804.817976] do_syscall_64+0xcf/0x110 [ 804.821808] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 804.827010] [ 804.828653] Local variable description: ----cb_saved.i@sk_filter_trim_cap [ 804.835588] Variable was created at: [ 804.839329] sk_filter_trim_cap+0x97/0xa60 [ 804.843608] netlink_dump+0x1892/0x1c90 17:13:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000009078ac141400ac1414bb440c0500ac1414bb0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000e6cd5a42b9b1443179c7ad02d40300f78dcddff7b8d7d8b716d29b0f15fe7f1780e7e96d413eec41b0d2eee22604fdd5d56ed6a5a41618e8e5d0e7383171fbcde17eb372e4a838f465cbbde0bae2738f98d6c3802d6c70f6631b58bf05e50b45fa7954530b07c367df72837cdf329360e59452ac01fe07313336bdfd0e0000007b99031f14601c3908ee87987dc36d05726071658fed"], &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f00000002c0)=""/133, 0x85}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x84) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000280)) prctl$setname(0xf, &(0x7f0000000000)='em1%em0,user%*\x00') 17:13:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x4042, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000500)="f2a0a56c57f06eb9a2cf339c1cce6eac3b07cecb0dc586478b65c97ffd825bab0e83c7a443441407b8c083dd82b7bfb2c7c13f23d7a84449c2196b0c6def1162e8df9046e4a89e06f3c5a96cb8955720aab5789cd1b4d31f89bd3f93262d6602b04d285db50bc85c20c37d7ebe0ce29545e318c7c20d8161a6928c501bce9ae40ca8e7") ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xccda, 0x410502) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xf423, 0x1) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000140)=r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) fcntl$addseals(r2, 0x409, 0x6) listen(r5, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r5) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r1) inotify_init() 17:13:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 805.117997] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.125115] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.132040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.138874] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.145759] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.152661] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.159563] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.166456] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.173349] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.180128] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 805.187009] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 17:13:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3072, 0x40000) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x4, 0x4a704a6a, 0x200], 0x3, 0x3, 0x9, 0x1f, 0x410af435, 0x3f, {0x0, 0x4, 0x8000, 0x3f, 0x9d6, 0x4, 0x200, 0x7, 0xdd9, 0x7, 0x6, 0x100000000, 0x1000000000000000, 0x0, "6ff5ac9745ba1401c8351a78d28bc9592b1735c70a161fd7e6356434d01f7995"}}) close(r1) 17:13:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x380000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032001901000000000000000003000000040000000800010000000000"], 0x1}}, 0x0) 17:13:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x20400) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x5, 0xfffffffffffffffa, 0x8000, 0x0, 0x3, 0x2548020f, 0x1000, 0x3, 0x12c, 0xfffffffffffffff9, 0x4, 0x8}) close(r1) [ 805.350900] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 17:13:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) signalfd(r1, &(0x7f0000000040)={0x10001}, 0x8) 17:13:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0xc2) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x10000}, 0xb) 17:13:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000320019010000000000000000030000000c0000000800010000000000"], 0x20}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @local}}, 0x16, 0x42a, 0x9, 0x200, 0x40}, 0x98) 17:13:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0xa000)=nil, 0xa000}, 0x4}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8001, 0x400) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) close(r2) close(r1) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="320d00000000000007480000000110e600080600000000000000000000000000000005000000000000190300000000000000ff0100000000000007000000000000000500000000000000ffffffff00000000c910ff01000000000000000000000000000105020001c2040000000304010100000000000000"], 0x78) 17:13:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaac8065f1ee657d7436b2f168c0000000000009078ac141400ac1414bb440c0500ac1414000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x6, 0xea, 0x0, 0x0, 0xf86, 0x200, 0xa, 0x2, 0x7ff, 0x5, 0x7, 0x6, 0x0, 0x4a1b, 0x8, 0x8, 0x6, 0x8, 0xffffffff, 0x7f, 0x7, 0x200, 0x8, 0x40, 0x955, 0x0, 0x8, 0x4ad8, 0x3, 0x6, 0x400, 0x3ff, 0x5, 0x9, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x20040, 0x5e83, 0x6, 0x7, 0x3, 0x4, 0xc00}, r1, 0x9, r2, 0xb) 17:13:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) 17:13:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18001}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0xc20, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) r4 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xffffffffffffffff) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="ec42d9e14fe873d5e720dcb1952e1a8cab227124d1a040d4d393720962604d62c581ef56514d822e32630c43ff9ea2c57216c02d7ec4907d5916e7aac35530075b27964f238be578c0aa4e34f2b011308117f9f0c5c70c5d9457646ca71612869127989e822217f99ebba96d09b0a47f2aeccb198e36cf1a7f6874ec2c6a0996ab289462111f7cfd3a4fba4cab771fd77e3750290b9dc7df46819297b6b37d40a2ce7583fe8886f4bfd05a70481f4b512124ea9c9b3b24dc5a0fc5eacbc97ae1e669e4b26f782e350dc31ba8ee933ea89f9d8016a21ec8708d50d9e2a637f4", 0xdf, r4) 17:13:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 806.667675] netlink: get zone limit has 4 unknown bytes 17:13:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = memfd_create(&(0x7f0000000000)='\'\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22}}, [0x3ff, 0x1, 0x7, 0x9, 0x80000001, 0x750c, 0xda0e, 0x9, 0x64, 0x1f, 0x400, 0x2, 0x2, 0x401, 0x5]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={r4, 0xffffff81, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) dup(r3) close(r0) close(r1) [ 806.728729] netlink: get zone limit has 4 unknown bytes [ 806.917684] sctp: [Deprecated]: syz-executor2 (pid 20257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.917684] Use struct sctp_sack_info instead 17:13:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x48) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0xc7, &(0x7f00000001c0)="634f3da05bab4338ad4ccb3bd164014bbc4826796a88c02c202dc83e0600d1f34abf0ad8bd029661182fad6716fbbc5442f998160d0e3e7a4e4043af3fd694ad9485f040eef80f0553da2222657f7eab5499bf1c11c4970365341d7959114aa70c04319f3934ec277c11d44279cce8a466ddc24fb3a6b39c332fb7f9a7f0c2f46a48bb39e6fe010b87eb74ba1732bfbb0bff321527f0eb256caeec16a758fcf0dead06f0b97ad6d5b5c01affa0bbaba1b6170bc8025e1180aa2ebfbdf61aeab03095b54b2b2f51"}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 807.007865] sctp: [Deprecated]: syz-executor2 (pid 20250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.007865] Use struct sctp_sack_info instead 17:13:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x511100, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={r3, 0x4, 0x9, r4}) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000000000400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x3b, @rand_addr=0x7, 0x4e24, 0x1, 'sed\x00', 0xf, 0xfffffffffffffff9, 0x33}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10101, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000080)={0x2, 0x0, [], {0x0, @bt={0x4, 0x5, 0x1, 0x1, 0x2, 0x1, 0xfffffffffffffff7, 0x3, 0x8000, 0x7fff, 0xcbd6, 0x8000, 0x800, 0x1708, 0x0, 0x2}}}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) process_vm_writev(r3, &(0x7f0000000640)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/218, 0xda}], 0x7, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/217, 0xd9}], 0x4, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200), 0x0) [ 807.662178] netlink: get zone limit has 4 unknown bytes [ 807.710571] netlink: get zone limit has 4 unknown bytes 17:13:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x0, 0x6000, 0x0, 0xfffffffffffffffd, 0x7fffffff}) 17:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getpeername(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r0) [ 807.912609] not chained 1460000 origins [ 807.916654] CPU: 1 PID: 20297 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 807.923945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.933315] Call Trace: [ 807.935938] dump_stack+0x32d/0x480 [ 807.939645] kmsan_internal_chain_origin+0x222/0x240 [ 807.944819] ? save_stack_trace+0xc6/0x110 [ 807.949093] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 807.954231] ? kmsan_internal_chain_origin+0x90/0x240 [ 807.959468] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 807.964860] ? is_bpf_text_address+0x49e/0x4d0 [ 807.969480] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 807.974973] ? in_task_stack+0x12c/0x210 [ 807.979091] __msan_chain_origin+0x6d/0xb0 [ 807.983360] ? kmsan_memcpy_origins+0x13d/0x190 [ 807.988067] __save_stack_trace+0x8be/0xc60 [ 807.992451] ? kmsan_memcpy_origins+0x13d/0x190 [ 807.997159] save_stack_trace+0xc6/0x110 [ 808.001257] kmsan_internal_chain_origin+0x136/0x240 [ 808.006412] ? kmsan_internal_chain_origin+0x136/0x240 [ 808.011717] ? kmsan_memcpy_origins+0x13d/0x190 [ 808.016434] ? __msan_memcpy+0x6f/0x80 [ 808.020352] ? pskb_expand_head+0x436/0x1d20 [ 808.024796] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 808.028971] ? pppol2tp_sendmsg+0x79a/0xba0 [ 808.033318] ? ___sys_sendmsg+0xe3b/0x1240 [ 808.037575] ? __sys_sendmmsg+0x56b/0xa90 [ 808.041747] ? __se_sys_sendmmsg+0xbd/0xe0 [ 808.046008] ? __x64_sys_sendmmsg+0x56/0x70 [ 808.050364] ? do_syscall_64+0xcf/0x110 [ 808.054382] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.059779] ? __msan_poison_alloca+0x1e0/0x270 [ 808.064514] ? __msan_get_context_state+0x9/0x20 [ 808.069311] ? INIT_INT+0xc/0x30 [ 808.072706] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 808.078127] kmsan_memcpy_origins+0x13d/0x190 [ 808.082676] __msan_memcpy+0x6f/0x80 [ 808.086430] pskb_expand_head+0x436/0x1d20 [ 808.090740] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.094791] pppol2tp_sendmsg+0x79a/0xba0 [ 808.099004] ___sys_sendmsg+0xe3b/0x1240 [ 808.103100] ? pppol2tp_getsockopt+0x1060/0x1060 [ 808.107922] ? __msan_poison_alloca+0x1e0/0x270 [ 808.112650] ? rcu_all_qs+0x3b/0x2b0 [ 808.116391] ? _cond_resched+0x59/0x120 [ 808.120408] ? rcu_all_qs+0x53/0x2b0 [ 808.124153] ? _cond_resched+0x37/0x120 [ 808.128153] ? __sys_sendmmsg+0x7c9/0xa90 [ 808.132341] ? _cond_resched+0x59/0x120 [ 808.136360] __sys_sendmmsg+0x56b/0xa90 [ 808.140413] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 808.145900] ? prepare_exit_to_usermode+0x182/0x4c0 [ 808.150972] __se_sys_sendmmsg+0xbd/0xe0 [ 808.155091] __x64_sys_sendmmsg+0x56/0x70 [ 808.159279] do_syscall_64+0xcf/0x110 [ 808.163125] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.168343] RIP: 0033:0x457569 [ 808.171571] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.190502] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 808.198268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 808.205565] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 17:13:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfffffffffffffffe, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x208400, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0xb, "48dae77bd037841da4c74ee1f3eacd997d"}, 0x13, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x0, &(0x7f0000000140), 0x8, r3, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000320019e10000000000000000030000000c0000000800010000000000b0bbee3606e6f63aed74804e5623122f9050a3ae7398bb7b90b91a40e50caad2e0039ca10ca00e15a963f28acc1d184f3d9c9a16513bceb6b4fd2f6ca827d3bb518e3d07959d50eff205a587dacee4a34f7b26c06ae190e2087dc2015b68ca4a1a312a02"], 0x20}}, 0x0) 17:13:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000007a3ef7c0d6e35fcdb8a03ee36de6d1c27ad882ae7f2a2ea60d8baf2b069f6b4a8bba83bfdb26a1872367cfc216934e9ec06e13912e0d6a2b8f483a3130a4c73d7aadd07db10cf9fd5f332659cb948de03634610a3d5e815c4d0cacf954a4d9248ec5ac613a3fff8494a3c88e54bda0682da2fc81e5259d5625a0ebf3f1578be464f83fb6ab3531bfb4e343673180167fdb9aada152098b68a437fccf24ac876c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25030000003000010008000b007369700008000b007369700008000200670000000c0007000400000000000000080002000000000030000100080004004e240000080008009b970000080004004e22000008000b00736970000c0006006c626c6372000000080004000900000008000400000200002c000200080007000800000008000800faffffff080008000180000008000900280b0000080002004e2400000800060000000000080006000400000008000600810000000c0003000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 808.212861] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 808.220159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 808.227451] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 808.234768] Uninit was stored to memory at: [ 808.239127] kmsan_internal_chain_origin+0x136/0x240 [ 808.244271] __msan_chain_origin+0x6d/0xb0 [ 808.248546] __save_stack_trace+0x8be/0xc60 [ 808.252903] save_stack_trace+0xc6/0x110 [ 808.256992] kmsan_internal_chain_origin+0x136/0x240 [ 808.262124] kmsan_memcpy_origins+0x13d/0x190 [ 808.266646] __msan_memcpy+0x6f/0x80 [ 808.270393] pskb_expand_head+0x436/0x1d20 [ 808.274654] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.278675] pppol2tp_sendmsg+0x79a/0xba0 [ 808.282847] ___sys_sendmsg+0xe3b/0x1240 [ 808.286929] __sys_sendmmsg+0x56b/0xa90 [ 808.290931] __se_sys_sendmmsg+0xbd/0xe0 [ 808.295016] __x64_sys_sendmmsg+0x56/0x70 [ 808.299197] do_syscall_64+0xcf/0x110 [ 808.303027] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.308242] [ 808.309901] Uninit was stored to memory at: [ 808.314252] kmsan_internal_chain_origin+0x136/0x240 [ 808.319379] __msan_chain_origin+0x6d/0xb0 [ 808.323642] __save_stack_trace+0x8be/0xc60 [ 808.327992] save_stack_trace+0xc6/0x110 [ 808.332101] kmsan_internal_chain_origin+0x136/0x240 [ 808.337231] kmsan_memcpy_origins+0x13d/0x190 [ 808.341755] __msan_memcpy+0x6f/0x80 [ 808.345496] pskb_expand_head+0x436/0x1d20 [ 808.349768] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.353766] pppol2tp_sendmsg+0x79a/0xba0 [ 808.357940] ___sys_sendmsg+0xe3b/0x1240 [ 808.362026] __sys_sendmmsg+0x56b/0xa90 [ 808.366257] __se_sys_sendmmsg+0xbd/0xe0 [ 808.370344] __x64_sys_sendmmsg+0x56/0x70 [ 808.374530] do_syscall_64+0xcf/0x110 [ 808.378361] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.383568] [ 808.385205] Uninit was stored to memory at: [ 808.389556] kmsan_internal_chain_origin+0x136/0x240 [ 808.394686] __msan_chain_origin+0x6d/0xb0 [ 808.398949] __save_stack_trace+0x8be/0xc60 [ 808.403293] save_stack_trace+0xc6/0x110 [ 808.407385] kmsan_internal_chain_origin+0x136/0x240 [ 808.412510] kmsan_memcpy_origins+0x13d/0x190 [ 808.417046] __msan_memcpy+0x6f/0x80 [ 808.420783] pskb_expand_head+0x436/0x1d20 [ 808.425048] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.429050] pppol2tp_sendmsg+0x79a/0xba0 [ 808.433220] ___sys_sendmsg+0xe3b/0x1240 [ 808.437302] __sys_sendmmsg+0x56b/0xa90 [ 808.441297] __se_sys_sendmmsg+0xbd/0xe0 [ 808.445382] __x64_sys_sendmmsg+0x56/0x70 [ 808.449569] do_syscall_64+0xcf/0x110 [ 808.453401] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.458603] [ 808.460247] Uninit was stored to memory at: [ 808.464593] kmsan_internal_chain_origin+0x136/0x240 [ 808.469721] __msan_chain_origin+0x6d/0xb0 [ 808.473989] __save_stack_trace+0x8be/0xc60 [ 808.478345] save_stack_trace+0xc6/0x110 [ 808.482433] kmsan_internal_chain_origin+0x136/0x240 [ 808.487576] kmsan_memcpy_origins+0x13d/0x190 [ 808.492096] __msan_memcpy+0x6f/0x80 [ 808.496286] pskb_expand_head+0x436/0x1d20 [ 808.500555] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.504564] pppol2tp_sendmsg+0x79a/0xba0 [ 808.508742] ___sys_sendmsg+0xe3b/0x1240 [ 808.512830] __sys_sendmmsg+0x56b/0xa90 [ 808.516833] __se_sys_sendmmsg+0xbd/0xe0 [ 808.520920] __x64_sys_sendmmsg+0x56/0x70 [ 808.525095] do_syscall_64+0xcf/0x110 [ 808.528924] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.534121] [ 808.535766] Uninit was stored to memory at: [ 808.540113] kmsan_internal_chain_origin+0x136/0x240 [ 808.545244] __msan_chain_origin+0x6d/0xb0 [ 808.549510] __save_stack_trace+0x8be/0xc60 [ 808.553871] save_stack_trace+0xc6/0x110 [ 808.557963] kmsan_internal_chain_origin+0x136/0x240 [ 808.563091] kmsan_memcpy_origins+0x13d/0x190 [ 808.567612] __msan_memcpy+0x6f/0x80 [ 808.571353] pskb_expand_head+0x436/0x1d20 [ 808.575619] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.579617] pppol2tp_sendmsg+0x79a/0xba0 [ 808.583785] ___sys_sendmsg+0xe3b/0x1240 [ 808.587874] __sys_sendmmsg+0x56b/0xa90 [ 808.591869] __se_sys_sendmmsg+0xbd/0xe0 [ 808.595962] __x64_sys_sendmmsg+0x56/0x70 [ 808.600135] do_syscall_64+0xcf/0x110 [ 808.603967] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.609166] [ 808.610812] Uninit was stored to memory at: [ 808.615164] kmsan_internal_chain_origin+0x136/0x240 [ 808.620305] __msan_chain_origin+0x6d/0xb0 [ 808.624568] __save_stack_trace+0x8be/0xc60 [ 808.628926] save_stack_trace+0xc6/0x110 [ 808.633014] kmsan_internal_chain_origin+0x136/0x240 [ 808.638151] kmsan_memcpy_origins+0x13d/0x190 [ 808.642673] __msan_memcpy+0x6f/0x80 [ 808.646425] pskb_expand_head+0x436/0x1d20 [ 808.650689] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.654693] pppol2tp_sendmsg+0x79a/0xba0 [ 808.658862] ___sys_sendmsg+0xe3b/0x1240 [ 808.662955] __sys_sendmmsg+0x56b/0xa90 [ 808.666954] __se_sys_sendmmsg+0xbd/0xe0 [ 808.671043] __x64_sys_sendmmsg+0x56/0x70 [ 808.675222] do_syscall_64+0xcf/0x110 [ 808.679073] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.684278] [ 808.685918] Uninit was stored to memory at: [ 808.690265] kmsan_internal_chain_origin+0x136/0x240 [ 808.695408] __msan_chain_origin+0x6d/0xb0 [ 808.699669] __save_stack_trace+0x8be/0xc60 [ 808.704020] save_stack_trace+0xc6/0x110 [ 808.706195] netlink: get zone limit has 4 unknown bytes [ 808.708111] kmsan_internal_chain_origin+0x136/0x240 [ 808.708133] kmsan_memcpy_origins+0x13d/0x190 [ 808.708155] __msan_memcpy+0x6f/0x80 [ 808.708179] pskb_expand_head+0x436/0x1d20 [ 808.708202] l2tp_xmit_skb+0x5a7/0x24b0 [ 808.708220] pppol2tp_sendmsg+0x79a/0xba0 [ 808.708239] ___sys_sendmsg+0xe3b/0x1240 [ 808.708258] __sys_sendmmsg+0x56b/0xa90 [ 808.708276] __se_sys_sendmmsg+0xbd/0xe0 [ 808.708293] __x64_sys_sendmmsg+0x56/0x70 [ 808.708328] do_syscall_64+0xcf/0x110 [ 808.759549] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.764752] 17:13:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2102, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x8d, &(0x7f00000000c0)="cd96a094e897ccfbc74d729ca1b26219681cfeceb01a4197dc0969dd922492f62832bc9ee7a0e4ad0a84f2451a95f8f0b341fa86fa384146cc9610a0484ee3bd225b8b5b1cd4240626a48cd2ff99b7b3cb2a4a0eb8110ad2185bea16768dd771d2145c41816296297299a1ba69acae517c9351135ca93eb3beb6e7c173a9bc63c39e6f777414d3ec8b02d5ff66e31790d3b15c69f1", 0x95) 17:13:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340066bb8aad710140764ed475fd00000000009078ac141400ac1414bb440c0500", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x48, 0x2, 0x4}, 0x7fff}}, 0x18) [ 808.766396] Local variable description: ----iph@ip_vs_out [ 808.771955] Variable was created at: [ 808.775698] ip_vs_out+0x1bf/0x4570 [ 808.779350] ip_vs_local_reply6+0xec/0x130 17:13:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xffffffff, 0x1, 0x7, 0x100, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x800, 0x402) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000000c0)={0xed6e, 0x4, "579711e9"}) close(r1) 17:13:49 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002800)='/dev/sequencer\x00', 0x2200, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000002840)={0x94e4, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032fffa0100cda71f00000000030000000c0000000800010000000710"], 0x20}}, 0x0) [ 809.126710] not chained 1470000 origins [ 809.130755] CPU: 0 PID: 20297 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 809.138044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.147412] Call Trace: [ 809.150031] dump_stack+0x32d/0x480 [ 809.153716] kmsan_internal_chain_origin+0x222/0x240 [ 809.158885] ? save_stack_trace+0xc6/0x110 [ 809.163155] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 809.168292] ? kmsan_internal_chain_origin+0x90/0x240 [ 809.173543] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 809.178936] ? is_bpf_text_address+0x49e/0x4d0 [ 809.183573] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 809.189066] ? in_task_stack+0x12c/0x210 [ 809.193175] __msan_chain_origin+0x6d/0xb0 [ 809.197440] ? kmsan_memcpy_origins+0x13d/0x190 [ 809.202138] __save_stack_trace+0x8be/0xc60 [ 809.206557] ? kmsan_memcpy_origins+0x13d/0x190 [ 809.211268] save_stack_trace+0xc6/0x110 [ 809.215382] kmsan_internal_chain_origin+0x136/0x240 [ 809.220550] ? kmsan_internal_chain_origin+0x136/0x240 [ 809.225854] ? kmsan_memcpy_origins+0x13d/0x190 [ 809.230584] ? __msan_memcpy+0x6f/0x80 [ 809.234509] ? pskb_expand_head+0x436/0x1d20 [ 809.238969] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 809.243144] ? pppol2tp_sendmsg+0x79a/0xba0 [ 809.247506] ? ___sys_sendmsg+0xe3b/0x1240 [ 809.251794] ? __sys_sendmmsg+0x56b/0xa90 [ 809.255966] ? __se_sys_sendmmsg+0xbd/0xe0 [ 809.260227] ? __x64_sys_sendmmsg+0x56/0x70 [ 809.264580] ? do_syscall_64+0xcf/0x110 [ 809.268612] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.274016] ? __msan_poison_alloca+0x1e0/0x270 [ 809.278752] ? __msan_get_context_state+0x9/0x20 [ 809.283572] ? INIT_INT+0xc/0x30 [ 809.286971] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 809.292375] kmsan_memcpy_origins+0x13d/0x190 [ 809.296909] __msan_memcpy+0x6f/0x80 [ 809.300652] pskb_expand_head+0x436/0x1d20 [ 809.304959] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.309004] pppol2tp_sendmsg+0x79a/0xba0 [ 809.313210] ___sys_sendmsg+0xe3b/0x1240 [ 809.317289] ? pppol2tp_getsockopt+0x1060/0x1060 [ 809.322090] ? __msan_poison_alloca+0x1e0/0x270 [ 809.326784] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 809.332179] ? rcu_all_qs+0x3b/0x2b0 [ 809.335914] ? _cond_resched+0x59/0x120 [ 809.339928] ? rcu_all_qs+0x53/0x2b0 [ 809.343662] ? _cond_resched+0x37/0x120 [ 809.347657] ? __sys_sendmmsg+0x7c9/0xa90 [ 809.351837] ? _cond_resched+0x59/0x120 [ 809.355835] __sys_sendmmsg+0x56b/0xa90 [ 809.359867] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 809.365814] ? prepare_exit_to_usermode+0x182/0x4c0 [ 809.370869] __se_sys_sendmmsg+0xbd/0xe0 [ 809.374962] __x64_sys_sendmmsg+0x56/0x70 [ 809.379131] do_syscall_64+0xcf/0x110 [ 809.382959] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.388165] RIP: 0033:0x457569 [ 809.391378] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.410305] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.418132] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 809.425423] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 809.432714] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.440006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 809.447295] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 809.454602] Uninit was stored to memory at: [ 809.458949] kmsan_internal_chain_origin+0x136/0x240 [ 809.464089] __msan_chain_origin+0x6d/0xb0 [ 809.468348] __save_stack_trace+0x8be/0xc60 [ 809.472687] save_stack_trace+0xc6/0x110 [ 809.476767] kmsan_internal_chain_origin+0x136/0x240 [ 809.481897] kmsan_memcpy_origins+0x13d/0x190 [ 809.486408] __msan_memcpy+0x6f/0x80 [ 809.490140] pskb_expand_head+0x436/0x1d20 [ 809.494397] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.498608] pppol2tp_sendmsg+0x79a/0xba0 [ 809.502775] ___sys_sendmsg+0xe3b/0x1240 [ 809.506852] __sys_sendmmsg+0x56b/0xa90 [ 809.510847] __se_sys_sendmmsg+0xbd/0xe0 [ 809.514924] __x64_sys_sendmmsg+0x56/0x70 [ 809.519087] do_syscall_64+0xcf/0x110 [ 809.522934] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.528124] [ 809.529766] Uninit was stored to memory at: [ 809.534114] kmsan_internal_chain_origin+0x136/0x240 [ 809.539239] __msan_chain_origin+0x6d/0xb0 [ 809.543495] __save_stack_trace+0x8be/0xc60 [ 809.547847] save_stack_trace+0xc6/0x110 [ 809.551925] kmsan_internal_chain_origin+0x136/0x240 [ 809.557049] kmsan_memcpy_origins+0x13d/0x190 [ 809.561568] __msan_memcpy+0x6f/0x80 [ 809.565308] pskb_expand_head+0x436/0x1d20 [ 809.569569] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.573569] pppol2tp_sendmsg+0x79a/0xba0 [ 809.577731] ___sys_sendmsg+0xe3b/0x1240 [ 809.581804] __sys_sendmmsg+0x56b/0xa90 [ 809.585795] __se_sys_sendmmsg+0xbd/0xe0 [ 809.589868] __x64_sys_sendmmsg+0x56/0x70 [ 809.594034] do_syscall_64+0xcf/0x110 [ 809.597860] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.603053] [ 809.604686] Uninit was stored to memory at: [ 809.609026] kmsan_internal_chain_origin+0x136/0x240 [ 809.614146] __msan_chain_origin+0x6d/0xb0 [ 809.618397] __save_stack_trace+0x8be/0xc60 [ 809.622733] save_stack_trace+0xc6/0x110 [ 809.626810] kmsan_internal_chain_origin+0x136/0x240 [ 809.631933] kmsan_memcpy_origins+0x13d/0x190 [ 809.636443] __msan_memcpy+0x6f/0x80 [ 809.640176] pskb_expand_head+0x436/0x1d20 [ 809.644430] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.648425] pppol2tp_sendmsg+0x79a/0xba0 [ 809.652591] ___sys_sendmsg+0xe3b/0x1240 [ 809.656668] __sys_sendmmsg+0x56b/0xa90 [ 809.660668] __se_sys_sendmmsg+0xbd/0xe0 [ 809.664762] __x64_sys_sendmmsg+0x56/0x70 [ 809.668924] do_syscall_64+0xcf/0x110 [ 809.672742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.677932] [ 809.679567] Uninit was stored to memory at: [ 809.683906] kmsan_internal_chain_origin+0x136/0x240 [ 809.689029] __msan_chain_origin+0x6d/0xb0 [ 809.693279] __save_stack_trace+0x8be/0xc60 [ 809.697615] save_stack_trace+0xc6/0x110 [ 809.701698] kmsan_internal_chain_origin+0x136/0x240 [ 809.706818] kmsan_memcpy_origins+0x13d/0x190 [ 809.711327] __msan_memcpy+0x6f/0x80 [ 809.715057] pskb_expand_head+0x436/0x1d20 [ 809.719310] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.723299] pppol2tp_sendmsg+0x79a/0xba0 [ 809.727463] ___sys_sendmsg+0xe3b/0x1240 [ 809.731546] __sys_sendmmsg+0x56b/0xa90 [ 809.735555] __se_sys_sendmmsg+0xbd/0xe0 [ 809.739632] __x64_sys_sendmmsg+0x56/0x70 [ 809.743795] do_syscall_64+0xcf/0x110 [ 809.747621] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.752829] [ 809.754465] Uninit was stored to memory at: [ 809.758806] kmsan_internal_chain_origin+0x136/0x240 [ 809.763943] __msan_chain_origin+0x6d/0xb0 [ 809.768218] __save_stack_trace+0x8be/0xc60 [ 809.772584] save_stack_trace+0xc6/0x110 [ 809.776666] kmsan_internal_chain_origin+0x136/0x240 [ 809.781791] kmsan_memcpy_origins+0x13d/0x190 [ 809.786301] __msan_memcpy+0x6f/0x80 [ 809.790033] pskb_expand_head+0x436/0x1d20 [ 809.794288] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.798273] pppol2tp_sendmsg+0x79a/0xba0 [ 809.802438] ___sys_sendmsg+0xe3b/0x1240 [ 809.806512] __sys_sendmmsg+0x56b/0xa90 [ 809.810513] __se_sys_sendmmsg+0xbd/0xe0 [ 809.814604] __x64_sys_sendmmsg+0x56/0x70 [ 809.818769] do_syscall_64+0xcf/0x110 [ 809.822595] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.827788] [ 809.829419] Uninit was stored to memory at: [ 809.833762] kmsan_internal_chain_origin+0x136/0x240 [ 809.838880] __msan_chain_origin+0x6d/0xb0 [ 809.843135] __save_stack_trace+0x8be/0xc60 [ 809.847478] save_stack_trace+0xc6/0x110 [ 809.851575] kmsan_internal_chain_origin+0x136/0x240 [ 809.856704] kmsan_memcpy_origins+0x13d/0x190 [ 809.861214] __msan_memcpy+0x6f/0x80 [ 809.864951] pskb_expand_head+0x436/0x1d20 [ 809.869204] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.873203] pppol2tp_sendmsg+0x79a/0xba0 [ 809.877368] ___sys_sendmsg+0xe3b/0x1240 [ 809.881443] __sys_sendmmsg+0x56b/0xa90 [ 809.885430] __se_sys_sendmmsg+0xbd/0xe0 [ 809.889506] __x64_sys_sendmmsg+0x56/0x70 [ 809.893686] do_syscall_64+0xcf/0x110 [ 809.897506] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.902713] [ 809.904345] Uninit was stored to memory at: [ 809.908683] kmsan_internal_chain_origin+0x136/0x240 [ 809.913806] __msan_chain_origin+0x6d/0xb0 [ 809.918056] __save_stack_trace+0x8be/0xc60 [ 809.922411] save_stack_trace+0xc6/0x110 [ 809.926491] kmsan_internal_chain_origin+0x136/0x240 [ 809.931648] kmsan_memcpy_origins+0x13d/0x190 [ 809.936165] __msan_memcpy+0x6f/0x80 [ 809.939897] pskb_expand_head+0x436/0x1d20 [ 809.944148] l2tp_xmit_skb+0x5a7/0x24b0 [ 809.948134] pppol2tp_sendmsg+0x79a/0xba0 [ 809.952295] ___sys_sendmsg+0xe3b/0x1240 [ 809.956368] __sys_sendmmsg+0x56b/0xa90 [ 809.960355] __se_sys_sendmmsg+0xbd/0xe0 [ 809.964429] __x64_sys_sendmmsg+0x56/0x70 [ 809.968597] do_syscall_64+0xcf/0x110 [ 809.972420] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 809.977614] 17:13:50 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8001, 0x100) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, 0x4, 0x4, 0x5, &(0x7f0000ffa000/0x4000)=nil, 0x3ff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004800003400bb00000000000000000000000000000001000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000040)) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) [ 809.979250] Local variable description: ----iph@ip_vs_out [ 809.984788] Variable was created at: [ 809.988537] ip_vs_out+0x1bf/0x4570 [ 809.992181] ip_vs_local_reply6+0xec/0x130 17:13:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 810.537333] not chained 1480000 origins [ 810.541382] CPU: 0 PID: 20297 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 810.548672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.558039] Call Trace: [ 810.560663] dump_stack+0x32d/0x480 [ 810.564351] kmsan_internal_chain_origin+0x222/0x240 [ 810.569518] ? save_stack_trace+0xc6/0x110 [ 810.573807] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 810.578929] ? kmsan_internal_chain_origin+0x90/0x240 [ 810.584130] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 810.589512] ? is_bpf_text_address+0x49e/0x4d0 [ 810.594115] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 810.599562] ? in_task_stack+0x12c/0x210 [ 810.603633] __msan_chain_origin+0x6d/0xb0 [ 810.607893] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.613272] __save_stack_trace+0x8be/0xc60 [ 810.617611] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.622974] save_stack_trace+0xc6/0x110 [ 810.627035] kmsan_internal_chain_origin+0x136/0x240 [ 810.632143] ? kmsan_internal_chain_origin+0x136/0x240 [ 810.637434] ? kmsan_memcpy_origins+0x13d/0x190 [ 810.642100] ? __msan_memcpy+0x6f/0x80 [ 810.645982] ? pskb_expand_head+0x436/0x1d20 [ 810.650381] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 810.654527] ? pppol2tp_sendmsg+0x79a/0xba0 [ 810.658850] ? ___sys_sendmsg+0xe3b/0x1240 [ 810.663082] ? __sys_sendmmsg+0x56b/0xa90 [ 810.667224] ? __se_sys_sendmmsg+0xbd/0xe0 [ 810.671466] ? __x64_sys_sendmmsg+0x56/0x70 [ 810.675784] ? do_syscall_64+0xcf/0x110 [ 810.679754] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.685116] ? __msan_poison_alloca+0x1e0/0x270 [ 810.689805] ? __msan_get_context_state+0x9/0x20 [ 810.694561] ? INIT_INT+0xc/0x30 [ 810.697938] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 810.703309] kmsan_memcpy_origins+0x13d/0x190 [ 810.707811] __msan_memcpy+0x6f/0x80 [ 810.711530] pskb_expand_head+0x436/0x1d20 [ 810.715799] l2tp_xmit_skb+0x5a7/0x24b0 [ 810.719794] pppol2tp_sendmsg+0x79a/0xba0 [ 810.723962] ___sys_sendmsg+0xe3b/0x1240 [ 810.728015] ? pppol2tp_getsockopt+0x1060/0x1060 [ 810.732786] ? __msan_poison_alloca+0x1e0/0x270 [ 810.737472] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 810.742838] ? rcu_all_qs+0x3b/0x2b0 [ 810.746559] ? _cond_resched+0x59/0x120 [ 810.750547] ? rcu_all_qs+0x53/0x2b0 [ 810.754256] ? _cond_resched+0x37/0x120 [ 810.758234] ? __sys_sendmmsg+0x7c9/0xa90 [ 810.762393] ? _cond_resched+0x59/0x120 [ 810.766363] __sys_sendmmsg+0x56b/0xa90 [ 810.770362] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 810.775809] ? prepare_exit_to_usermode+0x182/0x4c0 [ 810.780830] __se_sys_sendmmsg+0xbd/0xe0 [ 810.784891] __x64_sys_sendmmsg+0x56/0x70 [ 810.789032] do_syscall_64+0xcf/0x110 [ 810.792837] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.798018] RIP: 0033:0x457569 [ 810.801206] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.820099] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 810.827801] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 810.835067] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 810.842328] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 810.849592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 810.856854] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 810.864132] Uninit was stored to memory at: [ 810.868448] kmsan_internal_chain_origin+0x136/0x240 [ 810.873556] __msan_chain_origin+0x6d/0xb0 [ 810.877788] __save_stack_trace+0x8be/0xc60 [ 810.882103] save_stack_trace+0xc6/0x110 [ 810.886155] kmsan_internal_chain_origin+0x136/0x240 [ 810.891248] kmsan_memcpy_origins+0x13d/0x190 [ 810.895735] __msan_memcpy+0x6f/0x80 [ 810.899440] pskb_expand_head+0x436/0x1d20 [ 810.903670] l2tp_xmit_skb+0x5a7/0x24b0 [ 810.907633] pppol2tp_sendmsg+0x79a/0xba0 [ 810.911771] ___sys_sendmsg+0xe3b/0x1240 [ 810.915824] __sys_sendmmsg+0x56b/0xa90 [ 810.919787] __se_sys_sendmmsg+0xbd/0xe0 [ 810.923840] __x64_sys_sendmmsg+0x56/0x70 [ 810.927979] do_syscall_64+0xcf/0x110 [ 810.931774] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.936959] [ 810.938588] Uninit was stored to memory at: [ 810.942912] kmsan_internal_chain_origin+0x136/0x240 [ 810.948023] __msan_chain_origin+0x6d/0xb0 [ 810.952276] __save_stack_trace+0x8be/0xc60 [ 810.956591] save_stack_trace+0xc6/0x110 [ 810.960642] kmsan_internal_chain_origin+0x136/0x240 [ 810.965739] kmsan_memcpy_origins+0x13d/0x190 [ 810.970226] __msan_memcpy+0x6f/0x80 [ 810.973951] pskb_expand_head+0x436/0x1d20 [ 810.978183] l2tp_xmit_skb+0x5a7/0x24b0 [ 810.982147] pppol2tp_sendmsg+0x79a/0xba0 [ 810.986284] ___sys_sendmsg+0xe3b/0x1240 [ 810.990337] __sys_sendmmsg+0x56b/0xa90 [ 810.994305] __se_sys_sendmmsg+0xbd/0xe0 [ 810.998357] __x64_sys_sendmmsg+0x56/0x70 [ 811.002496] do_syscall_64+0xcf/0x110 [ 811.006305] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.011476] [ 811.013091] Uninit was stored to memory at: [ 811.017416] kmsan_internal_chain_origin+0x136/0x240 [ 811.022538] __msan_chain_origin+0x6d/0xb0 [ 811.026769] __save_stack_trace+0x8be/0xc60 [ 811.031086] save_stack_trace+0xc6/0x110 [ 811.035149] kmsan_internal_chain_origin+0x136/0x240 [ 811.040253] kmsan_memcpy_origins+0x13d/0x190 [ 811.044740] __msan_memcpy+0x6f/0x80 [ 811.048446] pskb_expand_head+0x436/0x1d20 [ 811.052677] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.056661] pppol2tp_sendmsg+0x79a/0xba0 [ 811.060801] ___sys_sendmsg+0xe3b/0x1240 [ 811.064855] __sys_sendmmsg+0x56b/0xa90 [ 811.068869] __se_sys_sendmmsg+0xbd/0xe0 [ 811.072920] __x64_sys_sendmmsg+0x56/0x70 [ 811.077063] do_syscall_64+0xcf/0x110 [ 811.080859] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.086031] [ 811.087649] Uninit was stored to memory at: [ 811.091966] kmsan_internal_chain_origin+0x136/0x240 [ 811.097061] __msan_chain_origin+0x6d/0xb0 [ 811.101284] __save_stack_trace+0x8be/0xc60 [ 811.105596] save_stack_trace+0xc6/0x110 [ 811.109652] kmsan_internal_chain_origin+0x136/0x240 [ 811.114756] kmsan_memcpy_origins+0x13d/0x190 [ 811.119246] __msan_memcpy+0x6f/0x80 [ 811.122957] pskb_expand_head+0x436/0x1d20 [ 811.127186] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.131150] pppol2tp_sendmsg+0x79a/0xba0 [ 811.135290] ___sys_sendmsg+0xe3b/0x1240 [ 811.139341] __sys_sendmmsg+0x56b/0xa90 [ 811.143333] __se_sys_sendmmsg+0xbd/0xe0 [ 811.147385] __x64_sys_sendmmsg+0x56/0x70 [ 811.151530] do_syscall_64+0xcf/0x110 [ 811.155349] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.160529] [ 811.162149] Uninit was stored to memory at: [ 811.166461] kmsan_internal_chain_origin+0x136/0x240 [ 811.171569] __msan_chain_origin+0x6d/0xb0 [ 811.176007] __save_stack_trace+0x8be/0xc60 [ 811.180333] save_stack_trace+0xc6/0x110 [ 811.184387] kmsan_internal_chain_origin+0x136/0x240 [ 811.189487] kmsan_memcpy_origins+0x13d/0x190 [ 811.193973] __msan_memcpy+0x6f/0x80 [ 811.197689] pskb_expand_head+0x436/0x1d20 [ 811.201916] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.205880] pppol2tp_sendmsg+0x79a/0xba0 [ 811.210020] ___sys_sendmsg+0xe3b/0x1240 [ 811.214077] __sys_sendmmsg+0x56b/0xa90 [ 811.218058] __se_sys_sendmmsg+0xbd/0xe0 [ 811.222108] __x64_sys_sendmmsg+0x56/0x70 [ 811.226247] do_syscall_64+0xcf/0x110 [ 811.230045] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.235229] [ 811.236869] Uninit was stored to memory at: [ 811.241221] kmsan_internal_chain_origin+0x136/0x240 [ 811.246354] __msan_chain_origin+0x6d/0xb0 [ 811.250622] __save_stack_trace+0x8be/0xc60 [ 811.254975] save_stack_trace+0xc6/0x110 [ 811.259072] kmsan_internal_chain_origin+0x136/0x240 [ 811.264205] kmsan_memcpy_origins+0x13d/0x190 [ 811.268731] __msan_memcpy+0x6f/0x80 [ 811.272471] pskb_expand_head+0x436/0x1d20 [ 811.276741] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.280744] pppol2tp_sendmsg+0x79a/0xba0 [ 811.284918] ___sys_sendmsg+0xe3b/0x1240 [ 811.289000] __sys_sendmmsg+0x56b/0xa90 [ 811.292997] __se_sys_sendmmsg+0xbd/0xe0 [ 811.297083] __x64_sys_sendmmsg+0x56/0x70 [ 811.301268] do_syscall_64+0xcf/0x110 [ 811.305104] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.310308] [ 811.311949] Uninit was stored to memory at: [ 811.316303] kmsan_internal_chain_origin+0x136/0x240 [ 811.321447] __msan_chain_origin+0x6d/0xb0 [ 811.325695] __save_stack_trace+0x8be/0xc60 [ 811.330012] save_stack_trace+0xc6/0x110 [ 811.334086] kmsan_internal_chain_origin+0x136/0x240 [ 811.339216] kmsan_memcpy_origins+0x13d/0x190 [ 811.343744] __msan_memcpy+0x6f/0x80 [ 811.347486] pskb_expand_head+0x436/0x1d20 [ 811.351729] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.355724] pppol2tp_sendmsg+0x79a/0xba0 [ 811.359865] ___sys_sendmsg+0xe3b/0x1240 [ 811.363919] __sys_sendmmsg+0x56b/0xa90 [ 811.367899] __se_sys_sendmmsg+0xbd/0xe0 [ 811.371970] __x64_sys_sendmmsg+0x56/0x70 [ 811.376114] do_syscall_64+0xcf/0x110 [ 811.379915] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.385095] [ 811.386726] Local variable description: ----iph@ip_vs_out [ 811.392266] Variable was created at: [ 811.395974] ip_vs_out+0x1bf/0x4570 [ 811.399595] ip_vs_local_reply6+0xec/0x130 [ 811.422747] not chained 1490000 origins [ 811.426737] CPU: 1 PID: 20297 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 811.434000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.443370] Call Trace: [ 811.445968] dump_stack+0x32d/0x480 [ 811.449629] kmsan_internal_chain_origin+0x222/0x240 [ 811.454795] ? save_stack_trace+0xc6/0x110 [ 811.459055] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 811.464163] ? kmsan_internal_chain_origin+0x1e3/0x240 [ 811.469446] ? kmsan_internal_chain_origin+0x136/0x240 [ 811.474757] ? __msan_chain_origin+0x6d/0xb0 [ 811.479174] ? save_stack_trace+0xfa/0x110 [ 811.483404] ? kmsan_internal_chain_origin+0x136/0x240 [ 811.488678] ? kmsan_memcpy_origins+0x13d/0x190 [ 811.493349] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 811.498809] ? in_task_stack+0x12c/0x210 [ 811.502879] __msan_chain_origin+0x6d/0xb0 [ 811.507136] ? pppol2tp_sendmsg+0x79a/0xba0 [ 811.511474] __save_stack_trace+0x8be/0xc60 [ 811.515888] ? pppol2tp_sendmsg+0x79a/0xba0 [ 811.520234] save_stack_trace+0xc6/0x110 [ 811.524300] kmsan_internal_chain_origin+0x136/0x240 [ 811.529414] ? kmsan_internal_chain_origin+0x136/0x240 [ 811.534690] ? kmsan_memcpy_origins+0x13d/0x190 [ 811.539355] ? __msan_memcpy+0x6f/0x80 [ 811.543241] ? pskb_expand_head+0x436/0x1d20 [ 811.547669] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 811.551834] ? pppol2tp_sendmsg+0x79a/0xba0 [ 811.556152] ? ___sys_sendmsg+0xe3b/0x1240 [ 811.560407] ? __sys_sendmmsg+0x56b/0xa90 [ 811.564581] ? __se_sys_sendmmsg+0xbd/0xe0 [ 811.568832] ? __x64_sys_sendmmsg+0x56/0x70 [ 811.573150] ? do_syscall_64+0xcf/0x110 [ 811.577134] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.582531] ? __msan_poison_alloca+0x1e0/0x270 [ 811.587225] ? __msan_get_context_state+0x9/0x20 [ 811.591976] ? INIT_INT+0xc/0x30 [ 811.595341] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 811.600714] kmsan_memcpy_origins+0x13d/0x190 [ 811.605240] __msan_memcpy+0x6f/0x80 [ 811.608994] pskb_expand_head+0x436/0x1d20 [ 811.613272] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.617269] pppol2tp_sendmsg+0x79a/0xba0 [ 811.621442] ___sys_sendmsg+0xe3b/0x1240 [ 811.625500] ? pppol2tp_getsockopt+0x1060/0x1060 [ 811.630285] ? __msan_poison_alloca+0x1e0/0x270 [ 811.634953] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 811.640323] ? rcu_all_qs+0x3b/0x2b0 [ 811.644041] ? _cond_resched+0x59/0x120 [ 811.648047] ? rcu_all_qs+0x53/0x2b0 [ 811.651779] ? _cond_resched+0x37/0x120 [ 811.655757] ? __sys_sendmmsg+0x7c9/0xa90 [ 811.659921] ? _cond_resched+0x59/0x120 [ 811.663914] __sys_sendmmsg+0x56b/0xa90 [ 811.667935] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 811.673383] ? prepare_exit_to_usermode+0x182/0x4c0 [ 811.678408] __se_sys_sendmmsg+0xbd/0xe0 [ 811.682494] __x64_sys_sendmmsg+0x56/0x70 [ 811.686678] do_syscall_64+0xcf/0x110 [ 811.690504] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.695705] RIP: 0033:0x457569 [ 811.698896] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.717790] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 811.725494] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 811.732767] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 811.740032] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 811.747307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 811.754590] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 811.761910] Uninit was stored to memory at: [ 811.766250] kmsan_internal_chain_origin+0x136/0x240 [ 811.771348] __msan_chain_origin+0x6d/0xb0 [ 811.775583] __save_stack_trace+0x8be/0xc60 [ 811.779913] save_stack_trace+0xc6/0x110 [ 811.783988] kmsan_internal_chain_origin+0x136/0x240 [ 811.789108] kmsan_memcpy_origins+0x13d/0x190 [ 811.793598] __msan_memcpy+0x6f/0x80 [ 811.797308] pskb_expand_head+0x436/0x1d20 [ 811.801555] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.805554] pppol2tp_sendmsg+0x79a/0xba0 [ 811.809702] ___sys_sendmsg+0xe3b/0x1240 [ 811.813761] __sys_sendmmsg+0x56b/0xa90 [ 811.817729] __se_sys_sendmmsg+0xbd/0xe0 [ 811.821799] __x64_sys_sendmmsg+0x56/0x70 [ 811.825975] do_syscall_64+0xcf/0x110 [ 811.829806] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.835004] [ 811.836644] Uninit was stored to memory at: [ 811.840964] kmsan_internal_chain_origin+0x136/0x240 [ 811.846066] __msan_chain_origin+0x6d/0xb0 [ 811.850311] __save_stack_trace+0x8be/0xc60 [ 811.854627] save_stack_trace+0xc6/0x110 [ 811.858683] kmsan_internal_chain_origin+0x136/0x240 [ 811.863794] kmsan_memcpy_origins+0x13d/0x190 [ 811.868300] __msan_memcpy+0x6f/0x80 [ 811.872012] pskb_expand_head+0x436/0x1d20 [ 811.876250] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.880216] pppol2tp_sendmsg+0x79a/0xba0 [ 811.884372] ___sys_sendmsg+0xe3b/0x1240 [ 811.888449] __sys_sendmmsg+0x56b/0xa90 [ 811.892417] __se_sys_sendmmsg+0xbd/0xe0 [ 811.896470] __x64_sys_sendmmsg+0x56/0x70 [ 811.900614] do_syscall_64+0xcf/0x110 [ 811.904412] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.909593] [ 811.911226] Uninit was stored to memory at: [ 811.915553] kmsan_internal_chain_origin+0x136/0x240 [ 811.920652] __msan_chain_origin+0x6d/0xb0 [ 811.924885] __save_stack_trace+0x8be/0xc60 [ 811.929221] save_stack_trace+0xc6/0x110 [ 811.933279] kmsan_internal_chain_origin+0x136/0x240 [ 811.938378] kmsan_memcpy_origins+0x13d/0x190 [ 811.942871] __msan_memcpy+0x6f/0x80 [ 811.946580] pskb_expand_head+0x436/0x1d20 [ 811.950811] l2tp_xmit_skb+0x5a7/0x24b0 [ 811.954784] pppol2tp_sendmsg+0x79a/0xba0 [ 811.958938] ___sys_sendmsg+0xe3b/0x1240 [ 811.963009] __sys_sendmmsg+0x56b/0xa90 [ 811.967002] __se_sys_sendmmsg+0xbd/0xe0 [ 811.971059] __x64_sys_sendmmsg+0x56/0x70 [ 811.975219] do_syscall_64+0xcf/0x110 [ 811.979043] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.984238] [ 811.985853] Uninit was stored to memory at: [ 811.990184] kmsan_internal_chain_origin+0x136/0x240 [ 811.995303] __msan_chain_origin+0x6d/0xb0 [ 811.999563] __save_stack_trace+0x8be/0xc60 [ 812.003893] save_stack_trace+0xc6/0x110 [ 812.007967] kmsan_internal_chain_origin+0x136/0x240 [ 812.013068] kmsan_memcpy_origins+0x13d/0x190 [ 812.017581] __msan_memcpy+0x6f/0x80 [ 812.021296] pskb_expand_head+0x436/0x1d20 [ 812.025548] l2tp_xmit_skb+0x5a7/0x24b0 [ 812.029546] pppol2tp_sendmsg+0x79a/0xba0 [ 812.033692] ___sys_sendmsg+0xe3b/0x1240 [ 812.037747] __sys_sendmmsg+0x56b/0xa90 [ 812.041732] __se_sys_sendmmsg+0xbd/0xe0 [ 812.045815] __x64_sys_sendmmsg+0x56/0x70 [ 812.049973] do_syscall_64+0xcf/0x110 [ 812.053772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.058947] [ 812.060563] Uninit was stored to memory at: [ 812.064885] kmsan_internal_chain_origin+0x136/0x240 [ 812.069982] __msan_chain_origin+0x6d/0xb0 [ 812.074233] __save_stack_trace+0x8be/0xc60 [ 812.078570] save_stack_trace+0xc6/0x110 [ 812.082647] kmsan_internal_chain_origin+0x136/0x240 [ 812.087744] kmsan_memcpy_origins+0x13d/0x190 [ 812.092281] __msan_memcpy+0x6f/0x80 [ 812.096057] pskb_expand_head+0x436/0x1d20 [ 812.100303] l2tp_xmit_skb+0x5a7/0x24b0 [ 812.104296] pppol2tp_sendmsg+0x79a/0xba0 [ 812.108439] ___sys_sendmsg+0xe3b/0x1240 [ 812.112535] __sys_sendmmsg+0x56b/0xa90 [ 812.116522] __se_sys_sendmmsg+0xbd/0xe0 [ 812.120588] __x64_sys_sendmmsg+0x56/0x70 [ 812.124735] do_syscall_64+0xcf/0x110 [ 812.128571] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.133777] [ 812.135402] Uninit was stored to memory at: [ 812.139721] kmsan_internal_chain_origin+0x136/0x240 [ 812.144837] __msan_chain_origin+0x6d/0xb0 [ 812.149086] __save_stack_trace+0x8be/0xc60 [ 812.153402] save_stack_trace+0xc6/0x110 [ 812.157471] kmsan_internal_chain_origin+0x136/0x240 [ 812.162585] kmsan_memcpy_origins+0x13d/0x190 [ 812.167075] __msan_memcpy+0x6f/0x80 [ 812.170788] pskb_expand_head+0x436/0x1d20 [ 812.175034] l2tp_xmit_skb+0x5a7/0x24b0 [ 812.179031] pppol2tp_sendmsg+0x79a/0xba0 [ 812.183181] ___sys_sendmsg+0xe3b/0x1240 [ 812.187235] __sys_sendmmsg+0x56b/0xa90 [ 812.191217] __se_sys_sendmmsg+0xbd/0xe0 [ 812.195304] __x64_sys_sendmmsg+0x56/0x70 [ 812.199463] do_syscall_64+0xcf/0x110 [ 812.203266] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.208439] [ 812.210056] Uninit was stored to memory at: [ 812.214371] kmsan_internal_chain_origin+0x136/0x240 [ 812.219471] __msan_chain_origin+0x6d/0xb0 [ 812.223714] __save_stack_trace+0x8be/0xc60 [ 812.228054] save_stack_trace+0xc6/0x110 [ 812.232110] kmsan_internal_chain_origin+0x136/0x240 [ 812.237205] kmsan_memcpy_origins+0x13d/0x190 [ 812.241716] __msan_memcpy+0x6f/0x80 [ 812.245444] pskb_expand_head+0x436/0x1d20 [ 812.249673] l2tp_xmit_skb+0x5a7/0x24b0 [ 812.253661] pppol2tp_sendmsg+0x79a/0xba0 [ 812.257820] ___sys_sendmsg+0xe3b/0x1240 [ 812.261878] __sys_sendmmsg+0x56b/0xa90 [ 812.265847] __se_sys_sendmmsg+0xbd/0xe0 [ 812.269914] __x64_sys_sendmmsg+0x56/0x70 [ 812.274074] do_syscall_64+0xcf/0x110 [ 812.277883] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 812.283057] [ 812.284691] Local variable description: ----iph@ip_vs_out [ 812.290213] Variable was created at: [ 812.293922] ip_vs_out+0x1bf/0x4570 [ 812.297570] ip_vs_local_reply6+0xec/0x130 17:13:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='bond0\x00', 0x100}) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) fcntl$getown(r1, 0x9) 17:13:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x600, 0x0) close(r2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) 17:13:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="9e61926e107e38060188e7b48202444bab8ad0238adde12177222c8837d5a035971d6fd244a8d90aaa56f264e2fc46ec8a0340a632d48fd15e06a33116c51b158ba2c4727b937bdfff0ed19f64acf018fb1096eb7d7e5846b8d3631e6fc1e81dcf97a3384f0ff501fcfc7c19a4151d1aa30d91f987842c4d56990f17d6e0483281f7799019ea61c424172d3ec46fa4d802bccf076f5a35956eca0a5382c7e098ec2051176fa75411f91dc8684e8c83ac01c95b6b04307e6f0b6df49de46d0431c8651bb318e9c27c02048089e7b551dfea5c63bf0a395464e5b6", 0xda, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="706f7369785f61636c5f6163636573732a25e700", 0x0) keyctl$negate(0xd, r0, 0x7, r1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xc00, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x480) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:13:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x81, 0x4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7ff}, &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [{[@remote]}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 17:13:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 812.544586] netlink: get zone limit has 4 unknown bytes [ 812.608318] netlink: get zone limit has 4 unknown bytes 17:13:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002800)='/dev/sequencer\x00', 0x2200, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000002840)={0x94e4, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032fffa0100cda71f00000000030000000c0000000800010000000710"], 0x20}}, 0x0) 17:13:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$KDSKBLED(r2, 0x4b65, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 17:13:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r3, 0xfffffffffffffffb}, &(0x7f0000000040)=0x8) 17:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x690, 0x2, 0x8, {}, 0x101, 0x10001}) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 813.180198] netlink: get zone limit has 4 unknown bytes 17:13:53 executing program 4: socketpair$unix(0x1, 0x100d, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, r4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="145f4200002cfde9375b8fbcb9d6866470000000000007ff000000000300140006000000000000000000000000000000000008000500ac1414"], 0x1}}, 0x81) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="75030000", @ANYRES16=0x0, @ANYBLOB="00000b9d69e835031c66e87ab3b802d1223eb3489fe8e6a50800000046845699d2d5db33acf0c623602e7fe8a83f1ac1b1d356e419cd020d120280584c35309d8d733c768ebb25f575499988cefb3c3cf6f27325287b4ef121532f38a7567e89abf0d9347373a55d0000"], 0x14}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000540)="660f694907b9800000c00f3235008000000f300f01d1660f381e3f36660f7d1ccc8fc830b66698f06498b9d6090000b800600000ba000000000f30b8010000000f01c1f2f33232"}], 0xaaaadb4, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1f1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="811c08e6a8f849d2e8d7fbcac986b0f6405f00000000000000000038294dbce094f100686b7e90b24ab0a28fea6c0fb6f07a123a18e1f18e45644e78ed95951b3121e5d4bee0d4333435c0d9eab422c114fe32cd2141035e7022343a0979af62d804359919a21d33ccc96e360793b79acd9ab3e83f5d391640a2b1027807b8fada5ea57da614e17db7458148f268ccb25f61bb0d36cf358bda90687b9499c05b24b60323def9c8f10579a112a9b6b8dd64662df38d"]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) 17:13:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="ab903a6f2b000000320019010000000000000000030000000c00000008000100"], 0x20}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4000, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="2e3e0f070f01be00003e0f840b00baf80c66b8e2af808c66efbafc0cb008ee23cb0f22e366b9e20a00000f32baf80c66b890f1e88666efbafc0c66ed0f090f0f2d0c", 0x42}], 0x1, 0x31, &(0x7f0000000240)=[@cr0={0x0, 0x2}], 0x1) 17:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4007fc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r3, 0xfff}, &(0x7f0000000040)=0x8) close(r2) close(r1) 17:13:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:54 executing program 4: socketpair$unix(0x1, 0x100d, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, r4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="145f4200002cfde9375b8fbcb9d6866470000000000007ff000000000300140006000000000000000000000000000000000008000500ac1414"], 0x1}}, 0x81) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="75030000", @ANYRES16=0x0, @ANYBLOB="00000b9d69e835031c66e87ab3b802d1223eb3489fe8e6a50800000046845699d2d5db33acf0c623602e7fe8a83f1ac1b1d356e419cd020d120280584c35309d8d733c768ebb25f575499988cefb3c3cf6f27325287b4ef121532f38a7567e89abf0d9347373a55d0000"], 0x14}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000540)="660f694907b9800000c00f3235008000000f300f01d1660f381e3f36660f7d1ccc8fc830b66698f06498b9d6090000b800600000ba000000000f30b8010000000f01c1f2f33232"}], 0xaaaadb4, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1f1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="811c08e6a8f849d2e8d7fbcac986b0f6405f00000000000000000038294dbce094f100686b7e90b24ab0a28fea6c0fb6f07a123a18e1f18e45644e78ed95951b3121e5d4bee0d4333435c0d9eab422c114fe32cd2141035e7022343a0979af62d804359919a21d33ccc96e360793b79acd9ab3e83f5d391640a2b1027807b8fada5ea57da614e17db7458148f268ccb25f61bb0d36cf358bda90687b9499c05b24b60323def9c8f10579a112a9b6b8dd64662df38d"]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:13:54 executing program 5: socketpair$unix(0x1, 0x20000007, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc0000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'irlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000940)=0xfffffffffffffffd) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000980)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000600)={0x2, r1}) r5 = getegid() r6 = geteuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000440)) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000880)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="00020000ffffffff050000000000000003000000000000000200000000000000090000000000000011000000000000000100000005000000020000000000000006000000000000000800000000000000ff010000000000000800000000000000040000000000000000010000cf090000aa7700003900000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0700000020000000000000000500000000000000010000000100000018000000040000007b532523706f7369785f61636c5f616363657373707070310300000000000000010000000000000040e300000000000001000000000000007f000000ff0300000100000000000000ffffffff000000000000000000000000d50000000000000001000000000000000104000000000000ff07000000000000010000000100000023000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="06000000f5d700000000000003000000000000000800000000000000070000000700000069726c616e3000000000000000000000020000000000000070ca000000000024713f6e7e251088000700000001000000020000000000000000009606000000000004000000000000010000000000000001fcffffffffffff0010000000000000f7ffffffff0f0000080000000700000008000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1f000000ffffffff000000000200000000000000ffffff7fffffffff070000000700000069726c616e300000c90d9aba9fdc1c725c1d7e7847d932b0624c16427895bd3e66aa40f3fd6eb18d5d155c5fc91d7a2dc863e3dafad6a049becc74b423d6a55639e4ea167162d38532f0763b0ec2d1bf6cf05a2ed83a8b84e625586fbed881691b8df0b0e1cb442b0d"], 0x200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x1200, 0x754000000, 0x5, 'queue0\x00', 0x8}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000008c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000ac0), &(0x7f0000000a00)=0xfffffffffffffc49) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x751e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000d80)="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", 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r10) close(r3) 17:13:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000140)={0x4, 0x0, 0x1}) syncfs(r1) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000320019010000000000000000030000000c00000100000000000000"], 0x20}}, 0x0) 17:13:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 814.284354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 814.306378] Unknown ioctl 1074296322 [ 814.332908] Unknown ioctl 1074310945 [ 814.359410] Unknown ioctl 8822 [ 814.382932] Unknown ioctl 1082938163 [ 814.410619] Unknown ioctl 44706 [ 814.426876] not chained 1500000 origins [ 814.430903] CPU: 1 PID: 20435 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 814.438199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.447571] Call Trace: [ 814.450199] dump_stack+0x32d/0x480 [ 814.453879] kmsan_internal_chain_origin+0x222/0x240 [ 814.459059] ? save_stack_trace+0xc6/0x110 [ 814.463333] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 814.468475] ? kmsan_internal_chain_origin+0x90/0x240 [ 814.473747] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 814.479144] ? is_bpf_text_address+0x49e/0x4d0 [ 814.483766] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 814.489246] ? in_task_stack+0x12c/0x210 [ 814.493369] __msan_chain_origin+0x6d/0xb0 [ 814.498138] ? kmsan_internal_chain_origin+0x136/0x240 [ 814.503447] __save_stack_trace+0x8be/0xc60 [ 814.507833] ? kmsan_internal_chain_origin+0x136/0x240 [ 814.513155] save_stack_trace+0xc6/0x110 [ 814.517258] kmsan_internal_chain_origin+0x136/0x240 [ 814.522410] ? kmsan_internal_chain_origin+0x136/0x240 [ 814.527724] ? kmsan_memcpy_origins+0x13d/0x190 [ 814.532429] ? __msan_memcpy+0x6f/0x80 [ 814.536354] ? pskb_expand_head+0x436/0x1d20 [ 814.540796] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 814.544976] ? pppol2tp_sendmsg+0x79a/0xba0 [ 814.549326] ? ___sys_sendmsg+0xe3b/0x1240 [ 814.553599] ? __sys_sendmmsg+0x56b/0xa90 [ 814.557779] ? __se_sys_sendmmsg+0xbd/0xe0 [ 814.562054] ? __x64_sys_sendmmsg+0x56/0x70 [ 814.566416] ? do_syscall_64+0xcf/0x110 [ 814.570435] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.575835] ? __msan_poison_alloca+0x1e0/0x270 [ 814.580586] ? __msan_get_context_state+0x9/0x20 [ 814.585437] ? INIT_INT+0xc/0x30 [ 814.588845] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 814.594268] kmsan_memcpy_origins+0x13d/0x190 [ 814.598806] __msan_memcpy+0x6f/0x80 [ 814.602571] pskb_expand_head+0x436/0x1d20 [ 814.606873] l2tp_xmit_skb+0x5a7/0x24b0 17:13:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 814.610927] pppol2tp_sendmsg+0x79a/0xba0 [ 814.615144] ___sys_sendmsg+0xe3b/0x1240 [ 814.619233] ? pppol2tp_getsockopt+0x1060/0x1060 [ 814.624058] ? __msan_poison_alloca+0x1e0/0x270 [ 814.628766] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 814.634168] ? rcu_all_qs+0x3b/0x2b0 [ 814.637912] ? _cond_resched+0x59/0x120 [ 814.641924] ? rcu_all_qs+0x53/0x2b0 [ 814.645666] ? _cond_resched+0x37/0x120 [ 814.649669] ? __sys_sendmmsg+0x7c9/0xa90 [ 814.653859] ? _cond_resched+0x59/0x120 [ 814.657871] __sys_sendmmsg+0x56b/0xa90 [ 814.661914] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 814.667399] ? prepare_exit_to_usermode+0x182/0x4c0 [ 814.672465] __se_sys_sendmmsg+0xbd/0xe0 [ 814.676580] __x64_sys_sendmmsg+0x56/0x70 [ 814.680769] do_syscall_64+0xcf/0x110 [ 814.684614] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.689827] RIP: 0033:0x457569 [ 814.693053] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:13:54 executing program 4 (fault-call:7 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 814.711985] RSP: 002b:00007f2cd66f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 814.719724] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 814.725786] Unknown ioctl 1074296322 [ 814.727012] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 814.727047] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 814.745041] Unknown ioctl -1072125377 [ 814.745321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66f66d4 [ 814.745338] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 814.745373] Uninit was stored to memory at: [ 814.745403] kmsan_internal_chain_origin+0x136/0x240 [ 814.745425] __msan_chain_origin+0x6d/0xb0 [ 814.745448] __save_stack_trace+0x8be/0xc60 [ 814.745468] save_stack_trace+0xc6/0x110 [ 814.745489] kmsan_internal_chain_origin+0x136/0x240 [ 814.745538] kmsan_memcpy_origins+0x13d/0x190 [ 814.783650] Unknown ioctl 1074310945 [ 814.785946] __msan_memcpy+0x6f/0x80 [ 814.785973] pskb_expand_head+0x436/0x1d20 [ 814.785997] l2tp_xmit_skb+0x5a7/0x24b0 [ 814.786016] pppol2tp_sendmsg+0x79a/0xba0 [ 814.786036] ___sys_sendmsg+0xe3b/0x1240 [ 814.786063] __sys_sendmmsg+0x56b/0xa90 [ 814.786082] __se_sys_sendmmsg+0xbd/0xe0 [ 814.786101] __x64_sys_sendmmsg+0x56/0x70 [ 814.786122] do_syscall_64+0xcf/0x110 [ 814.786147] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.786155] [ 814.786163] Uninit was stored to memory at: [ 814.786185] kmsan_internal_chain_origin+0x136/0x240 [ 814.786222] __msan_chain_origin+0x6d/0xb0 [ 814.810209] Unknown ioctl 8822 [ 814.811466] __save_stack_trace+0x8be/0xc60 [ 814.811488] save_stack_trace+0xc6/0x110 [ 814.811511] kmsan_internal_chain_origin+0x136/0x240 [ 814.811544] kmsan_memcpy_origins+0x13d/0x190 [ 814.811566] __msan_memcpy+0x6f/0x80 [ 814.811590] pskb_expand_head+0x436/0x1d20 [ 814.811613] l2tp_xmit_skb+0x5a7/0x24b0 [ 814.811632] pppol2tp_sendmsg+0x79a/0xba0 [ 814.811650] ___sys_sendmsg+0xe3b/0x1240 [ 814.811667] __sys_sendmmsg+0x56b/0xa90 [ 814.811685] __se_sys_sendmmsg+0xbd/0xe0 [ 814.811702] __x64_sys_sendmmsg+0x56/0x70 [ 814.811722] do_syscall_64+0xcf/0x110 [ 814.811746] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.811754] [ 814.811763] Uninit was stored to memory at: [ 814.811785] kmsan_internal_chain_origin+0x136/0x240 [ 814.811805] __msan_chain_origin+0x6d/0xb0 [ 814.811825] __save_stack_trace+0x8be/0xc60 [ 814.811869] save_stack_trace+0xc6/0x110 [ 814.819597] Unknown ioctl 1082938163 [ 814.820102] kmsan_internal_chain_origin+0x136/0x240 [ 814.820138] kmsan_memcpy_origins+0x13d/0x190 [ 814.844935] Unknown ioctl 44706 [ 814.847255] __msan_memcpy+0x6f/0x80 17:13:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 814.847280] pskb_expand_head+0x436/0x1d20 [ 814.847304] l2tp_xmit_skb+0x5a7/0x24b0 [ 814.847323] pppol2tp_sendmsg+0x79a/0xba0 [ 814.847343] ___sys_sendmsg+0xe3b/0x1240 [ 814.847362] __sys_sendmmsg+0x56b/0xa90 [ 814.847381] __se_sys_sendmmsg+0xbd/0xe0 [ 814.847400] __x64_sys_sendmmsg+0x56/0x70 [ 814.847420] do_syscall_64+0xcf/0x110 [ 814.847446] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 814.847454] [ 814.847463] Uninit was stored to memory at: [ 814.847484] kmsan_internal_chain_origin+0x136/0x240 [ 814.847520] __msan_chain_origin+0x6d/0xb0 [ 815.016209] __save_stack_trace+0x8be/0xc60 [ 815.020567] save_stack_trace+0xc6/0x110 [ 815.024657] kmsan_internal_chain_origin+0x136/0x240 [ 815.029786] kmsan_memcpy_origins+0x13d/0x190 [ 815.034307] __msan_memcpy+0x6f/0x80 [ 815.038060] pskb_expand_head+0x436/0x1d20 [ 815.042323] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.046318] pppol2tp_sendmsg+0x79a/0xba0 [ 815.050487] ___sys_sendmsg+0xe3b/0x1240 [ 815.054581] __sys_sendmmsg+0x56b/0xa90 [ 815.058574] __se_sys_sendmmsg+0xbd/0xe0 [ 815.062660] __x64_sys_sendmmsg+0x56/0x70 [ 815.066838] do_syscall_64+0xcf/0x110 [ 815.070669] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.075875] [ 815.077509] Uninit was stored to memory at: [ 815.081867] kmsan_internal_chain_origin+0x136/0x240 [ 815.086997] __msan_chain_origin+0x6d/0xb0 [ 815.091262] __save_stack_trace+0x8be/0xc60 [ 815.095606] save_stack_trace+0xc6/0x110 [ 815.099691] kmsan_internal_chain_origin+0x136/0x240 [ 815.104822] kmsan_memcpy_origins+0x13d/0x190 [ 815.109340] __msan_memcpy+0x6f/0x80 [ 815.113083] pskb_expand_head+0x436/0x1d20 [ 815.117342] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.121338] pppol2tp_sendmsg+0x79a/0xba0 [ 815.125509] ___sys_sendmsg+0xe3b/0x1240 [ 815.129606] __sys_sendmmsg+0x56b/0xa90 [ 815.133602] __se_sys_sendmmsg+0xbd/0xe0 [ 815.137686] __x64_sys_sendmmsg+0x56/0x70 [ 815.141855] do_syscall_64+0xcf/0x110 [ 815.145686] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.150887] [ 815.152522] Uninit was stored to memory at: [ 815.156879] kmsan_internal_chain_origin+0x136/0x240 [ 815.162013] __msan_chain_origin+0x6d/0xb0 [ 815.166282] __save_stack_trace+0x8be/0xc60 [ 815.170628] save_stack_trace+0xc6/0x110 [ 815.174718] kmsan_internal_chain_origin+0x136/0x240 [ 815.179859] kmsan_memcpy_origins+0x13d/0x190 [ 815.184380] __msan_memcpy+0x6f/0x80 [ 815.188123] pskb_expand_head+0x436/0x1d20 [ 815.192390] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.196387] pppol2tp_sendmsg+0x79a/0xba0 [ 815.200571] ___sys_sendmsg+0xe3b/0x1240 [ 815.204656] __sys_sendmmsg+0x56b/0xa90 [ 815.208653] __se_sys_sendmmsg+0xbd/0xe0 [ 815.212737] __x64_sys_sendmmsg+0x56/0x70 [ 815.216911] do_syscall_64+0xcf/0x110 [ 815.220756] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.225958] [ 815.227600] Uninit was stored to memory at: [ 815.231949] kmsan_internal_chain_origin+0x136/0x240 [ 815.237088] __msan_chain_origin+0x6d/0xb0 [ 815.241354] __save_stack_trace+0x8be/0xc60 [ 815.245702] save_stack_trace+0xc6/0x110 [ 815.249783] kmsan_internal_chain_origin+0x136/0x240 [ 815.254933] kmsan_memcpy_origins+0x13d/0x190 [ 815.259462] __msan_memcpy+0x6f/0x80 [ 815.263209] pskb_expand_head+0x436/0x1d20 [ 815.267478] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.271476] pppol2tp_sendmsg+0x79a/0xba0 [ 815.275647] ___sys_sendmsg+0xe3b/0x1240 [ 815.279731] __sys_sendmmsg+0x56b/0xa90 [ 815.283729] __se_sys_sendmmsg+0xbd/0xe0 [ 815.287817] __x64_sys_sendmmsg+0x56/0x70 [ 815.291989] do_syscall_64+0xcf/0x110 [ 815.295821] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.301023] [ 815.302676] Local variable description: ----iph@ip_vs_out [ 815.308222] Variable was created at: 17:13:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) fsetxattr$security_smack_transmute(r0, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000380)=0x3, 0x4) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x113, 0x4}}, 0x20) setsockopt$inet6_int(r3, 0x29, 0xff, &(0x7f0000000480)=0x3, 0x4) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000540)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x1, {0xa, 0x4e24, 0x7, @empty, 0x8}, r4}}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@generic]}, 0xffffffffffffffe9}, 0x1, 0x0, 0x0, 0x1}, 0x181) read(r2, &(0x7f00000004c0)=""/78, 0x4e) [ 815.311963] ip_vs_out+0x1bf/0x4570 [ 815.315618] ip_vs_local_reply6+0xec/0x130 [ 815.586758] not chained 1510000 origins [ 815.590806] CPU: 0 PID: 20435 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 815.598094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.607461] Call Trace: [ 815.610082] dump_stack+0x32d/0x480 [ 815.613760] kmsan_internal_chain_origin+0x222/0x240 [ 815.618930] ? save_stack_trace+0xc6/0x110 [ 815.623198] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 815.628335] ? kmsan_internal_chain_origin+0x90/0x240 [ 815.633581] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 815.638974] ? is_bpf_text_address+0x49e/0x4d0 [ 815.643595] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 815.649072] ? in_task_stack+0x12c/0x210 [ 815.653175] __msan_chain_origin+0x6d/0xb0 [ 815.657460] ? do_syscall_64+0xcf/0x110 [ 815.661469] __save_stack_trace+0x8be/0xc60 [ 815.665850] ? do_syscall_64+0xcf/0x110 [ 815.669858] save_stack_trace+0xc6/0x110 [ 815.673959] kmsan_internal_chain_origin+0x136/0x240 [ 815.679108] ? kmsan_internal_chain_origin+0x136/0x240 [ 815.684413] ? kmsan_memcpy_origins+0x13d/0x190 [ 815.689109] ? __msan_memcpy+0x6f/0x80 [ 815.693020] ? pskb_expand_head+0x436/0x1d20 [ 815.697469] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 815.701639] ? pppol2tp_sendmsg+0x79a/0xba0 [ 815.705985] ? ___sys_sendmsg+0xe3b/0x1240 [ 815.710245] ? __sys_sendmmsg+0x56b/0xa90 [ 815.714414] ? __se_sys_sendmmsg+0xbd/0xe0 [ 815.718668] ? __x64_sys_sendmmsg+0x56/0x70 [ 815.723013] ? do_syscall_64+0xcf/0x110 [ 815.727011] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.732399] ? __msan_poison_alloca+0x1e0/0x270 [ 815.737134] ? __msan_get_context_state+0x9/0x20 [ 815.741912] ? INIT_INT+0xc/0x30 [ 815.745304] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 815.750711] kmsan_memcpy_origins+0x13d/0x190 [ 815.755241] __msan_memcpy+0x6f/0x80 [ 815.758990] pskb_expand_head+0x436/0x1d20 [ 815.763285] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.767325] pppol2tp_sendmsg+0x79a/0xba0 [ 815.771564] ___sys_sendmsg+0xe3b/0x1240 [ 815.775660] ? pppol2tp_getsockopt+0x1060/0x1060 [ 815.780475] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 815.785880] ? kmsan_set_origin+0x7f/0x100 [ 815.790152] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 815.795573] ? _cond_resched+0xc7/0x120 [ 815.799592] __sys_sendmmsg+0x56b/0xa90 [ 815.803635] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 815.809162] ? prepare_exit_to_usermode+0x182/0x4c0 [ 815.814217] __se_sys_sendmmsg+0xbd/0xe0 [ 815.818315] __x64_sys_sendmmsg+0x56/0x70 [ 815.822496] do_syscall_64+0xcf/0x110 [ 815.826359] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.831581] RIP: 0033:0x457569 [ 815.834799] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.853804] RSP: 002b:00007f2cd66f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 815.861536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 815.868826] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 815.876107] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 815.883388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66f66d4 [ 815.890685] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 815.897991] Uninit was stored to memory at: [ 815.902336] kmsan_internal_chain_origin+0x136/0x240 [ 815.907458] __msan_chain_origin+0x6d/0xb0 [ 815.911711] __save_stack_trace+0x8be/0xc60 [ 815.916053] save_stack_trace+0xc6/0x110 [ 815.920130] kmsan_internal_chain_origin+0x136/0x240 [ 815.925251] kmsan_memcpy_origins+0x13d/0x190 [ 815.929760] __msan_memcpy+0x6f/0x80 [ 815.933493] pskb_expand_head+0x436/0x1d20 [ 815.937754] l2tp_xmit_skb+0x5a7/0x24b0 [ 815.941740] pppol2tp_sendmsg+0x79a/0xba0 [ 815.945902] ___sys_sendmsg+0xe3b/0x1240 [ 815.949975] __sys_sendmmsg+0x56b/0xa90 [ 815.953967] __se_sys_sendmmsg+0xbd/0xe0 [ 815.958040] __x64_sys_sendmmsg+0x56/0x70 [ 