fffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 542.917461][T17295] __nla_validate_parse: 6 callbacks suppressed [ 542.917491][T17295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 21:57:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000001}, {}]}) [ 543.041589][T17301] batman_adv: batadv0: Adding interface: ipvlan29 [ 543.048125][T17301] batman_adv: batadv0: The MTU of interface ipvlan29 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.073861][T17301] batman_adv: batadv0: Not using interface ipvlan29 (retrying later): interface not active 21:57:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x2c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x60}}, 0x8000000) 21:57:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 21:57:02 executing program 0: clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) waitid(0x1, r0, 0x0, 0x4, 0x0) [ 543.504800][T17328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 543.580720][T17334] batman_adv: batadv0: Adding interface: ipvlan30 [ 543.587251][T17334] batman_adv: batadv0: The MTU of interface ipvlan30 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.613171][T17334] batman_adv: batadv0: Not using interface ipvlan30 (retrying later): interface not active 21:57:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000040)=0x102000009) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000001a40)='./bus\x00', 0x0) 21:57:02 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 21:57:02 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x200000000006]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xfffffffb) 21:57:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:02 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 21:57:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={&(0x7f0000000340)="cc8ccd9e759aea4ce90bd72dab51cf24af341a15b20858cbb900495f8f8f3f6cffd0e6d8831a00601bac1cfea9188c05f94813f1ab3c6bafd93b2489aba4218b1fbbb6594f35f0573ef25b784ac7784c7eaaaf081b042e39b002d85ce073e4dc38c27733495fa7ecf8f2ce9f49b1a57d544f76db5a102fd8c41dc7ff2fe5ac879f8eefa21aa2e6ea295feb0cce9d4dce236b91e12722d4ebde43ecd7c2771be0806d", &(0x7f0000000440)='f'}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 544.135396][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 544.211987][T17361] batman_adv: batadv0: Adding interface: ipvlan31 [ 544.218515][T17361] batman_adv: batadv0: The MTU of interface ipvlan31 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.244180][T17361] batman_adv: batadv0: Not using interface ipvlan31 (retrying later): interface not active 21:57:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x200000000006]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200400c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1}, 0x0) 21:57:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:03 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007f6b00fe01b2a4a280930a600000fca84302910000003900090020000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 544.895224][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 544.971045][T17396] batman_adv: batadv0: Adding interface: ipvlan32 [ 544.977568][T17396] batman_adv: batadv0: The MTU of interface ipvlan32 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.003276][T17396] batman_adv: batadv0: Not using interface ipvlan32 (retrying later): interface not active [ 545.053600][T17391] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.061648][T17391] IPv6: Can't replace route, no match found [ 546.231953][ T33] audit: type=1800 audit(1590530225.052:12): pid=17413 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15754 res=0 [ 546.505354][ T33] audit: type=1800 audit(1590530225.322:13): pid=17414 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15756 res=0 21:57:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7e, 0x0, [0xc0000101], [0xc1]}) 21:57:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={&(0x7f0000000340)="cc8ccd9e759aea4ce90bd72dab51cf24af341a15b20858cbb900495f8f8f3f6cffd0e6d8831a00601bac1cfea9188c05f94813f1ab3c6bafd93b2489aba4218b1fbbb6594f35f0573ef25b784ac7784c7eaaaf081b042e39b002d85ce073e4dc38c27733495fa7ecf8f2ce9f49b1a57d544f76db5a102fd8c41dc7ff2fe5ac879f8eefa21aa2e6ea295feb0cce9d4dce236b91e12722d4ebde43ecd7c2771be0806d", &(0x7f0000000440)='f'}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 21:57:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6c}, {0x6, 0x0, 0x0, 0x50000}]}) 21:57:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000540)="8280a18f58f57220f84f585f2a198da5ed9d6661ff21c160faf59c40", 0x1c}], 0x1) 21:57:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 546.840993][T17422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.924292][T17433] batman_adv: batadv0: Adding interface: ipvlan33 [ 546.930910][T17433] batman_adv: batadv0: The MTU of interface ipvlan33 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.956651][T17433] batman_adv: batadv0: Not using interface ipvlan33 (retrying later): interface not active 21:57:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:57:06 executing program 0: mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x1, &(0x7f0000000080)=0xf5, 0x4, 0x0) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7fffffff, 0x5, 0x0) 21:57:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x84, 0x81, 0x0, 0x8) 21:57:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6c}, {0x6, 0x0, 0x0, 0x50000}]}) [ 547.712300][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) [ 547.791168][T17460] batman_adv: batadv0: Adding interface: ipvlan34 [ 547.797834][T17460] batman_adv: batadv0: The MTU of interface ipvlan34 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.823378][T17460] batman_adv: batadv0: Not using interface ipvlan34 (retrying later): interface not active 21:57:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:57:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={&(0x7f0000000340)="cc8ccd9e759aea4ce90bd72dab51cf24af341a15b20858cbb900495f8f8f3f6cffd0e6d8831a00601bac1cfea9188c05f94813f1ab3c6bafd93b2489aba4218b1fbbb6594f35f0573ef25b784ac7784c7eaaaf081b042e39b002d85ce073e4dc38c27733495fa7ecf8f2ce9f49b1a57d544f76db5a102fd8c41dc7ff2fe5ac879f8eefa21aa2e6ea295feb0cce9d4dce236b91e12722d4ebde43ecd7c2771be0806d", &(0x7f0000000440)='f'}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 21:57:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6c}, {0x6, 0x0, 0x0, 0x50000}]}) 21:57:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 548.155329][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) [ 548.245364][T17482] batman_adv: batadv0: Adding interface: ipvlan35 [ 548.251947][T17482] batman_adv: batadv0: The MTU of interface ipvlan35 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.277553][T17482] batman_adv: batadv0: Not using interface ipvlan35 (retrying later): interface not active [ 549.242768][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x1 [ 549.252716][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x0 [ 549.294326][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x1 [ 549.306320][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x0 [ 549.372893][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x1 [ 549.411025][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x14d [ 549.421146][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x14c [ 549.444167][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x147 [ 549.454299][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x140 [ 549.477470][T17497] kvm [17496]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x13c 21:57:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 21:57:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6c}, {0x6, 0x0, 0x0, 0x50000}]}) 21:57:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:57:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:57:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={&(0x7f0000000340)="cc8ccd9e759aea4ce90bd72dab51cf24af341a15b20858cbb900495f8f8f3f6cffd0e6d8831a00601bac1cfea9188c05f94813f1ab3c6bafd93b2489aba4218b1fbbb6594f35f0573ef25b784ac7784c7eaaaf081b042e39b002d85ce073e4dc38c27733495fa7ecf8f2ce9f49b1a57d544f76db5a102fd8c41dc7ff2fe5ac879f8eefa21aa2e6ea295feb0cce9d4dce236b91e12722d4ebde43ecd7c2771be0806d", &(0x7f0000000440)='f'}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 549.908105][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.988124][T17526] batman_adv: batadv0: Adding interface: ipvlan36 [ 549.994793][T17526] batman_adv: batadv0: The MTU of interface ipvlan36 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.020634][T17526] batman_adv: batadv0: Not using interface ipvlan36 (retrying later): interface not active 21:57:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1, 0x0, 0x7}, 0x20) 21:57:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:57:09 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 21:57:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 550.547328][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.641561][T17548] batman_adv: batadv0: Adding interface: ipvlan37 [ 550.648178][T17548] batman_adv: batadv0: The MTU of interface ipvlan37 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.673977][T17548] batman_adv: batadv0: Not using interface ipvlan37 (retrying later): interface not active 21:57:09 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='.\x00', r1, &(0x7f0000000140)='./file0\x00') 21:57:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 21:57:10 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 21:57:10 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)='./file0\x00') 21:57:10 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:57:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0xb) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc1105511, &(0x7f00000000c0)) 21:57:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 551.311628][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.387200][T17580] batman_adv: batadv0: Adding interface: ipvlan38 [ 551.393826][T17580] batman_adv: batadv0: The MTU of interface ipvlan38 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.419491][T17580] batman_adv: batadv0: Not using interface ipvlan38 (retrying later): interface not active 21:57:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 21:57:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:57:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x4fc}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:57:10 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 21:57:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) 21:57:10 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000950000000000000094bb1723bf242038a245545b21c751ee4024f479cbe4b89f9808837203000000000000c2e182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd02584a54ee68c70db4d8991886ebf120b21a69385a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93ae29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0086228ae875c8b475f460e60846878780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626027d8611dc5ac598cf1ba08a8e83dd505fb20649f53843a0e200c91f5bf1bb186eca7efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475febd1ad84a3fced6ba899558d0a5936f77a93f3a36a57fa82972a6388621f1ddbfd50659ffe982836903eba440402e41cfc52aed0ce7ef7bc38851a4c94428ffe62e9082d469935bb561517dbcfbdafb1710339aa0ead974cce28605bb5bfbf6429c5174da3d9c3fc4897f3709d2c9955c993e9eab7efb642aaa37cfa01acb0f58b9dfc1e341fb9cc1a178a3c1be71214ff465feefe4ab8b31fa33b6ea6b429ee1612dcfac86cd7dbe00f6e3c60fc58aff9d8126e48cb4ce9197166fecc4c22607851"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) [ 551.847141][T17599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.920553][T17605] batman_adv: batadv0: Adding interface: ipvlan39 [ 551.927222][T17605] batman_adv: batadv0: The MTU of interface ipvlan39 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.952687][T17605] batman_adv: batadv0: Not using interface ipvlan39 (retrying later): interface not active 21:57:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 21:57:11 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000280)) 21:57:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x4fc}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:57:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) 21:57:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6}, 0x98) [ 552.631918][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 552.717761][T17628] batman_adv: batadv0: Adding interface: ipvlan40 [ 552.725171][T17628] batman_adv: batadv0: The MTU of interface ipvlan40 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.750814][T17628] batman_adv: batadv0: Not using interface ipvlan40 (retrying later): interface not active 21:57:11 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000100)={0x7}, 0x7) r4 = dup2(r1, r3) dup2(r4, r2) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1b) write(r0, &(0x7f0000000200)="fa", 0x7ffff) 21:57:11 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000201010000409fbc60e1303c0900000010000200040001000800020004b05500"], 0x24}}, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) [ 553.194093][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.312130][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:57:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:57:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x4fc}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:57:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) 21:57:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0], 0x1}) 21:57:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 21:57:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000100)={0x7}, 0x7) r4 = dup2(r1, r3) dup2(r4, r2) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1b) write(r0, &(0x7f0000000200)="fa", 0x7ffff) [ 554.875306][T17657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:14 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x0, 0x0, "", [{{0x8, 0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3, &(0x7f0000000780)=[{0x10}], 0x10}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 555.556706][T17666] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 555.572082][T17666] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 21:57:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x4fc}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:57:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) 21:57:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e10", 0x7, 0x88, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b4fdb5", 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @private1}}}}}}}, 0x0) 21:57:15 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000100)={0x7}, 0x7) r4 = dup2(r1, r3) dup2(r4, r2) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1b) write(r0, &(0x7f0000000200)="fa", 0x7ffff) [ 556.173219][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.242304][T17683] batman_adv: batadv0: Adding interface: ipvlan41 [ 556.248830][T17683] batman_adv: batadv0: The MTU of interface ipvlan41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.274670][T17683] batman_adv: batadv0: Not using interface ipvlan41 (retrying later): interface not active 21:57:15 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x0, 0x0, "", [{{0x8, 0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3, &(0x7f0000000780)=[{0x10}], 0x10}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 556.601206][ C0] not chained 10000 origins [ 556.605745][ C0] CPU: 0 PID: 13054 Comm: kworker/u4:5 Not tainted 5.7.0-rc4-syzkaller #0 [ 556.614221][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.624269][ C0] Workqueue: krdsd rds_connect_worker [ 556.629619][ C0] Call Trace: [ 556.632886][ C0] [ 556.635737][ C0] dump_stack+0x1c9/0x220 [ 556.640064][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 556.645774][ C0] ? native_apic_mem_write+0x45/0x90 [ 556.651041][ C0] ? flat_init_apic_ldr+0x170/0x170 [ 556.656220][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.661418][ C0] ? __should_failslab+0x1f6/0x290 [ 556.666511][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 556.671607][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 556.677408][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 556.683547][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 556.688825][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.694017][ C0] __msan_chain_origin+0x50/0x90 [ 556.698943][ C0] tcp_conn_request+0x13ce/0x4d10 [ 556.703956][ C0] ? ret_from_intr+0x13/0x3b [ 556.708548][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 556.714598][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 556.719435][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 556.725482][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.730665][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.735850][ C0] tcp_v4_conn_request+0x19b/0x240 [ 556.740964][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 556.745987][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 556.751259][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 556.756612][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 556.762407][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.767588][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 556.773388][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 556.779442][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.784626][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 556.789221][ C0] tcp_v4_rcv+0x425c/0x5040 [ 556.793710][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 556.799780][ C0] ? tcp_filter+0xf0/0xf0 [ 556.804091][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 556.809538][ C0] ip_local_deliver+0x62a/0x7c0 [ 556.814391][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 556.819410][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 556.825028][ C0] ip_rcv+0x6cf/0x750 [ 556.828998][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 556.833745][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 556.839374][ C0] process_backlog+0xf0b/0x1410 [ 556.844214][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 556.849835][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 556.855104][ C0] net_rx_action+0x786/0x1aa0 [ 556.859783][ C0] ? net_tx_action+0xc30/0xc30 [ 556.864532][ C0] __do_softirq+0x311/0x83d [ 556.869028][ C0] do_softirq_own_stack+0x49/0x80 [ 556.874028][ C0] [ 556.876952][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 556.882136][ C0] local_bh_enable+0x36/0x40 [ 556.886707][ C0] ip_finish_output2+0x2115/0x2610 [ 556.891804][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 556.897507][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 556.903480][ C0] __ip_finish_output+0xaa7/0xd80 [ 556.908497][ C0] ip_finish_output+0x166/0x410 [ 556.913336][ C0] ip_output+0x593/0x680 [ 556.917568][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 556.922835][ C0] ? ip_finish_output+0x410/0x410 [ 556.927839][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 556.932760][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 556.938290][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.943479][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.948667][ C0] ip_queue_xmit+0xcc/0xf0 [ 556.953070][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 556.957900][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 556.963088][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 556.968281][ C0] tcp_connect+0x420a/0x6830 [ 556.972860][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 556.978144][ C0] tcp_v4_connect+0x21fd/0x2370 [ 556.983083][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 556.988021][ C0] __inet_stream_connect+0x2fb/0x1340 [ 556.993383][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 556.998659][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 557.003846][ C0] inet_stream_connect+0x101/0x180 [ 557.008942][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 557.014562][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 557.020184][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 557.025369][ C0] ? rds_tcp_state_change+0x390/0x390 [ 557.031689][ C0] rds_connect_worker+0x2a6/0x470 [ 557.036697][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 557.042751][ C0] ? rds_addr_cmp+0x200/0x200 [ 557.047415][ C0] process_one_work+0x1555/0x1f40 [ 557.052434][ C0] worker_thread+0xef6/0x2450 [ 557.057097][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 557.062883][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 557.068080][ C0] kthread+0x4b5/0x4f0 [ 557.072133][ C0] ? process_one_work+0x1f40/0x1f40 [ 557.077321][ C0] ? kthread_blkcg+0xf0/0xf0 [ 557.081899][ C0] ret_from_fork+0x35/0x40 [ 557.086301][ C0] Uninit was stored to memory at: [ 557.091311][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.097014][ C0] __msan_chain_origin+0x50/0x90 [ 557.101933][ C0] tcp_conn_request+0x1781/0x4d10 [ 557.106940][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.112032][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.117047][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.122400][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.126980][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.131474][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.136911][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.141740][ C0] ip_rcv+0x6cf/0x750 [ 557.145713][ C0] process_backlog+0xf0b/0x1410 [ 557.150544][ C0] net_rx_action+0x786/0x1aa0 [ 557.155203][ C0] __do_softirq+0x311/0x83d [ 557.159677][ C0] [ 557.161983][ C0] Uninit was stored to memory at: [ 