815.962202] do_syscall_64+0xcf/0x110 [ 815.966021] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 815.971211] [ 815.972847] Uninit was stored to memory at: [ 815.977189] kmsan_internal_chain_origin+0x136/0x240 [ 815.982315] __msan_chain_origin+0x6d/0xb0 [ 815.986582] __save_stack_trace+0x8be/0xc60 [ 815.990916] save_stack_trace+0xc6/0x110 [ 815.994997] kmsan_internal_chain_origin+0x136/0x240 [ 816.000121] kmsan_memcpy_origins+0x13d/0x190 [ 816.004647] __msan_memcpy+0x6f/0x80 [ 816.008380] pskb_expand_head+0x436/0x1d20 [ 816.012637] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.016624] pppol2tp_sendmsg+0x79a/0xba0 [ 816.020787] ___sys_sendmsg+0xe3b/0x1240 [ 816.024861] __sys_sendmmsg+0x56b/0xa90 [ 816.028855] __se_sys_sendmmsg+0xbd/0xe0 [ 816.032930] __x64_sys_sendmmsg+0x56/0x70 [ 816.037093] do_syscall_64+0xcf/0x110 [ 816.040912] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.046106] [ 816.047741] Uninit was stored to memory at: [ 816.052082] kmsan_internal_chain_origin+0x136/0x240 [ 816.057204] __msan_chain_origin+0x6d/0xb0 [ 816.061455] __save_stack_trace+0x8be/0xc60 [ 816.065790] save_stack_trace+0xc6/0x110 [ 816.069868] kmsan_internal_chain_origin+0x136/0x240 [ 816.074992] kmsan_memcpy_origins+0x13d/0x190 [ 816.079505] __msan_memcpy+0x6f/0x80 [ 816.083260] pskb_expand_head+0x436/0x1d20 [ 816.087517] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.091517] pppol2tp_sendmsg+0x79a/0xba0 [ 816.095694] ___sys_sendmsg+0xe3b/0x1240 [ 816.099770] __sys_sendmmsg+0x56b/0xa90 [ 816.103758] __se_sys_sendmmsg+0xbd/0xe0 [ 816.107833] __x64_sys_sendmmsg+0x56/0x70 [ 816.112002] do_syscall_64+0xcf/0x110 [ 816.115821] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.121012] [ 816.122648] Uninit was stored to memory at: [ 816.126988] kmsan_internal_chain_origin+0x136/0x240 [ 816.132109] __msan_chain_origin+0x6d/0xb0 [ 816.136361] __save_stack_trace+0x8be/0xc60 [ 816.140697] save_stack_trace+0xc6/0x110 [ 816.144774] kmsan_internal_chain_origin+0x136/0x240 [ 816.149891] kmsan_memcpy_origins+0x13d/0x190 [ 816.154435] __msan_memcpy+0x6f/0x80 [ 816.158164] pskb_expand_head+0x436/0x1d20 [ 816.162418] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.166404] pppol2tp_sendmsg+0x79a/0xba0 [ 816.170575] ___sys_sendmsg+0xe3b/0x1240 [ 816.174654] __sys_sendmmsg+0x56b/0xa90 [ 816.178642] __se_sys_sendmmsg+0xbd/0xe0 [ 816.182717] __x64_sys_sendmmsg+0x56/0x70 [ 816.186882] do_syscall_64+0xcf/0x110 [ 816.190702] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.195897] [ 816.197537] Uninit was stored to memory at: [ 816.201897] kmsan_internal_chain_origin+0x136/0x240 [ 816.207015] __msan_chain_origin+0x6d/0xb0 [ 816.211266] __save_stack_trace+0x8be/0xc60 [ 816.215601] save_stack_trace+0xc6/0x110 [ 816.219680] kmsan_internal_chain_origin+0x136/0x240 [ 816.224812] kmsan_memcpy_origins+0x13d/0x190 [ 816.229319] __msan_memcpy+0x6f/0x80 [ 816.233050] pskb_expand_head+0x436/0x1d20 [ 816.237304] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.241293] pppol2tp_sendmsg+0x79a/0xba0 [ 816.245457] ___sys_sendmsg+0xe3b/0x1240 [ 816.249545] __sys_sendmmsg+0x56b/0xa90 [ 816.253551] __se_sys_sendmmsg+0xbd/0xe0 [ 816.257629] __x64_sys_sendmmsg+0x56/0x70 [ 816.261793] do_syscall_64+0xcf/0x110 [ 816.265619] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.270815] [ 816.272464] Uninit was stored to memory at: [ 816.276804] kmsan_internal_chain_origin+0x136/0x240 [ 816.281923] __msan_chain_origin+0x6d/0xb0 [ 816.286175] __save_stack_trace+0x8be/0xc60 [ 816.290511] save_stack_trace+0xc6/0x110 [ 816.294602] kmsan_internal_chain_origin+0x136/0x240 [ 816.299721] kmsan_memcpy_origins+0x13d/0x190 [ 816.304252] __msan_memcpy+0x6f/0x80 [ 816.307986] pskb_expand_head+0x436/0x1d20 [ 816.312238] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.316225] pppol2tp_sendmsg+0x79a/0xba0 [ 816.320384] ___sys_sendmsg+0xe3b/0x1240 [ 816.324465] __sys_sendmmsg+0x56b/0xa90 [ 816.328452] __se_sys_sendmmsg+0xbd/0xe0 [ 816.332553] __x64_sys_sendmmsg+0x56/0x70 [ 816.336727] do_syscall_64+0xcf/0x110 [ 816.340555] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.345752] [ 816.347387] Uninit was stored to memory at: [ 816.351728] kmsan_internal_chain_origin+0x136/0x240 [ 816.356846] __msan_chain_origin+0x6d/0xb0 [ 816.361097] __save_stack_trace+0x8be/0xc60 [ 816.365909] save_stack_trace+0xc6/0x110 [ 816.369988] kmsan_internal_chain_origin+0x136/0x240 [ 816.375112] kmsan_memcpy_origins+0x13d/0x190 [ 816.379629] __msan_memcpy+0x6f/0x80 [ 816.383380] pskb_expand_head+0x436/0x1d20 17:13:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1d, 0x800, 0x100000000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r2, 0x20) ioctl$TIOCNXCL(r2, 0x540d) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r4, 0x14, &(0x7f0000000140)={0x8, 0x8}) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 816.387631] l2tp_xmit_skb+0x5a7/0x24b0 [ 816.391627] pppol2tp_sendmsg+0x79a/0xba0 [ 816.395794] ___sys_sendmsg+0xe3b/0x1240 [ 816.399867] __sys_sendmmsg+0x56b/0xa90 [ 816.403857] __se_sys_sendmmsg+0xbd/0xe0 [ 816.407931] __x64_sys_sendmmsg+0x56/0x70 [ 816.412113] do_syscall_64+0xcf/0x110 [ 816.415935] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.421125] [ 816.422780] Local variable description: ----iph@ip_vs_out [ 816.428333] Variable was created at: [ 816.432080] ip_vs_out+0x1bf/0x4570 [ 816.435729] ip_vs_local_reply6+0xec/0x130 [ 816.590080] can: request_module (can-proto-0) failed. [ 816.604732] netlink: get zone limit has 4 unknown bytes [ 816.667874] netlink: get zone limit has 4 unknown bytes [ 816.688177] can: request_module (can-proto-0) failed. 17:13:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@in={0x2, 0x4e24}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c965b7b9a701a9fae6c18fd7e9c2a41f06e002052af88f5a4dbad903697bbde97da1f9f132a91e4ef40578b65227e35e539550cc994a390dabb4a0bb1151a0a97418ae", 0x43}, {&(0x7f00000001c0)="2745cf52c73d9f20e7305f19d06dfe7997a353878e66f33b4047482e468bef1be681dc6f1a9049031e2e5393a4c65687d11ab13e866e177024b9cdd512b4db9ed28fe2e0d9ca86354c8bf19e99228c5cf5d7477555f27e1d6aa4bad3940a5bacc9479e303b82489f", 0x68}], 0x2, &(0x7f00000003c0)=[{0x78, 0x1ff, 0x2, "586bad7c9a4fd84c32801b14ca08dc1a018a71f6306651f3b471de13ab6411e3722a8f0454403ad8a7d29baed0e3a4407ccea61221050d599f928abb37afc006a0136302de62a26a6a7ee6869492f2fdf9f923db60e5feaa77d31d48216bcc3cd3e2"}, {0xd8, 0x113, 0x3, "cb03448a0e0a0d0ca2e970577e7faebc45d7199d99e1a19cad16df0ebe60b4ceb4f49e3acd02eec9bc189bb5f2c215a8c76efd1dcc60a903c306190cfd382959f0ac2fe2dac0ad593716fe3cfa0ae8434fc8edb3a7ea5f4102c717e29fb77429aadca9e8d7af1a7e627d62509e64b8f348a15665ecb6e54fa05a52b87725553b06eb1b434803472140812f9b2318cf39604f9fc391dafc8bbddf0424d7194f36875d7d8cdb495cb62ca121704160e66b74c8506c72f424fc6e3ebbc225fcf9ae0ecf"}, {0x1010, 0x102, 0x6, "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"}, {0x40, 0x102, 0x1000, "e45a6395dab9ccde4b7c714634e430c54574145c843ee952a837c3fe3df1f1ac88867e01fa42b1cb4267e2f8ff3793e0"}], 0x11a0, 0x800}, 0x80}], 0x1, 0x0) 17:13:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4(r0, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0x800, 0x7, 0x6}, 0x10) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) getsockopt$inet6_buf(r5, 0x29, 0xed, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r6, 0x3eb, 0x3, [0x0, 0x9, 0x6]}, 0xe) close(r4) close(r4) 17:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x3a, 0x0, 0x20, 0x80000001, 0x0, 0x0, 0x67}, 0x8) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x172, 0x2c40) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000000c0)={0x6, @output={0x1000, 0x0, {0x2, 0x7}, 0x1, 0x3}}) 17:13:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r3) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:13:56 executing program 3: r0 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)="1f362043dbac5d4626c43564b1b9262cfc06c0303dbe406e7b030074d0b8bc0ad7eda0e8b6d616316c07eedba2d1ce34ed040759a87785cda19a0fcdb39f096aac6a439db6", 0x45, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000240)='\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000380)={@loopback, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) bind$can_raw(r3, &(0x7f0000000400)={0x1d, r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000440)={{0x3a, 0x6}, 0x0, 0x200, 0x200, {0x3, 0x7}, 0x1, 0xde20}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa0002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x80000200000005) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000001f) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000320019010000000000000000030000e40c00000008000100000000003d5801062303d98f4f06b62b7ec2cfb566083e1f7e3118e7c102c0f009295b8d0963334589eaa4cf0000"], 0x20}}, 0x0) [ 817.063478] netlink: get zone limit has 4 unknown bytes [ 817.162627] netlink: get zone limit has 4 unknown bytes 17:13:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000240)={{0x7, 0xfff, 0xff, 0xcf67, 0xcb, 0xfff}, 0x7ff}) ftruncate(r3, 0x5) 17:13:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000403200190100000000fcdbdf251b0000000c0000000800010000000000"], 0x20}}, 0x0) 17:13:57 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:13:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000000c0)=""/85) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:13:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1803000000000095000200000000002cbb6b6d29007c849370f609e912edbafa046d7558fa5e82a75004a430250ccb1a01fc0698c463e904081e5310b2d9148ee8a36963555b7ec3cdf75ac095b058a3d7a7147f1882d24be0e7141412d457e4efa7f8f86adfc45ad70c6aea7dd0e9c4b04b79523b541d0931fd97aeab374639977bd5edd114835baddf1ea7593d11da20e2"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 817.896813] FAULT_INJECTION: forcing a failure. [ 817.896813] name failslab, interval 1, probability 0, space 0, times 0 [ 817.908359] CPU: 1 PID: 20527 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #85 [ 817.915701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.925109] Call Trace: [ 817.927797] dump_stack+0x32d/0x480 [ 817.931522] should_fail+0x11e5/0x13c0 [ 817.935586] __should_failslab+0x278/0x2a0 [ 817.939906] should_failslab+0x29/0x70 [ 817.943864] __kmalloc+0xcf/0x4d0 [ 817.947394] ? sctp_datamsg_from_user+0xfd/0x1e30 [ 817.952314] ? sctp_datamsg_from_user+0x96/0x1e30 [ 817.957241] sctp_datamsg_from_user+0xfd/0x1e30 [ 817.962008] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 817.967473] ? INIT_BOOL+0x17/0x30 [ 817.971121] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 817.971442] not chained 1520000 origins [ 817.976560] ? flex_array_get+0x2a0/0x360 [ 817.984738] sctp_sendmsg_to_asoc+0x992/0x2210 [ 817.989461] ? sctp_endpoint_lookup_assoc+0x16e/0x220 [ 817.994761] sctp_sendmsg+0x3fae/0x6820 [ 817.998825] ? rw_copy_check_uvector+0x308/0x770 [ 818.003701] ? sctp_getsockopt+0x186f0/0x186f0 [ 818.008344] inet_sendmsg+0x4e9/0x800 [ 818.012212] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 818.017634] ? memcmp+0xb3/0x180 [ 818.021072] ___sys_sendmsg+0xb47/0x1240 [ 818.025192] ? inet_getname+0x490/0x490 [ 818.029301] ? rcu_all_qs+0x3b/0x2b0 [ 818.033122] ? _cond_resched+0x59/0x120 [ 818.037203] ? rcu_all_qs+0x53/0x2b0 [ 818.041008] ? _cond_resched+0x37/0x120 [ 818.045073] ? __sys_sendmmsg+0x7c9/0xa90 [ 818.049285] ? _cond_resched+0x59/0x120 [ 818.053319] __sys_sendmmsg+0x56b/0xa90 [ 818.057425] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 818.062967] ? prepare_exit_to_usermode+0x182/0x4c0 [ 818.068056] __se_sys_sendmmsg+0xbd/0xe0 [ 818.072184] __x64_sys_sendmmsg+0x56/0x70 [ 818.076391] do_syscall_64+0xcf/0x110 [ 818.080263] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.085503] RIP: 0033:0x457569 [ 818.088767] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.107722] RSP: 002b:00007ff17dd8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.115500] RAX: ffffffffffffffda RBX: 00007ff17dd8bc90 RCX: 0000000000457569 [ 818.122832] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000003 [ 818.130147] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 818.137461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff17dd8c6d4 [ 818.144789] R13: 00000000004c37eb R14: 00000000004d59a0 R15: 0000000000000004 [ 818.152134] CPU: 0 PID: 20522 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 818.159426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.168814] Call Trace: [ 818.171439] dump_stack+0x32d/0x480 [ 818.175116] kmsan_internal_chain_origin+0x222/0x240 [ 818.180287] ? save_stack_trace+0xc6/0x110 [ 818.184572] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 818.189713] ? kmsan_internal_chain_origin+0x90/0x240 17:13:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:13:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0), 0x0, 0x100, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2000, 0x0) write$eventfd(r1, &(0x7f00000001c0)=0x4, 0x8) io_destroy(0x0) io_destroy(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 818.194954] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 818.200352] ? is_bpf_text_address+0x49e/0x4d0 [ 818.204973] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 818.210452] ? in_task_stack+0x12c/0x210 [ 818.214576] __msan_chain_origin+0x6d/0xb0 [ 818.218854] ? pskb_expand_head+0x436/0x1d20 [ 818.223294] __save_stack_trace+0x8be/0xc60 [ 818.227687] ? pskb_expand_head+0x436/0x1d20 [ 818.232136] save_stack_trace+0xc6/0x110 [ 818.236232] kmsan_internal_chain_origin+0x136/0x240 [ 818.241385] ? kmsan_internal_chain_origin+0x136/0x240 [ 818.246694] ? kmsan_memcpy_origins+0x13d/0x190 [ 818.251395] ? __msan_memcpy+0x6f/0x80 [ 818.255308] ? pskb_expand_head+0x436/0x1d20 [ 818.259745] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 818.263916] ? pppol2tp_sendmsg+0x79a/0xba0 [ 818.268261] ? ___sys_sendmsg+0xe3b/0x1240 [ 818.272519] ? __sys_sendmmsg+0x56b/0xa90 [ 818.276710] ? __se_sys_sendmmsg+0xbd/0xe0 [ 818.280967] ? __x64_sys_sendmmsg+0x56/0x70 [ 818.285314] ? do_syscall_64+0xcf/0x110 [ 818.289311] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.294705] ? __msan_poison_alloca+0x1e0/0x270 [ 818.299437] ? __msan_get_context_state+0x9/0x20 [ 818.304221] ? INIT_INT+0xc/0x30 [ 818.307612] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 818.313024] kmsan_memcpy_origins+0x13d/0x190 [ 818.317580] __msan_memcpy+0x6f/0x80 [ 818.321346] pskb_expand_head+0x436/0x1d20 [ 818.325654] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.329701] pppol2tp_sendmsg+0x79a/0xba0 [ 818.333912] ___sys_sendmsg+0xe3b/0x1240 [ 818.338003] ? pppol2tp_getsockopt+0x1060/0x1060 [ 818.342819] ? __msan_poison_alloca+0x1e0/0x270 17:13:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18b77a3ec800000000000000000000009500020000a870df"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 818.347510] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 818.352920] ? rcu_all_qs+0x3b/0x2b0 [ 818.356662] ? _cond_resched+0x59/0x120 [ 818.360670] ? rcu_all_qs+0x53/0x2b0 [ 818.364896] ? _cond_resched+0x37/0x120 [ 818.368899] ? __sys_sendmmsg+0x7c9/0xa90 [ 818.373083] ? _cond_resched+0x59/0x120 [ 818.377090] __sys_sendmmsg+0x56b/0xa90 [ 818.381134] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 818.386619] ? prepare_exit_to_usermode+0x182/0x4c0 [ 818.391687] __se_sys_sendmmsg+0xbd/0xe0 [ 818.395792] __x64_sys_sendmmsg+0x56/0x70 [ 818.399978] do_syscall_64+0xcf/0x110 [ 818.403815] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.409049] RIP: 0033:0x457569 [ 818.412269] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.431194] RSP: 002b:00007f2cd66f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.438940] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 818.446245] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 818.453561] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 818.460857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66f66d4 [ 818.468148] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 818.475455] Uninit was stored to memory at: [ 818.479808] kmsan_internal_chain_origin+0x136/0x240 [ 818.484967] __msan_chain_origin+0x6d/0xb0 [ 818.489262] __save_stack_trace+0x8be/0xc60 [ 818.493614] save_stack_trace+0xc6/0x110 [ 818.497910] kmsan_internal_chain_origin+0x136/0x240 [ 818.503771] kmsan_memcpy_origins+0x13d/0x190 [ 818.508310] __msan_memcpy+0x6f/0x80 [ 818.512047] pskb_expand_head+0x436/0x1d20 [ 818.516318] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.520325] pppol2tp_sendmsg+0x79a/0xba0 [ 818.524496] ___sys_sendmsg+0xe3b/0x1240 [ 818.528623] __sys_sendmmsg+0x56b/0xa90 [ 818.532627] __se_sys_sendmmsg+0xbd/0xe0 [ 818.536718] __x64_sys_sendmmsg+0x56/0x70 [ 818.540894] do_syscall_64+0xcf/0x110 [ 818.544723] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.549923] [ 818.551579] Uninit was stored to memory at: [ 818.555933] kmsan_internal_chain_origin+0x136/0x240 [ 818.561062] __msan_chain_origin+0x6d/0xb0 [ 818.565324] __save_stack_trace+0x8be/0xc60 [ 818.569676] save_stack_trace+0xc6/0x110 [ 818.573763] kmsan_internal_chain_origin+0x136/0x240 [ 818.578898] kmsan_memcpy_origins+0x13d/0x190 [ 818.583416] __msan_memcpy+0x6f/0x80 [ 818.587158] pskb_expand_head+0x436/0x1d20 [ 818.591421] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.595422] pppol2tp_sendmsg+0x79a/0xba0 [ 818.599599] ___sys_sendmsg+0xe3b/0x1240 [ 818.603691] __sys_sendmmsg+0x56b/0xa90 [ 818.607691] __se_sys_sendmmsg+0xbd/0xe0 [ 818.611777] __x64_sys_sendmmsg+0x56/0x70 [ 818.615952] do_syscall_64+0xcf/0x110 [ 818.619786] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.624982] [ 818.626622] Uninit was stored to memory at: [ 818.630974] kmsan_internal_chain_origin+0x136/0x240 [ 818.636124] __msan_chain_origin+0x6d/0xb0 [ 818.640387] __save_stack_trace+0x8be/0xc60 [ 818.644760] save_stack_trace+0xc6/0x110 17:13:58 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 818.648845] kmsan_internal_chain_origin+0x136/0x240 [ 818.653974] kmsan_memcpy_origins+0x13d/0x190 [ 818.658497] __msan_memcpy+0x6f/0x80 [ 818.662247] pskb_expand_head+0x436/0x1d20 [ 818.666509] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.670518] pppol2tp_sendmsg+0x79a/0xba0 [ 818.674707] ___sys_sendmsg+0xe3b/0x1240 [ 818.678809] __sys_sendmmsg+0x56b/0xa90 [ 818.682808] __se_sys_sendmmsg+0xbd/0xe0 [ 818.686900] __x64_sys_sendmmsg+0x56/0x70 [ 818.691087] do_syscall_64+0xcf/0x110 [ 818.694916] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.700143] [ 818.701784] Uninit was stored to memory at: [ 818.706135] kmsan_internal_chain_origin+0x136/0x240 [ 818.711267] __msan_chain_origin+0x6d/0xb0 [ 818.715533] __save_stack_trace+0x8be/0xc60 [ 818.719899] save_stack_trace+0xc6/0x110 [ 818.723993] kmsan_internal_chain_origin+0x136/0x240 [ 818.729131] kmsan_memcpy_origins+0x13d/0x190 [ 818.733648] __msan_memcpy+0x6f/0x80 [ 818.737391] pskb_expand_head+0x436/0x1d20 [ 818.741654] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.745658] pppol2tp_sendmsg+0x79a/0xba0 [ 818.749832] ___sys_sendmsg+0xe3b/0x1240 [ 818.753916] __sys_sendmmsg+0x56b/0xa90 [ 818.757916] __se_sys_sendmmsg+0xbd/0xe0 [ 818.762031] __x64_sys_sendmmsg+0x56/0x70 [ 818.766212] do_syscall_64+0xcf/0x110 [ 818.770060] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.775266] [ 818.776908] Uninit was stored to memory at: [ 818.781255] kmsan_internal_chain_origin+0x136/0x240 [ 818.786387] __msan_chain_origin+0x6d/0xb0 [ 818.790647] __save_stack_trace+0x8be/0xc60 [ 818.794996] save_stack_trace+0xc6/0x110 [ 818.799083] kmsan_internal_chain_origin+0x136/0x240 [ 818.804218] kmsan_memcpy_origins+0x13d/0x190 [ 818.808758] __msan_memcpy+0x6f/0x80 [ 818.812521] pskb_expand_head+0x436/0x1d20 [ 818.816812] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.820825] pppol2tp_sendmsg+0x79a/0xba0 [ 818.825005] ___sys_sendmsg+0xe3b/0x1240 [ 818.829085] __sys_sendmmsg+0x56b/0xa90 [ 818.833086] __se_sys_sendmmsg+0xbd/0xe0 [ 818.837175] __x64_sys_sendmmsg+0x56/0x70 [ 818.841352] do_syscall_64+0xcf/0x110 [ 818.845183] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.850387] [ 818.852032] Uninit was stored to memory at: [ 818.856378] kmsan_internal_chain_origin+0x136/0x240 [ 818.861514] __msan_chain_origin+0x6d/0xb0 [ 818.865794] __save_stack_trace+0x8be/0xc60 [ 818.870139] save_stack_trace+0xc6/0x110 [ 818.874228] kmsan_internal_chain_origin+0x136/0x240 [ 818.879355] kmsan_memcpy_origins+0x13d/0x190 [ 818.883878] __msan_memcpy+0x6f/0x80 [ 818.887621] pskb_expand_head+0x436/0x1d20 [ 818.891889] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.895886] pppol2tp_sendmsg+0x79a/0xba0 [ 818.900062] ___sys_sendmsg+0xe3b/0x1240 [ 818.904146] __sys_sendmmsg+0x56b/0xa90 [ 818.908144] __se_sys_sendmmsg+0xbd/0xe0 [ 818.912253] __x64_sys_sendmmsg+0x56/0x70 [ 818.916430] do_syscall_64+0xcf/0x110 [ 818.920288] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.925509] [ 818.927172] Uninit was stored to memory at: [ 818.931525] kmsan_internal_chain_origin+0x136/0x240 [ 818.936681] __msan_chain_origin+0x6d/0xb0 [ 818.940944] __save_stack_trace+0x8be/0xc60 [ 818.945297] save_stack_trace+0xc6/0x110 [ 818.949383] kmsan_internal_chain_origin+0x136/0x240 [ 818.954516] kmsan_memcpy_origins+0x13d/0x190 [ 818.959051] __msan_memcpy+0x6f/0x80 [ 818.962792] pskb_expand_head+0x436/0x1d20 [ 818.967056] l2tp_xmit_skb+0x5a7/0x24b0 [ 818.971058] pppol2tp_sendmsg+0x79a/0xba0 [ 818.975231] ___sys_sendmsg+0xe3b/0x1240 [ 818.979321] __sys_sendmmsg+0x56b/0xa90 [ 818.983325] __se_sys_sendmmsg+0xbd/0xe0 [ 818.987431] __x64_sys_sendmmsg+0x56/0x70 [ 818.991602] do_syscall_64+0xcf/0x110 [ 818.995433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.000635] [ 819.002279] Local variable description: ----iph@ip_vs_out [ 819.007824] Variable was created at: [ 819.011580] ip_vs_out+0x1bf/0x4570 [ 819.015236] ip_vs_local_reply6+0xec/0x130 [ 819.059996] FAULT_INJECTION: forcing a failure. [ 819.059996] name failslab, interval 1, probability 0, space 0, times 0 [ 819.071517] CPU: 0 PID: 20544 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #85 [ 819.078882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.088294] Call Trace: [ 819.090966] dump_stack+0x32d/0x480 [ 819.091795] netlink: get zone limit has 4 unknown bytes [ 819.094693] should_fail+0x11e5/0x13c0 [ 819.104048] __should_failslab+0x278/0x2a0 [ 819.108439] should_failslab+0x29/0x70 [ 819.112430] kmem_cache_alloc_node+0x164/0xec0 [ 819.117106] ? __alloc_skb+0x32e/0xeb0 [ 819.121083] ? __msan_poison_alloca+0x1e0/0x270 [ 819.125852] __alloc_skb+0x32e/0xeb0 [ 819.129671] _sctp_make_chunk+0xf0/0x570 [ 819.133821] ? sctp_make_ecne+0x7b0/0x820 [ 819.138036] sctp_make_datafrag_empty+0x1af/0x700 [ 819.142953] ? list_locations+0x260/0x17e0 [ 819.147264] ? pkcs7_validate_trust+0x442/0xe00 [ 819.152012] ? sctp_make_ecne+0x820/0x820 17:13:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x501, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xfffffffffffffffe) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x264) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/21, &(0x7f00000003c0)=0x15) [ 819.156248] sctp_datamsg_from_user+0x1134/0x1e30 [ 819.161189] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 819.166677] sctp_sendmsg_to_asoc+0x992/0x2210 [ 819.171433] ? sctp_endpoint_lookup_assoc+0x16e/0x220 [ 819.176755] sctp_sendmsg+0x3fae/0x6820 [ 819.180837] ? rw_copy_check_uvector+0x308/0x770 [ 819.185797] ? sctp_getsockopt+0x186f0/0x186f0 [ 819.190520] inet_sendmsg+0x4e9/0x800 [ 819.191384] netlink: get zone limit has 4 unknown bytes [ 819.194439] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 819.194490] ? memcmp+0xb3/0x180 [ 819.194567] ___sys_sendmsg+0xb47/0x1240 [ 819.194679] ? inet_getname+0x490/0x490 [ 819.216922] ? rcu_all_qs+0x3b/0x2b0 [ 819.220745] ? _cond_resched+0x59/0x120 [ 819.224843] ? rcu_all_qs+0x53/0x2b0 [ 819.228661] ? _cond_resched+0x37/0x120 [ 819.232731] ? __sys_sendmmsg+0x7c9/0xa90 [ 819.236961] ? _cond_resched+0x59/0x120 [ 819.241009] __sys_sendmmsg+0x56b/0xa90 [ 819.245129] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 819.250691] ? prepare_exit_to_usermode+0x182/0x4c0 [ 819.255793] __se_sys_sendmmsg+0xbd/0xe0 [ 819.259930] __x64_sys_sendmmsg+0x56/0x70 [ 819.264148] do_syscall_64+0xcf/0x110 [ 819.268030] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.273309] RIP: 0033:0x457569 [ 819.276588] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 819.295569] RSP: 002b:00007ff17dd8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.303354] RAX: ffffffffffffffda RBX: 00007ff17dd8bc90 RCX: 0000000000457569 [ 819.310683] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000003 [ 819.318013] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 819.325347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff17dd8c6d4 [ 819.332677] R13: 00000000004c37eb R14: 00000000004d59a0 R15: 0000000000000004 [ 819.536649] not chained 1530000 origins [ 819.540694] CPU: 1 PID: 20522 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 819.547984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.557352] Call Trace: [ 819.559976] dump_stack+0x32d/0x480 [ 819.563641] ? save_stack_trace+0xc6/0x110 [ 819.567911] kmsan_internal_chain_origin+0x222/0x240 [ 819.573060] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.578359] ? __msan_chain_origin+0x6d/0xb0 [ 819.582800] ? __save_stack_trace+0x833/0xc60 [ 819.587317] ? save_stack_trace+0xc6/0x110 [ 819.591584] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.596872] ? kmsan_memcpy_origins+0x13d/0x190 [ 819.601534] ? __msan_memcpy+0x6f/0x80 [ 819.605442] ? pskb_expand_head+0x436/0x1d20 [ 819.609843] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 819.613988] ? pppol2tp_sendmsg+0x79a/0xba0 [ 819.618321] ? ___sys_sendmsg+0xe3b/0x1240 [ 819.622559] ? __sys_sendmmsg+0x56b/0xa90 [ 819.626699] ? __se_sys_sendmmsg+0xbd/0xe0 [ 819.630927] ? __x64_sys_sendmmsg+0x56/0x70 [ 819.635243] ? do_syscall_64+0xcf/0x110 [ 819.639211] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.644577] ? save_stack_trace+0xc6/0x110 [ 819.648806] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 819.653909] ? kmsan_internal_chain_origin+0x1e3/0x240 [ 819.659189] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.664459] ? __msan_chain_origin+0x6d/0xb0 [ 819.668879] ? save_stack_trace+0xfa/0x110 [ 819.673108] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.678381] ? kmsan_memcpy_origins+0x13d/0x190 [ 819.683058] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 819.688503] ? in_task_stack+0x12c/0x210 [ 819.692592] __msan_chain_origin+0x6d/0xb0 [ 819.696845] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.702122] __save_stack_trace+0x8be/0xc60 [ 819.706475] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.711774] save_stack_trace+0xc6/0x110 [ 819.715856] kmsan_internal_chain_origin+0x136/0x240 [ 819.720963] ? kmsan_internal_chain_origin+0x136/0x240 [ 819.726235] ? kmsan_memcpy_origins+0x13d/0x190 [ 819.730897] ? __msan_memcpy+0x6f/0x80 [ 819.734781] ? pskb_expand_head+0x436/0x1d20 [ 819.739184] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 819.743326] ? pppol2tp_sendmsg+0x79a/0xba0 [ 819.747647] ? ___sys_sendmsg+0xe3b/0x1240 [ 819.751891] ? __sys_sendmmsg+0x56b/0xa90 [ 819.756055] ? __se_sys_sendmmsg+0xbd/0xe0 [ 819.760281] ? __x64_sys_sendmmsg+0x56/0x70 [ 819.764599] ? do_syscall_64+0xcf/0x110 [ 819.768576] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.773940] ? __msan_poison_alloca+0x1e0/0x270 [ 819.778626] ? __msan_get_context_state+0x9/0x20 [ 819.783377] ? INIT_INT+0xc/0x30 [ 819.786737] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 819.792109] kmsan_memcpy_origins+0x13d/0x190 [ 819.796612] __msan_memcpy+0x6f/0x80 [ 819.800340] pskb_expand_head+0x436/0x1d20 [ 819.804601] l2tp_xmit_skb+0x5a7/0x24b0 [ 819.808616] pppol2tp_sendmsg+0x79a/0xba0 [ 819.812784] ___sys_sendmsg+0xe3b/0x1240 [ 819.816840] ? pppol2tp_getsockopt+0x1060/0x1060 [ 819.821639] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 819.827036] ? kmsan_set_origin+0x7f/0x100 [ 819.831276] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 819.836650] ? _cond_resched+0xc7/0x120 [ 819.840622] __sys_sendmmsg+0x56b/0xa90 [ 819.844620] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 819.850068] ? prepare_exit_to_usermode+0x182/0x4c0 [ 819.855091] __se_sys_sendmmsg+0xbd/0xe0 [ 819.859155] __x64_sys_sendmmsg+0x56/0x70 [ 819.863298] do_syscall_64+0xcf/0x110 [ 819.867098] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 819.872291] RIP: 0033:0x457569 [ 819.875491] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 819.894387] RSP: 002b:00007f2cd66f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.902093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 819.909353] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 819.916614] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 819.923893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66f66d4 [ 819.931169] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 819.938443] Uninit was stored to memory at: [ 819.942763] kmsan_internal_chain_origin+0x136/0x240 [ 819.947860] __msan_chain_origin+0x6d/0xb0 [ 819.952088] __save_stack_trace+0x8be/0xc60 [ 819.956402] save_stack_trace+0xc6/0x110 [ 819.960457] kmsan_internal_chain_origin+0x136/0x240 [ 819.965562] kmsan_memcpy_origins+0x13d/0x190 [ 819.970062] __msan_memcpy+0x6f/0x80 [ 819.973774] pskb_expand_head+0x436/0x1d20 [ 819.978007] l2tp_xmit_skb+0x5a7/0x24b0 [ 819.981971] pppol2tp_sendmsg+0x79a/0xba0 [ 819.986113] ___sys_sendmsg+0xe3b/0x1240 [ 819.990167] __sys_sendmmsg+0x56b/0xa90 [ 819.994132] __se_sys_sendmmsg+0xbd/0xe0 [ 819.998187] __x64_sys_sendmmsg+0x56/0x70 [ 820.002345] do_syscall_64+0xcf/0x110 [ 820.006156] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.011327] [ 820.012943] Uninit was stored to memory at: [ 820.017256] kmsan_internal_chain_origin+0x136/0x240 [ 820.022355] __msan_chain_origin+0x6d/0xb0 [ 820.026586] __save_stack_trace+0x8be/0xc60 [ 820.030899] save_stack_trace+0xc6/0x110 [ 820.034953] kmsan_internal_chain_origin+0x136/0x240 [ 820.040050] kmsan_memcpy_origins+0x13d/0x190 [ 820.044544] __msan_memcpy+0x6f/0x80 [ 820.048272] pskb_expand_head+0x436/0x1d20 [ 820.052500] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.056466] pppol2tp_sendmsg+0x79a/0xba0 [ 820.060602] ___sys_sendmsg+0xe3b/0x1240 [ 820.064653] __sys_sendmmsg+0x56b/0xa90 [ 820.068616] __se_sys_sendmmsg+0xbd/0xe0 [ 820.072670] __x64_sys_sendmmsg+0x56/0x70 [ 820.076809] do_syscall_64+0xcf/0x110 [ 820.080602] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.085775] [ 820.087388] Uninit was stored to memory at: [ 820.091722] kmsan_internal_chain_origin+0x136/0x240 [ 820.096856] __msan_chain_origin+0x6d/0xb0 [ 820.101085] __save_stack_trace+0x8be/0xc60 [ 820.105399] save_stack_trace+0xc6/0x110 [ 820.109471] kmsan_internal_chain_origin+0x136/0x240 [ 820.114572] kmsan_memcpy_origins+0x13d/0x190 [ 820.119068] __msan_memcpy+0x6f/0x80 [ 820.122781] pskb_expand_head+0x436/0x1d20 [ 820.127012] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.130975] pppol2tp_sendmsg+0x79a/0xba0 [ 820.135115] ___sys_sendmsg+0xe3b/0x1240 [ 820.139167] __sys_sendmmsg+0x56b/0xa90 [ 820.143135] __se_sys_sendmmsg+0xbd/0xe0 [ 820.147188] __x64_sys_sendmmsg+0x56/0x70 [ 820.151355] do_syscall_64+0xcf/0x110 [ 820.155150] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.160323] [ 820.161938] Uninit was stored to memory at: [ 820.166252] kmsan_internal_chain_origin+0x136/0x240 [ 820.171347] __msan_chain_origin+0x6d/0xb0 [ 820.175576] __save_stack_trace+0x8be/0xc60 [ 820.179887] save_stack_trace+0xc6/0x110 [ 820.183941] kmsan_internal_chain_origin+0x136/0x240 [ 820.189037] kmsan_memcpy_origins+0x13d/0x190 [ 820.193543] __msan_memcpy+0x6f/0x80 [ 820.197256] pskb_expand_head+0x436/0x1d20 [ 820.201484] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.205451] pppol2tp_sendmsg+0x79a/0xba0 [ 820.209588] ___sys_sendmsg+0xe3b/0x1240 [ 820.213645] __sys_sendmmsg+0x56b/0xa90 [ 820.217608] __se_sys_sendmmsg+0xbd/0xe0 [ 820.221674] __x64_sys_sendmmsg+0x56/0x70 [ 820.225830] do_syscall_64+0xcf/0x110 [ 820.229627] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.234802] [ 820.236419] Uninit was stored to memory at: [ 820.240733] kmsan_internal_chain_origin+0x136/0x240 [ 820.245828] __msan_chain_origin+0x6d/0xb0 [ 820.250059] __save_stack_trace+0x8be/0xc60 [ 820.254372] save_stack_trace+0xc6/0x110 [ 820.258429] kmsan_internal_chain_origin+0x136/0x240 [ 820.263528] kmsan_memcpy_origins+0x13d/0x190 [ 820.268030] __msan_memcpy+0x6f/0x80 [ 820.271755] pskb_expand_head+0x436/0x1d20 [ 820.276003] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.279970] pppol2tp_sendmsg+0x79a/0xba0 [ 820.284110] ___sys_sendmsg+0xe3b/0x1240 [ 820.288165] __sys_sendmmsg+0x56b/0xa90 [ 820.292134] __se_sys_sendmmsg+0xbd/0xe0 [ 820.296184] __x64_sys_sendmmsg+0x56/0x70 [ 820.300344] do_syscall_64+0xcf/0x110 [ 820.304143] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.309321] [ 820.310932] Uninit was stored to memory at: [ 820.315263] kmsan_internal_chain_origin+0x136/0x240 [ 820.320372] __msan_chain_origin+0x6d/0xb0 [ 820.324604] __save_stack_trace+0x8be/0xc60 [ 820.328931] save_stack_trace+0xc6/0x110 [ 820.332985] kmsan_internal_chain_origin+0x136/0x240 [ 820.338078] kmsan_memcpy_origins+0x13d/0x190 [ 820.342574] __msan_memcpy+0x6f/0x80 [ 820.346279] pskb_expand_head+0x436/0x1d20 [ 820.350507] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.354472] pppol2tp_sendmsg+0x79a/0xba0 [ 820.358612] ___sys_sendmsg+0xe3b/0x1240 [ 820.362665] __sys_sendmmsg+0x56b/0xa90 [ 820.366869] __se_sys_sendmmsg+0xbd/0xe0 [ 820.370920] __x64_sys_sendmmsg+0x56/0x70 [ 820.375068] do_syscall_64+0xcf/0x110 [ 820.378883] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.384063] [ 820.385680] Uninit was stored to memory at: [ 820.390011] kmsan_internal_chain_origin+0x136/0x240 [ 820.395109] __msan_chain_origin+0x6d/0xb0 [ 820.399338] __save_stack_trace+0x8be/0xc60 [ 820.403657] save_stack_trace+0xc6/0x110 [ 820.407728] kmsan_internal_chain_origin+0x136/0x240 [ 820.412841] kmsan_memcpy_origins+0x13d/0x190 [ 820.417333] __msan_memcpy+0x6f/0x80 [ 820.421060] pskb_expand_head+0x436/0x1d20 [ 820.425309] l2tp_xmit_skb+0x5a7/0x24b0 [ 820.429276] pppol2tp_sendmsg+0x79a/0xba0 [ 820.433446] ___sys_sendmsg+0xe3b/0x1240 17:14:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 820.437499] __sys_sendmmsg+0x56b/0xa90 [ 820.441477] __se_sys_sendmmsg+0xbd/0xe0 [ 820.445531] __x64_sys_sendmmsg+0x56/0x70 [ 820.449684] do_syscall_64+0xcf/0x110 [ 820.453481] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 820.458655] [ 820.460270] Local variable description: ----iph@ip_vs_out [ 820.465791] Variable was created at: [ 820.469510] ip_vs_out+0x1bf/0x4570 [ 820.473137] ip_vs_local_reply6+0xec/0x130 [ 820.647823] netlink: get zone limit has 4 unknown bytes [ 820.691430] netlink: get zone limit has 4 unknown bytes 17:14:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x40000, 0x0) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x609fb4db, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x3, @mcast1, 0xb62}}}, 0x32) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7fff) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:00 