557.166991][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.172702][ C0] __msan_chain_origin+0x50/0x90 [ 557.177621][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 557.182894][ C0] tcp_conn_request+0x33d7/0x4d10 [ 557.187897][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.192992][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.198013][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.203366][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.207938][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.212425][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.217861][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.222691][ C0] ip_rcv+0x6cf/0x750 [ 557.226657][ C0] process_backlog+0xf0b/0x1410 [ 557.231499][ C0] net_rx_action+0x786/0x1aa0 [ 557.236155][ C0] __do_softirq+0x311/0x83d [ 557.240631][ C0] [ 557.242940][ C0] Uninit was stored to memory at: [ 557.247947][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.253647][ C0] __msan_chain_origin+0x50/0x90 [ 557.258570][ C0] tcp_conn_request+0x1781/0x4d10 [ 557.263576][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.268673][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.273680][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.279031][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.283603][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.288085][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.293524][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.298352][ C0] ip_rcv+0x6cf/0x750 [ 557.302314][ C0] process_backlog+0xf0b/0x1410 [ 557.307248][ C0] net_rx_action+0x786/0x1aa0 [ 557.311910][ C0] __do_softirq+0x311/0x83d [ 557.316385][ C0] [ 557.318703][ C0] Uninit was stored to memory at: [ 557.323710][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.329409][ C0] __msan_chain_origin+0x50/0x90 [ 557.334328][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 557.339597][ C0] tcp_conn_request+0x33d7/0x4d10 [ 557.344603][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.349694][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.354699][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.360052][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.364627][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.369122][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.374559][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.379400][ C0] ip_rcv+0x6cf/0x750 [ 557.383363][ C0] process_backlog+0xf0b/0x1410 [ 557.388206][ C0] net_rx_action+0x786/0x1aa0 [ 557.392872][ C0] __do_softirq+0x311/0x83d [ 557.397349][ C0] [ 557.399658][ C0] Uninit was stored to memory at: [ 557.404669][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.410382][ C0] __msan_chain_origin+0x50/0x90 [ 557.415306][ C0] tcp_conn_request+0x1781/0x4d10 [ 557.420337][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.425433][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.430451][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.435805][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.440383][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.444872][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.450311][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.455148][ C0] ip_rcv+0x6cf/0x750 [ 557.459116][ C0] process_backlog+0xf0b/0x1410 [ 557.463951][ C0] net_rx_action+0x786/0x1aa0 [ 557.468609][ C0] __do_softirq+0x311/0x83d [ 557.473086][ C0] [ 557.475409][ C0] Uninit was stored to memory at: [ 557.480419][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.486124][ C0] __msan_chain_origin+0x50/0x90 [ 557.491048][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 557.496315][ C0] tcp_conn_request+0x33d7/0x4d10 [ 557.501323][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.506414][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.511423][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.516774][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.521344][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.525829][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.531266][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.536094][ C0] ip_rcv+0x6cf/0x750 [ 557.540064][ C0] process_backlog+0xf0b/0x1410 [ 557.544911][ C0] net_rx_action+0x786/0x1aa0 [ 557.549568][ C0] __do_softirq+0x311/0x83d [ 557.554046][ C0] [ 557.556350][ C0] Uninit was stored to memory at: [ 557.561357][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 557.567057][ C0] __msan_chain_origin+0x50/0x90 [ 557.571986][ C0] tcp_conn_request+0x1781/0x4d10 [ 557.576999][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.582094][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 557.587115][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.592473][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.597047][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.601533][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.607071][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.611903][ C0] ip_rcv+0x6cf/0x750 [ 557.615871][ C0] process_backlog+0xf0b/0x1410 [ 557.620704][ C0] net_rx_action+0x786/0x1aa0 [ 557.625374][ C0] __do_softirq+0x311/0x83d [ 557.629854][ C0] [ 557.632162][ C0] Uninit was created at: [ 557.636402][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 557.642015][ C0] kmsan_alloc_page+0xb9/0x180 [ 557.646763][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 557.652289][ C0] alloc_pages_current+0x67d/0x990 [ 557.657383][ C0] alloc_slab_page+0x122/0x1310 [ 557.662217][ C0] new_slab+0x2bc/0x1130 [ 557.666440][ C0] ___slab_alloc+0x14a3/0x2040 [ 557.671188][ C0] kmem_cache_alloc+0xb23/0xd70 [ 557.676026][ C0] inet_reqsk_alloc+0xac/0x830 [ 557.680772][ C0] tcp_conn_request+0x753/0x4d10 [ 557.685688][ C0] tcp_v4_conn_request+0x19b/0x240 [ 557.690794][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 557.696158][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 557.700729][ C0] tcp_v4_rcv+0x425c/0x5040 [ 557.705214][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 557.710652][ C0] ip_local_deliver+0x62a/0x7c0 [ 557.715481][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 557.720311][ C0] ip_list_rcv+0x8eb/0x950 [ 557.724711][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 557.730845][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 557.737085][ C0] napi_complete_done+0x2ef/0xb60 [ 557.742093][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 557.747540][ C0] virtnet_poll+0x1468/0x19f0 [ 557.752208][ C0] net_rx_action+0x786/0x1aa0 [ 557.756866][ C0] __do_softirq+0x311/0x83d 21:57:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:57:16 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001700)=""/4100, &(0x7f00000004c0)=""/132, &(0x7f0000000380)=""/105, 0xf000}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 21:57:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) 21:57:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000100)={0x7}, 0x7) r4 = dup2(r1, r3) dup2(r4, r2) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1b) write(r0, &(0x7f0000000200)="fa", 0x7ffff) 21:57:16 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) [ 559.129335][T17702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.168040][T17712] batman_adv: batadv0: Adding interface: ipvlan42 [ 559.174675][T17712] batman_adv: batadv0: The MTU of interface ipvlan42 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.200385][T17712] batman_adv: batadv0: Not using interface ipvlan42 (retrying later): interface not active 21:57:18 executing program 0: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000009a3de0000000000000000000000000010000780030000000a0001"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001a0001080000000263300a141c"], 0x1}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:57:18 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) 21:57:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 559.548892][T17727] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 559.557194][T17727] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 559.616398][T17732] batman_adv: Cannot find parent device [ 559.626406][T17732] batman_adv: batadv0: Adding interface: gretap1 [ 559.633029][T17732] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.658554][T17732] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active 21:57:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) 21:57:18 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x121801) r1 = dup(r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4000ae172, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 21:57:18 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) [ 559.834137][T17738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.911172][T17745] batman_adv: batadv0: Adding interface: ipvlan43 [ 559.917725][T17745] batman_adv: batadv0: The MTU of interface ipvlan43 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.946827][T17745] batman_adv: batadv0: Not using interface ipvlan43 (retrying later): interface not active 21:57:19 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x0, 0x0, "", [{{0x8, 0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3, &(0x7f0000000780)=[{0x10}], 0x10}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 561.165859][T17758] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 21:57:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:57:20 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 21:57:20 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r1, r0) 21:57:20 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) 21:57:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0xc00000000000000}, 0x0) 21:57:20 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x0, 0x0, "", [{{0x8, 0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3, &(0x7f0000000780)=[{0x10}], 0x10}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 561.450894][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) [ 561.548240][T17778] batman_adv: batadv0: Adding interface: ipvlan44 [ 561.554825][T17778] batman_adv: batadv0: The MTU of interface ipvlan44 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.580348][T17778] batman_adv: batadv0: Not using interface ipvlan44 (retrying later): interface not active 21:57:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc001102a}]}) dup2(r4, r3) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:57:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000480)) 21:57:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x23, &(0x7f0000000100), 0x8) 21:57:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0xc00000000000000}, 0x0) [ 562.007493][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)="87", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{0x0, 0x2}, {&(0x7f0000001940)="9c", 0x1}], 0x2}}], 0x2, 0x0) [ 562.145439][T17804] batman_adv: batadv0: Adding interface: ipvlan45 [ 562.152045][T17804] batman_adv: batadv0: The MTU of interface ipvlan45 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.178313][T17804] batman_adv: batadv0: Not using interface ipvlan45 (retrying later): interface not active [ 562.700980][T17821] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 21:57:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) 21:57:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 21:57:23 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x40505330, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 21:57:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0xc00000000000000}, 0x0) 21:57:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc001102a}]}) dup2(r4, r3) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:57:23 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x200103, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x80000000, 0x4}, 0x3c) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x0) [ 564.593256][T17829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.686108][T17845] batman_adv: batadv0: Adding interface: ipvlan46 [ 564.692761][T17845] batman_adv: batadv0: The MTU of interface ipvlan46 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.718392][T17845] batman_adv: batadv0: Not using interface ipvlan46 (retrying later): interface not active 21:57:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc001102a}]}) dup2(r4, r3) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:57:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:23 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x200103, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x80000000, 0x4}, 0x3c) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x0) [ 565.010682][T17865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.076417][T17872] batman_adv: batadv0: Adding interface: ipvlan47 [ 565.083063][T17872] batman_adv: batadv0: The MTU of interface ipvlan47 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.108777][T17872] batman_adv: batadv0: Not using interface ipvlan47 (retrying later): interface not active 21:57:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 21:57:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 565.516213][T17891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc001102a}]}) dup2(r4, r3) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 565.579014][T17896] batman_adv: batadv0: Adding interface: ipvlan48 [ 565.585792][T17896] batman_adv: batadv0: The MTU of interface ipvlan48 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.611527][T17896] batman_adv: batadv0: Not using interface ipvlan48 (retrying later): interface not active 21:57:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0)='`', &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 21:57:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r0, 0xfffffffffffffffc, 0x3) 21:57:25 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x200103, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x80000000, 0x4}, 0x3c) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x0) 21:57:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 21:57:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 566.347730][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0xbf, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300), 0x4) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1ae) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 566.423891][T17924] batman_adv: batadv0: Adding interface: ipvlan49 [ 566.430524][T17924] batman_adv: batadv0: The MTU of interface ipvlan49 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.456132][T17924] batman_adv: batadv0: Not using interface ipvlan49 (retrying later): interface not active 21:57:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) 21:57:25 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x200103, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x80000000, 0x4}, 0x3c) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x0) 21:57:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 21:57:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r2, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000200feffffff0800000000000000", 0x24) 21:57:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924924bd, 0xff03) accept4(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x0) [ 567.301333][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.372426][T17958] batman_adv: batadv0: Adding interface: ipvlan50 [ 567.378955][T17958] batman_adv: batadv0: The MTU of interface ipvlan50 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.404595][T17958] batman_adv: batadv0: Not using interface ipvlan50 (retrying later): interface not active 21:57:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 21:57:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 21:57:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x7}}]}, 0x3c}}, 0x0) 21:57:26 executing program 2: r0 = socket(0x1e, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000040)=@id, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)=""/208, 0xca}], 0x1, 0x0, 0xfffffffffffffd5e}}, {{0x0, 0x0, 0x0, 0x248, 0x0, 0xfffffffffffffe91}}], 0x2, 0x0, 0x0) 21:57:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x50}}, 0x0) 21:57:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0xbf, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300), 0x4) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1ae) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 568.075572][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.177968][T17976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.250163][T17982] batman_adv: batadv0: Adding interface: ipvlan51 [ 568.256763][T17982] batman_adv: batadv0: The MTU of interface ipvlan51 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.282339][T17982] batman_adv: batadv0: Not using interface ipvlan51 (retrying later): interface not active 21:57:27 executing program 2: unshare(0x8020600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 568.315135][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:57:27 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:57:27 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:57:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000009c0)=""/4096) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 568.768247][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.825869][T18005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.858476][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 568.858602][ C1] sd 0:0:1:0: [sg0] tag#7513 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.876119][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB: Test Unit Ready [ 568.882806][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.892631][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.902422][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.912261][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0xbf, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300), 0x4) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1ae) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 568.922066][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.931885][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.941723][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.951546][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.961390][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.971206][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.981014][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.990830][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.006722][ C1] sd 0:0:1:0: [sg0] tag#7513 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.028341][T18007] batman_adv: batadv0: Adding interface: ipvlan52 [ 569.034944][T18007] batman_adv: batadv0: The MTU of interface ipvlan52 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.060478][T18007] batman_adv: batadv0: Not using interface ipvlan52 (retrying later): interface not active [ 569.137697][T18000] IPVS: ftp: loaded support on port[0] = 21 21:57:28 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:57:28 executing program 1: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x60000004) [ 569.690204][T18046] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 569.716188][T18047] __nla_validate_parse: 1 callbacks suppressed [ 569.716218][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:57:29 executing program 2: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:57:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:57:29 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:57:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0xbf, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300), 0x4) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1ae) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:57:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000080), 0x2cb) 21:57:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x8f, &(0x7f0000000140), &(0x7f00000000c0)=0x4) [ 570.370073][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 570.388562][ C1] sd 0:0:1:0: [sg0] tag#7514 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.399173][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB: Test Unit Ready [ 570.405890][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.415693][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.425537][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.435413][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.445235][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.455052][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.464869][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.474687][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.484499][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.494410][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.504238][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.514060][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.523879][ C1] sd 0:0:1:0: [sg0] tag#7514 CDB[c0]: 00 00 00 00 00 00 00 00 [ 570.599713][T18070] IPVS: ftp: loaded support on port[0] = 21 21:57:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 570.723132][T18067] IPVS: ftp: loaded support on port[0] = 21 [ 570.792505][ C1] sd 0:0:1:0: [sg0] tag#7515 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.803232][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB: Test Unit Ready [ 570.809827][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.819729][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.829542][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.842326][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.852147][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.861950][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.871751][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.881558][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "efd8a46c0283d64dc80e9b3b3368"}, 