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 17:14:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) 17:14:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x4, 0xffffffff, 0x0, &(0x7f0000000100)}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:01 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x288, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000001c0)=""/163) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="c4a85af268efa3c59c69667e9d4d7b276aea377c4e11bf84e1471d9d5c6b5a7592bf1a5b16e3ccb7a112714ce2f2570b8d15aeb6bad7e2ba85aae1cd0148d353a0084da61a9e7b5f8aaee5bd24f2785fe43825e4c54405227f075b6ed2114989fda1a28a1bf0819de7db7dfde1d1a51526829bb183", 0x75) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:01 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:14:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 821.424937] netlink: get zone limit has 4 unknown bytes [ 821.450372] netlink: get zone limit has 4 unknown bytes 17:14:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x735, 0x9, 0x2) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x3000)=nil, 0x3000}) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000640)={"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"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r2}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:01 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 821.987230] netlink: get zone limit has 4 unknown bytes 17:14:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 822.287285] netlink: get zone limit has 4 unknown bytes 17:14:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e1e}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0x250}], 0x1000000000000224, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x6, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01040040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:14:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x7, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400002, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0xffffffffffffffff, &(0x7f0000000140)) 17:14:02 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x5c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x3ff, @local, 0x4}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @rand_addr=0xdf09}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0xfff}, &(0x7f0000000300)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:14:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 822.717871] netlink: get zone limit has 4 unknown bytes 17:14:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x84442) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x24) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x7fffffff, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={@empty, @multicast2, 0x0}, &(0x7f0000000280)=0xc) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x101) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82100200}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=@deltclass={0xd0, 0x29, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, r1, {0xffff, 0xffff}, {0xfff9, 0xb}, {0x8, 0xfff3}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x68, 0x2, [@TCA_ATM_HDR={0x28, 0x3, "c3ebd7d47aa34581817f9a346898fd1757375062ce9fd7fbe91eb37770d52082ca0f6b70"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x24, 0x3, "a6518ae775798cadafa9f4638da64b21c066dca129ec661d798b856a3b47"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xffff}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xd}}]}}, @TCA_RATE={0x8, 0x5, {0x7, 0x10000}}, @TCA_RATE={0x8, 0x5, {0x101, 0x10000}}, @TCA_RATE={0x8, 0x5, {0x2, 0x6}}, @TCA_RATE={0x8, 0x5, {0x0, 0x1}}, @TCA_RATE={0x8, 0x5, {0x78, 0x3}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfffffffffffff800}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r3, r4}) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000640)={0xf, @output={0x0, 0x1, {0x1, 0x1aec}, 0x11, 0x4}}) sendmsg(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 823.084782] netlink: get zone limit has 4 unknown bytes 17:14:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) r3 = memfd_create(&(0x7f0000000040)='cgroupproc\x00', 0x4) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0x81, 0x5, 0x1000000000, 0x81}) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000aae7f30d463c310da6e831000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 823.957765] not chained 1540000 origins [ 823.961809] CPU: 0 PID: 20678 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #85 [ 823.969104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.978476] Call Trace: [ 823.981116] dump_stack+0x32d/0x480 [ 823.984819] kmsan_internal_chain_origin+0x222/0x240 [ 823.990002] ? save_stack_trace+0xc6/0x110 [ 823.994285] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 823.999426] ? kmsan_internal_chain_origin+0x90/0x240 [ 824.004666] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 824.010066] ? is_bpf_text_address+0x49e/0x4d0 [ 824.014695] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 824.020176] ? in_task_stack+0x12c/0x210 [ 824.024288] __msan_chain_origin+0x6d/0xb0 [ 824.028582] ? __inet_stream_connect+0xdff/0x15d0 [ 824.033464] __save_stack_trace+0x8be/0xc60 [ 824.037858] ? __inet_stream_connect+0xdff/0x15d0 [ 824.042742] save_stack_trace+0xc6/0x110 [ 824.046850] kmsan_internal_chain_origin+0x136/0x240 [ 824.051999] ? kmsan_internal_chain_origin+0x136/0x240 [ 824.057303] ? kmsan_memcpy_origins+0x13d/0x190 [ 824.062001] ? __msan_memcpy+0x6f/0x80 [ 824.065915] ? skb_copy_bits+0x1d2/0xc90 [ 824.070001] ? skb_copy+0x56c/0xba0 [ 824.073656] ? tcp_send_synack+0x7a3/0x18f0 [ 824.078006] ? tcp_rcv_state_process+0x275d/0x6c60 [ 824.082963] ? tcp_v4_do_rcv+0xb25/0xd80 [ 824.087051] ? __release_sock+0x32d/0x750 [ 824.091219] ? release_sock+0x99/0x2a0 [ 824.095151] ? __inet_stream_connect+0xdff/0x15d0 [ 824.100018] ? inet_stream_connect+0xff/0x170 [ 824.104536] ? __sys_connect+0x745/0x860 [ 824.108642] ? __se_sys_connect+0x8d/0xb0 [ 824.112817] ? __x64_sys_connect+0x4a/0x70 [ 824.117082] ? do_syscall_64+0xcf/0x110 [ 824.121085] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.126511] ? __msan_get_context_state+0x9/0x20 [ 824.131327] ? INIT_INT+0xc/0x30 [ 824.134725] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 824.140127] ? __msan_get_context_state+0x9/0x20 [ 824.144942] kmsan_memcpy_origins+0x13d/0x190 [ 824.149491] __msan_memcpy+0x6f/0x80 [ 824.153254] skb_copy_bits+0x1d2/0xc90 [ 824.157226] skb_copy+0x56c/0xba0 [ 824.160754] tcp_send_synack+0x7a3/0x18f0 [ 824.164944] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 824.170493] tcp_rcv_state_process+0x275d/0x6c60 [ 824.175430] tcp_v4_do_rcv+0xb25/0xd80 [ 824.179364] ? inet_sk_rx_dst_set+0x200/0x200 [ 824.183895] __release_sock+0x32d/0x750 [ 824.187924] release_sock+0x99/0x2a0 [ 824.191697] __inet_stream_connect+0xdff/0x15d0 [ 824.196424] ? wait_woken+0x5b0/0x5b0 [ 824.200271] inet_stream_connect+0xff/0x170 [ 824.204637] ? __inet_stream_connect+0x15d0/0x15d0 [ 824.209603] __sys_connect+0x745/0x860 [ 824.213541] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 824.219051] ? prepare_exit_to_usermode+0x182/0x4c0 [ 824.224119] __se_sys_connect+0x8d/0xb0 [ 824.228125] __x64_sys_connect+0x4a/0x70 [ 824.232211] do_syscall_64+0xcf/0x110 [ 824.236075] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.241283] RIP: 0033:0x457569 [ 824.244498] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.263416] RSP: 002b:00007fdfbbe3ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 824.271141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 824.278427] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 824.285715] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 824.292997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfbbe3b6d4 [ 824.300280] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 824.307594] Uninit was stored to memory at: [ 824.311938] kmsan_internal_chain_origin+0x136/0x240 [ 824.317056] __msan_chain_origin+0x6d/0xb0 [ 824.321312] __save_stack_trace+0x8be/0xc60 [ 824.325651] save_stack_trace+0xc6/0x110 [ 824.329735] kmsan_internal_chain_origin+0x136/0x240 [ 824.334857] kmsan_memcpy_origins+0x13d/0x190 [ 824.339369] __msan_memcpy+0x6f/0x80 [ 824.343101] skb_copy_bits+0x1d2/0xc90 [ 824.347005] skb_copy+0x56c/0xba0 [ 824.350473] tcp_send_synack+0x7a3/0x18f0 [ 824.354636] tcp_rcv_state_process+0x275d/0x6c60 [ 824.359405] tcp_v4_do_rcv+0xb25/0xd80 [ 824.363309] __release_sock+0x32d/0x750 [ 824.367588] release_sock+0x99/0x2a0 [ 824.371322] __inet_stream_connect+0xdff/0x15d0 [ 824.376012] inet_stream_connect+0xff/0x170 [ 824.380350] __sys_connect+0x745/0x860 [ 824.384253] __se_sys_connect+0x8d/0xb0 [ 824.388236] __x64_sys_connect+0x4a/0x70 [ 824.392339] do_syscall_64+0xcf/0x110 [ 824.396161] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.401356] [ 824.402989] Uninit was stored to memory at: [ 824.407329] kmsan_internal_chain_origin+0x136/0x240 [ 824.412450] __msan_chain_origin+0x6d/0xb0 [ 824.416708] __save_stack_trace+0x8be/0xc60 [ 824.421046] save_stack_trace+0xc6/0x110 [ 824.425144] kmsan_internal_chain_origin+0x136/0x240 [ 824.430278] kmsan_memcpy_origins+0x13d/0x190 [ 824.434789] __msan_memcpy+0x6f/0x80 [ 824.438521] skb_copy_bits+0x1d2/0xc90 [ 824.442443] skb_copy+0x56c/0xba0 [ 824.445909] tcp_send_synack+0x7a3/0x18f0 [ 824.450106] tcp_rcv_state_process+0x275d/0x6c60 [ 824.454875] tcp_v4_do_rcv+0xb25/0xd80 [ 824.458779] __release_sock+0x32d/0x750 [ 824.462779] release_sock+0x99/0x2a0 [ 824.466513] __inet_stream_connect+0xdff/0x15d0 [ 824.471208] inet_stream_connect+0xff/0x170 [ 824.475541] __sys_connect+0x745/0x860 [ 824.479462] __se_sys_connect+0x8d/0xb0 [ 824.483447] __x64_sys_connect+0x4a/0x70 [ 824.487563] do_syscall_64+0xcf/0x110 [ 824.491394] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.496733] [ 824.498366] Uninit was stored to memory at: [ 824.502710] kmsan_internal_chain_origin+0x136/0x240 [ 824.507829] __msan_chain_origin+0x6d/0xb0 [ 824.512080] __save_stack_trace+0x8be/0xc60 [ 824.516416] save_stack_trace+0xc6/0x110 [ 824.520497] kmsan_internal_chain_origin+0x136/0x240 [ 824.525618] kmsan_memcpy_origins+0x13d/0x190 [ 824.530131] __msan_memcpy+0x6f/0x80 [ 824.533865] skb_copy_bits+0x1d2/0xc90 [ 824.537770] skb_copy+0x56c/0xba0 [ 824.541237] tcp_send_synack+0x7a3/0x18f0 [ 824.545399] tcp_rcv_state_process+0x275d/0x6c60 [ 824.550172] tcp_v4_do_rcv+0xb25/0xd80 [ 824.554079] __release_sock+0x32d/0x750 [ 824.558068] release_sock+0x99/0x2a0 [ 824.561808] __inet_stream_connect+0xdff/0x15d0 [ 824.566491] inet_stream_connect+0xff/0x170 [ 824.570824] __sys_connect+0x745/0x860 [ 824.574723] __se_sys_connect+0x8d/0xb0 [ 824.578712] __x64_sys_connect+0x4a/0x70 [ 824.582787] do_syscall_64+0xcf/0x110 [ 824.586607] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.591802] [ 824.593437] Uninit was stored to memory at: [ 824.597777] kmsan_internal_chain_origin+0x136/0x240 [ 824.602901] __msan_chain_origin+0x6d/0xb0 [ 824.607153] __save_stack_trace+0x8be/0xc60 [ 824.611488] save_stack_trace+0xc6/0x110 [ 824.615576] kmsan_internal_chain_origin+0x136/0x240 [ 824.620698] kmsan_memcpy_origins+0x13d/0x190 [ 824.625215] __msan_memcpy+0x6f/0x80 [ 824.628948] skb_copy_bits+0x1d2/0xc90 [ 824.632864] skb_copy+0x56c/0xba0 [ 824.636334] tcp_send_synack+0x7a3/0x18f0 [ 824.640498] tcp_rcv_state_process+0x275d/0x6c60 [ 824.645274] tcp_v4_do_rcv+0xb25/0xd80 [ 824.649175] __release_sock+0x32d/0x750 [ 824.653167] release_sock+0x99/0x2a0 [ 824.656899] __inet_stream_connect+0xdff/0x15d0 [ 824.661597] inet_stream_connect+0xff/0x170 [ 824.665958] __sys_connect+0x745/0x860 [ 824.669871] __se_sys_connect+0x8d/0xb0 [ 824.673857] __x64_sys_connect+0x4a/0x70 [ 824.677937] do_syscall_64+0xcf/0x110 [ 824.681760] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.686961] [ 824.688593] Uninit was stored to memory at: [ 824.692937] kmsan_internal_chain_origin+0x136/0x240 [ 824.698057] __msan_chain_origin+0x6d/0xb0 [ 824.702307] __save_stack_trace+0x8be/0xc60 [ 824.706649] save_stack_trace+0xc6/0x110 [ 824.710731] kmsan_internal_chain_origin+0x136/0x240 [ 824.715852] kmsan_memcpy_origins+0x13d/0x190 [ 824.720361] __msan_memcpy+0x6f/0x80 [ 824.724095] skb_copy_bits+0x1d2/0xc90 [ 824.727998] skb_copy+0x56c/0xba0 [ 824.731468] tcp_send_synack+0x7a3/0x18f0 [ 824.735630] tcp_rcv_state_process+0x275d/0x6c60 [ 824.740401] tcp_v4_do_rcv+0xb25/0xd80 [ 824.744305] __release_sock+0x32d/0x750 [ 824.748299] release_sock+0x99/0x2a0 [ 824.752033] __inet_stream_connect+0xdff/0x15d0 [ 824.756724] inet_stream_connect+0xff/0x170 [ 824.761056] __sys_connect+0x745/0x860 [ 824.764960] __se_sys_connect+0x8d/0xb0 [ 824.768946] __x64_sys_connect+0x4a/0x70 [ 824.773022] do_syscall_64+0xcf/0x110 [ 824.776842] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.782032] [ 824.783664] Uninit was stored to memory at: [ 824.788008] kmsan_internal_chain_origin+0x136/0x240 [ 824.793129] __msan_chain_origin+0x6d/0xb0 [ 824.797378] __save_stack_trace+0x8be/0xc60 [ 824.801718] save_stack_trace+0xc6/0x110 [ 824.805797] kmsan_internal_chain_origin+0x136/0x240 [ 824.810917] kmsan_memcpy_origins+0x13d/0x190 [ 824.815426] __msan_memcpy+0x6f/0x80 [ 824.819156] skb_copy_bits+0x1d2/0xc90 [ 824.823065] skb_copy+0x56c/0xba0 [ 824.826536] tcp_send_synack+0x7a3/0x18f0 [ 824.830709] tcp_rcv_state_process+0x275d/0x6c60 [ 824.835479] tcp_v4_do_rcv+0xb25/0xd80 [ 824.839380] __release_sock+0x32d/0x750 [ 824.843368] release_sock+0x99/0x2a0 [ 824.847097] __inet_stream_connect+0xdff/0x15d0 [ 824.851781] inet_stream_connect+0xff/0x170 [ 824.856118] __sys_connect+0x745/0x860 [ 824.860015] __se_sys_connect+0x8d/0xb0 [ 824.864005] __x64_sys_connect+0x4a/0x70 [ 824.868087] do_syscall_64+0xcf/0x110 [ 824.871910] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.877104] [ 824.878739] Uninit was stored to memory at: [ 824.883082] kmsan_internal_chain_origin+0x136/0x240 [ 824.888200] __msan_chain_origin+0x6d/0xb0 [ 824.892450] __save_stack_trace+0x8be/0xc60 [ 824.896787] save_stack_trace+0xc6/0x110 [ 824.900868] kmsan_internal_chain_origin+0x136/0x240 [ 824.905989] kmsan_memcpy_origins+0x13d/0x190 [ 824.910502] __msan_memcpy+0x6f/0x80 [ 824.914237] skb_copy_bits+0x1d2/0xc90 [ 824.918153] skb_copy+0x56c/0xba0 [ 824.921635] tcp_send_synack+0x7a3/0x18f0 [ 824.925799] tcp_rcv_state_process+0x275d/0x6c60 [ 824.930584] tcp_v4_do_rcv+0xb25/0xd80 [ 824.934509] __release_sock+0x32d/0x750 [ 824.938514] release_sock+0x99/0x2a0 [ 824.942270] __inet_stream_connect+0xdff/0x15d0 [ 824.946956] inet_stream_connect+0xff/0x170 [ 824.951298] __sys_connect+0x745/0x860 [ 824.955201] __se_sys_connect+0x8d/0xb0 [ 824.959186] __x64_sys_connect+0x4a/0x70 [ 824.963261] do_syscall_64+0xcf/0x110 [ 824.967078] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 824.972271] [ 824.973908] Local variable description: ----_tcph.i@ip_vs_in [ 824.979707] Variable was created at: [ 824.983434] ip_vs_in+0xe9/0x3250 [ 824.986902] ip_vs_local_request4+0xec/0x130 17:14:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000009d000000020000000000410200000000000000004c30fbbe599c6fd0bf23bd39a1f9076c256a22edc7e0ce6e15", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) semget$private(0x0, 0x0, 0x4) 17:14:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x8000006}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r4, 0x808, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x8, 0x0, 0x7, 0x2, 0x0, 0xffffffffffff893b}) 17:14:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000200)="a5598d822d2b7b31c9eb286a141949f4b44cea3b43cb666a63d83ac028c99f0d36125fb815e1afe671c4008bb57359ce962967cadbaaa5ba96e8c3d34af1b9a526") ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000280)) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2000, 0x0) connect$l2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0xffffffffffffff58) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000080), 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x100000001}}, 0x18) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000000c0)=0x631bc5df, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x0, 0x0) 17:14:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000000000000950002000000000013553305d4b1ed233cda9c281c71a5de2108384f77637304101df7d1efd130b79219d2ac6c01e60f305c8db5b88f1bea943003d7e4526445bbd0bbdc01e921"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xb5) [ 825.672886] net_ratelimit: 2 callbacks suppressed [ 825.673000] netlink: get zone limit has 4 unknown bytes [ 825.752669] netlink: get zone limit has 4 unknown bytes 17:14:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:14:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x10000, 0x80c, &(0x7f0000ff0000/0x10000)=nil) shmctl$SHM_LOCK(r2, 0xb) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000320019010000000000000000030000000c0000000800010000000000f1276e75bf67f0fec4ad27c86629374a"], 0x20}}, 0x0) 17:14:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 826.403492] netlink: get zone limit has 4 unknown bytes 17:14:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xba, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) 17:14:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x80) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000040)={0x3ff, 0x5, 0xa1c, 0x81, 0x2, 0xfffffffffffffffa}) close(r1) 17:14:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x204040, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000320019010000000000001d00030000000c0000000800010000000000"], 0x20}}, 0x0) 17:14:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000001000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000001240)={0x0, 0x989680}) recvfrom(r1, &(0x7f0000000040)=""/4096, 0xfffffffffffffff7, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)={'#! ', './file0', [], 0xa, "4fe781e5aeee2dad4fa888d28235aa3578e21d32bb0cf128cdfcabb0b4287827085fb74fdefaa022ca37aafe83eddf21865f744e59669d8e3c9c060e62a78f297b9296dbe85fb9a2bbbbac3ac399c720f4f62e62e26886a5d12a544cd4bbafb26d1eab8896dee638ca57ddbb7e1aab200a274e9b511bca"}, 0x82) sendto$inet(r1, &(0x7f0000001140)=',', 0x1, 0x0, &(0x7f0000001280)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r2}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 826.993109] netlink: get zone limit has 4 unknown bytes 17:14:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x9, 0x80) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000320019010000000000000001030000000c00000008f126278000003ad67d8bd7a13b5d0086b02c9e55b376deaf4b616d0f34310a750a5f2f8cbd18708e047d9d17d3d54fc65249f4d3dfee3b8f97cacd77e2df6bde12a7c3dcc7a14e0e71e95e00e4ed35f34c3809df1faa7e"], 0x20}}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="4a5913e5cd7c5b", 0x7}], 0x1, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000340), 0x4) 17:14:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3ff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, &(0x7f00000014c0)=""/83, 0x53, 0x1f}, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001580)='tls\x00', 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) accept$inet(r2, &(0x7f00000015c0), &(0x7f0000001600)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {0x4}, {}, 0x8e, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 827.442405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 17:14:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5b, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xbc, 0x32, 0x119, 0x70bd25, 0x0, {0x1803}, [@generic="8958bba12024c3883eb5482765993c6b35a83dcd0bf47ebd46e3d33c35aba3614fa17bb0b545fe1853a020d52160e2ee420db9671cb99e2201b632d4b50459023500ac56d1f6f906a5fd38e4611538d75117b4982c77be19eaef9b12f1bdcde9fbd6dba6499f762c4d21ff1cf5e0266c8efce8d96f8137c2687bc66d25333587c1343f71df8f551ea498d883121cfb816551cc469bbfe89addf431914562d8a604dba1a767873077"]}, 0xbc}}, 0x0) 17:14:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 827.811520] netlink: 164 bytes leftover after parsing attributes in process `syz-executor3'. [ 827.845592] netlink: 164 bytes leftover after parsing attributes in process `syz-executor3'. 17:14:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="200000000000000084000000020000000000410200d3570000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 17:14:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:08 executing program 3: pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x204000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8001, 0x4, 0x0, 0x2, 0xdc, 0xcb, 0x1, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) 17:14:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xfffffffffffff1c2, 0x8, '9P2000.L'}, 0x15) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x264, 0x0) 17:14:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 828.236953] netlink: get zone limit has 4 unknown bytes [ 828.325013] netlink: get zone limit has 4 unknown bytes 17:14:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000320019010000000000000000030000000c0000000800010000000000428983efe4a273f0e882de1bdf68c941739ebff9a978a71c478211c7391903031c3c159f0ae650a9bd6f1b97f1ebcc66ded7376089bd1b218e20d0e7f9d8b755503c0fb69bb83bed7b8b16d0a6edef3aecc50ccc6e43f36fcc29a78517d75a17072f34164665465286324df5677670c5e9adb8936855f4fdeeaf6caa8995541267bde5fc865be1d6a54d15eced158d3e3d2208b522d6e5384ea63590745ba42056043f5d5e5d5820e404d217d854961f15de620478822d9b7028879ab2dc4464781a56a0cdd1a541c0b906dc240b743fc1bc19851a0069"], 0x20}}, 0x0) [ 828.759672] netlink: get zone limit has 4 unknown bytes 17:14:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x0, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) tgkill(r3, r4, 0x25) 17:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0xf9d, 0x6, 0x2, 0xf3, 0x8, 0x8, 0x1, 0x0, r3}, &(0x7f0000000040)=0x20) finit_module(r0, &(0x7f00000000c0)='])cgroupvmnet0,cgroup)\x00', 0x1) close(r1) 17:14:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 829.009300] not chained 1550000 origins [ 829.013350] CPU: 1 PID: 20821 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #85 [ 829.020639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.030006] Call Trace: [ 829.032632] dump_stack+0x32d/0x480 [ 829.036317] kmsan_internal_chain_origin+0x222/0x240 [ 829.041489] ? save_stack_trace+0xc6/0x110 [ 829.045766] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 829.050920] ? kmsan_internal_chain_origin+0x90/0x240 [ 829.056172] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 829.061578] ? is_bpf_text_address+0x49e/0x4d0 [ 829.066205] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 829.071692] ? in_task_stack+0x12c/0x210 [ 829.075812] __msan_chain_origin+0x6d/0xb0 [ 829.080096] ? skb_copy+0x56c/0xba0 [ 829.083784] __save_stack_trace+0x8be/0xc60 [ 829.088178] ? skb_copy+0x56c/0xba0 [ 829.091844] save_stack_trace+0xc6/0x110 [ 829.095949] kmsan_internal_chain_origin+0x136/0x240 [ 829.101109] ? kmsan_internal_chain_origin+0x136/0x240 [ 829.106415] ? kmsan_memcpy_origins+0x13d/0x190 [ 829.111111] ? __msan_memcpy+0x6f/0x80 [ 829.115033] ? skb_copy_bits+0x1d2/0xc90 [ 829.119131] ? skb_copy+0x56c/0xba0 [ 829.122791] ? tcp_send_synack+0x7a3/0x18f0 [ 829.127147] ? tcp_rcv_state_process+0x275d/0x6c60 [ 829.132109] ? tcp_v4_do_rcv+0xb25/0xd80 [ 829.136204] ? __release_sock+0x32d/0x750 [ 829.140385] ? release_sock+0x99/0x2a0 [ 829.144316] ? __inet_stream_connect+0xdff/0x15d0 [ 829.149193] ? inet_stream_connect+0xff/0x170 [ 829.153715] ? __sys_connect+0x745/0x860 [ 829.157803] ? __se_sys_connect+0x8d/0xb0 [ 829.161995] ? __x64_sys_connect+0x4a/0x70 [ 829.166259] ? do_syscall_64+0xcf/0x110 [ 829.170274] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.175712] ? __msan_get_context_state+0x9/0x20 [ 829.180502] ? INIT_INT+0xc/0x30 [ 829.183903] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 829.189304] ? __msan_get_context_state+0x9/0x20 [ 829.194135] kmsan_memcpy_origins+0x13d/0x190 [ 829.198699] __msan_memcpy+0x6f/0x80 [ 829.202461] skb_copy_bits+0x1d2/0xc90 [ 829.206437] skb_copy+0x56c/0xba0 [ 829.209965] tcp_send_synack+0x7a3/0x18f0 [ 829.214185] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 829.219699] tcp_rcv_state_process+0x275d/0x6c60 [ 829.224544] tcp_v4_do_rcv+0xb25/0xd80 [ 829.228495] ? inet_sk_rx_dst_set+0x200/0x200 [ 829.233030] __release_sock+0x32d/0x750 [ 829.237080] release_sock+0x99/0x2a0 [ 829.240841] __inet_stream_connect+0xdff/0x15d0 [ 829.245584] ? wait_woken+0x5b0/0x5b0 [ 829.249430] inet_stream_connect+0xff/0x170 [ 829.253796] ? __inet_stream_connect+0x15d0/0x15d0 [ 829.258757] __sys_connect+0x745/0x860 [ 829.262703] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 829.268293] ? prepare_exit_to_usermode+0x182/0x4c0 [ 829.273368] __se_sys_connect+0x8d/0xb0 [ 829.277387] __x64_sys_connect+0x4a/0x70 [ 829.281488] do_syscall_64+0xcf/0x110 [ 829.285332] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.290562] RIP: 0033:0x457569 [ 829.293785] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.312710] RSP: 002b:00007fdfbbe3ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 829.320444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 829.327749] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 829.335049] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 829.342361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfbbe3b6d4 [ 829.349655] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 829.356967] Uninit was stored to memory at: [ 829.361326] kmsan_internal_chain_origin+0x136/0x240 [ 829.366458] __msan_chain_origin+0x6d/0xb0 [ 829.370717] __save_stack_trace+0x8be/0xc60 [ 829.375068] save_stack_trace+0xc6/0x110 [ 829.379157] kmsan_internal_chain_origin+0x136/0x240 [ 829.384286] kmsan_memcpy_origins+0x13d/0x190 [ 829.388801] __msan_memcpy+0x6f/0x80 [ 829.392542] skb_copy_bits+0x1d2/0xc90 [ 829.396463] skb_copy+0x56c/0xba0 [ 829.399935] tcp_send_synack+0x7a3/0x18f0 [ 829.404112] tcp_rcv_state_process+0x275d/0x6c60 [ 829.408886] tcp_v4_do_rcv+0xb25/0xd80 [ 829.412797] __release_sock+0x32d/0x750 [ 829.416791] release_sock+0x99/0x2a0 [ 829.420530] __inet_stream_connect+0xdff/0x15d0 [ 829.425490] inet_stream_connect+0xff/0x170 [ 829.429829] __sys_connect+0x745/0x860 [ 829.433737] __se_sys_connect+0x8d/0xb0 [ 829.437736] __x64_sys_connect+0x4a/0x70 [ 829.441822] do_syscall_64+0xcf/0x110 [ 829.445651] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.450844] [ 829.452485] Uninit was stored to memory at: [ 829.456828] kmsan_internal_chain_origin+0x136/0x240 [ 829.461956] __msan_chain_origin+0x6d/0xb0 [ 829.466213] __save_stack_trace+0x8be/0xc60 [ 829.470568] save_stack_trace+0xc6/0x110 [ 829.474653] kmsan_internal_chain_origin+0x136/0x240 [ 829.479775] kmsan_memcpy_origins+0x13d/0x190 [ 829.484292] __msan_memcpy+0x6f/0x80 [ 829.488027] skb_copy_bits+0x1d2/0xc90 [ 829.491940] skb_copy+0x56c/0xba0 [ 829.495419] tcp_send_synack+0x7a3/0x18f0 [ 829.499594] tcp_rcv_state_process+0x275d/0x6c60 [ 829.504376] tcp_v4_do_rcv+0xb25/0xd80 17:14:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x8541) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x7, 0xe90a, 0x9, 0x1, 0x2, 0x7, 0x3a, 0x800, 0x268, 0x166, 0x6073, 0x1, 0x6}, {0x400, 0x8000, 0x80000001, 0x5, 0x8, 0x8, 0x5, 0x81, 0x2, 0x9, 0x1ff, 0x2, 0x5}, {0x8000, 0xf3, 0x0, 0x5, 0xc2, 0x6, 0x2, 0x8, 0x3, 0x4, 0x8, 0xffff, 0x4}], 0x20}) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 829.508309] __release_sock+0x32d/0x750 [ 829.512311] release_sock+0x99/0x2a0 [ 829.516054] __inet_stream_connect+0xdff/0x15d0 [ 829.520752] inet_stream_connect+0xff/0x170 [ 829.525101] __sys_connect+0x745/0x860 [ 829.529012] __se_sys_connect+0x8d/0xb0 [ 829.533006] __x64_sys_connect+0x4a/0x70 [ 829.537097] do_syscall_64+0xcf/0x110 [ 829.540932] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.546139] [ 829.547782] Uninit was stored to memory at: [ 829.552135] kmsan_internal_chain_origin+0x136/0x240 [ 829.557272] __msan_chain_origin+0x6d/0xb0 17:14:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 829.561535] __save_stack_trace+0x8be/0xc60 [ 829.565893] save_stack_trace+0xc6/0x110 [ 829.569979] kmsan_internal_chain_origin+0x136/0x240 [ 829.575115] kmsan_memcpy_origins+0x13d/0x190 [ 829.579650] __msan_memcpy+0x6f/0x80 [ 829.583395] skb_copy_bits+0x1d2/0xc90 [ 829.587311] skb_copy+0x56c/0xba0 [ 829.590791] tcp_send_synack+0x7a3/0x18f0 [ 829.594959] tcp_rcv_state_process+0x275d/0x6c60 [ 829.599740] tcp_v4_do_rcv+0xb25/0xd80 [ 829.603652] __release_sock+0x32d/0x750 [ 829.607652] release_sock+0x99/0x2a0 [ 829.611384] __inet_stream_connect+0xdff/0x15d0 [ 829.616081] inet_stream_connect+0xff/0x170 [ 829.620430] __sys_connect+0x745/0x860 [ 829.624342] __se_sys_connect+0x8d/0xb0 [ 829.628335] __x64_sys_connect+0x4a/0x70 [ 829.632416] do_syscall_64+0xcf/0x110 [ 829.636241] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.641446] [ 829.643093] Uninit was stored to memory at: [ 829.647441] kmsan_internal_chain_origin+0x136/0x240 [ 829.652582] __msan_chain_origin+0x6d/0xb0 [ 829.656849] __save_stack_trace+0x8be/0xc60 [ 829.661199] save_stack_trace+0xc6/0x110 [ 829.665288] kmsan_internal_chain_origin+0x136/0x240 [ 829.670418] kmsan_memcpy_origins+0x13d/0x190 [ 829.674946] __msan_memcpy+0x6f/0x80 [ 829.678698] skb_copy_bits+0x1d2/0xc90 [ 829.682617] skb_copy+0x56c/0xba0 [ 829.686109] tcp_send_synack+0x7a3/0x18f0 [ 829.690280] tcp_rcv_state_process+0x275d/0x6c60 [ 829.695061] tcp_v4_do_rcv+0xb25/0xd80 [ 829.698994] __release_sock+0x32d/0x750 [ 829.702990] release_sock+0x99/0x2a0 [ 829.706730] __inet_stream_connect+0xdff/0x15d0 [ 829.711421] inet_stream_connect+0xff/0x170 [ 829.715765] __sys_connect+0x745/0x860 [ 829.719678] __se_sys_connect+0x8d/0xb0 [ 829.723675] __x64_sys_connect+0x4a/0x70 [ 829.727761] do_syscall_64+0xcf/0x110 [ 829.731612] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.736815] [ 829.738455] Uninit was stored to memory at: [ 829.742806] kmsan_internal_chain_origin+0x136/0x240 [ 829.747931] __msan_chain_origin+0x6d/0xb0 [ 829.752193] __save_stack_trace+0x8be/0xc60 [ 829.756535] save_stack_trace+0xc6/0x110 [ 829.760637] kmsan_internal_chain_origin+0x136/0x240 [ 829.765764] kmsan_memcpy_origins+0x13d/0x190 [ 829.770290] __msan_memcpy+0x6f/0x80 [ 829.774027] skb_copy_bits+0x1d2/0xc90 [ 829.777946] skb_copy+0x56c/0xba0 [ 829.781450] tcp_send_synack+0x7a3/0x18f0 [ 829.785627] tcp_rcv_state_process+0x275d/0x6c60 [ 829.790406] tcp_v4_do_rcv+0xb25/0xd80 [ 829.794319] __release_sock+0x32d/0x750 [ 829.798317] release_sock+0x99/0x2a0 [ 829.802058] __inet_stream_connect+0xdff/0x15d0 [ 829.806760] inet_stream_connect+0xff/0x170 [ 829.811107] __sys_connect+0x745/0x860 [ 829.815017] __se_sys_connect+0x8d/0xb0 [ 829.819012] __x64_sys_connect+0x4a/0x70 [ 829.823103] do_syscall_64+0xcf/0x110 [ 829.826933] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.832130] [ 829.833773] Uninit was stored to memory at: [ 829.838124] kmsan_internal_chain_origin+0x136/0x240 [ 829.843253] __msan_chain_origin+0x6d/0xb0 [ 829.847513] __save_stack_trace+0x8be/0xc60 [ 829.851876] save_stack_trace+0xc6/0x110 [ 829.855962] kmsan_internal_chain_origin+0x136/0x240 [ 829.861090] kmsan_memcpy_origins+0x13d/0x190 [ 829.865606] __msan_memcpy+0x6f/0x80 [ 829.869369] skb_copy_bits+0x1d2/0xc90 [ 829.873284] skb_copy+0x56c/0xba0 [ 829.876758] tcp_send_synack+0x7a3/0x18f0 [ 829.880924] tcp_rcv_state_process+0x275d/0x6c60 [ 829.885702] tcp_v4_do_rcv+0xb25/0xd80 [ 829.889612] __release_sock+0x32d/0x750 [ 829.893629] release_sock+0x99/0x2a0 [ 829.897365] __inet_stream_connect+0xdff/0x15d0 [ 829.902054] inet_stream_connect+0xff/0x170 [ 829.906402] __sys_connect+0x745/0x860 [ 829.910307] __se_sys_connect+0x8d/0xb0 [ 829.914305] __x64_sys_connect+0x4a/0x70 [ 829.918396] do_syscall_64+0xcf/0x110 [ 829.922225] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.927425] [ 829.929072] Uninit was stored to memory at: [ 829.933442] kmsan_internal_chain_origin+0x136/0x240 [ 829.938591] __msan_chain_origin+0x6d/0xb0 [ 829.942871] __save_stack_trace+0x8be/0xc60 [ 829.947220] save_stack_trace+0xc6/0x110 [ 829.951305] kmsan_internal_chain_origin+0x136/0x240 [ 829.956435] kmsan_memcpy_origins+0x13d/0x190 [ 829.960957] __msan_memcpy+0x6f/0x80 [ 829.964699] skb_copy_bits+0x1d2/0xc90 [ 829.968616] skb_copy+0x56c/0xba0 [ 829.972105] tcp_send_synack+0x7a3/0x18f0 [ 829.976285] tcp_rcv_state_process+0x275d/0x6c60 [ 829.981071] tcp_v4_do_rcv+0xb25/0xd80 [ 829.984977] __release_sock+0x32d/0x750 [ 829.988967] release_sock+0x99/0x2a0 [ 829.992701] __inet_stream_connect+0xdff/0x15d0 [ 829.997387] inet_stream_connect+0xff/0x170 [ 830.001731] __sys_connect+0x745/0x860 [ 830.005630] __se_sys_connect+0x8d/0xb0 [ 830.009619] __x64_sys_connect+0x4a/0x70 [ 830.013696] do_syscall_64+0xcf/0x110 [ 830.017517] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 830.022715] [ 830.024353] Local variable description: ----_tcph.i@ip_vs_in [ 830.030151] Variable was created at: [ 830.033881] ip_vs_in+0xe9/0x3250 [ 830.037351] ip_vs_local_request4+0xec/0x130 17:14:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="2000000000000000840000000200f6ff000041020000000000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x3ff, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req={0x3, 0x40, 0x1f, 0xf812}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3ff, 0x800, 0x4e8b}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x6}, &(0x7f0000000240)=0x8) 17:14:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff, 0x82000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140)) 17:14:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4801c1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2029e686}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x4, 0x8, [0x3f, 0x15ba, 0x8, 0x3, 0xffffffff, 0x1, 0x9fed, 0xfff]}, &(0x7f0000000200)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x1713, 0x7, 0x6, {0xa, @pix={0xffff, 0x100000001, 0x4f5348b9b0b10771, 0x8, 0x2, 0x5, 0xf, 0x81, 0x1, 0x7, 0x0, 0x3}}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r4, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2}, 0x8) close(r4) close(r3) 17:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000100)={0x3, 0x1ff}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x6) [ 830.401525] netlink: get zone limit has 4 unknown bytes 17:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_flags=0x1200}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe2c) getsockname(r0, &(0x7f0000000280)=@sco, &(0x7f0000000100)=0x80) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18200000014373ecf7e064a36f9500020000000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1000000000000030, 0x0, 0x0, 0x4000010}, 0x0) 17:14:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032080001000000000000000000000000000000"], 0x20}}, 0x0) 17:14:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:11 executing program 2: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @loopback}, &(0x7f0000000140)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @empty, @rand_addr=0x7fffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x65e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x14000, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x24) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={r4, 