0x4e) [ 570.891357][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.901156][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.910963][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.920770][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.930570][ C1] sd 0:0:1:0: [sg0] tag#7515 CDB[c0]: 00 00 00 00 00 00 00 00 [ 570.952797][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:57:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 21:57:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syncfs(0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:57:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x1000) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x10000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000080)={0x0, r5}) r6 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x4, 0x3, 0x100, 0x0, 0x3ff, 0x8, 0x1f}) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x10000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x3, r5}) 21:57:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 21:57:32 executing program 2: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:57:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 21:57:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x5, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0xa8}}, 0x0) 21:57:32 executing program 3: r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x7, &(0x7f0000ffd000/0x3000)=nil, 0x2) 21:57:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001e005f031400fffffffffff8070037b2b3448647a0e09658dc000208000800ff", 0xfdd6) recvmmsg(r0, &(0x7f0000005180), 0x193, 0x40010042, 0x0) 21:57:32 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 574.130989][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.161668][ C1] sd 0:0:1:0: [sg0] tag#7529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 574.172304][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB: Test Unit Ready [ 574.178922][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.188882][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.198727][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.208561][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.218381][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.228195][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.238014][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.247834][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.257688][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.267509][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x5, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0xa8}}, 0x0) 21:57:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x52, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c884"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 574.277334][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.287231][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.297037][ C1] sd 0:0:1:0: [sg0] tag#7529 CDB[c0]: 00 00 00 00 00 00 00 00 [ 574.408510][T18143] IPVS: ftp: loaded support on port[0] = 21 [ 574.445590][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 574.504130][T18144] IPVS: ftp: loaded support on port[0] = 21 [ 574.551342][ C1] sd 0:0:1:0: [sg0] tag#7530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 574.562052][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB: Test Unit Ready [ 574.568745][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.578700][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.588621][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.598511][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.608399][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.618274][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.628159][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.638029][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 574.647931][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.657813][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.667698][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.677580][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.687468][ C1] sd 0:0:1:0: [sg0] tag#7530 CDB[c0]: 00 00 00 00 00 00 00 00 21:57:34 executing program 2: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:57:34 executing program 0: unshare(0x40600) r0 = socket$inet(0x2, 0x2, 0x0) fdatasync(r0) 21:57:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x5, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0xa8}}, 0x0) [ 575.236575][T18184] HTB: quantum of class FFFF0900 is small. Consider r2q change. [ 575.325988][ C0] sd 0:0:1:0: [sg0] tag#7531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.336764][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB: Test Unit Ready [ 575.343472][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.353256][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.364262][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.365875][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 575.374073][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.393026][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.402883][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.412725][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.422571][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.432394][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.442241][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.452070][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.461930][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 575.471756][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[c0]: 00 00 00 00 00 00 00 00 21:57:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000001680)=[{&(0x7f0000001200)="79579e497e4fad77af180acd17703a3f2b0d5ce9ff2604e52191967717e3d9859e7cb1a93a22ae21eb5013bde19682c462396c4efd5c246aa826df6337b2be2482c9a79f0263132c7f6e5ab415a50d53d77672d51f5304f92fb074dcae32c1855b44c21dfa0c0bb3f85ec6abd538102fd2ab9f7a19fb09d79a0035da976d182cd5702c7fa1dd700000000000", 0x8c}, {&(0x7f00000012c0)="85ddab3385285f6e1125f8919bc9fe1d61b7", 0x12}, {&(0x7f0000001380)="e14759", 0x3}], 0x3, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 21:57:34 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x1f, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c680192c0945c08ba8c552fc99a7422007653872ecb4f6cdcfcb2f812d2740148b40b8ae4f2a88d2fbea75e16a61fd"], 0xf0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 575.545938][T18215] IPVS: ftp: loaded support on port[0] = 21 [ 575.723014][T18221] IPVS: ftp: loaded support on port[0] = 21 [ 575.914889][ C0] sd 0:0:1:0: [sg0] tag#7532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.925529][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB: Test Unit Ready [ 575.932223][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.942062][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.952078][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.961930][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.971768][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.981591][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.991427][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.001267][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.011127][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.020901][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.030671][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.040462][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.050168][ C0] sd 0:0:1:0: [sg0] tag#7532 CDB[c0]: 00 00 00 00 00 00 00 00 [ 576.610718][ T45] tipc: TX() has been purged, node left! [ 576.658763][ C1] not chained 20000 origins [ 576.663302][ C1] CPU: 1 PID: 24 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 576.671551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.681610][ C1] Workqueue: krdsd rds_connect_worker [ 576.686972][ C1] Call Trace: [ 576.690252][ C1] [ 576.693112][ C1] dump_stack+0x1c9/0x220 [ 576.697444][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 576.703168][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 576.709238][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 576.714180][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.719381][ C1] ? __should_failslab+0x1f6/0x290 [ 576.724498][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 576.729608][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 576.735415][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 576.741571][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 576.746876][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.752079][ C1] __msan_chain_origin+0x50/0x90 [ 576.757025][ C1] tcp_conn_request+0x1781/0x4d10 [ 576.762064][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 576.768115][ C1] ? cache_from_obj+0x3d5/0x6b0 [ 576.772951][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 576.779176][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.784357][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.789641][ C1] tcp_v4_conn_request+0x19b/0x240 [ 576.794744][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 576.799753][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 576.805026][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 576.810381][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 576.816178][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.821371][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 576.827163][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.833217][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.838400][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 576.842982][ C1] tcp_v4_rcv+0x425c/0x5040 [ 576.847469][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 576.853541][ C1] ? tcp_filter+0xf0/0xf0 [ 576.857852][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 576.863301][ C1] ip_local_deliver+0x62a/0x7c0 [ 576.868139][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 576.873146][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 576.878759][ C1] ip_rcv+0x6cf/0x750 [ 576.882731][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 576.887478][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 576.893094][ C1] process_backlog+0xf0b/0x1410 [ 576.897944][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 576.903565][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 576.908831][ C1] net_rx_action+0x786/0x1aa0 [ 576.913501][ C1] ? net_tx_action+0xc30/0xc30 [ 576.918254][ C1] __do_softirq+0x311/0x83d [ 576.922765][ C1] do_softirq_own_stack+0x49/0x80 [ 576.927766][ C1] [ 576.930694][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 576.935878][ C1] local_bh_enable+0x36/0x40 [ 576.940451][ C1] ip_finish_output2+0x2115/0x2610 [ 576.945548][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 576.951252][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 576.957226][ C1] __ip_finish_output+0xaa7/0xd80 [ 576.962243][ C1] ip_finish_output+0x166/0x410 [ 576.967094][ C1] ip_output+0x593/0x680 [ 576.971328][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 576.976594][ C1] ? ip_finish_output+0x410/0x410 [ 576.981600][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 576.986522][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 576.992049][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 576.997238][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 577.002424][ C1] ip_queue_xmit+0xcc/0xf0 [ 577.006826][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 577.011659][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 577.016844][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 577.022034][ C1] tcp_connect+0x420a/0x6830 [ 577.026622][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 577.031906][ C1] tcp_v4_connect+0x21fd/0x2370 [ 577.036760][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 577.041684][ C1] __inet_stream_connect+0x2fb/0x1340 [ 577.047051][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 577.052323][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 577.057509][ C1] inet_stream_connect+0x101/0x180 [ 577.062604][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 577.068221][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 577.073843][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 577.079027][ C1] ? rds_tcp_state_change+0x390/0x390 [ 577.084395][ C1] rds_connect_worker+0x2a6/0x470 [ 577.089404][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 577.095468][ C1] ? rds_addr_cmp+0x200/0x200 [ 577.100128][ C1] process_one_work+0x1555/0x1f40 [ 577.105150][ C1] worker_thread+0xef6/0x2450 [ 577.110355][ C1] kthread+0x4b5/0x4f0 [ 577.114406][ C1] ? process_one_work+0x1f40/0x1f40 [ 577.119595][ C1] ? kthread_blkcg+0xf0/0xf0 [ 577.124169][ C1] ret_from_fork+0x35/0x40 [ 577.128572][ C1] Uninit was stored to memory at: [ 577.133580][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.139294][ C1] __msan_chain_origin+0x50/0x90 [ 577.144213][ C1] tcp_conn_request+0x1781/0x4d10 [ 577.149216][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.154343][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.159361][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.164800][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.169369][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.173853][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.179297][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.184128][ C1] ip_rcv+0x6cf/0x750 [ 577.188090][ C1] process_backlog+0xf0b/0x1410 [ 577.192920][ C1] net_rx_action+0x786/0x1aa0 [ 577.197576][ C1] __do_softirq+0x311/0x83d [ 577.202063][ C1] [ 577.204978][ C1] Uninit was stored to memory at: [ 577.209985][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.215696][ C1] __msan_chain_origin+0x50/0x90 [ 577.220614][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 577.225882][ C1] tcp_conn_request+0x33d7/0x4d10 [ 577.230888][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.235996][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.241012][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.246372][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.250954][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.255443][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.260898][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.265728][ C1] ip_rcv+0x6cf/0x750 [ 577.269697][ C1] process_backlog+0xf0b/0x1410 [ 577.274536][ C1] net_rx_action+0x786/0x1aa0 [ 577.279198][ C1] __do_softirq+0x311/0x83d [ 577.283676][ C1] [ 577.285988][ C1] Uninit was stored to memory at: [ 577.291000][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.296711][ C1] __msan_chain_origin+0x50/0x90 [ 577.301630][ C1] tcp_conn_request+0x1781/0x4d10 [ 577.306635][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.311730][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.316739][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.322090][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.326658][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.331145][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.336584][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.341426][ C1] ip_rcv+0x6cf/0x750 [ 577.345397][ C1] process_backlog+0xf0b/0x1410 [ 577.350241][ C1] net_rx_action+0x786/0x1aa0 [ 577.354910][ C1] __do_softirq+0x311/0x83d [ 577.359387][ C1] [ 577.361693][ C1] Uninit was stored to memory at: [ 577.366706][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.372408][ C1] __msan_chain_origin+0x50/0x90 [ 577.377330][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 577.382617][ C1] tcp_conn_request+0x33d7/0x4d10 [ 577.387629][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.392727][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.397735][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.403091][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.407663][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.412153][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.417709][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.422542][ C1] ip_rcv+0x6cf/0x750 [ 577.426508][ C1] process_backlog+0xf0b/0x1410 [ 577.431342][ C1] net_rx_action+0x786/0x1aa0 [ 577.436004][ C1] __do_softirq+0x311/0x83d [ 577.440483][ C1] [ 577.442963][ C1] Uninit was stored to memory at: [ 577.447980][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.453770][ C1] __msan_chain_origin+0x50/0x90 [ 577.458690][ C1] tcp_conn_request+0x1781/0x4d10 [ 577.463696][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.468788][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.473796][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.479148][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.483723][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.488211][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.493650][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.498481][ C1] ip_rcv+0x6cf/0x750 [ 577.502445][ C1] process_backlog+0xf0b/0x1410 [ 577.507279][ C1] net_rx_action+0x786/0x1aa0 [ 577.511936][ C1] __do_softirq+0x311/0x83d [ 577.516411][ C1] [ 577.518717][ C1] Uninit was stored to memory at: [ 577.524517][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.530216][ C1] __msan_chain_origin+0x50/0x90 [ 577.535133][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 577.540401][ C1] tcp_conn_request+0x33d7/0x4d10 [ 577.545405][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.550502][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.555509][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.560871][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.565439][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.569921][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.575372][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.580207][ C1] ip_rcv+0x6cf/0x750 [ 577.584180][ C1] process_backlog+0xf0b/0x1410 [ 577.589012][ C1] net_rx_action+0x786/0x1aa0 [ 577.593686][ C1] __do_softirq+0x311/0x83d [ 577.598168][ C1] [ 577.600476][ C1] Uninit was stored to memory at: [ 577.605490][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 577.611201][ C1] __msan_chain_origin+0x50/0x90 [ 577.616121][ C1] tcp_conn_request+0x1781/0x4d10 [ 577.621128][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.626225][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 577.631246][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.636598][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.641168][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.645655][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.651101][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.655931][ C1] ip_rcv+0x6cf/0x750 [ 577.659895][ C1] process_backlog+0xf0b/0x1410 [ 577.664724][ C1] net_rx_action+0x786/0x1aa0 [ 577.669380][ C1] __do_softirq+0x311/0x83d [ 577.673857][ C1] [ 577.676165][ C1] Uninit was created at: [ 577.680391][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 577.686002][ C1] kmsan_alloc_page+0xb9/0x180 [ 577.690760][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 577.696289][ C1] alloc_pages_current+0x67d/0x990 [ 577.701381][ C1] alloc_slab_page+0x122/0x1310 [ 577.706222][ C1] new_slab+0x2bc/0x1130 [ 577.710446][ C1] ___slab_alloc+0x14a3/0x2040 [ 577.715190][ C1] kmem_cache_alloc+0xb23/0xd70 [ 577.720022][ C1] inet_reqsk_alloc+0xac/0x830 [ 577.724766][ C1] tcp_conn_request+0x753/0x4d10 [ 577.729682][ C1] tcp_v4_conn_request+0x19b/0x240 [ 577.734776][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 577.740139][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 577.744710][ C1] tcp_v4_rcv+0x425c/0x5040 [ 577.749193][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 577.754630][ C1] ip_local_deliver+0x62a/0x7c0 [ 577.759463][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 577.764292][ C1] ip_list_rcv+0x8eb/0x950 [ 577.768689][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 577.774837][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 577.781057][ C1] napi_complete_done+0x2ef/0xb60 [ 577.786064][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 577.791428][ C1] virtnet_poll+0x1468/0x19f0 [ 577.796083][ C1] net_rx_action+0x786/0x1aa0 [ 577.800738][ C1] __do_softirq+0x311/0x83d 21:57:37 executing program 5: creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) dup3(r0, r3, 0x0) 21:57:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x5, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0xa8}}, 0x0) 21:57:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 21:57:37 executing program 0: unshare(0x2000400) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000080)) 21:57:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x23, 0x7, 0x7, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 21:57:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x2400, {"a2e3ad21ed6b52f99cfbf4c087f719b4d026e7ff7fc6e553f836500e8b546a1b285594370890e0878fdb1ac6e704e366b4956c409b3c2a5b67f3988f7ef31952a981ffe8d178708c523c921b1b5a4b0a169b5b9b36633b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179cef309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000a85e89c46329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710acf2e31caa04b2e286bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb7dc7ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432971215d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081f758cefcce3fbf4625a7e7de40e42e07b34449e15eb0305626afb1dd179b8a065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea40686e730861e83d89d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7d528ed15b97c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90", 0x1000}}, 0x1006) [ 579.275808][T18297] HTB: quantum of class FFFF0900 is small. Consider r2q change. [ 579.276558][T18295] input: syz1 as /devices/virtual/input/input14 [ 579.320351][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:57:38 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 21:57:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x5, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x403618}, 0x2c) 21:57:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 579.652882][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.662492][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.672137][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.707504][T18295] input: syz1 as /devices/virtual/input/input15 21:57:38 executing program 1: unshare(0x20040600) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 579.923990][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.933751][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.943277][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.962229][T18325] HTB: quantum of class FFFF0900 is small. Consider r2q change. 