0x8}, &(0x7f0000000500)=0x8) r5 = memfd_create(&(0x7f00000002c0)='%#wlan1(procYselinuxppp0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000000000007c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x3) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r7, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r7) close(r6) r8 = socket$inet(0x2, 0xb, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:14:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000006c0)=""/181) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f00000000c0)={@empty, @multicast2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="187f9500030000950802000000000000000000000000000031190b7a2d3b5f9447958995d6b13e5f1f1574df2d969868a1086b3935cb04880335daed1f7a89d8d4a81fd6dbd5cce84c06408439da405e1df094c3dcc962cb27d8ee44c90bcbb72c1ca0204ad00af26b5b6ef2a9a95564"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r2}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f00000002c0)="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") sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000003200f9a0f810000000000000030000000c001000a5cb7a5d4e1b3815"], 0x20}}, 0x0) [ 831.412826] QAT: Invalid ioctl 17:14:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0x23) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0xfffffffffffffc97, 0x2}], 0x4924924924924d0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xfffffffffffff21a, @empty, 0x2}, @in6={0xa, 0x4e22, 0x5, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @local}], 0x48) [ 831.462389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 831.545827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 17:14:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x100000000) 17:14:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 831.714609] QAT: Invalid ioctl 17:14:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x100, 0xb7, &(0x7f0000000440)=""/183, 0x0, 0x2000000000}, 0x48) r2 = socket$kcm(0x29, 0x1000000000100, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 831.867111] not chained 1560000 origins [ 831.871164] CPU: 1 PID: 20901 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 831.878454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.887830] Call Trace: [ 831.890460] dump_stack+0x32d/0x480 [ 831.894161] kmsan_internal_chain_origin+0x222/0x240 [ 831.899360] ? save_stack_trace+0xc6/0x110 [ 831.903640] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 831.908788] ? kmsan_internal_chain_origin+0x90/0x240 [ 831.914034] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 831.919462] ? is_bpf_text_address+0x49e/0x4d0 [ 831.924091] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 831.929583] ? in_task_stack+0x12c/0x210 [ 831.933701] __msan_chain_origin+0x6d/0xb0 [ 831.937981] ? do_syscall_64+0xcf/0x110 [ 831.941991] __save_stack_trace+0x8be/0xc60 [ 831.946377] ? do_syscall_64+0xcf/0x110 [ 831.950405] save_stack_trace+0xc6/0x110 [ 831.954513] kmsan_internal_chain_origin+0x136/0x240 [ 831.959679] ? kmsan_internal_chain_origin+0x136/0x240 [ 831.964993] ? kmsan_memcpy_origins+0x13d/0x190 [ 831.969762] ? __msan_memcpy+0x6f/0x80 [ 831.973694] ? pskb_expand_head+0x436/0x1d20 [ 831.978140] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 831.982316] ? pppol2tp_sendmsg+0x79a/0xba0 [ 831.986668] ? ___sys_sendmsg+0xe3b/0x1240 [ 831.990932] ? __sys_sendmmsg+0x56b/0xa90 [ 831.995112] ? __se_sys_sendmmsg+0xbd/0xe0 [ 831.999375] ? __x64_sys_sendmmsg+0x56/0x70 [ 832.003727] ? do_syscall_64+0xcf/0x110 [ 832.007736] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.013147] ? __msan_poison_alloca+0x1e0/0x270 [ 832.017888] ? __msan_get_context_state+0x9/0x20 [ 832.022676] ? INIT_INT+0xc/0x30 [ 832.026077] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 832.031498] kmsan_memcpy_origins+0x13d/0x190 [ 832.036043] __msan_memcpy+0x6f/0x80 [ 832.039818] pskb_expand_head+0x436/0x1d20 [ 832.044132] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.048183] pppol2tp_sendmsg+0x79a/0xba0 [ 832.052404] ___sys_sendmsg+0xe3b/0x1240 [ 832.056500] ? pppol2tp_getsockopt+0x1060/0x1060 [ 832.061321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 832.066729] ? kmsan_set_origin+0x7f/0x100 [ 832.071016] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 832.076462] ? _cond_resched+0xc7/0x120 [ 832.080471] __sys_sendmmsg+0x56b/0xa90 [ 832.084515] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 832.090016] ? prepare_exit_to_usermode+0x182/0x4c0 [ 832.095096] __se_sys_sendmmsg+0xbd/0xe0 [ 832.099212] __x64_sys_sendmmsg+0x56/0x70 [ 832.103396] do_syscall_64+0xcf/0x110 [ 832.107251] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.112471] RIP: 0033:0x457569 [ 832.115693] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.134627] RSP: 002b:00007f2cd66d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 832.142366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 832.149748] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000007 [ 832.157040] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 832.164341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66d56d4 [ 832.171636] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 832.178950] Uninit was stored to memory at: [ 832.183302] kmsan_internal_chain_origin+0x136/0x240 [ 832.188439] __msan_chain_origin+0x6d/0xb0 [ 832.192708] __save_stack_trace+0x8be/0xc60 [ 832.197050] save_stack_trace+0xc6/0x110 [ 832.201148] kmsan_internal_chain_origin+0x136/0x240 [ 832.206276] kmsan_memcpy_origins+0x13d/0x190 [ 832.210792] __msan_memcpy+0x6f/0x80 [ 832.214537] pskb_expand_head+0x436/0x1d20 [ 832.218810] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.222804] pppol2tp_sendmsg+0x79a/0xba0 [ 832.226976] ___sys_sendmsg+0xe3b/0x1240 [ 832.231060] __sys_sendmmsg+0x56b/0xa90 [ 832.235061] __se_sys_sendmmsg+0xbd/0xe0 [ 832.239150] __x64_sys_sendmmsg+0x56/0x70 [ 832.243320] do_syscall_64+0xcf/0x110 [ 832.247151] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.252352] [ 832.253993] Uninit was stored to memory at: [ 832.258339] kmsan_internal_chain_origin+0x136/0x240 [ 832.263467] __msan_chain_origin+0x6d/0xb0 [ 832.267724] __save_stack_trace+0x8be/0xc60 [ 832.272076] save_stack_trace+0xc6/0x110 [ 832.276170] kmsan_internal_chain_origin+0x136/0x240 [ 832.281300] kmsan_memcpy_origins+0x13d/0x190 [ 832.285818] __msan_memcpy+0x6f/0x80 [ 832.289588] pskb_expand_head+0x436/0x1d20 [ 832.293867] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.297871] pppol2tp_sendmsg+0x79a/0xba0 [ 832.302046] ___sys_sendmsg+0xe3b/0x1240 [ 832.306137] __sys_sendmmsg+0x56b/0xa90 [ 832.310137] __se_sys_sendmmsg+0xbd/0xe0 [ 832.314220] __x64_sys_sendmmsg+0x56/0x70 [ 832.318395] do_syscall_64+0xcf/0x110 [ 832.322220] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.327415] [ 832.329055] Uninit was stored to memory at: [ 832.333410] kmsan_internal_chain_origin+0x136/0x240 [ 832.338539] __msan_chain_origin+0x6d/0xb0 [ 832.342812] __save_stack_trace+0x8be/0xc60 [ 832.347153] save_stack_trace+0xc6/0x110 [ 832.351243] kmsan_internal_chain_origin+0x136/0x240 [ 832.356396] kmsan_memcpy_origins+0x13d/0x190 [ 832.360917] __msan_memcpy+0x6f/0x80 [ 832.364889] pskb_expand_head+0x436/0x1d20 [ 832.369157] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.373152] pppol2tp_sendmsg+0x79a/0xba0 [ 832.377326] ___sys_sendmsg+0xe3b/0x1240 [ 832.381411] __sys_sendmmsg+0x56b/0xa90 [ 832.385409] __se_sys_sendmmsg+0xbd/0xe0 [ 832.389498] __x64_sys_sendmmsg+0x56/0x70 [ 832.393676] do_syscall_64+0xcf/0x110 [ 832.397508] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.402716] [ 832.404359] Uninit was stored to memory at: [ 832.408713] kmsan_internal_chain_origin+0x136/0x240 [ 832.413844] __msan_chain_origin+0x6d/0xb0 [ 832.418112] __save_stack_trace+0x8be/0xc60 [ 832.422471] save_stack_trace+0xc6/0x110 [ 832.426592] kmsan_internal_chain_origin+0x136/0x240 [ 832.431719] kmsan_memcpy_origins+0x13d/0x190 [ 832.436240] __msan_memcpy+0x6f/0x80 [ 832.439984] pskb_expand_head+0x436/0x1d20 [ 832.444264] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.448265] pppol2tp_sendmsg+0x79a/0xba0 [ 832.452443] ___sys_sendmsg+0xe3b/0x1240 [ 832.456532] __sys_sendmmsg+0x56b/0xa90 [ 832.460545] __se_sys_sendmmsg+0xbd/0xe0 [ 832.464646] __x64_sys_sendmmsg+0x56/0x70 [ 832.468821] do_syscall_64+0xcf/0x110 [ 832.472654] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.477875] [ 832.479517] Uninit was stored to memory at: [ 832.483877] kmsan_internal_chain_origin+0x136/0x240 [ 832.489009] __msan_chain_origin+0x6d/0xb0 [ 832.493287] __save_stack_trace+0x8be/0xc60 [ 832.497877] save_stack_trace+0xc6/0x110 [ 832.501976] kmsan_internal_chain_origin+0x136/0x240 [ 832.507121] kmsan_memcpy_origins+0x13d/0x190 [ 832.511641] __msan_memcpy+0x6f/0x80 [ 832.515386] pskb_expand_head+0x436/0x1d20 [ 832.519649] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.523648] pppol2tp_sendmsg+0x79a/0xba0 [ 832.527824] ___sys_sendmsg+0xe3b/0x1240 [ 832.531906] __sys_sendmmsg+0x56b/0xa90 [ 832.533868] netlink: get zone limit has 4 unknown bytes [ 832.535898] __se_sys_sendmmsg+0xbd/0xe0 [ 832.535918] __x64_sys_sendmmsg+0x56/0x70 [ 832.535940] do_syscall_64+0xcf/0x110 [ 832.535965] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.535974] [ 832.535983] Uninit was stored to memory at: [ 832.536006] kmsan_internal_chain_origin+0x136/0x240 [ 832.536027] __msan_chain_origin+0x6d/0xb0 [ 832.536065] __save_stack_trace+0x8be/0xc60 [ 832.578251] save_stack_trace+0xc6/0x110 [ 832.582336] kmsan_internal_chain_origin+0x136/0x240 [ 832.587469] kmsan_memcpy_origins+0x13d/0x190 [ 832.591986] __msan_memcpy+0x6f/0x80 [ 832.595723] pskb_expand_head+0x436/0x1d20 [ 832.599985] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.603988] pppol2tp_sendmsg+0x79a/0xba0 [ 832.608165] ___sys_sendmsg+0xe3b/0x1240 [ 832.612247] __sys_sendmmsg+0x56b/0xa90 [ 832.616242] __se_sys_sendmmsg+0xbd/0xe0 [ 832.620325] __x64_sys_sendmmsg+0x56/0x70 [ 832.624494] do_syscall_64+0xcf/0x110 [ 832.628318] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.633516] [ 832.635165] Uninit was stored to memory at: [ 832.639511] kmsan_internal_chain_origin+0x136/0x240 [ 832.644645] __msan_chain_origin+0x6d/0xb0 [ 832.648906] __save_stack_trace+0x8be/0xc60 [ 832.653253] save_stack_trace+0xc6/0x110 [ 832.657336] kmsan_internal_chain_origin+0x136/0x240 [ 832.662462] kmsan_memcpy_origins+0x13d/0x190 [ 832.666976] __msan_memcpy+0x6f/0x80 [ 832.670716] pskb_expand_head+0x436/0x1d20 [ 832.674973] l2tp_xmit_skb+0x5a7/0x24b0 [ 832.678966] pppol2tp_sendmsg+0x79a/0xba0 [ 832.683132] ___sys_sendmsg+0xe3b/0x1240 [ 832.687211] __sys_sendmmsg+0x56b/0xa90 [ 832.691207] __se_sys_sendmmsg+0xbd/0xe0 [ 832.695286] __x64_sys_sendmmsg+0x56/0x70 [ 832.699455] do_syscall_64+0xcf/0x110 [ 832.703283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.708481] [ 832.710125] Local variable description: ----iph@ip_vs_out [ 832.715671] Variable was created at: 17:14:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000095000200000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:12 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000320019010000000000000000030000000c1000000800010000000000"], 0x20}}, 0x0) [ 832.719412] ip_vs_out+0x1bf/0x4570 [ 832.723073] ip_vs_local_reply6+0xec/0x130 17:14:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000056b799180200000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) poll(&(0x7f00000006c0)=[{r1, 0x400}, {r0, 0x300}], 0x2, 0xfff) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000680)={'lo\x00', {0x2, 0x4e22}}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000100)=0x14) r4 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0x1000000, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000640)={0x5005, 0x8001}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', r3}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 832.836959] not chained 1570000 origins [ 832.841002] CPU: 0 PID: 20901 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 832.848296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.857671] Call Trace: [ 832.860293] dump_stack+0x32d/0x480 [ 832.863982] kmsan_internal_chain_origin+0x222/0x240 [ 832.869153] ? save_stack_trace+0xc6/0x110 [ 832.873455] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 832.878606] ? kmsan_internal_chain_origin+0x90/0x240 [ 832.883851] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 832.889247] ? is_bpf_text_address+0x49e/0x4d0 [ 832.893871] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 832.899349] ? in_task_stack+0x12c/0x210 [ 832.903481] __msan_chain_origin+0x6d/0xb0 [ 832.907763] ? kmsan_internal_chain_origin+0x136/0x240 [ 832.913074] __save_stack_trace+0x8be/0xc60 [ 832.917463] ? kmsan_internal_chain_origin+0x136/0x240 [ 832.922777] save_stack_trace+0xc6/0x110 [ 832.926880] kmsan_internal_chain_origin+0x136/0x240 [ 832.932029] ? kmsan_internal_chain_origin+0x136/0x240 [ 832.937331] ? kmsan_memcpy_origins+0x13d/0x190 [ 832.942023] ? __msan_memcpy+0x6f/0x80 [ 832.945938] ? pskb_expand_head+0x436/0x1d20 [ 832.950382] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 832.954548] ? pppol2tp_sendmsg+0x79a/0xba0 [ 832.958911] ? ___sys_sendmsg+0xe3b/0x1240 [ 832.963173] ? __sys_sendmmsg+0x56b/0xa90 [ 832.967355] ? __se_sys_sendmmsg+0xbd/0xe0 [ 832.971622] ? __x64_sys_sendmmsg+0x56/0x70 [ 832.975976] ? do_syscall_64+0xcf/0x110 [ 832.979983] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 832.985379] ? __msan_poison_alloca+0x1e0/0x270 [ 832.990113] ? __msan_get_context_state+0x9/0x20 [ 832.994893] ? INIT_INT+0xc/0x30 [ 832.998284] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 833.003722] kmsan_memcpy_origins+0x13d/0x190 [ 833.008274] __msan_memcpy+0x6f/0x80 [ 833.012024] pskb_expand_head+0x436/0x1d20 [ 833.016331] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.020380] pppol2tp_sendmsg+0x79a/0xba0 [ 833.024614] ___sys_sendmsg+0xe3b/0x1240 [ 833.028715] ? pppol2tp_getsockopt+0x1060/0x1060 [ 833.033533] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 833.038962] ? kmsan_set_origin+0x7f/0x100 [ 833.043237] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 833.048652] ? _cond_resched+0xc7/0x120 [ 833.052664] __sys_sendmmsg+0x56b/0xa90 [ 833.056715] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 833.062196] ? prepare_exit_to_usermode+0x182/0x4c0 [ 833.067254] __se_sys_sendmmsg+0xbd/0xe0 [ 833.071369] __x64_sys_sendmmsg+0x56/0x70 [ 833.075554] do_syscall_64+0xcf/0x110 [ 833.079410] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.084625] RIP: 0033:0x457569 [ 833.087850] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.106861] RSP: 002b:00007f2cd66d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 833.114601] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 833.121894] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000007 [ 833.129190] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 833.136507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66d56d4 [ 833.143801] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 833.151111] Uninit was stored to memory at: [ 833.155475] kmsan_internal_chain_origin+0x136/0x240 [ 833.160623] __msan_chain_origin+0x6d/0xb0 [ 833.164884] __save_stack_trace+0x8be/0xc60 [ 833.169228] save_stack_trace+0xc6/0x110 [ 833.173315] kmsan_internal_chain_origin+0x136/0x240 [ 833.178456] kmsan_memcpy_origins+0x13d/0x190 [ 833.182978] __msan_memcpy+0x6f/0x80 17:14:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x82000, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, {0x7, @remote}, 0x50, {0x2, 0x4e21, @multicast1}, 'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000f1c00000000000000"], 0x20}}, 0x0) 17:14:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) [ 833.186724] pskb_expand_head+0x436/0x1d20 [ 833.190980] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.194981] pppol2tp_sendmsg+0x79a/0xba0 [ 833.199151] ___sys_sendmsg+0xe3b/0x1240 [ 833.203228] __sys_sendmmsg+0x56b/0xa90 [ 833.207253] __se_sys_sendmmsg+0xbd/0xe0 [ 833.211335] __x64_sys_sendmmsg+0x56/0x70 [ 833.215509] do_syscall_64+0xcf/0x110 [ 833.219361] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.224574] [ 833.226216] Uninit was stored to memory at: [ 833.230577] kmsan_internal_chain_origin+0x136/0x240 [ 833.235708] __msan_chain_origin+0x6d/0xb0 [ 833.239967] __save_stack_trace+0x8be/0xc60 [ 833.244320] save_stack_trace+0xc6/0x110 [ 833.248418] kmsan_internal_chain_origin+0x136/0x240 [ 833.253542] kmsan_memcpy_origins+0x13d/0x190 [ 833.258089] __msan_memcpy+0x6f/0x80 [ 833.261834] pskb_expand_head+0x436/0x1d20 [ 833.266093] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.270086] pppol2tp_sendmsg+0x79a/0xba0 [ 833.274261] ___sys_sendmsg+0xe3b/0x1240 [ 833.278349] __sys_sendmmsg+0x56b/0xa90 [ 833.282353] __se_sys_sendmmsg+0xbd/0xe0 [ 833.286436] __x64_sys_sendmmsg+0x56/0x70 [ 833.290613] do_syscall_64+0xcf/0x110 [ 833.294437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.299632] [ 833.301266] Uninit was stored to memory at: [ 833.305624] kmsan_internal_chain_origin+0x136/0x240 [ 833.310754] __msan_chain_origin+0x6d/0xb0 [ 833.315016] __save_stack_trace+0x8be/0xc60 [ 833.319360] save_stack_trace+0xc6/0x110 [ 833.323448] kmsan_internal_chain_origin+0x136/0x240 [ 833.328593] kmsan_memcpy_origins+0x13d/0x190 [ 833.333119] __msan_memcpy+0x6f/0x80 [ 833.336860] pskb_expand_head+0x436/0x1d20 [ 833.341128] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.345127] pppol2tp_sendmsg+0x79a/0xba0 [ 833.349300] ___sys_sendmsg+0xe3b/0x1240 [ 833.353389] __sys_sendmmsg+0x56b/0xa90 [ 833.357392] __se_sys_sendmmsg+0xbd/0xe0 [ 833.361478] __x64_sys_sendmmsg+0x56/0x70 [ 833.365657] do_syscall_64+0xcf/0x110 [ 833.369487] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.374686] [ 833.376332] Uninit was stored to memory at: [ 833.380687] kmsan_internal_chain_origin+0x136/0x240 [ 833.385815] __msan_chain_origin+0x6d/0xb0 [ 833.390075] __save_stack_trace+0x8be/0xc60 [ 833.394437] save_stack_trace+0xc6/0x110 [ 833.398524] kmsan_internal_chain_origin+0x136/0x240 [ 833.403673] kmsan_memcpy_origins+0x13d/0x190 [ 833.408193] __msan_memcpy+0x6f/0x80 [ 833.411976] pskb_expand_head+0x436/0x1d20 [ 833.416246] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.420247] pppol2tp_sendmsg+0x79a/0xba0 [ 833.424415] ___sys_sendmsg+0xe3b/0x1240 [ 833.428498] __sys_sendmmsg+0x56b/0xa90 [ 833.432496] __se_sys_sendmmsg+0xbd/0xe0 [ 833.436598] __x64_sys_sendmmsg+0x56/0x70 [ 833.440781] do_syscall_64+0xcf/0x110 [ 833.444625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.449833] [ 833.451476] Uninit was stored to memory at: [ 833.455825] kmsan_internal_chain_origin+0x136/0x240 [ 833.460958] __msan_chain_origin+0x6d/0xb0 [ 833.465227] __save_stack_trace+0x8be/0xc60 [ 833.469623] save_stack_trace+0xc6/0x110 [ 833.473713] kmsan_internal_chain_origin+0x136/0x240 [ 833.478847] kmsan_memcpy_origins+0x13d/0x190 [ 833.483368] __msan_memcpy+0x6f/0x80 [ 833.487115] pskb_expand_head+0x436/0x1d20 [ 833.491378] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.495373] pppol2tp_sendmsg+0x79a/0xba0 [ 833.499550] ___sys_sendmsg+0xe3b/0x1240 [ 833.503653] __sys_sendmmsg+0x56b/0xa90 [ 833.507655] __se_sys_sendmmsg+0xbd/0xe0 [ 833.511742] __x64_sys_sendmmsg+0x56/0x70 [ 833.515921] do_syscall_64+0xcf/0x110 [ 833.519756] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.524977] [ 833.526617] Uninit was stored to memory at: [ 833.530967] kmsan_internal_chain_origin+0x136/0x240 [ 833.536106] __msan_chain_origin+0x6d/0xb0 [ 833.540369] __save_stack_trace+0x8be/0xc60 [ 833.544722] save_stack_trace+0xc6/0x110 [ 833.548815] kmsan_internal_chain_origin+0x136/0x240 [ 833.553944] kmsan_memcpy_origins+0x13d/0x190 [ 833.558465] __msan_memcpy+0x6f/0x80 [ 833.562210] pskb_expand_head+0x436/0x1d20 [ 833.566472] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.570469] pppol2tp_sendmsg+0x79a/0xba0 [ 833.574642] ___sys_sendmsg+0xe3b/0x1240 [ 833.578732] __sys_sendmmsg+0x56b/0xa90 [ 833.582733] __se_sys_sendmmsg+0xbd/0xe0 [ 833.586822] __x64_sys_sendmmsg+0x56/0x70 [ 833.591000] do_syscall_64+0xcf/0x110 [ 833.594829] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.600029] [ 833.601667] Uninit was stored to memory at: [ 833.606055] kmsan_internal_chain_origin+0x136/0x240 [ 833.611181] __msan_chain_origin+0x6d/0xb0 [ 833.615444] __save_stack_trace+0x8be/0xc60 [ 833.619799] save_stack_trace+0xc6/0x110 [ 833.623887] kmsan_internal_chain_origin+0x136/0x240 [ 833.629014] kmsan_memcpy_origins+0x13d/0x190 [ 833.633533] __msan_memcpy+0x6f/0x80 [ 833.637283] pskb_expand_head+0x436/0x1d20 [ 833.641540] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.645548] pppol2tp_sendmsg+0x79a/0xba0 [ 833.649731] ___sys_sendmsg+0xe3b/0x1240 [ 833.653815] __sys_sendmmsg+0x56b/0xa90 [ 833.657813] __se_sys_sendmmsg+0xbd/0xe0 [ 833.661895] __x64_sys_sendmmsg+0x56/0x70 [ 833.666064] do_syscall_64+0xcf/0x110 [ 833.669897] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.675107] [ 833.676749] Local variable description: ----iph@ip_vs_out [ 833.682295] Variable was created at: [ 833.686051] ip_vs_out+0x1bf/0x4570 [ 833.689717] ip_vs_local_reply6+0xec/0x130 [ 833.733248] not chained 1580000 origins [ 833.737313] CPU: 1 PID: 20901 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 833.744607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.753976] Call Trace: [ 833.756606] dump_stack+0x32d/0x480 [ 833.760291] kmsan_internal_chain_origin+0x222/0x240 [ 833.765464] ? save_stack_trace+0xc6/0x110 [ 833.769732] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 833.774865] ? kmsan_internal_chain_origin+0x90/0x240 [ 833.780104] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 833.785490] ? is_bpf_text_address+0x49e/0x4d0 [ 833.790129] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 833.795613] ? in_task_stack+0x12c/0x210 [ 833.799734] __msan_chain_origin+0x6d/0xb0 [ 833.804005] ? __se_sys_sendmmsg+0xbd/0xe0 [ 833.808275] __save_stack_trace+0x8be/0xc60 [ 833.812656] ? __se_sys_sendmmsg+0xbd/0xe0 [ 833.816930] save_stack_trace+0xc6/0x110 [ 833.821042] kmsan_internal_chain_origin+0x136/0x240 [ 833.826196] ? kmsan_internal_chain_origin+0x136/0x240 [ 833.831501] ? kmsan_memcpy_origins+0x13d/0x190 [ 833.836201] ? __msan_memcpy+0x6f/0x80 [ 833.840126] ? pskb_expand_head+0x436/0x1d20 [ 833.844578] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 833.848750] ? pppol2tp_sendmsg+0x79a/0xba0 [ 833.853105] ? ___sys_sendmsg+0xe3b/0x1240 [ 833.857353] ? __sys_sendmmsg+0x56b/0xa90 [ 833.861493] ? __se_sys_sendmmsg+0xbd/0xe0 [ 833.865725] ? __x64_sys_sendmmsg+0x56/0x70 [ 833.870056] ? do_syscall_64+0xcf/0x110 [ 833.874028] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.879391] ? __msan_poison_alloca+0x1e0/0x270 [ 833.884081] ? __msan_get_context_state+0x9/0x20 [ 833.888832] ? INIT_INT+0xc/0x30 [ 833.892192] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 833.897565] kmsan_memcpy_origins+0x13d/0x190 [ 833.902067] __msan_memcpy+0x6f/0x80 [ 833.905786] pskb_expand_head+0x436/0x1d20 [ 833.910036] l2tp_xmit_skb+0x5a7/0x24b0 [ 833.914048] pppol2tp_sendmsg+0x79a/0xba0 [ 833.918219] ___sys_sendmsg+0xe3b/0x1240 [ 833.922275] ? pppol2tp_getsockopt+0x1060/0x1060 [ 833.927042] ? __msan_poison_alloca+0x1e0/0x270 [ 833.931713] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 833.937083] ? rcu_all_qs+0x3b/0x2b0 [ 833.940791] ? _cond_resched+0x59/0x120 [ 833.944764] ? rcu_all_qs+0x53/0x2b0 [ 833.948468] ? _cond_resched+0x37/0x120 [ 833.952434] ? __sys_sendmmsg+0x7c9/0xa90 [ 833.956586] ? _cond_resched+0x59/0x120 [ 833.960565] __sys_sendmmsg+0x56b/0xa90 [ 833.964567] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 833.970035] ? prepare_exit_to_usermode+0x182/0x4c0 [ 833.975057] __se_sys_sendmmsg+0xbd/0xe0 [ 833.979139] __x64_sys_sendmmsg+0x56/0x70 [ 833.983300] do_syscall_64+0xcf/0x110 [ 833.987101] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 833.992284] RIP: 0033:0x457569 [ 833.995469] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.014385] RSP: 002b:00007f2cd66d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 834.022095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 834.029370] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000007 [ 834.036632] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 834.043906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd66d56d4 [ 834.051170] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 834.058445] Uninit was stored to memory at: [ 834.062781] kmsan_internal_chain_origin+0x136/0x240 [ 834.067879] __msan_chain_origin+0x6d/0xb0 [ 834.072110] __save_stack_trace+0x8be/0xc60 [ 834.076424] save_stack_trace+0xc6/0x110 [ 834.080481] kmsan_internal_chain_origin+0x136/0x240 [ 834.085582] kmsan_memcpy_origins+0x13d/0x190 [ 834.090077] __msan_memcpy+0x6f/0x80 [ 834.093785] pskb_expand_head+0x436/0x1d20 [ 834.098012] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.101975] pppol2tp_sendmsg+0x79a/0xba0 [ 834.106112] ___sys_sendmsg+0xe3b/0x1240 [ 834.110163] __sys_sendmmsg+0x56b/0xa90 [ 834.114303] __se_sys_sendmmsg+0xbd/0xe0 [ 834.118353] __x64_sys_sendmmsg+0x56/0x70 [ 834.122492] do_syscall_64+0xcf/0x110 [ 834.126321] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.131492] [ 834.133108] Uninit was stored to memory at: [ 834.137421] kmsan_internal_chain_origin+0x136/0x240 [ 834.142516] __msan_chain_origin+0x6d/0xb0 [ 834.146743] __save_stack_trace+0x8be/0xc60 [ 834.151055] save_stack_trace+0xc6/0x110 [ 834.155114] kmsan_internal_chain_origin+0x136/0x240 [ 834.160226] kmsan_memcpy_origins+0x13d/0x190 [ 834.164713] __msan_memcpy+0x6f/0x80 [ 834.168424] pskb_expand_head+0x436/0x1d20 [ 834.172655] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.176618] pppol2tp_sendmsg+0x79a/0xba0 [ 834.180802] ___sys_sendmsg+0xe3b/0x1240 [ 834.184871] __sys_sendmmsg+0x56b/0xa90 [ 834.188853] __se_sys_sendmmsg+0xbd/0xe0 [ 834.192908] __x64_sys_sendmmsg+0x56/0x70 [ 834.197046] do_syscall_64+0xcf/0x110 [ 834.200844] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.206016] [ 834.207630] Uninit was stored to memory at: [ 834.211943] kmsan_internal_chain_origin+0x136/0x240 [ 834.217036] __msan_chain_origin+0x6d/0xb0 [ 834.221262] __save_stack_trace+0x8be/0xc60 [ 834.225598] save_stack_trace+0xc6/0x110 [ 834.229653] kmsan_internal_chain_origin+0x136/0x240 [ 834.234760] kmsan_memcpy_origins+0x13d/0x190 [ 834.239266] __msan_memcpy+0x6f/0x80 [ 834.242974] pskb_expand_head+0x436/0x1d20 [ 834.247205] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.251170] pppol2tp_sendmsg+0x79a/0xba0 [ 834.255308] ___sys_sendmsg+0xe3b/0x1240 [ 834.259360] __sys_sendmmsg+0x56b/0xa90 [ 834.263328] __se_sys_sendmmsg+0xbd/0xe0 [ 834.274967] __x64_sys_sendmmsg+0x56/0x70 [ 834.279108] do_syscall_64+0xcf/0x110 [ 834.282924] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.288118] [ 834.289732] Uninit was stored to memory at: [ 834.294046] kmsan_internal_chain_origin+0x136/0x240 [ 834.299152] __msan_chain_origin+0x6d/0xb0 [ 834.303378] __save_stack_trace+0x8be/0xc60 [ 834.307692] save_stack_trace+0xc6/0x110 [ 834.311769] kmsan_internal_chain_origin+0x136/0x240 [ 834.316888] kmsan_memcpy_origins+0x13d/0x190 [ 834.321376] __msan_memcpy+0x6f/0x80 [ 834.325085] pskb_expand_head+0x436/0x1d20 [ 834.329314] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.333280] pppol2tp_sendmsg+0x79a/0xba0 [ 834.337526] ___sys_sendmsg+0xe3b/0x1240 [ 834.341597] __sys_sendmmsg+0x56b/0xa90 [ 834.345586] __se_sys_sendmmsg+0xbd/0xe0 [ 834.349642] __x64_sys_sendmmsg+0x56/0x70 [ 834.353780] do_syscall_64+0xcf/0x110 [ 834.357582] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.362756] [ 834.364369] Uninit was stored to memory at: [ 834.368684] kmsan_internal_chain_origin+0x136/0x240 [ 834.373779] __msan_chain_origin+0x6d/0xb0 [ 834.378371] __save_stack_trace+0x8be/0xc60 [ 834.382712] save_stack_trace+0xc6/0x110 [ 834.386769] kmsan_internal_chain_origin+0x136/0x240 [ 834.391875] kmsan_memcpy_origins+0x13d/0x190 [ 834.396376] __msan_memcpy+0x6f/0x80 [ 834.400094] pskb_expand_head+0x436/0x1d20 [ 834.404337] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.408304] pppol2tp_sendmsg+0x79a/0xba0 [ 834.412442] ___sys_sendmsg+0xe3b/0x1240 [ 834.416509] __sys_sendmmsg+0x56b/0xa90 [ 834.420474] __se_sys_sendmmsg+0xbd/0xe0 [ 834.424528] __x64_sys_sendmmsg+0x56/0x70 [ 834.428680] do_syscall_64+0xcf/0x110 [ 834.432477] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.437650] [ 834.439276] Uninit was stored to memory at: [ 834.443597] kmsan_internal_chain_origin+0x136/0x240 [ 834.448701] __msan_chain_origin+0x6d/0xb0 [ 834.452927] __save_stack_trace+0x8be/0xc60 [ 834.457242] save_stack_trace+0xc6/0x110 [ 834.461291] kmsan_internal_chain_origin+0x136/0x240 [ 834.466401] kmsan_memcpy_origins+0x13d/0x190 [ 834.470887] __msan_memcpy+0x6f/0x80 [ 834.474601] pskb_expand_head+0x436/0x1d20 [ 834.478831] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.482798] pppol2tp_sendmsg+0x79a/0xba0 [ 834.486939] ___sys_sendmsg+0xe3b/0x1240 [ 834.490990] __sys_sendmmsg+0x56b/0xa90 [ 834.494954] __se_sys_sendmmsg+0xbd/0xe0 [ 834.499268] __x64_sys_sendmmsg+0x56/0x70 [ 834.503415] do_syscall_64+0xcf/0x110 [ 834.507226] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.512416] [ 834.514034] Uninit was stored to memory at: [ 834.518362] kmsan_internal_chain_origin+0x136/0x240 [ 834.523459] __msan_chain_origin+0x6d/0xb0 [ 834.527689] __save_stack_trace+0x8be/0xc60 [ 834.532004] save_stack_trace+0xc6/0x110 [ 834.536059] kmsan_internal_chain_origin+0x136/0x240 [ 834.541159] kmsan_memcpy_origins+0x13d/0x190 [ 834.545652] __msan_memcpy+0x6f/0x80 [ 834.549357] pskb_expand_head+0x436/0x1d20 [ 834.553590] l2tp_xmit_skb+0x5a7/0x24b0 [ 834.557578] pppol2tp_sendmsg+0x79a/0xba0 [ 834.561719] ___sys_sendmsg+0xe3b/0x1240 [ 834.565768] __sys_sendmmsg+0x56b/0xa90 [ 834.569730] __se_sys_sendmmsg+0xbd/0xe0 [ 834.573784] __x64_sys_sendmmsg+0x56/0x70 [ 834.577923] do_syscall_64+0xcf/0x110 [ 834.581718] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.586890] [ 834.588503] Local variable description: ----iph@ip_vs_out [ 834.594025] Variable was created at: [ 834.597733] ip_vs_out+0x1bf/0x4570 [ 834.601350] ip_vs_local_reply6+0xec/0x130 17:14:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r2, r1) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="cd9d4d0571fb00d8d5ca9ba171", 0xd, 0xfffffffffffffffe) keyctl$describe(0x6, r5, &(0x7f00000001c0)=""/215, 0xd7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RLERRORu(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d00000007020010007d776c616e3047504c5cfb657468305d020000009303826c3336173fb4262e4b66b90d7c020000000000000070de1ee16f3f79a70a3f7b3c636a9198e238cba3649735b4b78cae6268e97796bba4b33a9b3a5271d9327471a05cdaffb0520605c01495ddf1b0193b2e44320439dd5489cb72768a7a99527dbff0b2f28010996418"], 0x1d) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95)=0x20000000000, 0x4) listen(r4, 0xffffffffa0010000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0xfffffffffffffde6, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r4) close(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) 17:14:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000000000000950002240000000082f1e7116c1e47a1db0a6dccfc14301ef1bd2f3182374a9f73ecab6f74d64fd951362e538a004f2e59cd464e03e1956caf22d3b03fadcb3749085e64ac522e4e4d472eb03fa061ce01"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000002c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x24) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000640)={r4, 0x2, 0x76, "3ccc31d4737108d4f3e94c1d67549eea82954c2d3772eb0470eb1b7c8589ebd410e85b0801a96c178c15d76d07f77ca9fa5b0c04c571acc944330b94c2253f4c2c6667f4f80f327742cd4c7981d90b2c66ff9a692c65fb432ba6bef572078d2d752c1da3d544983ca2d82baf24793d82c0f2b1976555"}, 0x7e) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2021823e3bede6ffff310019010000000009000000bd1718000000030000000cff772f862124b3106348fa3a74fec8a73f3e6a1dff05a0890ba36aef2d624d4a8367ce2860f31b10cd165e09c9b4ce08d7ea"], 0x20}}, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 17:14:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x8}, @in6={0xa, 0x4e23, 0x62, @mcast2, 0x1}, @in6={0xa, 0x4e23, 0x6, @mcast1}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @broadcast}], 0x90) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:14:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x0, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 834.932487] not chained 1590000 origins [ 834.936558] CPU: 1 PID: 20956 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 834.943865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.953239] Call Trace: [ 834.955867] dump_stack+0x32d/0x480 [ 834.959555] kmsan_internal_chain_origin+0x222/0x240 [ 834.964734] ? save_stack_trace+0xc6/0x110 [ 834.969006] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 834.974142] ? kmsan_internal_chain_origin+0x90/0x240 [ 834.979390] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 834.984787] ? is_bpf_text_address+0x49e/0x4d0 [ 834.989413] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 834.994897] ? in_task_stack+0x12c/0x210 [ 834.999017] __msan_chain_origin+0x6d/0xb0 [ 835.003290] ? kmsan_internal_chain_origin+0x136/0x240 [ 835.008615] __save_stack_trace+0x8be/0xc60 [ 835.013010] ? kmsan_internal_chain_origin+0x136/0x240 [ 835.018324] save_stack_trace+0xc6/0x110 [ 835.022423] kmsan_internal_chain_origin+0x136/0x240 [ 835.027588] ? kmsan_internal_chain_origin+0x136/0x240 [ 835.032903] ? kmsan_memcpy_origins+0x13d/0x190 [ 835.037610] ? __msan_memcpy+0x6f/0x80 [ 835.041533] ? pskb_expand_head+0x436/0x1d20 [ 835.046000] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 835.050180] ? pppol2tp_sendmsg+0x79a/0xba0 [ 835.054529] ? ___sys_sendmsg+0xe3b/0x1240 [ 835.058806] ? __sys_sendmmsg+0x56b/0xa90 [ 835.062977] ? __se_sys_sendmmsg+0xbd/0xe0 [ 835.067238] ? __x64_sys_sendmmsg+0x56/0x70 [ 835.071594] ? do_syscall_64+0xcf/0x110 [ 835.075616] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.081014] ? __msan_poison_alloca+0x1e0/0x270 [ 835.085760] ? __msan_get_context_state+0x9/0x20 [ 835.090548] ? INIT_INT+0xc/0x30 [ 835.093956] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 835.099368] kmsan_memcpy_origins+0x13d/0x190 [ 835.103905] __msan_memcpy+0x6f/0x80 [ 835.107661] pskb_expand_head+0x436/0x1d20 [ 835.111995] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.116053] pppol2tp_sendmsg+0x79a/0xba0 [ 835.120263] ___sys_sendmsg+0xe3b/0x1240 [ 835.124344] ? pppol2tp_getsockopt+0x1060/0x1060 [ 835.129151] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 835.134556] ? kmsan_set_origin+0x7f/0x100 [ 835.138829] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 835.144228] ? _cond_resched+0xc7/0x120 [ 835.148227] __sys_sendmmsg+0x56b/0xa90 [ 835.152258] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 835.157753] ? prepare_exit_to_usermode+0x182/0x4c0 [ 835.162806] __se_sys_sendmmsg+0xbd/0xe0 [ 