21:57:38 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) unshare(0x2040400) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) 21:57:38 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x3, 0x4) [ 580.600889][ T45] tipc: TX() has been purged, node left! 21:57:40 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640), 0x1000000000000345, 0x0) 21:57:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000005}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="f30f090f381c7d00660f3880811500f30f1a1a0f20e06635000002000f22e00f015c000f01cbbaa100eddeca0f01cf"}], 0x1, 0x0, 0x0, 0xffffffffffffff27) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x9) write(0xffffffffffffffff, &(0x7f0000000300)="240000001a005f0014f90800000004000a00000000000000000e008008001b0001", 0x21) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ff5e, 0x0) 21:57:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 21:57:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x105, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 21:57:40 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000240)) [ 581.908279][T18354] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 21:57:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="9d"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 21:57:40 executing program 3: unshare(0x2000400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000240)) 21:57:41 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="27008e86af", 0x5}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/4, 0x4}], 0x1}}, {{0x0, 0xfffffffffffffc4c, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/149, 0x95}], 0x1}}], 0x2, 0x2, 0x0) 21:57:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 21:57:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x2, @in6=@ipv4, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x80fe) 21:57:41 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="27008e86af", 0x5}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/4, 0x4}], 0x1}}, {{0x0, 0xfffffffffffffc4c, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/149, 0x95}], 0x1}}], 0x2, 0x2, 0x0) 21:57:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x5c}}, 0x0) 21:57:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 21:57:43 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000004c0)={0x3, &(0x7f00000001c0)=[{0x9c, 0x4, 0x0, 0xffffff01}, {0x2, 0x7f, 0x3, 0x6}, {0x6, 0x0, 0x0, 0x400}]}) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000540)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 21:57:43 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="27008e86af", 0x5}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/4, 0x4}], 0x1}}, {{0x0, 0xfffffffffffffc4c, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/149, 0x95}], 0x1}}], 0x2, 0x2, 0x0) 21:57:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, 0x0) 21:57:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xffffffffffffff96, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @remote}}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 584.947882][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.004553][T18418] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 21:57:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000ff00e58300400600007f00060040e3b3dc69cfce0819ee000001000000000000006e390500efaaff0600000000000000000a00000037"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000008e03"]) 21:57:43 executing program 4: clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000180)) 21:57:44 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="27008e86af", 0x5}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/4, 0x4}], 0x1}}, {{0x0, 0xfffffffffffffc4c, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/149, 0x95}], 0x1}}], 0x2, 0x2, 0x0) [ 585.135165][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.155076][T18420] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 21:57:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7afa, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfdae) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)="a5", 0x1}, {&(0x7f0000000440)="01f954dc92162fbebebda6a18b7be9d68b3171d3ae295e4156a76d0c50327f619be5d245e0ba4eeaaefcfc344072110e9824bd1a4f58295c383378b7e0521a2a620f79fe43e4398af08fb2512956142d1d997cb4667837b54cd4e5ed1d77856b0fc491353bd8024b8d427d7c354954ab2f633df251fe54f8f43b5064be45560fb17f8624fd597d40d53a37955bb5ad2150f3eedd348f1d7c06e17c2296bb3e61334f4d3c2cdc4e7332b5923cb7cae5b501836008d3fcbf1ab6e6a70a8ce2403e078911468af6", 0xc6}, {&(0x7f0000000540)="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", 0x4ce}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}}], 0x2, 0x4000001) 21:57:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x1ff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2d) [ 585.473208][T18441] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:57:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 21:57:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x4, 0x1) dup3(r0, r1, 0x0) 21:57:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7afa, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfdae) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)="a5", 0x1}, {&(0x7f0000000440)="01f954dc92162fbebebda6a18b7be9d68b3171d3ae295e4156a76d0c50327f619be5d245e0ba4eeaaefcfc344072110e9824bd1a4f58295c383378b7e0521a2a620f79fe43e4398af08fb2512956142d1d997cb4667837b54cd4e5ed1d77856b0fc491353bd8024b8d427d7c354954ab2f633df251fe54f8f43b5064be45560fb17f8624fd597d40d53a37955bb5ad2150f3eedd348f1d7c06e17c2296bb3e61334f4d3c2cdc4e7332b5923cb7cae5b501836008d3fcbf1ab6e6a70a8ce2403e078911468af6", 0xc6}, {&(0x7f0000000540)="37a5becfc0b0f6e935ac27f023d11d7dfbe53406f5f570ada71aea64d8aff1ac8a017fd30f70198704ddfcb59c49077ec6972a97e2785f01c36beb4138028787f19373e372b52ce5ec7fe0c5eddabf57736e34cf68166b17467eff295c9232be678db5190e3bfa4d224279732f115b2e40965ef2c5fd459866e76342eee16cd356381f65718d28b0d454e1f949a566ab0b69cd1fe1602674bef3a32587b719e1349b02db5924884002e30345f350974a74c871ff1ac9593cf89788448d1a9e84bc1403e9d2cf749fd6756138ce47f58ccc5cbc4b7e365c3874c4697a00d06a8b24024d7a5d003de4801915a32c1ac0343dbf8780dd9938318c0eb7ce8a9e938e766d6d1f8eb6e6cfca0e5af6ea6c8ff29bb72ad6dffceff794d249d87292e048d47aa51a3ae750cea995a0cac1d26a47af381747e6dd05557cf0a49595568505c6a32a801a50aecb210d3401f479cb2a34b5297d0a2d11750974a21346be9dc935961f24b6b9bac028f72923100759575cbc186ce56e4fad5653163f588bb87445519f739cf8a80754dccfdf12d3716b2adf5adb81388e2204b1e6f82908642351acf54809b7ec57e592a1cc84c80dc04f40ec345bbbbf6e1348c3bd94ddfe9446a908e41129617efa12e6e16ee953d2fd73f45603fd328419d4b946715837843f1d85135fab53f6b5292be1b1b61d3e711220c400c9100275b654eea578a802b1baf4d0d588c99c6f7f5fb6228292cedfda2cb2769e676555ef0cb3732a42ca293012e084014de3e67106d8f6ee98c1c4f61160589b1a9f1be6c17d1835041fd9ebf0e12d9bdf89b685c4a055b00c6cadd1300cc1585838dd68982a4ef85402cff384e92e001747223064c5e5643c99ae6a9d141a276762db135c02d301b4e458db9027ddfef5548b5209b38960097f0b6fe882ebfbf96b73401d07e1995a63fe9dc2cc90ae1d7aa1e577d3d2e85fd791867b5e5f74cf32d6e5bcfe5fb687754d045afa705608e2b08cbcf3cfef0b3f2ba49bcee256c2c8665d55d4c2dabda90b1cd866e32cad07d8face02ecd70342ee0c3d6773851f12ea594eb299ca9851d974ee79e8890a13e579fc483e3dc21dca23ba0f9a2fc4c134f8c3ecd0c1074ee2e2c3ff82ea3d3ddbb727dafb69b70f27e67b9116e139c1a750eb07a9607abdc311716e61967f9bb9318aed98d86941df606ccd7b65cc6c976d534e3ee83e82da1af0bec3a8282346385e8297ddeaefbafaca63e61df8ab196b09d758c5ac10145484d7fb6bf511f77cdd1ed43d48631c70237605e25472452fe79f090e65d02235f003d39ac71b79a7421181adc38f18271acdfaa22427ef44f8be9270b2956eb0ab32181935f72a0008cc05b80de33265713f69c0035e36c7cc157e87635190ca1737c68b5e16a4353c67a83446e88965f75a9e714eb2b9bef3f70b50fa55efe455471f5fdd05a48b26d27ba68ae792c5a94935a8f71d5ba93690263dd109c6d308cb39fcaebfd41ad932d6239404c1d738c7fcb56f571294fe983332eef72dacf9db3c69d8efead2319dbec69eebcfe3d572387198f5520e1f2f6640db1bfcd431415544023cebf62476d1d0b71d5d06cc665d2a0e7d1253ebd2add9a81320cdda4e643300df1d204400c5f186700725b4dd73160b11f7b8f9f653d85d224e0d525011e56b0bf709cf3d4f167a12a15242b25b2bd2a58312d2900ad6b093829d1149cd11e94658540ade22ce", 0x4ce}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}}], 0x2, 0x4000001) 21:57:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 21:57:45 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 21:57:45 executing program 4: io_setup(0x1001, &(0x7f0000000180)=0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x140) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r1, &(0x7f0000000140)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001b40)="9d131716d7fa35092e7e332abcc5559a2d6bbf0e372e597396", 0x19}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 21:57:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r4, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r4}) [ 586.463810][T18467] IPVS: ftp: loaded support on port[0] = 21 21:57:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7afa, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfdae) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)="a5", 0x1}, {&(0x7f0000000440)="01f954dc92162fbebebda6a18b7be9d68b3171d3ae295e4156a76d0c50327f619be5d245e0ba4eeaaefcfc344072110e9824bd1a4f58295c383378b7e0521a2a620f79fe43e4398af08fb2512956142d1d997cb4667837b54cd4e5ed1d77856b0fc491353bd8024b8d427d7c354954ab2f633df251fe54f8f43b5064be45560fb17f8624fd597d40d53a37955bb5ad2150f3eedd348f1d7c06e17c2296bb3e61334f4d3c2cdc4e7332b5923cb7cae5b501836008d3fcbf1ab6e6a70a8ce2403e078911468af6", 