835.166896] __x64_sys_sendmmsg+0x56/0x70 [ 835.171063] do_syscall_64+0xcf/0x110 [ 835.174905] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.180112] RIP: 0033:0x457569 [ 835.183321] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 835.202240] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 835.209968] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 835.217253] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 835.224548] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 835.231851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 835.239138] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 835.246438] Uninit was stored to memory at: [ 835.250802] kmsan_internal_chain_origin+0x136/0x240 [ 835.255920] __msan_chain_origin+0x6d/0xb0 [ 835.260180] __save_stack_trace+0x8be/0xc60 [ 835.264517] save_stack_trace+0xc6/0x110 [ 835.268605] kmsan_internal_chain_origin+0x136/0x240 [ 835.273730] kmsan_memcpy_origins+0x13d/0x190 [ 835.278239] __msan_memcpy+0x6f/0x80 [ 835.281971] pskb_expand_head+0x436/0x1d20 [ 835.286223] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.290207] pppol2tp_sendmsg+0x79a/0xba0 [ 835.294369] ___sys_sendmsg+0xe3b/0x1240 [ 835.298447] __sys_sendmmsg+0x56b/0xa90 [ 835.302433] __se_sys_sendmmsg+0xbd/0xe0 [ 835.306506] __x64_sys_sendmmsg+0x56/0x70 [ 835.310669] do_syscall_64+0xcf/0x110 [ 835.314505] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.319705] [ 835.321335] Uninit was stored to memory at: [ 835.325676] kmsan_internal_chain_origin+0x136/0x240 [ 835.330793] __msan_chain_origin+0x6d/0xb0 [ 835.335047] __save_stack_trace+0x8be/0xc60 [ 835.339388] save_stack_trace+0xc6/0x110 [ 835.343469] kmsan_internal_chain_origin+0x136/0x240 [ 835.348592] kmsan_memcpy_origins+0x13d/0x190 [ 835.353110] __msan_memcpy+0x6f/0x80 [ 835.356841] pskb_expand_head+0x436/0x1d20 [ 835.361097] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.365092] pppol2tp_sendmsg+0x79a/0xba0 [ 835.369255] ___sys_sendmsg+0xe3b/0x1240 [ 835.373333] __sys_sendmmsg+0x56b/0xa90 [ 835.377335] __se_sys_sendmmsg+0xbd/0xe0 [ 835.381408] __x64_sys_sendmmsg+0x56/0x70 [ 835.385580] do_syscall_64+0xcf/0x110 [ 835.389402] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.394597] [ 835.396227] Uninit was stored to memory at: [ 835.400574] kmsan_internal_chain_origin+0x136/0x240 [ 835.405697] __msan_chain_origin+0x6d/0xb0 [ 835.409947] __save_stack_trace+0x8be/0xc60 [ 835.414283] save_stack_trace+0xc6/0x110 [ 835.418363] kmsan_internal_chain_origin+0x136/0x240 [ 835.423480] kmsan_memcpy_origins+0x13d/0x190 [ 835.428003] __msan_memcpy+0x6f/0x80 [ 835.431737] pskb_expand_head+0x436/0x1d20 [ 835.435988] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.439973] pppol2tp_sendmsg+0x79a/0xba0 [ 835.444136] ___sys_sendmsg+0xe3b/0x1240 [ 835.448209] __sys_sendmmsg+0x56b/0xa90 [ 835.452195] __se_sys_sendmmsg+0xbd/0xe0 [ 835.456268] __x64_sys_sendmmsg+0x56/0x70 [ 835.460433] do_syscall_64+0xcf/0x110 [ 835.464253] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.469457] [ 835.471107] Uninit was stored to memory at: [ 835.475453] kmsan_internal_chain_origin+0x136/0x240 [ 835.480583] __msan_chain_origin+0x6d/0xb0 [ 835.484837] __save_stack_trace+0x8be/0xc60 [ 835.489174] save_stack_trace+0xc6/0x110 [ 835.493255] kmsan_internal_chain_origin+0x136/0x240 [ 835.498375] kmsan_memcpy_origins+0x13d/0x190 [ 835.502886] __msan_memcpy+0x6f/0x80 [ 835.506619] pskb_expand_head+0x436/0x1d20 [ 835.510869] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.514857] pppol2tp_sendmsg+0x79a/0xba0 [ 835.519016] ___sys_sendmsg+0xe3b/0x1240 [ 835.523098] __sys_sendmmsg+0x56b/0xa90 [ 835.527093] __se_sys_sendmmsg+0xbd/0xe0 [ 835.531166] __x64_sys_sendmmsg+0x56/0x70 [ 835.535328] do_syscall_64+0xcf/0x110 [ 835.539152] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.544345] [ 835.545976] Uninit was stored to memory at: [ 835.550316] kmsan_internal_chain_origin+0x136/0x240 [ 835.555436] __msan_chain_origin+0x6d/0xb0 [ 835.559691] __save_stack_trace+0x8be/0xc60 [ 835.564027] save_stack_trace+0xc6/0x110 [ 835.568111] kmsan_internal_chain_origin+0x136/0x240 [ 835.573229] kmsan_memcpy_origins+0x13d/0x190 [ 835.577742] __msan_memcpy+0x6f/0x80 [ 835.581474] pskb_expand_head+0x436/0x1d20 [ 835.585724] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.589710] pppol2tp_sendmsg+0x79a/0xba0 [ 835.593876] ___sys_sendmsg+0xe3b/0x1240 [ 835.597953] __sys_sendmmsg+0x56b/0xa90 [ 835.601941] __se_sys_sendmmsg+0xbd/0xe0 [ 835.606016] __x64_sys_sendmmsg+0x56/0x70 [ 835.610176] do_syscall_64+0xcf/0x110 [ 835.613995] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.619188] [ 835.620818] Uninit was stored to memory at: [ 835.625155] kmsan_internal_chain_origin+0x136/0x240 [ 835.630272] __msan_chain_origin+0x6d/0xb0 [ 835.634526] __save_stack_trace+0x8be/0xc60 [ 835.638870] save_stack_trace+0xc6/0x110 [ 835.642949] kmsan_internal_chain_origin+0x136/0x240 [ 835.648066] kmsan_memcpy_origins+0x13d/0x190 [ 835.652595] __msan_memcpy+0x6f/0x80 [ 835.656326] pskb_expand_head+0x436/0x1d20 [ 835.660587] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.664587] pppol2tp_sendmsg+0x79a/0xba0 [ 835.668748] ___sys_sendmsg+0xe3b/0x1240 [ 835.672825] __sys_sendmmsg+0x56b/0xa90 [ 835.676818] __se_sys_sendmmsg+0xbd/0xe0 [ 835.680895] __x64_sys_sendmmsg+0x56/0x70 [ 835.685090] do_syscall_64+0xcf/0x110 [ 835.688911] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.694109] [ 835.695743] Uninit was stored to memory at: [ 835.700084] kmsan_internal_chain_origin+0x136/0x240 [ 835.705203] __msan_chain_origin+0x6d/0xb0 [ 835.709456] __save_stack_trace+0x8be/0xc60 [ 835.713793] save_stack_trace+0xc6/0x110 [ 835.717868] kmsan_internal_chain_origin+0x136/0x240 [ 835.722987] kmsan_memcpy_origins+0x13d/0x190 [ 835.727498] __msan_memcpy+0x6f/0x80 [ 835.731229] pskb_expand_head+0x436/0x1d20 [ 835.735483] l2tp_xmit_skb+0x5a7/0x24b0 [ 835.739470] pppol2tp_sendmsg+0x79a/0xba0 [ 835.743638] ___sys_sendmsg+0xe3b/0x1240 [ 835.747711] __sys_sendmmsg+0x56b/0xa90 [ 835.751700] __se_sys_sendmmsg+0xbd/0xe0 [ 835.755776] __x64_sys_sendmmsg+0x56/0x70 [ 835.759938] do_syscall_64+0xcf/0x110 [ 835.763755] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 835.768949] [ 835.770588] Local variable description: ----iph@ip_vs_out [ 835.776130] Variable was created at: [ 835.779860] ip_vs_out+0x1bf/0x4570 [ 835.783506] ip_vs_local_reply6+0xec/0x130 17:14:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x120) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200)={0xeb35}, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "91cc3421577253da099dea1c17937ee55b83b4e35cdfb6f86fe45d4ae441dcf2465608799db9700f0080be0bf4dac3b48ca662c93bdc05ab91a96ceb99c714938d733b8dffd938e87a0674d85bcdc7bb32b960e21d63846603f70937ab97f8f8787e95cacd1330ae65a3c8c3f0c4102164e5fc4a5100cb56ff78574febb3c630134fa86c7ce5053c1679521187151cb8c2ebdd1f"}, 0x98) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3700000032001901000000080000000043000000a76d03000000000000000030"], 0x20}}, 0x0) [ 836.005809] not chained 1600000 origins [ 836.009854] CPU: 0 PID: 20956 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 836.017146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.026517] Call Trace: [ 836.029162] dump_stack+0x32d/0x480 [ 836.032842] kmsan_internal_chain_origin+0x222/0x240 [ 836.038008] ? save_stack_trace+0xc6/0x110 [ 836.042277] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 836.047416] ? kmsan_internal_chain_origin+0x90/0x240 [ 836.052654] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 836.058046] ? is_bpf_text_address+0x49e/0x4d0 [ 836.062671] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 836.068155] ? in_task_stack+0x12c/0x210 [ 836.072258] __msan_chain_origin+0x6d/0xb0 [ 836.076528] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.081938] __save_stack_trace+0x8be/0xc60 [ 836.086326] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.091727] save_stack_trace+0xc6/0x110 [ 836.095842] kmsan_internal_chain_origin+0x136/0x240 [ 836.100990] ? kmsan_internal_chain_origin+0x136/0x240 [ 836.106295] ? kmsan_memcpy_origins+0x13d/0x190 [ 836.110989] ? __msan_memcpy+0x6f/0x80 [ 836.114907] ? pskb_expand_head+0x436/0x1d20 [ 836.119342] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 836.123514] ? pppol2tp_sendmsg+0x79a/0xba0 [ 836.127859] ? ___sys_sendmsg+0xe3b/0x1240 [ 836.132120] ? __sys_sendmmsg+0x56b/0xa90 [ 836.136295] ? __se_sys_sendmmsg+0xbd/0xe0 [ 836.140557] ? __x64_sys_sendmmsg+0x56/0x70 [ 836.144928] ? do_syscall_64+0xcf/0x110 [ 836.148932] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.154326] ? __msan_poison_alloca+0x1e0/0x270 [ 836.159060] ? __msan_get_context_state+0x9/0x20 [ 836.163845] ? INIT_INT+0xc/0x30 [ 836.167250] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 836.172666] kmsan_memcpy_origins+0x13d/0x190 [ 836.177206] __msan_memcpy+0x6f/0x80 [ 836.180953] pskb_expand_head+0x436/0x1d20 [ 836.185254] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.189305] pppol2tp_sendmsg+0x79a/0xba0 [ 836.193542] ___sys_sendmsg+0xe3b/0x1240 [ 836.197645] ? pppol2tp_getsockopt+0x1060/0x1060 [ 836.202460] ? __msan_poison_alloca+0x1e0/0x270 [ 836.207155] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 836.212557] ? rcu_all_qs+0x3b/0x2b0 [ 836.216312] ? _cond_resched+0x59/0x120 [ 836.220326] ? rcu_all_qs+0x53/0x2b0 [ 836.224064] ? _cond_resched+0x37/0x120 [ 836.228061] ? __sys_sendmmsg+0x7c9/0xa90 [ 836.232241] ? _cond_resched+0x59/0x120 [ 836.236245] __sys_sendmmsg+0x56b/0xa90 [ 836.240281] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 836.245756] ? prepare_exit_to_usermode+0x182/0x4c0 [ 836.250810] __se_sys_sendmmsg+0xbd/0xe0 [ 836.254905] __x64_sys_sendmmsg+0x56/0x70 [ 836.259077] do_syscall_64+0xcf/0x110 [ 836.262913] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.268127] RIP: 0033:0x457569 [ 836.271348] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 836.290296] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.298027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 836.305319] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 836.312619] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 836.319916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 836.327208] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 836.334516] Uninit was stored to memory at: [ 836.338875] kmsan_internal_chain_origin+0x136/0x240 [ 836.344002] __msan_chain_origin+0x6d/0xb0 [ 836.348270] __save_stack_trace+0x8be/0xc60 [ 836.352638] save_stack_trace+0xc6/0x110 [ 836.356725] kmsan_internal_chain_origin+0x136/0x240 [ 836.361855] kmsan_memcpy_origins+0x13d/0x190 [ 836.366897] __msan_memcpy+0x6f/0x80 [ 836.370659] pskb_expand_head+0x436/0x1d20 [ 836.374921] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.378934] pppol2tp_sendmsg+0x79a/0xba0 [ 836.383120] ___sys_sendmsg+0xe3b/0x1240 [ 836.387203] __sys_sendmmsg+0x56b/0xa90 [ 836.391202] __se_sys_sendmmsg+0xbd/0xe0 [ 836.395297] __x64_sys_sendmmsg+0x56/0x70 [ 836.399470] do_syscall_64+0xcf/0x110 [ 836.403311] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.408512] [ 836.410153] Uninit was stored to memory at: [ 836.414510] kmsan_internal_chain_origin+0x136/0x240 [ 836.419666] __msan_chain_origin+0x6d/0xb0 [ 836.423935] __save_stack_trace+0x8be/0xc60 [ 836.428283] save_stack_trace+0xc6/0x110 [ 836.432377] kmsan_internal_chain_origin+0x136/0x240 [ 836.437521] kmsan_memcpy_origins+0x13d/0x190 [ 836.442060] __msan_memcpy+0x6f/0x80 [ 836.445803] pskb_expand_head+0x436/0x1d20 [ 836.450072] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.454071] pppol2tp_sendmsg+0x79a/0xba0 [ 836.458244] ___sys_sendmsg+0xe3b/0x1240 [ 836.462332] __sys_sendmmsg+0x56b/0xa90 [ 836.466328] __se_sys_sendmmsg+0xbd/0xe0 [ 836.470414] __x64_sys_sendmmsg+0x56/0x70 [ 836.474606] do_syscall_64+0xcf/0x110 [ 836.478440] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.483637] [ 836.485284] Uninit was stored to memory at: [ 836.489638] kmsan_internal_chain_origin+0x136/0x240 [ 836.494777] __msan_chain_origin+0x6d/0xb0 [ 836.499248] __save_stack_trace+0x8be/0xc60 [ 836.503613] save_stack_trace+0xc6/0x110 [ 836.507701] kmsan_internal_chain_origin+0x136/0x240 [ 836.512832] kmsan_memcpy_origins+0x13d/0x190 [ 836.517359] __msan_memcpy+0x6f/0x80 [ 836.521103] pskb_expand_head+0x436/0x1d20 [ 836.525373] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.529377] pppol2tp_sendmsg+0x79a/0xba0 [ 836.533555] ___sys_sendmsg+0xe3b/0x1240 [ 836.537657] __sys_sendmmsg+0x56b/0xa90 [ 836.541657] __se_sys_sendmmsg+0xbd/0xe0 [ 836.545747] __x64_sys_sendmmsg+0x56/0x70 [ 836.549925] do_syscall_64+0xcf/0x110 17:14:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x280081, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000000c0)={0x1f, 0x8, 0x9, 0x71, 0x5, 0x1}) listen(r0, 0xffffffffa0010000) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x10000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:16 executing program 3: r0 = inotify_init() fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000140)=0x7ff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x100, 0x0) 17:14:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 836.553765] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.558964] [ 836.560613] Uninit was stored to memory at: [ 836.564967] kmsan_internal_chain_origin+0x136/0x240 [ 836.570102] __msan_chain_origin+0x6d/0xb0 [ 836.574371] __save_stack_trace+0x8be/0xc60 [ 836.578720] save_stack_trace+0xc6/0x110 [ 836.579982] netlink: get zone limit has 4 unknown bytes [ 836.582799] kmsan_internal_chain_origin+0x136/0x240 [ 836.582822] kmsan_memcpy_origins+0x13d/0x190 [ 836.582844] __msan_memcpy+0x6f/0x80 [ 836.582868] pskb_expand_head+0x436/0x1d20 [ 836.582891] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.582910] pppol2tp_sendmsg+0x79a/0xba0 [ 836.582929] ___sys_sendmsg+0xe3b/0x1240 [ 836.582947] __sys_sendmmsg+0x56b/0xa90 [ 836.582965] __se_sys_sendmmsg+0xbd/0xe0 [ 836.583001] __x64_sys_sendmmsg+0x56/0x70 [ 836.617552] netlink: get zone limit has 4 unknown bytes [ 836.618092] do_syscall_64+0xcf/0x110 [ 836.618119] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.618127] [ 836.618135] Uninit was stored to memory at: [ 836.618160] kmsan_internal_chain_origin+0x136/0x240 [ 836.618182] __msan_chain_origin+0x6d/0xb0 [ 836.618203] __save_stack_trace+0x8be/0xc60 [ 836.618223] save_stack_trace+0xc6/0x110 [ 836.618244] kmsan_internal_chain_origin+0x136/0x240 [ 836.618265] kmsan_memcpy_origins+0x13d/0x190 [ 836.618284] __msan_memcpy+0x6f/0x80 [ 836.618321] pskb_expand_head+0x436/0x1d20 [ 836.686058] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.690061] pppol2tp_sendmsg+0x79a/0xba0 [ 836.694232] ___sys_sendmsg+0xe3b/0x1240 [ 836.698316] __sys_sendmmsg+0x56b/0xa90 [ 836.702315] __se_sys_sendmmsg+0xbd/0xe0 [ 836.706399] __x64_sys_sendmmsg+0x56/0x70 [ 836.710591] do_syscall_64+0xcf/0x110 [ 836.714423] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.719620] [ 836.721254] Uninit was stored to memory at: [ 836.725611] kmsan_internal_chain_origin+0x136/0x240 [ 836.730739] __msan_chain_origin+0x6d/0xb0 [ 836.735006] __save_stack_trace+0x8be/0xc60 [ 836.739348] save_stack_trace+0xc6/0x110 [ 836.743435] kmsan_internal_chain_origin+0x136/0x240 [ 836.748560] kmsan_memcpy_origins+0x13d/0x190 [ 836.753095] __msan_memcpy+0x6f/0x80 [ 836.756839] pskb_expand_head+0x436/0x1d20 [ 836.761101] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.765103] pppol2tp_sendmsg+0x79a/0xba0 [ 836.769273] ___sys_sendmsg+0xe3b/0x1240 [ 836.773357] __sys_sendmmsg+0x56b/0xa90 [ 836.777352] __se_sys_sendmmsg+0xbd/0xe0 [ 836.781441] __x64_sys_sendmmsg+0x56/0x70 [ 836.785620] do_syscall_64+0xcf/0x110 [ 836.789456] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.794671] [ 836.796330] Uninit was stored to memory at: [ 836.800698] kmsan_internal_chain_origin+0x136/0x240 [ 836.805828] __msan_chain_origin+0x6d/0xb0 [ 836.810083] __save_stack_trace+0x8be/0xc60 [ 836.814425] save_stack_trace+0xc6/0x110 [ 836.818505] kmsan_internal_chain_origin+0x136/0x240 [ 836.823618] kmsan_memcpy_origins+0x13d/0x190 [ 836.828125] __msan_memcpy+0x6f/0x80 [ 836.831858] pskb_expand_head+0x436/0x1d20 [ 836.836115] l2tp_xmit_skb+0x5a7/0x24b0 [ 836.840100] pppol2tp_sendmsg+0x79a/0xba0 [ 836.844260] ___sys_sendmsg+0xe3b/0x1240 [ 836.848334] __sys_sendmmsg+0x56b/0xa90 [ 836.852334] __se_sys_sendmmsg+0xbd/0xe0 [ 836.856418] __x64_sys_sendmmsg+0x56/0x70 [ 836.860604] do_syscall_64+0xcf/0x110 [ 836.864432] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 836.869636] [ 836.871278] Local variable description: ----iph@ip_vs_out [ 836.876823] Variable was created at: [ 836.880589] ip_vs_out+0x1bf/0x4570 [ 836.884239] ip_vs_local_reply6+0xec/0x130 [ 836.988956] not chained 1610000 origins [ 836.993004] CPU: 0 PID: 20956 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #85 [ 837.000292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.009668] Call Trace: [ 837.012286] dump_stack+0x32d/0x480 [ 837.015964] kmsan_internal_chain_origin+0x222/0x240 [ 837.021129] ? save_stack_trace+0xc6/0x110 [ 837.025399] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 837.030536] ? kmsan_internal_chain_origin+0x90/0x240 [ 837.035787] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 837.041176] ? is_bpf_text_address+0x49e/0x4d0 [ 837.045792] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 837.051272] ? in_task_stack+0x12c/0x210 [ 837.055377] __msan_chain_origin+0x6d/0xb0 [ 837.059657] ? ___sys_sendmsg+0xe3b/0x1240 [ 837.063926] __save_stack_trace+0x8be/0xc60 [ 837.068305] ? ___sys_sendmsg+0xe3b/0x1240 [ 837.072588] save_stack_trace+0xc6/0x110 [ 837.076688] kmsan_internal_chain_origin+0x136/0x240 [ 837.081837] ? kmsan_internal_chain_origin+0x136/0x240 [ 837.087140] ? kmsan_memcpy_origins+0x13d/0x190 [ 837.091840] ? __msan_memcpy+0x6f/0x80 [ 837.095774] ? pskb_expand_head+0x436/0x1d20 [ 837.100214] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 837.104394] ? pppol2tp_sendmsg+0x79a/0xba0 [ 837.108746] ? ___sys_sendmsg+0xe3b/0x1240 [ 837.113008] ? __sys_sendmmsg+0x56b/0xa90 [ 837.117186] ? __se_sys_sendmmsg+0xbd/0xe0 [ 837.121449] ? __x64_sys_sendmmsg+0x56/0x70 [ 837.125800] ? do_syscall_64+0xcf/0x110 [ 837.129797] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.135191] ? __msan_poison_alloca+0x1e0/0x270 [ 837.139916] ? __msan_get_context_state+0x9/0x20 [ 837.144691] ? INIT_INT+0xc/0x30 [ 837.148078] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 837.153480] kmsan_memcpy_origins+0x13d/0x190 [ 837.158007] __msan_memcpy+0x6f/0x80 [ 837.161748] pskb_expand_head+0x436/0x1d20 [ 837.166040] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.170074] pppol2tp_sendmsg+0x79a/0xba0 [ 837.174282] ___sys_sendmsg+0xe3b/0x1240 [ 837.178367] ? pppol2tp_getsockopt+0x1060/0x1060 [ 837.183173] ? __msan_poison_alloca+0x1e0/0x270 [ 837.187862] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 837.193262] ? rcu_all_qs+0x3b/0x2b0 [ 837.196993] ? _cond_resched+0x59/0x120 [ 837.200993] ? rcu_all_qs+0x53/0x2b0 [ 837.204726] ? _cond_resched+0x37/0x120 [ 837.208716] ? __sys_sendmmsg+0x7c9/0xa90 [ 837.212909] ? _cond_resched+0x59/0x120 [ 837.216905] __sys_sendmmsg+0x56b/0xa90 [ 837.220933] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 837.226404] ? prepare_exit_to_usermode+0x182/0x4c0 [ 837.231452] __se_sys_sendmmsg+0xbd/0xe0 [ 837.235549] __x64_sys_sendmmsg+0x56/0x70 [ 837.239738] do_syscall_64+0xcf/0x110 [ 837.243584] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.248797] RIP: 0033:0x457569 [ 837.252012] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 837.270927] RSP: 002b:00007f2cd6737c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 837.278657] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 837.285942] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 837.293225] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 837.300510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cd67386d4 [ 837.307802] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 837.315108] Uninit was stored to memory at: [ 837.319456] kmsan_internal_chain_origin+0x136/0x240 [ 837.324591] __msan_chain_origin+0x6d/0xb0 [ 837.328845] __save_stack_trace+0x8be/0xc60 [ 837.333188] save_stack_trace+0xc6/0x110 [ 837.337270] kmsan_internal_chain_origin+0x136/0x240 [ 837.342389] kmsan_memcpy_origins+0x13d/0x190 [ 837.346902] __msan_memcpy+0x6f/0x80 [ 837.350636] pskb_expand_head+0x436/0x1d20 [ 837.354889] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.358877] pppol2tp_sendmsg+0x79a/0xba0 [ 837.363044] ___sys_sendmsg+0xe3b/0x1240 [ 837.367118] __sys_sendmmsg+0x56b/0xa90 [ 837.371106] __se_sys_sendmmsg+0xbd/0xe0 [ 837.375186] __x64_sys_sendmmsg+0x56/0x70 [ 837.379350] do_syscall_64+0xcf/0x110 [ 837.383183] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.388388] [ 837.390018] Uninit was stored to memory at: [ 837.394357] kmsan_internal_chain_origin+0x136/0x240 [ 837.399474] __msan_chain_origin+0x6d/0xb0 [ 837.403725] __save_stack_trace+0x8be/0xc60 [ 837.408067] save_stack_trace+0xc6/0x110 [ 837.412149] kmsan_internal_chain_origin+0x136/0x240 [ 837.417267] kmsan_memcpy_origins+0x13d/0x190 [ 837.421791] __msan_memcpy+0x6f/0x80 [ 837.425523] pskb_expand_head+0x436/0x1d20 [ 837.429793] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.433785] pppol2tp_sendmsg+0x79a/0xba0 [ 837.437963] ___sys_sendmsg+0xe3b/0x1240 [ 837.442042] __sys_sendmmsg+0x56b/0xa90 [ 837.446032] __se_sys_sendmmsg+0xbd/0xe0 [ 837.450112] __x64_sys_sendmmsg+0x56/0x70 [ 837.454275] do_syscall_64+0xcf/0x110 [ 837.458094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.463291] [ 837.464928] Uninit was stored to memory at: [ 837.469264] kmsan_internal_chain_origin+0x136/0x240 [ 837.474383] __msan_chain_origin+0x6d/0xb0 [ 837.478634] __save_stack_trace+0x8be/0xc60 [ 837.482972] save_stack_trace+0xc6/0x110 [ 837.487053] kmsan_internal_chain_origin+0x136/0x240 [ 837.492174] kmsan_memcpy_origins+0x13d/0x190 [ 837.496685] __msan_memcpy+0x6f/0x80 [ 837.500423] pskb_expand_head+0x436/0x1d20 [ 837.504678] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.508666] pppol2tp_sendmsg+0x79a/0xba0 [ 837.512828] ___sys_sendmsg+0xe3b/0x1240 [ 837.516903] __sys_sendmmsg+0x56b/0xa90 [ 837.520888] __se_sys_sendmmsg+0xbd/0xe0 [ 837.524964] __x64_sys_sendmmsg+0x56/0x70 [ 837.529129] do_syscall_64+0xcf/0x110 [ 837.532950] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.538147] [ 837.539783] Uninit was stored to memory at: [ 837.544121] kmsan_internal_chain_origin+0x136/0x240 [ 837.549241] __msan_chain_origin+0x6d/0xb0 [ 837.553493] __save_stack_trace+0x8be/0xc60 [ 837.557829] save_stack_trace+0xc6/0x110 [ 837.561907] kmsan_internal_chain_origin+0x136/0x240 [ 837.567028] kmsan_memcpy_origins+0x13d/0x190 [ 837.571543] __msan_memcpy+0x6f/0x80 [ 837.575290] pskb_expand_head+0x436/0x1d20 [ 837.579544] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.583543] pppol2tp_sendmsg+0x79a/0xba0 [ 837.587724] ___sys_sendmsg+0xe3b/0x1240 [ 837.591798] __sys_sendmmsg+0x56b/0xa90 [ 837.595784] __se_sys_sendmmsg+0xbd/0xe0 [ 837.599861] __x64_sys_sendmmsg+0x56/0x70 [ 837.604024] do_syscall_64+0xcf/0x110 [ 837.607843] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.613035] [ 837.614667] Uninit was stored to memory at: [ 837.619007] kmsan_internal_chain_origin+0x136/0x240 [ 837.624129] __msan_chain_origin+0x6d/0xb0 [ 837.628379] __save_stack_trace+0x8be/0xc60 [ 837.632717] save_stack_trace+0xc6/0x110 [ 837.636795] kmsan_internal_chain_origin+0x136/0x240 [ 837.641924] kmsan_memcpy_origins+0x13d/0x190 [ 837.646436] __msan_memcpy+0x6f/0x80 [ 837.650167] pskb_expand_head+0x436/0x1d20 [ 837.654421] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.658412] pppol2tp_sendmsg+0x79a/0xba0 [ 837.662594] ___sys_sendmsg+0xe3b/0x1240 [ 837.666674] __sys_sendmmsg+0x56b/0xa90 [ 837.670665] __se_sys_sendmmsg+0xbd/0xe0 [ 837.674742] __x64_sys_sendmmsg+0x56/0x70 [ 837.678905] do_syscall_64+0xcf/0x110 [ 837.682726] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.687918] [ 837.689552] Uninit was stored to memory at: [ 837.693910] kmsan_internal_chain_origin+0x136/0x240 [ 837.699032] __msan_chain_origin+0x6d/0xb0 [ 837.703286] __save_stack_trace+0x8be/0xc60 [ 837.707628] save_stack_trace+0xc6/0x110 [ 837.711707] kmsan_internal_chain_origin+0x136/0x240 [ 837.716828] kmsan_memcpy_origins+0x13d/0x190 [ 837.721338] __msan_memcpy+0x6f/0x80 [ 837.725068] pskb_expand_head+0x436/0x1d20 [ 837.729321] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.733313] pppol2tp_sendmsg+0x79a/0xba0 [ 837.737473] ___sys_sendmsg+0xe3b/0x1240 [ 837.741548] __sys_sendmmsg+0x56b/0xa90 [ 837.745613] __se_sys_sendmmsg+0xbd/0xe0 [ 837.749692] __x64_sys_sendmmsg+0x56/0x70 [ 837.753855] do_syscall_64+0xcf/0x110 [ 837.757677] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.762872] [ 837.764505] Uninit was stored to memory at: [ 837.768849] kmsan_internal_chain_origin+0x136/0x240 [ 837.773972] __msan_chain_origin+0x6d/0xb0 [ 837.778227] __save_stack_trace+0x8be/0xc60 [ 837.782581] save_stack_trace+0xc6/0x110 [ 837.786663] kmsan_internal_chain_origin+0x136/0x240 [ 837.791782] kmsan_memcpy_origins+0x13d/0x190 [ 837.796294] __msan_memcpy+0x6f/0x80 [ 837.800023] pskb_expand_head+0x436/0x1d20 [ 837.804287] l2tp_xmit_skb+0x5a7/0x24b0 [ 837.808278] pppol2tp_sendmsg+0x79a/0xba0 [ 837.812440] ___sys_sendmsg+0xe3b/0x1240 [ 837.816518] __sys_sendmmsg+0x56b/0xa90 [ 837.820509] __se_sys_sendmmsg+0xbd/0xe0 [ 837.824600] __x64_sys_sendmmsg+0x56/0x70 [ 837.828767] do_syscall_64+0xcf/0x110 [ 837.832606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 837.837808] [ 837.839445] Local variable description: ----iph@ip_vs_out [ 837.844982] Variable was created at: [ 837.848713] ip_vs_out+0x1bf/0x4570 [ 837.852360] ip_vs_local_reply6+0xec/0x130 17:14:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7a6, 0x301000) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="84580fc4da65e3489d2942384970cff9a908d60ad81518da9ff3", 0x1a}, {&(0x7f00000000c0)="bd9b1d58893cdf8bbf42af00f6cac5510f8bae2368af4ef77ae44ba589c686e7e455ca7c8bcdfec46927d234b12811706ee334ca7723d699977cdaffdfb2e0efee8e15d12917c2fe66ebdee3bda7f9c58842cbd3bff780cbddcc947c653832304f606819", 0x64}, {&(0x7f00000001c0)="58f04235244885d9b5ec59", 0xb}, {&(0x7f0000000200)="106f7eb881bdc0ea9d2dbc6d0b8cc189106b6def3b03415760d03ba36c9ee475f9ad41fb53c1f9fed9ebc4c5590784460fcfc256cf1775590b496e85cbd3d1638dac882d1686372352ccbb2331fde2a3cb8bdf177309b57fe012b710d245d7d88e0614", 0x63}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {0x0, 0x0, 0x4ca8}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:18 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x80100, 0x0) openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000005f005dad664cd51786c2fbc095", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) 17:14:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0xa, [0x10001, 0xfffffffffffffe01, 0x0, 0x1000, 0x4, 0x3, 0x10001, 0x9, 0x6, 0xbd]}, &(0x7f0000000180)=0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) pread64(r0, &(0x7f00000000c0)=""/140, 0x8c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f00000004c0)=0x10) close(r1) getpid() close(r2) 17:14:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x48002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400201) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3}) sendmsg(r4, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 838.120943] netlink: get zone limit has 4 unknown bytes [ 838.190330] netlink: get zone limit has 4 unknown bytes 17:14:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000000c0)={0x5, 0x1f, 0x40, [], &(0x7f0000000040)=0x5}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={r3, 0x35, "a3f4e7da21ce02ea275e5511b54cfa029102b2668049f9eab1a112fb828831240cd614a8682d6fe447e3711b51a8d34f702272c9fd"}, &(0x7f0000000140)=0x3d) close(r2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) close(r1) 17:14:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, r1, 0xc10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff7e}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb380000000000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xfff5d35339b68e60}, 0x8801) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0xa8, 0x0, 0x3, 0x0, 0x3, 0x40001, 0x0, 0xffffffff, 0x1, 0x6, 0x0, 0x1, 0x3, 0x10000, 0x0, 0x7fffffff, 0x8000, 0x4, 0x7, 0x958, 0x7, 0x7, 0x1, 0xfff, 0x8, 0x7, 0x0, 0x2000000000, 0x5, 0x400, 0x209813bb, 0x5, 0x10001, 0x80000000, 0x100000000000000, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x940, 0x6, 0x1000, 0x3, 0x3, 0x9549, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x800}, 0x28, 0x1) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000240)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x1, 0x1, @start={0x100000001, 0x1}}) 17:14:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1805002803000000000000000000a5e4d6fdec607ccddd5be40000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) socket$rds(0x15, 0x5, 0x0) r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000640)=""/188) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 838.732774] netlink: get zone limit has 4 unknown bytes 17:14:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000380)={0x2, 0x4, 0x7ff, 0x5, 0x9, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x4002, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x13}}}, 0x6}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x1, 0x94}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffbff, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) 17:14:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000680)={'broute\x00', 0x0, 0x3, 0x2b, [], 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000640)=""/43}, &(0x7f0000000700)=0x78) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@empty, @loopback}, 0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7d, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1, 0x10, 0x0, 0x67}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4, 0xfffffffffffffff9}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0x1, 0x1}, 0x0, 0x5, 0x3, {0x3, 0x5}, 0x5, 0x7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) [ 839.213723] netlink: get zone limit has 4 unknown bytes 17:14:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101803, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000001c0)) 17:14:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140), 0xfffffe73) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000140)={{0xfffffffffffffe01, 0xd21a}, {0x7ff, 0x40}, 0x6, 0x1, 0xb7}) [ 839.633479] QAT: Invalid ioctl [ 839.701100] netlink: get zone limit has 4 unknown bytes 17:14:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 839.744429] netlink: get zone limit has 4 unknown bytes 17:14:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1304000009006c2bee0f44746a6d255ce60000f6e8764ddab9b59739a6d2"], 0x400000) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) timerfd_create(0x9, 0x80000) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0xffffffa2, &(0x7f0000000500)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/255, 0xff}, {&(0x7f0000002840)=""/72, 0x48}, {&(0x7f00000017c0)=""/89, 0x59}], 0x4, &(0x7f0000001840)=""/4096, 0x1000, 0x101}, 0x2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000640)={'teql0\x00', {0x2, 0x4e20}}) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) listen(r2, 0x3444) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) 17:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f00000000c0)) r2 = eventfd(0x0) unshare(0x20040600) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) 17:14:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 840.288466] netlink: get zone limit has 4 unknown bytes [ 840.312927] netlink: get zone limit has 4 unknown bytes 17:14:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000080), 0x529b2b444e65310, 0x0) 17:14:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x600080, 0x180) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) sendmmsg$inet_sctp(r0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) 17:14:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000c004b06e829e50157fee9c56079772d249c00f80700010000000000"], 0x20}}, 0x0) 17:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x2, 0x8, 0x0, 0x7fff, 0x2, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="c6ac07", 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183, 0x0, 0x0, [], 0x0, 0xfffffffffffffffe}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000680)={@multicast2, @empty, 0x0}, &(0x7f00000006c0)=0xc) sendmmsg(r2, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="aa3860bb2a6fde71ebb6b9443494120c026a734e0d6e28fd7837c020ec7561c123f9a6bc7af614698e73ce3e81cedc441358baf5ad", 0x35}, {&(0x7f0000000080)="8100a242cf001fdfef103898bd90b25b0750af026039dcc642d17daeeda3991111302265a570a76bf86f69d02a2d06731100b3406c36c97155c006486c78d87e465a621879d82c5c64a873d145695e84635245", 0x53}, {&(0x7f0000000100)="a97b6a333128d53e15018e9dec70a2a06b924cb4", 0x14}, {&(0x7f00000001c0)="59f78728ab8aa701da08f43a95e1b146dc71c7a5caa06edc44076f0f4ec60dc62754800f69601d4c4a80c6124f31beaa2f15ec79de7543eb3f3bfaba59878169d82a8b88377088c001011c0d754697680be7ca0d86d8a649745ee70a57135fc91809991855969c43d9e94b7b8111efc13f013218dfc0645d434b317f801ad5bab8c68c52355f340ec4c081ebe78fab14f2762b7005bb0df4b66e813cb01f4fce6ef736340006efd42e115ea83138afb5de", 0xb1}, {&(0x7f00000003c0)="ad2b3a455cd71629a77944ffd3845ac1919f0d9d667a1cb9a625857fb173dd180d4938ace15077247363d4a4a61e382d18d0fe7abdabe40ac18677c45ec0af3d9bed2decb4a856906ad2dd470204a09a2cbb7533b7ce5e704fe0c1e7fd98c38841054f028ffbff825f2bc0f14849cb490b6389acaa94deb9c8d131065facc30887e9af3e85eae03843a4a4f5de293673b14ee55e1c23d6d0ccff8888aecbb1ccaa5e95a45abf1b9aad4ca450aef2f281dd356040adf6eb2408b3cdc40d2531a3d5d2a5799d4d5407407fff095af7e5a981df3ad9fef52073f21a30a8762988a4cf", 0xe1}, {&(0x7f00000004c0)="5ffd6465f4a41265c878c5e0c4827349abc3e4f0d0ee5942f47d974df03128c74d63bc9709ec621e934f97b39af160cf5868d9819df687b328d0fc9181b18b83ff279e156063a07b931a0150e64bcb06882564cfde69117a14fa9f39d05aa0ff999d9bf4435a440876bac800ed9d4e66c87aeb270d19bf80e11316d0bd9261e6db23c7cdd91f0aefee70aac43b827285cb0050bf89a89738c9c78f25ac24dd62d906f9872c99179a64e30f164da662", 0xaf}, {&(0x7f0000000280)}, {&(0x7f0000000580)="6b79e30bdfb7d46021f085c9ae6f8b2816b0e18035f45c56525f70ad4ef9b07c5f9381c17698bd214b12a4471d0539eb167af4188e359b03f31ff0fa6360a339fe292e1f4770c31fc4ca7a14f8b079fa748309d301b1bf15586cf2b17c0bdaab8c0c1d4d93854cb86b", 0x69}], 0x8, 0x0, 0x0, 0x20008000}, 0x100}, {{&(0x7f0000000700)=@hci={0x1f, r3, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)="7ab42331f0b5c04f43811286a50b7793f1bf8b070cf4408175096214ef2e377f714b2f9f3fbf2ece10f845cc2cf21022b3739b752c27e2ab3ddea493a15219", 0x3f}], 0x1, &(0x7f0000000800)=[{0x1010, 0x197, 0x95ff, "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"}, {0x58, 0x109, 0x5, "d5310c905ea391007a9ce3de89b871aaf39b1fdd0c83bff680e1b0cb065d475665659e8c03eaf38dce04da09d4b3e3eac83acd90c1a9ee79c6468428c0c425a57376"}, {0x40, 0x6, 0x796c, "bfdc1f87d87b27b47e43237182304b3b6adc20ec6cda785b3da5a5f9c0e1a76529ee04aa74fa38e15236c2"}], 0x10a8, 0x4810}, 0x1000}, {{&(0x7f00000018c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001940)="ad5312a304589a462692f0a9da475e700525239aa09ec76ce62e8c55816cd3b6df93d831c1fc9ca3673afa19d9805525294bc65dcd03800de1112e8deecb52acd08063e9e069e3b0cfbaf9f2d904c2a3ea92114f834a2ffd48b7779b5e20fc13d7135c3876084a0f549e0db13c3b4308b47c088f9202403a5fba6c03f338a528e9a3b47a22decaf597b8fcf6de9ce59497", 0x91}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="cc1e5ac82970b8563fc12a4fc43b08a91d41104a331323526595f2ef3438b5f317244dac7b459062a2ed9a5f24c9a5681b3069eb5c11e7d853e5d357be2a598ac41bd99de8111617d967ffe16338c80a6136a38d22ee8de91b83399b3fb5b72d2578e90beb7241c989a47d323dc332a445c74bdb5b90e5c0a2b7550d3e9df22dcbb2c499b6287a6206ac96dcad78eab105b6dc3dbe789e0be43dad8c94c8fd71b40e55135db207f9432901e40c08f1fc5a671a86cd51c7e52001b384af216658bd6b4638b8235181701a49c90484201a73664589c17f86f8d3072baf6b9a058576c55019aceb0b7cc16671496a0f96", 0xef}, {&(0x7f0000001b40)="85d011bae8f806f7ca70240d1e08190cc37323c2896d1faf30ff6ff4f93054414e79b775d5a8d20c554b82c09852fd41b9b93746fc6372a8823eb4760ee6ffa783f13e7bbf2c46807653d1cfbd4088f83cedab5391c9881eeb309e1490be28511fc49076df1bf1e33cb2c54d0003d8f2f84c7b9bb4d46e4344fdc0e5282de3e917df032eff13363a81da5efda0522b1e42728fdad4093225e7a049a97a131a378c3cf4f3ce1f5bc78d3d42d766ef5b79b0141f10af60afd66cbe266958ebec6e684fbf4c4b1070108e6ec74113f4580af388b7748459937313578808bcad7e4f5cf0130082c186953de46aa24c8c00a2f39b0a2d533dd767df", 0xf9}, {&(0x7f0000001c40)="37a8ecb0c06af32c4030a50d2cce166d90a3086e2713bedd0c95c8865bb3518ef0ced7d305b64d27842d58b1c08082ba23f6780bb9ead7d772e87fe5698dc18a0ba7a69b4f6bf6728a0418efb112d1b7b64845b91486e47621e816e935f075af9ab2d840f433cb47", 0x68}, {&(0x7f0000001cc0)="7a6d6b5782035cdd831a493449cc1fdc1c3201edcdf71d45e83c2c609fee19696133783675d83f52319592249491a200d199a5a40365bb8295099e8377b227ee057ca5cba2333f2ff4d4754d0b0ba8875ba9f1760ae1c825ff06d202adf9cae4e8", 0x61}, {&(0x7f0000001d40)="dd977d64d57a53c10116d5b4ed42cc31fae558bba3e54f189d352710e88152f57b36875f42e813188e62886e1d72eb5c54535142dde0b114a939387a85f373246fd9ebb742c41d1cfa268459a7f239d7086aeb0a22f5f56586c22c967c0b0ad4b7e6ad3a1d0bbeda9ea8f448a27bc405a2d497", 0x73}, {&(0x7f0000001dc0)="7a6a5ed045efab95d528c70f816df7b5fc5601ef4b6a89391b2167dd1442cb8a2540cd6e27e0e05a59fe94b7b3bf9cb317f555b558d69179dd6051b2589e2bfcd1be09f19e2c3268b4c18520f45fffa274735c0261c2eb9fe8ee445cd8e7d522d30de4c0d72377246a756144eeb3bf83b5f115403b45da351aba5c615c914eb865eb2d26fd8bc40d6e3f760ebaba1e4c826eb68168", 0x95}, {&(0x7f0000001e80)="33919c0a7b667bb57d82c0154c1035c7a1cad24c1176fd157429eda6674cf889cafb6f8e50bfec7fdd07e7aebe4ffc5bb4c2c343afcbf3f1ffc1c309e80fe74319dd7d5ac65a1f91846a680a9695e815b97aebfdc3f5fdabac6aeadf55a0aad39413916564fd970d1fbe5c602f8a8686e567512ed53a50599fa8bd9ca7acce07073d5f6ffc322d62a8289731955997585089b20ae58269de48024d6236ae3b94abe7ef638f86c553013f79830d099612fc9784472b635716d4a930f2718495c0293fcd2dc690af6a99e7fd601b5173fe709fa58da192fb5b06492ecdd6c058679a1a0f141c2f", 0xfffffffffffffdbf}], 0x9, &(0x7f0000002040)=[{0xb0, 0x104, 0x6, "beb83edfab98ecafb74d0319bec5fb3c369454a2f74bac215cd0ebc941a01da96adc5dacfb0dd9121462161eaadb6ba4308dcfa7809c99ebdb15956dc89e556d2fafbe449461cce8128f3519f8edd1bfa48b69aed2c6f4adbb8dedd18194b7f775fabe9cd4735385803ebf83d8b547b46043b867da4cc34aa011f03e21fdc8104918c4a7e5aa26ad21e4ce4cfd71e33abba271b21a016e49e1f6162d"}, {0xb8, 0x116, 0xa03, "4e1c8b3c4bd03058f49d1408785f43cfc579f9b2ba466863cd9c9dac92832d9fe86ecbb0845b179e6c1ca4e9f8d280337976e11c196ae8f04f4f9bbe46abc19ad649cba58a8f1fd87cb9cf6d1c219cd3b856adb71ab1652ed2c2d3b9e3c0e7a4b28211323090a6de4f16576adc7d57f6a0567935817287815c2bf453456bbe0824be92d768298f620542c332cfcf1bbed2eb868d431550cce81e418e2a368eae2c175a"}, {0x110, 0x115, 0x2, "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"}, {0xc8, 0x0, 0x4800000000000000, "308017690d6ceca5e9a804471229d8bf23a362dc23013dd3a776917b1aecdeb6d65d8f2f5f9e5c472b640a77b0ebf8d0b61eb0a7d1193b53163b52c6867527861c5928e75dde6c11f2acc39c91fa2db77972d832e819402a98c77fbf409c869228b196a48f7979ba240035256d688a2a99b9ab5f0e1e6e5f776f6a3f9f593ba14d5ea3128cd97fdee05f636fcd64f7c31aa47e0b3ef470f7b1e15c34e64fc3f35197bf93878b79149f92227558a8ed322e330c6ff76b"}, {0x78, 0x19e, 0x200, "f12e0ddc1c3a83e7d0f37010035ccb9446cb64738100e5a0feca2ff479de9c01a34ae2024f7f79290534e59995f5b145edc014f0e02baad1a03960c78f5b0b0122b4be31aa691de53cfc00fd9f5c0fcf2dc1774869fce0495bc047aa4b46a4008ed17647a992"}], 0x3b8, 0x40c0}}, {{&(0x7f0000002400)=@pppoe={0x18, 0x0, {0x0, @dev={[], 0xf}, 'ip6_vti0\x00'}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002480)="6921f7180bdfcd28b4276adb665eedbbd3b78b2194e3c14137787014955e43f6a25c56553bb87bb38704c9cacbb0389b027362b304aab2bb1d1ac59bbed52960739e8720289a85fe3dea3dff4390eeba44a3980ca9f7c022e979a3988abae3342639e5c07e14fb", 0x67}], 0x1, &(0x7f0000002540)=[{0xe0, 0x100, 0x7, "f9f27d4988c4020a1fd963bde3037dd4270e88aef1998b63c88d5fc483ffc945a67ac6c498d69cc0a80cfb3eb5c2227a54152126fc4e251202f223d84695a896e273aec694a82af95f550415e0c0a521ab8d28af9d626c4dcb15a9ca45a6c8a44429c787354aa770f8fa9084c95c36cf3d56fd9a53244a743426fc4e19db5e15c62ed179280aa6b2204345ac75dfa2db330b3c81640c1cd2e1bca59baf353730ad488bf63735201310c40e6334cefc904a4438469d6439b544bc0bf0be108f3a0c2b9947ab12256111f62fbaaf"}], 0xe0, 0x4004}, 0x1f}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002640)="e8c50d3d81c26c5b1b574ef2f0548b4b3ed04f861cd0f30a03bacd315239a374c3c077e82faa9ff716b1887ff5feacae6fb2f893ac29a997e270699648cefc835db975746d2bc07e720b42a9edc3335163c109c11e45d0d7ca0db75aee57729c11e66da5ade0b984d99e26a285454e9f3e95c911a6bb368c13de93ef8aec79106164505fb68fa1cc7048690599919b3916d9a8a1f55cce00af1bf1f8e03183938b2b491bf2ff3e9d064dc3b49f26544ec0f8aabbe01667e81e97934bee164caf3f696b8e173ea419cb4e7c4ada8bd7ab3534cf0a585b23f8ad697d0da558bef416a7db90e938d4", 0xe7}, {&(0x7f0000002740)="5ed66ca63fcd01e4425263fc1a9ea4938d73e066b0ac8a1c7854ee292942ec79c7fb77619011de00d0ed0baa7794c6f6bdaddfab2742d65f6433475d086b7a184f2c7449dcffcb18fb2f64e332a4c1e17d38b890011f1023b6a2456746c35d7e2f3ebfa9419b0a7de210fa6b68abbb714fd297a707d6e9706a0081412e4a7a63", 0x80}], 0x2, 0x0, 0x0, 0x1}, 0x6}, {{&(0x7f0000002800)=@xdp={0x2c, 0x2, r3, 0x4}, 0x80, &(0x7f0000004140)=[{&(0x7f0000002880)="b8f6ac6ef0f7e58872d90ea8282d2f38d6c9c91c90647ebd546f658d326ac15727ed3795f4a50edf416a42ef4d63b0093fe7", 0x32}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000041c0)="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", 0xac}, {&(0x7f0000003980)="86e82de27194d7cd8d796b3d99c0ec34f61cf8abcab71c", 0x17}, {&(0x7f00000039c0)="19f74b84173ef3765b2073ea80f58948150feebacd1acfa84d4961856edbdc2a44fe5b6068573c7cdc176acc7865c9187603b0cee58d57be820669546e68afd1460a1c38bfaedaf3a008467af520d9b30bc6067a553c8b55995307462e68f64fd3f33290f1ecf1c431e71ca6014c22d958e9c2f06415ca84bffbae008b8eeb222a8f89049cbcde9db84a70ad0cccd563f77ebea008cc68f577424c2da9315c21ea9e57896a", 0xa5}], 0x5, &(0x7f0000003b00), 0x0, 0x4}, 0x4}], 0x6, 0x0) 17:14:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x23, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xbd7, 0x0, 0x8}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:21 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:21 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r1, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x2000000, 0x10110, r1, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) close(r0) [ 841.865639] netlink: get zone limit has 4 unknown bytes 17:14:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @rand_addr=0x10000}}, 0xfffffffffffff673, 0x200, 0x7, 0x100000001, 0x4}, &(0x7f00000002c0)=0x98) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r4 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x1000000, &(0x7f0000000640)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '.vmnet1,[-lo!selfvboxnet0userppp1-lo'}}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type'}}, {@uid_gt={'uid>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, ' mime_typesecurity,cgroup^'}}, {@smackfsdef={'smackfsdef', 0x3d, "5c1a25747275737465645b6e6f646576776c616e30"}}]}}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:14:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 841.936155] netlink: get zone limit has 4 unknown bytes 17:14:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x0, 0x3}}, 0xfffffe71) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x240000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0x1e, 0x3, {0x8, 0x401}, 0x1, 0x0, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17:14:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a91199cf0265df5cf1cdd8b55", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, &(0x7f0000001840)=""/135, 0x87}}], 0x1, 0x0, &(0x7f0000003740)) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)}], 0x500, 0x0) 17:14:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x20, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="ce3312d6d39ee713b4575ab8acc65044287d836f52e97de19ba991edc2b9694ef5280d74ca569644982eaab8557d455663b0f4d1bd7bac6e1e0e7c77c0b13583c196d48c51df208e72dea8c8d2d997dd7306c8e93ff49ef559de99941f739a", 0x5f, 0x4000010, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x81, 0x7, 0x1000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000003000000c5e6fa7e9894d0bd0000000000000000d2766998a68bd6b431e07ee93a448b66b1eeb4623ab82c579f8b3a65ef4c3b902daa568cc1ffd5a66a5e0ca866596820a37bf027d2fc79f477b7750ac7c87db4bfb125d7568cca277a9b6ba1970a1842392dd3923fb31ad9c1f2db6b69ad08f37c90b01f408c409dc55b2d184814e57179c71e3088d7c99b030d48fe36ce3e1cca25b260f2c8f2092cc96695ff035cbf84fede6c06d4771793cc962c7af5358bd79cb7cc2c24cc748295b2"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r2}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x40000400100, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x102000}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:22 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x104, r1, 0x300, 0x3, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd1b}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xdd3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x4048891) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x8c, r1, 0x900, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 842.838806] not chained 1620000 origins [ 842.842852] CPU: 0 PID: 21201 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #85 [ 842.850152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.859525] Call Trace: [ 842.862154] dump_stack+0x32d/0x480 [ 842.865830] ? save_stack_trace+0xc6/0x110 [ 842.870110] kmsan_internal_chain_origin+0x222/0x240 [ 842.875266] ? kmsan_internal_chain_origin+0x136/0x240 [ 842.880588] ? __msan_chain_origin+0x6d/0xb0 [ 842.885030] ? __save_stack_trace+0x8be/0xc60 [ 842.889559] ? save_stack_trace+0xc6/0x110 [ 842.893844] ? kmsan_internal_chain_origin+0x136/0x240 [ 842.899157] ? kmsan_memcpy_origins+0x13d/0x190 [ 842.903859] ? __msan_memcpy+0x6f/0x80 [ 842.907776] ? skb_copy_bits+0x1d2/0xc90 [ 842.911870] ? skb_copy+0x56c/0xba0 [ 842.915530] ? tcp_send_synack+0x7a3/0x18f0 [ 842.919896] ? tcp_rcv_state_process+0x275d/0x6c60 [ 842.924873] ? tcp_v4_do_rcv+0xb25/0xd80 [ 842.928966] ? __release_sock+0x32d/0x750 [ 842.933155] ? release_sock+0x99/0x2a0 [ 842.937085] ? __inet_stream_connect+0xdff/0x15d0 [ 842.941958] ? inet_stream_connect+0xff/0x170 [ 842.946501] ? __sys_connect+0x745/0x860 [ 842.950609] ? __se_sys_connect+0x8d/0xb0 [ 842.954789] ? __x64_sys_connect+0x4a/0x70 [ 842.959057] ? do_syscall_64+0xcf/0x110 [ 842.963067] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 842.968473] ? kmsan_internal_chain_origin+0x1e3/0x240 [ 842.973804] ? kmsan_internal_chain_origin+0x136/0x240 [ 842.979114] ? __msan_chain_origin+0x6d/0xb0 [ 842.983564] ? save_stack_trace+0xfa/0x110 [ 842.987848] ? kmsan_internal_chain_origin+0x136/0x240 [ 842.993160] ? kmsan_memcpy_origins+0x13d/0x190 [ 842.997881] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 843.003369] ? in_task_stack+0x12c/0x210 [ 843.007522] __msan_chain_origin+0x6d/0xb0 [ 843.011821] ? __se_sys_connect+0x8d/0xb0 [ 843.015993] __save_stack_trace+0x8be/0xc60 [ 843.020369] ? __se_sys_connect+0x8d/0xb0 [ 843.024545] save_stack_trace+0xc6/0x110 [ 843.028660] kmsan_internal_chain_origin+0x136/0x240 [ 843.033803] ? kmsan_internal_chain_origin+0x136/0x240 [ 843.039110] ? kmsan_memcpy_origins+0x13d/0x190 [ 843.043807] ? __msan_memcpy+0x6f/0x80 [ 843.047761] ? skb_copy_bits+0x1d2/0xc90 [ 843.051866] ? skb_copy+0x56c/0xba0 [ 843.055531] ? tcp_send_synack+0x7a3/0x18f0 [ 843.059900] ? tcp_rcv_state_process+0x275d/0x6c60 [ 843.064867] ? tcp_v4_do_rcv+0xb25/0xd80 [ 843.068963] ? __release_sock+0x32d/0x750 [ 843.073136] ? release_sock+0x99/0x2a0 [ 843.077057] ? __inet_stream_connect+0xdff/0x15d0 [ 843.081930] ? inet_stream_connect+0xff/0x170 [ 843.086450] ? __sys_connect+0x745/0x860 [ 843.090543] ? __msan_poison_alloca+0x1e0/0x270 [ 843.095289] ? __msan_get_context_state+0x9/0x20 [ 843.100069] ? INIT_INT+0xc/0x30 [ 843.103464] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 843.108856] ? __msan_get_context_state+0x9/0x20 [ 843.113673] kmsan_memcpy_origins+0x13d/0x190 [ 843.118213] __msan_memcpy+0x6f/0x80 [ 843.121957] skb_copy_bits+0x1d2/0xc90 [ 843.125894] skb_copy+0x56c/0xba0 [ 843.129395] tcp_send_synack+0x7a3/0x18f0 [ 843.133567] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 843.139089] tcp_rcv_state_process+0x275d/0x6c60 [ 843.143941] tcp_v4_do_rcv+0xb25/0xd80 [ 843.147866] ? inet_sk_rx_dst_set+0x200/0x200 [ 843.152388] __release_sock+0x32d/0x750 [ 843.156426] release_sock+0x99/0x2a0 [ 843.160178] __inet_stream_connect+0xdff/0x15d0 [ 843.164908] ? wait_woken+0x5b0/0x5b0 [ 843.168752] inet_stream_connect+0xff/0x170 [ 843.173107] ? __inet_stream_connect+0x15d0/0x15d0 [ 843.178057] __sys_connect+0x745/0x860 [ 843.181980] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 843.187451] ? prepare_exit_to_usermode+0x182/0x4c0 [ 843.192502] __se_sys_connect+0x8d/0xb0 [ 843.196502] __x64_sys_connect+0x4a/0x70 [ 843.200600] do_syscall_64+0xcf/0x110 [ 843.204439] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.209645] RIP: 0033:0x457569 [ 843.212862] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.231784] RSP: 002b:00007fdfbbe3ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 843.239508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 843.246791] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 843.254073] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 843.261372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfbbe3b6d4 [ 843.268655] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 843.275960] Uninit was stored to memory at: [ 843.280306] kmsan_internal_chain_origin+0x136/0x240 [ 843.285429] __msan_chain_origin+0x6d/0xb0 [ 843.289688] __save_stack_trace+0x8be/0xc60 [ 843.294033] save_stack_trace+0xc6/0x110 [ 843.298120] kmsan_internal_chain_origin+0x136/0x240 [ 843.303242] kmsan_memcpy_origins+0x13d/0x190 [ 843.307754] __msan_memcpy+0x6f/0x80 [ 843.311489] skb_copy_bits+0x1d2/0xc90 [ 843.315395] skb_copy+0x56c/0xba0 [ 843.318866] tcp_send_synack+0x7a3/0x18f0 [ 843.323032] tcp_rcv_state_process+0x275d/0x6c60 [ 843.327805] tcp_v4_do_rcv+0xb25/0xd80 [ 843.331715] __release_sock+0x32d/0x750 [ 843.335705] release_sock+0x99/0x2a0 [ 843.339440] __inet_stream_connect+0xdff/0x15d0 [ 843.344126] inet_stream_connect+0xff/0x170 [ 843.348463] __sys_connect+0x745/0x860 [ 843.352363] __se_sys_connect+0x8d/0xb0 [ 843.356349] __x64_sys_connect+0x4a/0x70 [ 843.360424] do_syscall_64+0xcf/0x110 [ 843.364244] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.369438] [ 843.371070] Uninit was stored to memory at: [ 843.375419] kmsan_internal_chain_origin+0x136/0x240 [ 843.380536] __msan_chain_origin+0x6d/0xb0 [ 843.384800] __save_stack_trace+0x8be/0xc60 [ 843.389137] save_stack_trace+0xc6/0x110 [ 843.393216] kmsan_internal_chain_origin+0x136/0x240 [ 843.398336] kmsan_memcpy_origins+0x13d/0x190 [ 843.402850] __msan_memcpy+0x6f/0x80 [ 843.406598] skb_copy_bits+0x1d2/0xc90 [ 843.410504] skb_copy+0x56c/0xba0 [ 843.413973] tcp_send_synack+0x7a3/0x18f0 [ 843.418153] tcp_rcv_state_process+0x275d/0x6c60 [ 843.422937] tcp_v4_do_rcv+0xb25/0xd80 [ 843.426854] __release_sock+0x32d/0x750 [ 843.430841] release_sock+0x99/0x2a0 [ 843.434571] __inet_stream_connect+0xdff/0x15d0 [ 843.439270] inet_stream_connect+0xff/0x170 [ 843.443620] __sys_connect+0x745/0x860 [ 843.447520] __se_sys_connect+0x8d/0xb0 [ 843.451505] __x64_sys_connect+0x4a/0x70 [ 843.455599] do_syscall_64+0xcf/0x110 [ 843.459422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.464615] [ 843.466248] Uninit was stored to memory at: [ 843.470630] kmsan_internal_chain_origin+0x136/0x240 [ 843.475802] __msan_chain_origin+0x6d/0xb0 [ 843.480056] __save_stack_trace+0x8be/0xc60 [ 843.484398] save_stack_trace+0xc6/0x110 [ 843.488475] kmsan_internal_chain_origin+0x136/0x240 [ 843.493610] kmsan_memcpy_origins+0x13d/0x190 [ 843.498128] __msan_memcpy+0x6f/0x80 [ 843.501862] skb_copy_bits+0x1d2/0xc90 [ 843.505772] skb_copy+0x56c/0xba0 [ 843.509244] tcp_send_synack+0x7a3/0x18f0 [ 843.513413] tcp_rcv_state_process+0x275d/0x6c60 [ 843.518186] tcp_v4_do_rcv+0xb25/0xd80 [ 843.522091] __release_sock+0x32d/0x750 [ 843.526083] release_sock+0x99/0x2a0 [ 843.529816] __inet_stream_connect+0xdff/0x15d0 [ 843.534502] inet_stream_connect+0xff/0x170 [ 843.538835] __sys_connect+0x745/0x860 [ 843.542740] __se_sys_connect+0x8d/0xb0 [ 843.546726] __x64_sys_connect+0x4a/0x70 [ 843.550801] do_syscall_64+0xcf/0x110 [ 843.554626] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.559817] [ 843.561447] Uninit was stored to memory at: [ 843.565788] kmsan_internal_chain_origin+0x136/0x240 [ 843.570907] __msan_chain_origin+0x6d/0xb0 [ 843.575164] __save_stack_trace+0x8be/0xc60 [ 843.579502] save_stack_trace+0xc6/0x110 [ 843.583600] kmsan_internal_chain_origin+0x136/0x240 [ 843.588723] kmsan_memcpy_origins+0x13d/0x190 [ 843.593234] __msan_memcpy+0x6f/0x80 [ 843.596966] skb_copy_bits+0x1d2/0xc90 [ 843.600874] skb_copy+0x56c/0xba0 [ 843.604346] tcp_send_synack+0x7a3/0x18f0 [ 843.608514] tcp_rcv_state_process+0x275d/0x6c60 [ 843.613287] tcp_v4_do_rcv+0xb25/0xd80 [ 843.617194] __release_sock+0x32d/0x750 [ 843.621188] release_sock+0x99/0x2a0 [ 843.624928] __inet_stream_connect+0xdff/0x15d0 [ 843.629623] inet_stream_connect+0xff/0x170 [ 843.633958] __sys_connect+0x745/0x860 [ 843.637862] __se_sys_connect+0x8d/0xb0 [ 843.641854] __x64_sys_connect+0x4a/0x70 [ 843.645931] do_syscall_64+0xcf/0x110 [ 843.649755] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.654946] [ 843.656596] Uninit was stored to memory at: [ 843.660937] kmsan_internal_chain_origin+0x136/0x240 [ 843.666060] __msan_chain_origin+0x6d/0xb0 [ 843.670310] __save_stack_trace+0x8be/0xc60 [ 843.674649] save_stack_trace+0xc6/0x110 [ 843.678727] kmsan_internal_chain_origin+0x136/0x240 [ 843.683850] kmsan_memcpy_origins+0x13d/0x190 [ 843.688361] __msan_memcpy+0x6f/0x80 [ 843.692093] skb_copy_bits+0x1d2/0xc90 [ 843.696000] skb_copy+0x56c/0xba0 [ 843.699470] tcp_send_synack+0x7a3/0x18f0 [ 843.703635] tcp_rcv_state_process+0x275d/0x6c60 [ 843.708406] tcp_v4_do_rcv+0xb25/0xd80 [ 843.712309] __release_sock+0x32d/0x750 [ 843.716300] release_sock+0x99/0x2a0 [ 843.720031] __inet_stream_connect+0xdff/0x15d0 [ 843.724717] inet_stream_connect+0xff/0x170 [ 843.729053] __sys_connect+0x745/0x860 [ 843.732955] __se_sys_connect+0x8d/0xb0 [ 843.736946] __x64_sys_connect+0x4a/0x70 [ 843.741026] do_syscall_64+0xcf/0x110 [ 843.744849] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.750042] [ 843.751675] Uninit was stored to memory at: [ 843.756017] kmsan_internal_chain_origin+0x136/0x240 [ 843.761135] __msan_chain_origin+0x6d/0xb0 [ 843.765389] __save_stack_trace+0x8be/0xc60 [ 843.769727] save_stack_trace+0xc6/0x110 [ 843.773806] kmsan_internal_chain_origin+0x136/0x240 [ 843.778926] kmsan_memcpy_origins+0x13d/0x190 [ 843.783436] __msan_memcpy+0x6f/0x80 [ 843.787172] skb_copy_bits+0x1d2/0xc90 [ 843.791079] skb_copy+0x56c/0xba0 [ 843.794547] tcp_send_synack+0x7a3/0x18f0 [ 843.798726] tcp_rcv_state_process+0x275d/0x6c60 [ 843.803497] tcp_v4_do_rcv+0xb25/0xd80 [ 843.807430] __release_sock+0x32d/0x750 [ 843.811436] release_sock+0x99/0x2a0 [ 843.815175] __inet_stream_connect+0xdff/0x15d0 [ 843.819857] inet_stream_connect+0xff/0x170 [ 843.824194] __sys_connect+0x745/0x860 [ 843.828091] __se_sys_connect+0x8d/0xb0 [ 843.832080] __x64_sys_connect+0x4a/0x70 [ 843.836155] do_syscall_64+0xcf/0x110 [ 843.839975] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.845167] [ 843.846801] Uninit was stored to memory at: [ 843.851139] kmsan_internal_chain_origin+0x136/0x240 [ 843.856261] __msan_chain_origin+0x6d/0xb0 [ 843.860526] __save_stack_trace+0x8be/0xc60 [ 843.864865] save_stack_trace+0xc6/0x110 [ 843.868944] kmsan_internal_chain_origin+0x136/0x240 [ 843.874067] kmsan_memcpy_origins+0x13d/0x190 [ 843.878591] __msan_memcpy+0x6f/0x80 [ 843.882325] skb_copy_bits+0x1d2/0xc90 [ 843.886228] skb_copy+0x56c/0xba0 [ 843.889696] tcp_send_synack+0x7a3/0x18f0 [ 843.893859] tcp_rcv_state_process+0x275d/0x6c60 [ 843.898632] tcp_v4_do_rcv+0xb25/0xd80 [ 843.902548] __release_sock+0x32d/0x750 [ 843.906554] release_sock+0x99/0x2a0 [ 843.910314] __inet_stream_connect+0xdff/0x15d0 [ 843.914999] inet_stream_connect+0xff/0x170 [ 843.919334] __sys_connect+0x745/0x860 [ 843.923239] __se_sys_connect+0x8d/0xb0 [ 843.927231] __x64_sys_connect+0x4a/0x70 [ 843.931306] do_syscall_64+0xcf/0x110 [ 843.935125] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 843.940318] [ 843.941956] Local variable description: ----_tcph.i@ip_vs_in [ 843.947757] Variable was created at: [ 843.951487] ip_vs_in+0xe9/0x3250 [ 843.954959] ip_vs_local_request4+0xec/0x130 17:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fe000000, 0x401) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000240)={0x8ef2, 0x800, 0xce9d, 0xa5, &(0x7f00000000c0)=""/165, 0xa2, &(0x7f0000000180)=""/162, 0x29, &(0x7f0000000040)=""/41}) close(r1) [ 844.032146] net_ratelimit: 2 callbacks suppressed [ 844.032170] netlink: get zone limit has 4 unknown bytes [ 844.120810] netlink: get zone limit has 4 unknown bytes 17:14:24 executing program 0: 17:14:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000300)=""/152) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) kexec_load(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="06d6e438", 0x4, 0x8, 0x3}], 0x3f0001) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @loopback}, {0x307, @random="f677bef637d6"}, 0x8, {0x2, 0x4e24, @loopback}, 'veth1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000240), 0x0, &(0x7f00000c3000)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2fa}}], 0x18}], 0x1, 0x0) 17:14:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000100)) 17:14:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x42200, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xe4, 0x29, 0x2, {0x10001, [{{0x80, 0x3, 0x5}, 0x3ff, 0x8, 0x7, './file0'}, {{0x50, 0x4, 0x1}, 0xb4c, 0x56, 0x7, './file0'}, {{0x2, 0x3, 0x2}, 0x925, 0x5475, 0x7, './file0'}, {{0x80, 0x1, 0x5}, 0x3, 0x5, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x0, 0x1ff, 0x7, './file0'}, {{0x2, 0x2, 0x7}, 0xfff, 0x4, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x5, 0x9, 0x7, './file0'}]}}, 0xe4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000032001901000000000000000003ff00000c0000000800010000000000"], 0x20}}, 0x0) 17:14:24 executing program 0: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/74, 0x4a}], 0x1) [ 844.572277] netlink: get zone limit has 4 unknown bytes 17:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1a88, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9a0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r1) 17:14:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000140)=""/167) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000640)=""/183, 0x41000, 0x0, [], 0x0, 0x3}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f67726f75702e73746174003c23fb570eaf751efca7f474e02a1f0294e6f378b41ad54b4d9d9a1f63f8785ab788a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000b8d82526", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 17:14:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x80400000004, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 845.020170] netlink: get zone limit has 4 unknown bytes 17:14:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timerfd_create(0x0, 0x800) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)="1fe685398a64c05a9af82279d67c37a17bd2116883608adf9b0da926a83cf5b274d5889a253c0327313a23414196e5694531206fbf2d965ad12eadf50fa2d0ce5de4797da554aa5f7a3da5c1cd8b98023aa3530df837b73767595d616b4b69fe8006ec5d5b64b02edc86b15b41f6dc8f5da3bec26d9a7785722a60c31961e87c58f7f8dd451724bb7c411bcc1899e67968c10f285a4db849c7367b3d11833a1fa69481f2084519a41ea908b6c1e93ffa78c50ec4a87b7d45e14d85974c7d14cf9817d2adf68d3fef1facc2a6d0c2a99d7cf59b16592422fa7822") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x88541, 0x0) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xa0, 0x1) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x2, 0x4, 0x4, 0x2}}, 0x2e) 17:14:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 845.584999] netlink: get zone limit has 4 unknown bytes 17:14:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x12000, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 17:14:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x20000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000500)={0x2008}) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x2000, &(0x7f00000002c0)='syzkaller\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 17:14:26 executing program 2: socketpair$unix(0x1, 0x20000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) clock_adjtime(0x7, &(0x7f00000000c0)={0x7fff, 0x401, 0x100000001, 0x5, 0x6, 0x1, 0x9, 0x7, 0x2, 0x4e, 0x3, 0x7, 0xa4e, 0x7d4, 0x5, 0x6, 0x9ba, 0xff, 0x7, 0xfff, 0xffffffffffffa097, 0xfffffffffffffffb, 0x80000001, 0xfffffffffffffffb, 0x62, 0x6}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r2) r4 = dup3(r3, r0, 0x80000) ioctl$BLKRRPART(r4, 0x125f, 0x0) 17:14:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/200, 0xc8, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000100), 0x10) [ 846.189977] netlink: get zone limit has 4 unknown bytes 17:14:26 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100051, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x6}) pwritev(r2, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000fbff356e98cfffffffffffff00000000000000000000002aa4e483c9c73b708d720000000000"]) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) 17:14:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0xb3, "f257a576e8e88ae4379045e61cc513feb6e36702b16beb67fb1c1ea9230197318832100816b057de0f8f6a382a6d9c5a9f81374dd2afcaa28ee40283cc68bac456a1fb9b9132743e0202a75ea04e5d798e34fede8886e0ab07f0cef32f50aee8c1cdb21204356da56e8a9ba8473cdd80c19939df6fb077c5d92c6735d9bfec16fdb0e26cee91dd0d244d5431516a8aa52acd8fb143abd1017342ef3b0f2630f1ec92272592b986ebf1df35a554c87904ce0f9b"}, &(0x7f0000000580)=0xbb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0xfffffffffffffffa}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x24f2, @ipv4={[], [], @multicast1}, 0x7}}, 0x6, 0x7ff}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r5, 0x7fffffff}, 0x8) flistxattr(r2, &(0x7f00000003c0)=""/250, 0xfa) 17:14:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000080095000200000010001f87a0011e192d1cbc3755"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000280)={0x40, 0x20, &(0x7f0000000640)="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", {0x6, 0x0, 0x575d565b, 0x7, 0x8, 0xfffffffffffffffa, 0xa, 0x1}}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) 17:14:26 executing program 0: 17:14:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0xfffffffffffffff9, 0xcd}, 0x8) 17:14:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r0, 0xffffffffa000fffd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) 17:14:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000800000000000095000200000000006de34dbe275375ca3fe4c46b0a56efb95c6bd8a0b406d77dccbce2bf5d4d45e457b49fed3ff5923f755831904e480ef8e6fb0bb32b514fead6c2f393ec50f6ec13480954933cc1e11f3c781140ab7b2f0d1c0000110556809987e1b3"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) modify_ldt$write2(0x11, &(0x7f0000000980)={0x100000001, 0x20101000, 0xffffffffffffffff, 0x20000000, 0x7fff, 0x3, 0xcc, 0x4, 0x0, 0x5af3}, 0x10) r2 = socket$kcm(0x29, 0x4001000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f00000009c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f0000000280)=@sco={0x1f, {0x9, 0x2, 0x0, 0x20, 0x7495fde2, 0x6}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000640)="79ad714a3cc94dc0821d181111bc066aae0a7bd4d17de20fa9d306642243b82d62753d4eeac5c1c1a731bc3c85216d0369d21e54dd4b28b067a6317741202e673f3b86df05c18062d15e6783dc3d15a73410a5b885e441792565de063239d3f2b2b3412a59b7ac73c35a64580937cbb0c810c66b4d25d44572aacb809bab8328794f1ebb92b21757f4536fa187918b408fe1cc080d9fc3581b96dadb5eab38799cf95698c0f0d59df515d4aaa07282de13e19d047c79c711a2e7", 0xba}], 0x1, &(0x7f0000000700)=[{0xd8, 0x13d, 0x2, "7f0beb7910d5a23af734eda755d98c6eb4d77e6ce0b8c2a00958a6394a80ea6808f6c62e40651309974eb78319700e2acca7416b9cd2c3ef6cf0619c83265e0a7fb14c9e80ac548435e8b2b98104539cf0bd3a7c2895a1c265316655a32428b152e46f7b4100231c349b6db4db06ae3367c0de54e46e1bf4318eb3de7cf316486e273747f6ce1f79344b9ed3f63acfded26711c98e9a4adb00b4e7c8003be075cce059b9fc6bd453eb3b0ba13122a28194c3696a7533fc394ec7877897ecafa1f6"}, {0x78, 0x11, 0x0, "ed1d536237bd5fafe4000bcfc5917317f5b2dd4be0d51aa63a46cdee79e990794d407596c9dbfd5412701e0974dc5ad5ab5860ebf650e782cde6eb7246cec906f65b9a0eb86b1e33826568dffcd8542920671a3703e4e59af371dab068e5e87bd276fd9de8"}, {0x20, 0x115, 0x6, "2de382e5a79964232afa1f09d417"}, {0x108, 0x105, 0x4c, "0145dc66e85faf741663838836185b076ebc32dfd2fba2fbfb181d71df6894ba07367ed7222ec28770ad89bb13adb84e6ef911f3b1cdd795e40ad25e06bdbd026f7b91c37014ec947958e8f0e42318343ca4c6afd232c9d7aa0fe6d9ef2412e65fe012a1d501cd63d9545fbe19e5d76edf051b8d2c12b028fe93e019372b331bfa013257184c7cc7bf7bbae613fa74571910b0874a76b5901b18bc52130eed98edf90e18d3a03ded109bdaeed212c905db80e474c1012e1b1d032c6b91fb6aab4635092dd880e15debae09af40fca974124635e7097717823cfdf41262901d14906b314828d6be18c88bd248880075acb2555ba2"}], 0x278, 0x80}, 0x800) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:27 executing program 0: 17:14:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x10f, 0x8, 0xfc, 0x105, 0xc6, 0x100, 0x9d, 0xffff}, "e93f290fe1b32860913ff41148fa60e2c1f104446ab379f602d8f358", [[], [], [], [], []]}, 0x53c) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x400) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0x0, 0x5, {0xfffffffffffffffa}}, 0x18) r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r4, 0x2) fcntl$getown(r3, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x100, 0x1}, {0x84, 0x3}, {0x253e5335, 0x2}, {0x0, 0x4}, {0x3, 0x81}, {0x565, 0x400}, {0x0, 0x81}, {0x7, 0x4}]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x9, 0xbbf8, 0x4, 0x2}, {0x2, 0x800, 0x4, 0x6}, {0x7, 0x1, 0x81, 0x2}]}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000002c0)=0x8, 0x4) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000280)={'ipddp0\x00', @ifru_hwaddr=@remote}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0xfffffffffffffffd, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {0xffffffffffffffff, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) [ 847.482850] QAT: Invalid ioctl 17:14:27 executing program 0: 17:14:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x5, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r1, 0xffffffffa0010000) memfd_create(&(0x7f0000000040)="776c616e307b776c616e30707070312c656d309b00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r1) close(0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) [ 847.665431] QAT: Invalid ioctl [ 847.713276] netlink: get zone limit has 4 unknown bytes 17:14:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800001a03cabff9367145b63157bf00009d6dc8ff"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x8004}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:28 executing program 0: 17:14:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x5, 0x6000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002000000000000000000000000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) 17:14:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000000c0)=""/126, &(0x7f0000000280)=0x7e) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:28 executing program 0: 17:14:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair(0x0, 0x2, 0x80, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1422002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x331c5268687ac915}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) close(r1) 17:14:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xfffffffffffffc59, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000140)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fba306ffc4eec094613f8166bcb21ecc9e592d5a19b5faf1428d28957df0fec366a87f8828a5ecaa6557249756957c611d56ff93d3f89a9ecac943023ee46b3439e6bc60155d9c329543f8cd1e37fb1aa97e8ad2575f1e7a09df385de636739527d83580981bf94d37e1f2b65ddd0ebb5b9290fc1ed3117ef1e2d6514ebbc7076a514fec3b9d85ec5516a9bfb1493e91977557b321a07f68"], 0xa3, 0x1) 17:14:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:28 executing program 0: 17:14:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8010}, 0xfff}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="3c8340e9e1bff5be80187d1e6752eefe0d6a7e69d2af4d98111195414ecf6ac43462d849acd5dc377a494b3f493a4db2b63f50adbef8b5b1d7d3db92cf4fb807e1eea793e69132b7fe4a6ce1e1e43c115787cd9a59baf7bf8235e3af9c17d41f7432a97067", 0x65}, {&(0x7f0000000100)="30ff8b8da1ae3da3033796b538e5aac0d1532ccfafad94c42579615d3e282f054c7cd1b7d05033ceb529165a7dd07a80cf8ec13f", 0x34}, {&(0x7f0000001640)="72265aebd1f62fa57e4f9cff8e250919854ed6b31fa9f5dd7ec28231e3f62083c3c0a7601adbc234eff93a23ec7e865b827b9495e79aec7a79808e6339caabf4a7c714b0fc5e7060e0ba9f4becdefea9cd635e29407d76292f2ca4fd34240f77214553702745a91458eaeb4d11d4c09505df4711f971fd544eda2fb9f35e1d5e4c91412f0c2fc4f9ae19aa5341ae1345bffe5a43", 0x94}], 0x3, 0x0, 0x0, 0x20000004}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)="7d6c8bf4cbe24544891668006738dbe3ce6cc598e00ba4d2d5ca96cd2f443a4af45f5c57397dd1a5fdbd5b54b8b20183e14476759c7b8bccbafb95b6e84a9f6c7695506a0903cb92a6b39c484bed79fbfb9609e2a6b6c691ff12121f6abf3d429b2445ff248e0e672abdbaf3ea544dc79f312d3635525656767afcc9cff34f45bbd80714b2c3ea803d5b2aa51f1938f3dd5603c03728108b163c479617bcfca2114e549266f47f16756a30c22c8f17bc2271248609be9c0c364fcb18969a5263e5f377d995aec253a21f4c42fd7d4c5911ca29a12205f2dc4fe481e212b1dd64113695d350e375e042c8c44604100d4b98de", 0xf2}], 0x1, &(0x7f0000001800)=[{0xa0, 0x0, 0x4, "21052582e956eeb9724de9006fee41819e922d0dabc43844c2ab84ee52ec4150199ad88ceddd15fe73f7c0d4d8014b9916ea978c716dec7bcca110c2f2bd2d015ed75f18bebfc0dbc4c6196cb2d50696099722286c23469cd31a4aad948bf0dfd30b2db394544f8898abce106a99ec0418f8395ba77be3d42b263b4a32ed9d5abb7467d4622dc1c2f305941a"}, {0x28, 0x12f, 0x8, "0280a4077d586022e2a28091eff861bee4f271ac71"}, {0xc0, 0x10a, 0x64, "e7908badfe854662a0c0c08598e4a626bb9da1ccb643484064b5fa0a78a4e2d765e0f4a218580e8d00c364c50f837938d15f1677fa4bcadf8ab723378aad21d4ea90d8f7016e7dab79992977a9700d113fc492b9310a982e54af8d5323dd81c50b46c25e69c648a685f89712491883418ace99fd3ac116ee26661d96095d90560d661a3058c9dbe346a61cc02e29dfe6cfc14c003857fd671a15b2dda6563888d45e0fabe6898703ad1d"}, {0xe0, 0x101, 0xc, "c2a177f34b755ff35a6e7564dd9add274e0c5795b2e1f8b57928e3979fea9f9fdd9cb9dd4afea84c8fad0029d0667ffef2a2cb3fe6b35f0c14194bb14bcb91807953f72cc549375780f874d0035c30eab4d5f061914171610d03b365db7adffbc6257790d6f613dcee5b2023856d941bfbff20487968bdf5f9e23d020a000eda0b356491c1fb8cd69a9ab57f6776d2739c5d18341c1d17b6a0228b04acbc680ebe91eecfffa2e714b5a65cdc585b2c0c95f08ba62d443b15777fa1114d443faac2d812cf271b9c04266867"}, {0x30, 0x10f, 0x40, "546a2a3ea361ba6d7263adcf959c401a5fb2d9223d7c80507004"}, {0x90, 0x11e, 0x7, "c838654b839fef4cdd659a2d65d16174d2eb1b434e652933f412e699c9039f5cc45689ead554ccecfe763cb5779c0bda6d13a81ab3fed7fc899614ca37632c4f32265fc6e03d3baa648ba7078b8014d1cf024f08df6af06148e2ee3098dc75159c87484ee55278d59a702df9dabd97b806e182759d57e4f2c051eb7b"}, {0x28, 0x10e, 0xffffffff, "7d663b2e18071152ea8538587ea7f014e80c"}, {0xa0, 0x117, 0x3, "5abbee542031af90843accbadc62fa7e24117054d55440a038bde0f84ee58106ef5c98b94fd9d634ed2a207d5e3ac6d9e4db97a67f5e04a73241ad2dbd8ae9f34c6c99bb4fdb5396e90d1ddda7dc05ad18e4e3bb6cd12fdec42849d0b94b80b9210857921e3c8d46859f944b79ef1a1d9d2a0ef454c19482676ad2634129a9699681fccff52c3fe5c4cd86a43c59ac"}], 0x3f0}, 0x4}], 0x3, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) listen(r0, 0x400) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:29 executing program 0: 17:14:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000232001901000000000000000003040000000000000000010000000000"], 0x20}}, 0x0) 17:14:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x204800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000000c0)='mime_type&\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000180)='nodev\x00'}, 0x30) r8 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000980)={0x2, 0x800, 0x8000, 0x8000, [], [], [], 0x5, 0xffffffff80000001, 0x0, 0x0, "a429e571789b6ff62545d2b7ef91b3b1"}) r9 = fcntl$getown(r0, 0x9) r10 = gettid() sendmsg$netlink(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x3080000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000004000)={0x25f8, 0x28, 0x402, 0x70bd27, 0x25dfdbff, "", [@typed={0x38, 0x7f, @binary="6d2f58b88e66144e01af59ea3f76557e82ae9c2f7de0d643314d9705a0d02a1d295f32e6acb1ff67abc7a6198cc5e808c00c"}, @nested={0x11e4, 0x2c, [@typed={0x8, 0x18, @ipv4=@broadcast}, @generic="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", @generic="99847d2601bb1966c152ab02f3ffa4c7e2494c6146e6bd555cc5b683a04870e76c10edd6fb08e4c7289ea017e66b33a25b7a4fd7e9dcf2b3d3e66a4e4b59a49d454ba16966a7f5fe35434be0e196a248c19a809c5805f63da2d0f664660f86cb755e268d9964485561730acb539a38669e623f93a34346def1cc03f8b422728a0848a0a32c69cdd1be856555ab01bb14bf86a4080fb736e7b8d2811a278db0f1ee6ead6f28760bdd4c700393a239a093a7989f7cad21de9f51", @typed={0x8, 0x3e, @pid=r5}, @generic="e8f59a20bed46fbb0caef29de83f409d0266fce261fe4dc02bdf23aa61050ef8ec8df8db072b08f7995d95396b5df19497fd12f8064ae201bf5fbe31aa2058aa3fffbe1e4e588c6eaa483b7f72591da6d47127ce79500c5ebbe5c541814c65983d612b57a08977391891558e730d01567fadb95ea34793ff9284b74436042a188f2929b8f5fa2baaa9193497f3b86d321ae13995dff3765e2e7232818d55", @generic="25099f4783b2c3920e5e31408ebc75c261bc7bda378c38c8dfcd17b6f577b86d98691352df8d500809f015282ba3ec19a5054edab9097c28ae3d4d383fc13e83e241554c09d81b61e9bfc9f66f42af5d6f0e03295665140fb2fefa3b378c62b461d1f19bb6370eac113f5f", @typed={0x4}, @typed={0x8, 0x35, @pid=r6}]}, @generic="33f509a467e384763766fc46030011f3e3fa328e5a6bef0336131430060986b4c15a189d4ba5342639e3683ba0b8562961b82e7b009fbad94455d8c3315033d5eb8491bf5a23fbb73f9210a7d9cf540182a1b9026b29dd4bf3ca9d028c61efcf13ca7229dc663c987f143c7cbae10bd331c7a5c8814ff1ae065c0e734028170db9706343e4c9fe64fc7405273fc4ffc1a242521d23f926b86438d20df49848afd2fe789a1e55eb7796a3545d7d8c17f7e5f89f8740576cbcbc52809316318d417c9763c8d6", @nested={0x10b8, 0x46, [@typed={0x8, 0x56, @pid=r7}, @generic="a5fe9d6c534c476e9d4f8c91412f4b9772d0da556e15df2338d659e8f142ce13a6df7787e1102c0be537fd562a724e83f904b2a4f17c4fe219ec0d07b2e319d6cba77b3dbbbd2643192dc9c0ca9afceeb6ded2293dc0cdc78bbcc852bc594c78fe6e986e6752147aa704e46de93c0a2575be5b37a1ee8e3218cbb54a1185d4ff86959a61b57cfa0041f5d5e00bd77347dd5ad8d96578381111ecba1de28fb98ae813299544ad7a00e599b122", @generic="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"]}, @nested={0x1d4, 0x69, [@generic="d6438dbc96c243db27e08e86d6ce40cf95107d1a8eaaebc0206483b3b1167971ff50f35147bbee64b8b84ef3e5a024790193538c1d603ae3d92ce42579a24819f00335045faaf3e3", @typed={0x4, 0x80}, @generic="616fc3c7d1716b1a20cfcf3ff0b630a823b1ce32a6add1c7e8e784bf9d55e7f75249a7d30cfcea0a1baf2780eecfad1eb2d0ddb4dc3ca0886e687287c1ef9c4d691147de0603c562d4a6348e059c18b513c3d4f5ebe22e5f08c08f0267db69f7e7ef309aef46a838ef497beefed78cb87f8c30d69cea2d221178a9e024d0b392889ca1f0cfba0b5fcd1ede7dff294066a037be601b25159c5839218883f80fcf64b21369be8004b8575cf40b1cab83485136bf0665549994", @typed={0x8, 0x53, @fd=r0}, @generic="f5c8637c86e37be310149f6665667b6b3064bf6046b61c576c2de8bb3f869d91fa2e89a1c709f937bbab9df63538037e32e5075ce9790360cf36d1b1877849252d51954394ab44e0a0f76717bc2a576396ff1dc499ae3db2997142a85fceecbdc8b3fd07b9584bdd66a5118f5ea25983104bcce99131bab531826f69fb8c505a793e756e43e04bc564203eb812fa23116053d9d1b9bb9f350ed288a06042f03507ce1d549f81792297f8b2bebbc104fdc3ec02d119", @typed={0xc, 0x6c, @str='bdev*\x00'}]}, @generic="85a4ebe5bbd8897636f173e4f04bcc162734b0922b880ef1bfffc6711520f73a163f16c3d231e7dd0dec5cd061e43af15a4765e513b038b665a5ee47eacb3f899ae17ab0a4928662b0a495d6a2eb20176303701c82a5c2f9876919066b8b699fd50e9344ee43e29cb8e04d149b66d4bb19d364a6fc1dc87d"]}, 0x25f8}, {&(0x7f0000000500)={0x224, 0x25, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="7a0f701c158c00856e", @typed={0x14, 0x64, @ipv6=@mcast2}, @typed={0x8, 0x6c, @ipv4=@loopback}, @generic="5864bcecc73519602565bd64b39d9faa005191b7fcb6807dc58f0280e36c8f2b8022a810a972", @generic="8356d306f0c2fdefb5a1143cd6611ae9425992c8bdef07de9b2952083f92ea8960641abc7dff6310a0e912fd47f0cde197", @nested={0x188, 0x7, [@generic="ea09a57d0db76dfa808ec8d8f089ef220570b0b318da20cd56684bcf3870f270e7783c81fddd5bc8de", @generic="bb7ed21237836a7f5f9ee530ce8312d6cc2c87b79ac2d038a7bb5e51c08ba189639b39038721fc036e489bf415d5583046e91c0c4f926a0b51b75c3b6868573c58c533ff5ed3c72acbf5e757eaa60dd0f5d6e72af21ceef7ab0e6d396fb7d331e46cb256441582fe3fbc00e7", @generic="9444a013db98be23", @typed={0xc, 0x8c, @u64=0x6c1}, @generic="cbf03f44e53cfbdd5678e4dc4b2cd747028e4845bc574e5c0c4120dae225bfc4b875faf76efa5f1a3d072b78a0fcec4bce3ad4c82d5b0cbe70155af25bf16b17f63ed97ee4ca5dc2ab100c99a9e6edfc20f1c61c96e1a11e9b360aca4b4c96b315858b4f1f1042fb8881a2e1c031b5b0dbc6229f6fd7309b0f007ad6c7b99b5d9f16d35219a623ec330476fe1c3f4309d5d5d7a3b3735da2e253bc672ced5947997b5d1832a1c2809eb2781a4bf42dea4c558850e5363c6b3744647234a51a44081c0229af53227be16015790e7759b02da58cecc049f9f00d"]}, @typed={0x8, 0x10, @fd=r2}, @nested={0x8, 0x1e00000000000, [@typed={0x4, 0x50}]}]}, 0x224}, {&(0x7f0000002040)={0x18c8, 0x3c, 0x200, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x7e, @pid=r8}, @nested={0x184, 0x61, [@typed={0x80, 0x78, @binary="18570f8f0ac1f7906a35e180de4071a00e198d527d27a0146f2d3f5371fccdba619d513c58b0043a2d635ce7a31671c4fb7388efa4b8ba614cf17816c2859860dff083369bc0afb7bd6417ed14b9159c62c808fee1f620b2fda59d00c2240c3ec50daafb10b593fbece00a924b6fc0b8e8cbfe0d080b19abf09cb4"}, @generic="a72cddaeb6a2f89fd0fb51f81b0fa14df49899e48ed7f8965d740ffe97152578c4d4ad6c48464f17f55663f4ff86fad488c9e2e68c720e7bd08ab68cd4d559860c0979aa490df7e57a584e62911d32bd497735f294ce2ab42423b87769ed", @generic="d54c5b4f36194efb81b6388c2dc48621d82e9e39d0a3910933960227c080dc34774f39f3a5be779fdceec7a51b9576516d684e05e85afb013c76a731bed756254dec3af1d5540b70e6d1c67b9b60b31ca79d865d16f4ceabfca927c37725ab42ea65f85fd4bddf8c838fa7fe3787d7e08abbd15b9a2cda992d9c87c2d99925c5ae4549b6041ed3bc3c48de46bc9cf92fd68912", @typed={0xc, 0x67, @u64=0x100000001}]}, @generic="cf2db81bc7cc507daed87ef4964a13420f722215f81c0742a6c4f2b4d82797adcd6d0127835c39f779342c009bc58fe0ca750e8804b68024ac4da215d71477be63042070edc93f0d9dea7f3e1ec58e1514e7a308a2850cff93d3c285ad4c45fcd04010e401715afa14a12ee5ebef08daae264ef6d89627b106470b61326519ac18723ed6267191c03ac274b50a7a7be5ae5daa30b3352f65aed97cd86b84d2b5930c6bd56eab0026b98691a67744d297660ad5401a1e4f66f4cc38e22e6def389970a58e24068bd0043b591e49bc1e45e47e1e38833724561d53f8e2cb60665c236b04637d07a11a0a", @generic="d39c332cbfe72b6a8732b8b869b39074db4efc0d14cf6d4677e4c61c8c920d1502082468a33179aa94de8ed5150eb76f77cce6d4f1c62f872ce630c1584226babcd7098dcd7f6ba6c5841f5e03b7fa3aaa96d54474c662ee939602efe564356d14e41c82d70ff4bd255b779db5cac82ef5c1bd2de610399c24b1265af32b6ca7148444dc5a44500f7b1697d3bfe84f9a2d323f20d0058942f65e91fc39d02af2eda473957da328cbaafbca17cc433c1fff1871615f07ac0dc1d168edae250f6e6d3aaf86d9b6c4e3", @generic="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", @nested={0x2f4, 0x88, [@typed={0xc, 0x44, @u64=0x7}, @typed={0x8, 0x13, @fd=r0}, @generic="d95966a847db4ad9ede1a4ab472c88d992bd439f535b9cb852227a859f1ad13056ffe1b0fbd1d206c678930bab60ef24ae1ec4c311f45fc45c6d59dcd443bcc829bff40115d36c4d048b356d42bbb6fe8a3e8f0ba9e328dc7067fb57ad70aa1d29e6a192bfc37fe4c1", @typed={0x4, 0xa}, @typed={0x8c, 0x85, @binary="9954df0d75ca76c2a411fcd4666826c36edd7c3aa1abf22044de06d3dcdd0da7431e475d7a61c582e3c7a3549458798a0deb620faccca23507796afbd06f8983420a7a4be20f2dce29085df24a0fd36053b1a34816c1d593a30461f4c0854bf5e7a2465e6b8ba19cb4c0c0bbcfd15629646dedb80324fffbbaf7a5186f4e3080a7312338d22d5ca9"}, @generic="a5c4ff00fc57d920940438469f4cf0537cf859455b2b2de92aeb3877b6614c03bfbc04993f3581d0feb4aff1eb3cbbbc950cb4062ed6517d1ffd64279def9da9ca34bea60ca4", @typed={0x8, 0x5, @ipv4=@multicast2}, @generic="868da464a4ce57257d8ef9b10e2faf5f911b56c62a6c25688749cd2bbb164bd255c60caac88cafad55b4dd0b2274e25a87ad3277879a10d6610de68de6bcfcc2e280eef1793994a07df1bed3cc0bb9c40233facc59db11abee520cb5a6ddf081cd80f4d2670908f589cb62de8c9c55c4ee117df66dcd9265dc6e153a0a55fd8367d90fe2ef529876daea3c049df463d9f63692fab03e71fd1367dc0131c898d8ada6b4b90acbaa4569ce435cc0eba23832c0fb400d43f8df8a704571661e5f90a5", @generic="1905f943dbf0d070c8660abcb30262bdc1c2ae3bf9f0e552762f3c7f2b38c2bd60204f7521c6c95f0f6390dc6a5bc8faf8574b65b091c53d9a0d5c2880650b6251e2bb138723cc87eac0e2d45444d044b7006b1077a0097f502900dfb691fc06c1fc3f2b2e00ddd9d71b056f80738ad0bcbdec740ac20eb9e06631aa8346a1338d5b075edbec4353cfa273fa4d2110fa9a5d617110e4ed15813cb5d7ede8d58c8b1c5bf66c589767078efd3e559387f800c82999330b49ccc2df97dd5d42f08b6c3743540aed6ae9a1737bc0f145564984"]}, @typed={0x8, 0x83, @fd=r0}, @nested={0x274, 0x20, [@generic="8a4122e59808c465d76ee04ce2393e2c2f74267a3c3a47231c71c60993ce38bc75f1bfe4572f98e8dadb8ce7df52c4304db1ffa45549c0284c644af0bab0a122488566e399267bc0851f4b2f196ce2cf5e9411839b7e00cd25b3f5fba1d76a01990d597f5a85a06789285b607777487f43063e00812efb2ff0772172c4a3c83c55c23f153861fbbb71ed2a67eabc72e68b223446d2", @generic="21e48a63a86cd8ed9f0d3d4f3d51a9a4c7f54985b68fd7aecb63f988f185b5c8f282dfff0a96fc44309c47f244aefff9b084e3403a83537e52605305623e4f85b0767e4e10166c41a53a1e8a90ba78257c0ea461f07b50a69e355e41e036d082183bc1aa798bbd1b9b3f043f17e0d7cc86bdf246ee8fb10f850b0fa3da6b70cd6ecdf7acaec0c5db82f46337f832a715b5824d351eced88db9f95898f33a1feb8150b57623e4efb89426a7363750faff9a4a77b1cdbce269bb20330c975230466bcb881a73752ccd7296c6d17f", @generic="c5053e6541133d88602ab3e5d02b9ea560cd044b30e740ae8900b941633eefbede2c711157171af778d4ee78d7f5c11b0ae60ef1314accd677678d8f0ecde902198695", @typed={0x14, 0x51, @ipv6=@dev={0xfe, 0x80, [], 0x21}}, @typed={0x8, 0x6e, @pid=r9}, @typed={0x8, 0x7, @pid=r10}, @typed={0x14, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @generic="a4444af31998837f52dad12de3894ca6988f0df9d0722ded14a46cf3277c294add55973f0cc461a22ad36c39f6070002f67b83a5725f52a528839fdf58098c3aa0086f4c097aeb9def3cbeba303a0c6e6833c56aba9f44bcb427c40c038e2b52bcff516dabde06cc155bb808b44b176b53b2a25c429811020cc7ffa8b58c0ed13479cfb37a1f0e0a1568147980ecb4e4"]}, @generic, @typed={0x8, 0x67, @u32=0x1}]}, 0x18c8}, {&(0x7f0000000740)={0x228, 0x10, 0x2, 0x70bd27, 0x25dfdbff, "", [@typed={0x4, 0x36}, @generic="bb3bf3e599bdbd9fcfa0396c55652d2d5476be23d0c63ce884258b39ea05e1e964449da090fae591b808b4b73b001bf1fd8829ad35b895e1b09efbb6d5670fc976609f207bf316561321740407a3c4b0c388573c94d33d961865719c139e1d780abc64cd30d3e9a05fcac4e07a591cb07456111962bd28df91e9e25fa1a91bedfc6b7db5f1af0d8167bccbd4bfbfd7f6f1e586fa254e61aabede5b9d8bf34bc9f5d419e26e0ed778ba81e137862926d5acf7c62c", @nested={0xb8, 0x82, [@generic="2a02c22d9f0d0789add3b80244345395c93663d8c88dadabb508bfdb5f852301869bdae9e8a462f583b0eb4fdacf992112c46f8a9d8ae18cc2315a6a059a526013f474c44a311c46caa7891714c7a068fab9066bdb264846bd581104785b1443599f66cdd63ec73e10d6fdfc81fb0610c8f75575e86c66714d1e471681a03d19a28618b10eb31c025c7053f99c5961c7ea45e4b1dd991485b60e517baa41bcd7c7ab4391e023b9184de9f054bc0c0fd7f92beed9"]}, @generic="57ab82265af6db87cb4031b5b3db103630789df716a5a675d6f6d68d0fc200e4c8a605e60ea6a5eda36042987e15071f1fd3d7acf2ff097f1bc7f340b16f79ad1b9bda5cacb4a3bf1f2ed6afed42b0bdff83a24bf88dd49334beb63d62360f5910039871a83f03ef83d0d6a5cb0b8df8684bf9c473032491278fb2ed97e83a110dd38a7d00ab92d74e6d2a30c33c3fe62425d3346731044207ed22c5a83e19", @typed={0x8, 0x31, @u32=0x392}]}, 0x228}, {&(0x7f0000000200)={0xd4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="d2fa384756241baff32725bd0c44f55310a6a3587cf4a48616832639ca4b9a57b3555748bed00f6fea2b3d6a6661a660a29d7275293ec2eef83c3dc98e6a720e300fb336dd96f7f778c9c95b63e893a518e01698adeb0db63e4c5676ad8bb5163adcc879eb1549699e66e999d512e945b637394948059e26f82684580ee143624e7b669e3c270dc06f9484e7c85000d99d916d84aa9a37f0", @generic="34f353e51cdb77c0644568fedae575b65ca0f159efa227295461fff76f5b1d64cbd005f6118ac7556b"]}, 0xd4}, {&(0x7f0000000300)={0x18, 0x34, 0x120, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x7b, @u32=0x2}]}, 0x18}], 0x6, 0x0, 0x0, 0x4000010}, 0x40) 17:14:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) set_thread_area(&(0x7f0000000100)={0x3, 0x0, 0xffffffffffffffff, 0x1, 0xff, 0x7, 0x400, 0x2, 0x1, 0x800}) 17:14:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:29 executing program 0: 17:14:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto(r0, &(0x7f00000001c0)="4fa290dca328607a91b7b84ab30194b37c1a4b156118dd80cc5da591df128da8349d08bcf32f89edf17de4241c51f96227a7e1d90b168ab40bf1a9832cd8ff56c0a9f1", 0x43, 0xc0, &(0x7f0000000240)=@ethernet={0x306, @dev={[], 0x14}}, 0x80) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x10001, 0x240) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x8adf, 0xfffffffffffffffb, 0x0, 0x7, 0x4001, 0x5, 0xffffffff, 0x100000001, 0x200006, 0x7ff, 0xfff, 0x0, 0x4cd, 0x5, 0x9, 0xffff, 0x0, 0x9, 0xffffffff, 0x7, 0x0, 0x20, 0x10000, 0x4e5bedcf, 0x8, 0x8, 0x100000000, 0x2, 0x8000, 0x1ff, 0x6, 0x42, 0x81, 0x800, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x3}, 0x10010, 0x3, 0x80000000, 0x9, 0x3, 0xfffffffffffffff8, 0x8}, 0xffffffffffffffff, 0x4, r3, 0x9) 17:14:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) 17:14:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="cb2cd5d322b9c8e0717e6f4771a1c0934a2cecd1d571edb724a1ad79ead99dc3897344793647b98cfb792568360456b5920963ee3ece06f5306e99d116cea843e14c62779a9dfa28c6716027cd59761b9f0e0747efefab98b772b183cb93180951e912dbed0b655557199e479e82ef19a30440ed74cf5f99585ecfb0482c43f61e6aa864de5955b0686762915a833f2ecc20a663b12e4f56f379f812a21f3e2832869f7418791803f61f1e280b749b870319802acb84abc565c687793cf12f974588d22c6cf0593f83e5fa620d28f7d798061800cb8f944f9d91", 0xda}], 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="575f9e2d6179205a", 0x8}], 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17:14:30 executing program 0: 17:14:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x6, 0x84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000040)) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) listen(r2, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r2) close(r1) [ 850.052530] netlink: get zone limit has 4 unknown bytes [ 850.082289] netlink: get zone limit has 4 unknown bytes [ 850.189935] not chained 1630000 origins [ 850.194000] CPU: 0 PID: 21450 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #85 [ 850.201295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.210718] Call Trace: [ 850.213347] dump_stack+0x32d/0x480 [ 850.217042] kmsan_internal_chain_origin+0x222/0x240 [ 850.222217] ? save_stack_trace+0xc6/0x110 [ 850.226489] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 850.231659] ? kmsan_internal_chain_origin+0x90/0x240 [ 850.236897] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 850.242291] ? is_bpf_text_address+0x49e/0x4d0 [ 850.246915] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 850.252397] ? in_task_stack+0x12c/0x210 [ 850.256507] __msan_chain_origin+0x6d/0xb0 [ 850.260785] ? do_syscall_64+0xcf/0x110 [ 850.264791] __save_stack_trace+0x8be/0xc60 [ 850.269164] ? do_syscall_64+0xcf/0x110 [ 850.273166] save_stack_trace+0xc6/0x110 [ 850.277261] kmsan_internal_chain_origin+0x136/0x240 [ 850.282579] ? kmsan_internal_chain_origin+0x136/0x240 [ 850.287911] ? kmsan_memcpy_origins+0x13d/0x190 [ 850.292619] ? __msan_memcpy+0x6f/0x80 [ 850.296536] ? skb_copy_bits+0x1d2/0xc90 [ 850.300627] ? skb_copy+0x56c/0xba0 [ 850.304276] ? tcp_send_synack+0x7a3/0x18f0 [ 850.308652] ? tcp_rcv_state_process+0x275d/0x6c60 [ 850.313628] ? tcp_v4_do_rcv+0xb25/0xd80 [ 850.317709] ? __release_sock+0x32d/0x750 [ 850.321878] ? release_sock+0x99/0x2a0 [ 850.325792] ? __inet_stream_connect+0xdff/0x15d0 [ 850.330655] ? inet_stream_connect+0xff/0x170 [ 850.335173] ? __sys_connect+0x745/0x860 [ 850.339256] ? __se_sys_connect+0x8d/0xb0 [ 850.343435] ? __x64_sys_connect+0x4a/0x70 [ 850.347692] ? do_syscall_64+0xcf/0x110 [ 850.351692] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.357113] ? __msan_get_context_state+0x9/0x20 [ 850.361888] ? INIT_INT+0xc/0x30 [ 850.365796] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 850.371182] ? __msan_get_context_state+0x9/0x20 [ 850.375979] kmsan_memcpy_origins+0x13d/0x190 [ 850.380508] __msan_memcpy+0x6f/0x80 [ 850.384266] skb_copy_bits+0x1d2/0xc90 [ 850.388259] skb_copy+0x56c/0xba0 [ 850.391767] tcp_send_synack+0x7a3/0x18f0 [ 850.395939] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 850.401430] tcp_rcv_state_process+0x275d/0x6c60 [ 850.406257] tcp_v4_do_rcv+0xb25/0xd80 [ 850.410175] ? inet_sk_rx_dst_set+0x200/0x200 [ 850.414757] __release_sock+0x32d/0x750 [ 850.418775] release_sock+0x99/0x2a0 [ 850.422525] __inet_stream_connect+0xdff/0x15d0 [ 850.427246] ? wait_woken+0x5b0/0x5b0 [ 850.431080] inet_stream_connect+0xff/0x170 [ 850.435435] ? __inet_stream_connect+0x15d0/0x15d0 [ 850.440382] __sys_connect+0x745/0x860 [ 850.444310] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 850.449785] ? prepare_exit_to_usermode+0x182/0x4c0 [ 850.454842] __se_sys_connect+0x8d/0xb0 [ 850.458847] __x64_sys_connect+0x4a/0x70 [ 850.462931] do_syscall_64+0xcf/0x110 [ 850.466764] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.471975] RIP: 0033:0x457569 [ 850.475187] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.494112] RSP: 002b:00007fdfbbe3ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 850.502295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 850.509601] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000003 [ 850.516887] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 850.524175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfbbe3b6d4 [ 850.531463] R13: 00000000004bda43 R14: 00000000004cc868 R15: 00000000ffffffff [ 850.538773] Uninit was stored to memory at: [ 850.543124] kmsan_internal_chain_origin+0x136/0x240 [ 850.548249] __msan_chain_origin+0x6d/0xb0 [ 850.552500] __save_stack_trace+0x8be/0xc60 [ 850.556836] save_stack_trace+0xc6/0x110 [ 850.560934] kmsan_internal_chain_origin+0x136/0x240 [ 850.566054] kmsan_memcpy_origins+0x13d/0x190 [ 850.570563] __msan_memcpy+0x6f/0x80 [ 850.574310] skb_copy_bits+0x1d2/0xc90 [ 850.578212] skb_copy+0x56c/0xba0 [ 850.581681] tcp_send_synack+0x7a3/0x18f0 [ 850.585844] tcp_rcv_state_process+0x275d/0x6c60 [ 850.590634] tcp_v4_do_rcv+0xb25/0xd80 [ 850.594542] __release_sock+0x32d/0x750 [ 850.598531] release_sock+0x99/0x2a0 [ 850.602267] __inet_stream_connect+0xdff/0x15d0 [ 850.606956] inet_stream_connect+0xff/0x170 [ 850.611291] __sys_connect+0x745/0x860 [ 850.615196] __se_sys_connect+0x8d/0xb0 [ 850.619184] __x64_sys_connect+0x4a/0x70 [ 850.623262] do_syscall_64+0xcf/0x110 [ 850.627086] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.632277] [ 850.633910] Uninit was stored to memory at: [ 850.638252] kmsan_internal_chain_origin+0x136/0x240 [ 850.643371] __msan_chain_origin+0x6d/0xb0 [ 850.647629] __save_stack_trace+0x8be/0xc60 [ 850.651971] save_stack_trace+0xc6/0x110 [ 850.656046] kmsan_internal_chain_origin+0x136/0x240 [ 850.661165] kmsan_memcpy_origins+0x13d/0x190 [ 850.665679] __msan_memcpy+0x6f/0x80 [ 850.669409] skb_copy_bits+0x1d2/0xc90 [ 850.673310] skb_copy+0x56c/0xba0 [ 850.676777] tcp_send_synack+0x7a3/0x18f0 [ 850.680935] tcp_rcv_state_process+0x275d/0x6c60 [ 850.685717] tcp_v4_do_rcv+0xb25/0xd80 [ 850.689627] __release_sock+0x32d/0x750 [ 850.693632] release_sock+0x99/0x2a0 [ 850.697368] __inet_stream_connect+0xdff/0x15d0 [ 850.702054] inet_stream_connect+0xff/0x170 [ 850.706392] __sys_connect+0x745/0x860 [ 850.710293] __se_sys_connect+0x8d/0xb0 [ 850.714280] __x64_sys_connect+0x4a/0x70 [ 850.718358] do_syscall_64+0xcf/0x110 [ 850.722177] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.727366] [ 850.728996] Uninit was stored to memory at: [ 850.733339] kmsan_internal_chain_origin+0x136/0x240 [ 850.738460] __msan_chain_origin+0x6d/0xb0 [ 850.742712] __save_stack_trace+0x8be/0xc60 [ 850.747051] save_stack_trace+0xc6/0x110 [ 850.751148] kmsan_internal_chain_origin+0x136/0x240 [ 850.756271] kmsan_memcpy_origins+0x13d/0x190 [ 850.760781] __msan_memcpy+0x6f/0x80 [ 850.764519] skb_copy_bits+0x1d2/0xc90 [ 850.768428] skb_copy+0x56c/0xba0 [ 850.771910] tcp_send_synack+0x7a3/0x18f0 [ 850.776071] tcp_rcv_state_process+0x275d/0x6c60 [ 850.780843] tcp_v4_do_rcv+0xb25/0xd80 [ 850.784749] __release_sock+0x32d/0x750 [ 850.788738] release_sock+0x99/0x2a0 [ 850.792470] __inet_stream_connect+0xdff/0x15d0 [ 850.797159] inet_stream_connect+0xff/0x170 [ 850.801491] __sys_connect+0x745/0x860 [ 850.805391] __se_sys_connect+0x8d/0xb0 [ 850.809378] __x64_sys_connect+0x4a/0x70 [ 850.813455] do_syscall_64+0xcf/0x110 [ 850.817279] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.822471] [ 850.824104] Uninit was stored to memory at: [ 850.828447] kmsan_internal_chain_origin+0x136/0x240 [ 850.833571] __msan_chain_origin+0x6d/0xb0 [ 850.837841] __save_stack_trace+0x8be/0xc60 [ 850.842178] save_stack_trace+0xc6/0x110 [ 850.846258] kmsan_internal_chain_origin+0x136/0x240 [ 850.851375] kmsan_memcpy_origins+0x13d/0x190 [ 850.855888] __msan_memcpy+0x6f/0x80 [ 850.859634] skb_copy_bits+0x1d2/0xc90 [ 850.863537] skb_copy+0x56c/0xba0 [ 850.867006] tcp_send_synack+0x7a3/0x18f0 [ 850.871165] tcp_rcv_state_process+0x275d/0x6c60 [ 850.875935] tcp_v4_do_rcv+0xb25/0xd80 [ 850.879837] __release_sock+0x32d/0x750 [ 850.883827] release_sock+0x99/0x2a0 [ 850.887562] __inet_stream_connect+0xdff/0x15d0 [ 850.892257] inet_stream_connect+0xff/0x170 [ 850.896604] __sys_connect+0x745/0x860 [ 850.900506] __se_sys_connect+0x8d/0xb0 [ 850.904492] __x64_sys_connect+0x4a/0x70 [ 850.908575] do_syscall_64+0xcf/0x110 [ 850.912434] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 850.917643] [ 850.919279] Uninit was stored to memory at: [ 850.923637] kmsan_internal_chain_origin+0x136/0x240 [ 850.928774] __msan_chain_origin+0x6d/0xb0 [ 850.933024] __save_stack_trace+0x8be/0xc60 [ 850.937365] save_stack_trace+0xc6/0x110 [ 850.941440] kmsan_internal_chain_origin+0x136/0x240 [ 850.946558] kmsan_memcpy_origins+0x13d/0x190 [ 850.951083] __msan_memcpy+0x6f/0x80 [ 850.954816] skb_copy_bits+0x1d2/0xc90 [ 850.958722] skb_copy+0x56c/0xba0 [ 850.962192] tcp_send_synack+0x7a3/0x18f0 [ 850.966356] tcp_rcv_state_process+0x275d/0x6c60 [ 850.971123] tcp_v4_do_rcv+0xb25/0xd80 [ 850.975026] __release_sock+0x32d/0x750 [ 850.979014] release_sock+0x99/0x2a0 [ 850.982744] __inet_stream_connect+0xdff/0x15d0 [ 850.987428] inet_stream_connect+0xff/0x170 [ 850.991765] __sys_connect+0x745/0x860 [ 850.995668] __se_sys_connect+0x8d/0xb0 [ 850.999656] __x64_sys_connect+0x4a/0x70 [ 851.003733] do_syscall_64+0xcf/0x110 [ 851.007559] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 851.012766] [ 851.014398] Uninit was stored to memory at: [ 851.018737] kmsan_internal_chain_origin+0x136/0x240 [ 851.023861] __msan_chain_origin+0x6d/0xb0 [ 851.028115] __save_stack_trace+0x8be/0xc60 [ 851.032464] save_stack_trace+0xc6/0x110 [ 851.036540] kmsan_internal_chain_origin+0x136/0x240 [ 851.041661] kmsan_memcpy_origins+0x13d/0x190 [ 851.046186] __msan_memcpy+0x6f/0x80 [ 851.049918] skb_copy_bits+0x1d2/0xc90 [ 851.053821] skb_copy+0x56c/0xba0 [ 851.057292] tcp_send_synack+0x7a3/0x18f0 [ 851.061455] tcp_rcv_state_process+0x275d/0x6c60 [ 851.066228] tcp_v4_do_rcv+0xb25/0xd80 [ 851.070129] __release_sock+0x32d/0x750 [ 851.074119] release_sock+0x99/0x2a0 [ 851.077850] __inet_stream_connect+0xdff/0x15d0 [ 851.082540] inet_stream_connect+0xff/0x170 [ 851.086873] __sys_connect+0x745/0x860 [ 851.090777] __se_sys_connect+0x8d/0xb0 [ 851.094765] __x64_sys_connect+0x4a/0x70 [ 851.098843] do_syscall_64+0xcf/0x110 [ 851.102662] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 851.107857] [ 851.109490] Uninit was stored to memory at: [ 851.113827] kmsan_internal_chain_origin+0x136/0x240 [ 851.118949] __msan_chain_origin+0x6d/0xb0 [ 851.123215] __save_stack_trace+0x8be/0xc60 [ 851.127555] save_stack_trace+0xc6/0x110 [ 851.131647] kmsan_internal_chain_origin+0x136/0x240 [ 851.136772] kmsan_memcpy_origins+0x13d/0x190 [ 851.141303] __msan_memcpy+0x6f/0x80 [ 851.145040] skb_copy_bits+0x1d2/0xc90 [ 851.148943] skb_copy+0x56c/0xba0 [ 851.152417] tcp_send_synack+0x7a3/0x18f0 [ 851.156578] tcp_rcv_state_process+0x275d/0x6c60 [ 851.161364] tcp_v4_do_rcv+0xb25/0xd80 [ 851.165273] __release_sock+0x32d/0x750 [ 851.169278] release_sock+0x99/0x2a0 [ 851.173012] __inet_stream_connect+0xdff/0x15d0 [ 851.177697] inet_stream_connect+0xff/0x170 [ 851.182033] __sys_connect+0x745/0x860 [ 851.185932] __se_sys_connect+0x8d/0xb0 [ 851.189919] __x64_sys_connect+0x4a/0x70 [ 851.193994] do_syscall_64+0xcf/0x110 [ 851.197841] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 851.203035] [ 851.204674] Local variable description: ----_tcph.i@ip_vs_in [ 851.210499] Variable was created at: [ 851.214229] ip_vs_in+0xe9/0x3250 [ 851.217698] ip_vs_local_request4+0xec/0x130 17:14:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="4300000007ce37ab06c63eb1278334f4798f423429b834a6e0a0cdc0c46b74c8b26aa41739363958e0dae8fe4a6d4a3907a5c984d81a946f9e300a60b5a7b7bdf36095fef4d650"], &(0x7f0000000100)=0x4b) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x6}, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x400005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000240)=0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x480000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0x5, 0x4, 0x71, 0x4}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xffffffffffffffff, 0x801) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)) sendmsg$nl_generic(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x1803}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) io_cancel(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xe, 0x27925390, r2, &(0x7f00000002c0)="462bae83d81152d0652c5d38ce16bf72a1ea154219df9db130946f2e236cd0b61c0d4d49d64e79cd1d613b961f519b160c881019cb5efed9e79207287921e1d20f570e08e8a76058e8e388a27fb075aaf51db78f9a8ed34fe44f2917892eb36cd56b34ef8e94405a57f5d0fc96276be99346452d6aa8442f", 0x78, 0x100, 0x0, 0x2, r3}, &(0x7f0000000380)) 17:14:31 executing program 0: 17:14:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x800, @local, 0x2}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0x6}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23}], 0x78) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3, 0x10000) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) recvfrom$packet(r1, &(0x7f0000000240), 0x0, 0x10000, &(0x7f0000000ac0)={0x11, 0xf5, r2, 0x1, 0x1, 0x6, @dev={[], 0x12}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 851.727181] netlink: get zone limit has 4 unknown bytes 17:14:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r0, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)='+procself).nodev%#>systemvmnet1vboxnet1\x00'}, 0x30) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0xffffffffa0010000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f00000004c0)=0x10) close(r3) close(r2) [ 851.782349] netlink: get zone limit has 4 unknown bytes 17:14:31 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf432, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f00000000c0)) 17:14:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:14:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f00000000c0), 0x10000000000003e9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x0, "03e09d87a2ca26bc"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:14:32 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x80}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000003200190900000080000000000300ffffff7f00000000010000000083"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 852.444176] ================================================================== [ 852.451631] BUG: KMSAN: uninit-value in vmx_queue_exception+0x757/0x920 [ 852.458418] CPU: 1 PID: 21503 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 852.465708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.475078] Call Trace: [ 852.477705] dump_stack+0x32d/0x480 [ 852.481358] ? vmx_queue_exception+0x757/0x920 [ 852.485987] kmsan_report+0x19f/0x300 [ 852.489825] __msan_warning+0x76/0xc0 [ 852.493663] vmx_queue_exception+0x757/0x920 [ 852.498624] ? vmx_set_rflags+0x5cf/0x790 [ 852.502812] ? vmx_inject_nmi+0x4d0/0x4d0 [ 852.506987] kvm_arch_vcpu_ioctl_run+0x7d81/0x12040 [ 852.512174] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 852.517561] ? update_load_avg+0x12ae/0x1db0 [ 852.522050] ? kmsan_set_origin+0x7f/0x100 [ 852.526318] ? __msan_poison_alloca+0x1e0/0x270 [ 852.531006] ? kmsan_set_origin+0x7f/0x100 [ 852.535278] ? put_pid+0x71/0x410 [ 852.538756] ? kvm_vcpu_ioctl+0x1f85/0x1f90 [ 852.543112] ? put_pid+0x330/0x410 [ 852.546685] ? get_task_pid+0x19d/0x290 [ 852.550693] kvm_vcpu_ioctl+0xfb1/0x1f90 [ 852.554795] ? do_vfs_ioctl+0x184/0x2f70 [ 852.558876] ? __se_sys_ioctl+0x1da/0x270 [ 852.563055] ? kvm_vm_release+0x90/0x90 [ 852.567052] do_vfs_ioctl+0xfbc/0x2f70 [ 852.570991] ? security_file_ioctl+0x92/0x200 [ 852.575520] __se_sys_ioctl+0x1da/0x270 [ 852.579528] __x64_sys_ioctl+0x4a/0x70 [ 852.583441] do_syscall_64+0xcf/0x110 [ 852.587274] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 852.592483] RIP: 0033:0x457569 [ 852.595698] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.614631] RSP: 002b:00007f07b7baac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.622366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 852.629649] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 852.636938] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 852.644225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07b7bab6d4 [ 852.651508] R13: 00000000004c028e R14: 00000000004d06d8 R15: 00000000ffffffff [ 852.658814] [ 852.660450] Uninit was stored to memory at: [ 852.664800] kmsan_internal_chain_origin+0x136/0x240 [ 852.669929] __msan_chain_origin+0x6d/0xb0 [ 852.674183] kvm_inject_page_fault+0xa60/0xef0 [ 852.678782] nested_vmx_get_vmptr+0x36f/0x3d0 [ 852.683302] handle_vmclear+0x4aa/0x14f0 [ 852.687380] vmx_handle_exit+0x21bd/0xb980 [ 852.691641] kvm_arch_vcpu_ioctl_run+0xaeee/0x12040 [ 852.696682] kvm_vcpu_ioctl+0xfb1/0x1f90 [ 852.700757] do_vfs_ioctl+0xfbc/0x2f70 [ 852.704665] __se_sys_ioctl+0x1da/0x270 [ 852.708656] __x64_sys_ioctl+0x4a/0x70 [ 852.712561] do_syscall_64+0xcf/0x110 [ 852.716392] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 852.721597] [ 852.723275] Local variable description: ----e@nested_vmx_get_vmptr [ 852.729604] Variable was created at: [ 852.733335] nested_vmx_get_vmptr+0xa5/0x3d0 [ 852.737766] handle_vmclear+0x4aa/0x14f0 [ 852.741838] ================================================================== [ 852.749205] Disabling lock debugging due to kernel taint [ 852.754670] Kernel panic - not syncing: panic_on_warn set ... [ 852.760575] CPU: 1 PID: 21503 Comm: syz-executor0 Tainted: G B 4.20.0-rc2+ #85 [ 852.769263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.778630] Call Trace: [ 852.781244] dump_stack+0x32d/0x480 [ 852.784913] panic+0x624/0xc08 [ 852.788182] kmsan_report+0x300/0x300 [ 852.792018] __msan_warning+0x76/0xc0 [ 852.795850] vmx_queue_exception+0x757/0x920 [ 852.800278] ? vmx_set_rflags+0x5cf/0x790 [ 852.804460] ? vmx_inject_nmi+0x4d0/0x4d0 [ 852.808638] kvm_arch_vcpu_ioctl_run+0x7d81/0x12040 [ 852.813815] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 852.819198] ? update_load_avg+0x12ae/0x1db0 [ 852.823693] ? kmsan_set_origin+0x7f/0x100 [ 852.827961] ? __msan_poison_alloca+0x1e0/0x270 [ 852.832651] ? kmsan_set_origin+0x7f/0x100 [ 852.836912] ? put_pid+0x71/0x410 [ 852.840383] ? kvm_vcpu_ioctl+0x1f85/0x1f90 [ 852.844732] ? put_pid+0x330/0x410 [ 852.848297] ? get_task_pid+0x19d/0x290 [ 852.852304] kvm_vcpu_ioctl+0xfb1/0x1f90 [ 852.856401] ? do_vfs_ioctl+0x184/0x2f70 [ 852.860482] ? __se_sys_ioctl+0x1da/0x270 [ 852.864654] ? kvm_vm_release+0x90/0x90 [ 852.868652] do_vfs_ioctl+0xfbc/0x2f70 [ 852.872598] ? security_file_ioctl+0x92/0x200 [ 852.877133] __se_sys_ioctl+0x1da/0x270 [ 852.881144] __x64_sys_ioctl+0x4a/0x70 [ 852.885055] do_syscall_64+0xcf/0x110 [ 852.888887] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 852.894096] RIP: 0033:0x457569 [ 852.897316] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.916238] RSP: 002b:00007f07b7baac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.923971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 852.931256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 852.938539] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 852.945823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07b7bab6d4 [ 852.953112] R13: 00000000004c028e R14: 00000000004d06d8 R15: 00000000ffffffff [ 852.961477] Kernel Offset: disabled [ 852.965126] Rebooting in 86400 seconds..