0xc6}, {&(0x7f0000000540)="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", 0x4ce}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}}], 0x2, 0x4000001) 21:57:45 executing program 0: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f00000004c0)='\x15\xcc\x10\xddu\xfe\x7f\xcb\f\xc6\xc1^N\xec\x95\xa5\x9a~\x8f\xba[\xaeC(\xbf\xf31\xee\x00\xfc\xd4\xc2\x7f\xb9\x8f\x94k\x85n\x9f\x1e\xf7\xee\xb7\x00\x8bg$?OM+\x9d\x1f\x05\xf4\x8d%\xf6\xb5l\x8f\xaf<\xef\"V\x9f\xde\xf5\xa6\xe8\xa0\x99R}\xa9\x83\xd9\xe2\xfa}\xaf\xf3\xc0\xd0\x81to\xe9k4U1\xea\xa3\xa2F\x01\xf2$\xd8\xea\xe0 I\xa8\xd4\nYp\x9c-P\x90\xea?o\xc4\x17]cW\xd5\xa9Y\x8d\xffp\x9a\n;\xb8\xf1)e\x7f\xc8G\x8dv\xfb\xe3\x03\x10WV\xfa\xed\xb7\xee\x1eW\xc7\xbc\xe3S\x97\x00'/171, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='.vboxnet0^keyring,%\x00', &(0x7f0000000480)='selinuxwlan0eth1+md5sum\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='/dev/audio\x00', &(0x7f0000000200)='/dev/audio\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) 21:57:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x88}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xb, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:57:45 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x1c, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 21:57:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7afa, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfdae) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)="a5", 0x1}, {&(0x7f0000000440)="01f954dc92162fbebebda6a18b7be9d68b3171d3ae295e4156a76d0c50327f619be5d245e0ba4eeaaefcfc344072110e9824bd1a4f58295c383378b7e0521a2a620f79fe43e4398af08fb2512956142d1d997cb4667837b54cd4e5ed1d77856b0fc491353bd8024b8d427d7c354954ab2f633df251fe54f8f43b5064be45560fb17f8624fd597d40d53a37955bb5ad2150f3eedd348f1d7c06e17c2296bb3e61334f4d3c2cdc4e7332b5923cb7cae5b501836008d3fcbf1ab6e6a70a8ce2403e078911468af6", 0xc6}, {&(0x7f0000000540)="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", 0x4ce}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}}], 0x2, 0x4000001) 21:57:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x88}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xb, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 587.960915][T18467] IPVS: ftp: loaded support on port[0] = 21 21:57:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x64, 0x0, 0x3f000000) 21:57:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x80c01) write$sndseq(r0, 0x0, 0x0) unshare(0x400) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 21:57:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x88}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xb, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:57:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x800454cf, 0x743000) 21:57:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xdb52, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xa96, 0xe, 0x0, "9639b4eb745f6f9e6e46c60121d49236483faf9e8fe2e099a854f99da5bb1407"}) 21:57:47 executing program 3: unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000000)={'lo\x00', r4}) 21:57:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x88}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xb, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 588.379096][T18557] IPVS: ftp: loaded support on port[0] = 21 21:57:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 588.470704][T10957] tipc: TX() has been purged, node left! 21:57:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x21, 0x1000000, 0x0}) 21:57:47 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '?AY', 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, {[@dstopts={0x0, 0x2, [], [@ra, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo]}]}}}}}, 0x0) [ 588.761707][T18589] input: syz1 as /devices/virtual/input/input16 [ 588.860918][T18589] input: syz1 as /devices/virtual/input/input17 [ 588.878582][T18595] binder: 18593:18595 ioctl c0306201 20000100 returned -14 21:57:47 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100657466001400020010002f482c88fec00ca0f812a4c18ecf0100000000000b000000000000008ec3e61f45fabc1dfba52b0edcf4f2ecbc54ccc2a4f5d7ab570db121dc11176a5d49f093abe7691511309dd4a764d105795841d6"], 0x40}}, 0x0) 21:57:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0f86"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.421795][T18557] IPVS: ftp: loaded support on port[0] = 21 [ 591.320348][T10957] tipc: TX() has been purged, node left! 21:57:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000200ffffffff0000000008000100736671"], 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002e00030200"/20, @ANYRES32=r4], 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4e, &(0x7f0000000040), 0x1}, 0x0) 21:57:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 21:57:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x21, 0x1000000, 0x0}) 21:57:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) ftruncate(r3, 0x0) 21:57:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) [ 591.487939][T18656] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 591.506837][T18653] binder: 18648:18653 ioctl c0306201 20000100 returned -14 21:57:50 executing program 3: unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000000)={'lo\x00', r4}) 21:57:50 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588e4", 0x11, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xa26) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0) 21:57:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x54700400, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) 21:57:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x21, 0x1000000, 0x0}) 21:57:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}, {0x7c}, {0x6}]}) [ 591.836406][T18663] binder: 18661:18663 ioctl c0306201 20000100 returned -14 21:57:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r3 = shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000fe8000/0x3000)=nil) shmdt(r3) 21:57:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x21, 0x1000000, 0x0}) [ 592.212736][T18681] IPVS: ftp: loaded support on port[0] = 21 [ 592.282920][T18684] binder: 18683:18684 ioctl c0306201 20000100 returned -14 [ 592.954250][ C0] not chained 30000 origins [ 592.958784][ C0] CPU: 0 PID: 721 Comm: kworker/u4:13 Not tainted 5.7.0-rc4-syzkaller #0 [ 592.967185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.977246][ C0] Workqueue: krdsd rds_connect_worker [ 592.982612][ C0] Call Trace: [ 592.985888][ C0] [ 592.988743][ C0] dump_stack+0x1c9/0x220 [ 592.993081][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 592.998800][ C0] ? loopback_xmit+0x549/0x6a0 [ 593.003823][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.009026][ C0] ? __should_failslab+0x1f6/0x290 [ 593.014138][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 593.019251][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.025061][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 593.031217][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 593.036520][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.041720][ C0] __msan_chain_origin+0x50/0x90 [ 593.046662][ C0] tcp_conn_request+0x174b/0x4d10 [ 593.051711][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.057522][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 593.063674][ C0] ? __update_load_avg_cfs_rq+0xe3f/0x13b0 [ 593.069477][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.074681][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.080842][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.085879][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 593.091168][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.096631][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.102436][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.107633][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.113444][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 593.119519][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.124720][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.129321][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.133828][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 593.139928][ C0] ? tcp_filter+0xf0/0xf0 [ 593.144266][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.149734][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.154593][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 593.159613][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 593.165243][ C0] ip_rcv+0x6cf/0x750 [ 593.169229][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 593.173995][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 593.179622][ C0] process_backlog+0xf0b/0x1410 [ 593.184475][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 593.190108][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 593.195402][ C0] net_rx_action+0x786/0x1aa0 [ 593.200079][ C0] ? net_tx_action+0xc30/0xc30 [ 593.204830][ C0] __do_softirq+0x311/0x83d [ 593.209329][ C0] do_softirq_own_stack+0x49/0x80 [ 593.214330][ C0] [ 593.217256][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 593.222441][ C0] local_bh_enable+0x36/0x40 [ 593.227014][ C0] ip_finish_output2+0x2115/0x2610 [ 593.232118][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 593.237825][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 593.243813][ C0] __ip_finish_output+0xaa7/0xd80 [ 593.248830][ C0] ip_finish_output+0x166/0x410 [ 593.253684][ C0] ip_output+0x593/0x680 [ 593.257918][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 593.263184][ C0] ? ip_finish_output+0x410/0x410 [ 593.268191][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 593.273127][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 593.278728][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.283915][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.289098][ C0] ip_queue_xmit+0xcc/0xf0 [ 593.293511][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 593.298345][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 593.303532][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.308724][ C0] tcp_connect+0x420a/0x6830 [ 593.313309][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 593.318594][ C0] tcp_v4_connect+0x21fd/0x2370 [ 593.323451][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 593.328374][ C0] __inet_stream_connect+0x2fb/0x1340 [ 593.333734][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 593.339006][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.344195][ C0] inet_stream_connect+0x101/0x180 [ 593.349305][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 593.354948][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 593.360576][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 593.365763][ C0] ? rds_tcp_state_change+0x390/0x390 [ 593.371142][ C0] rds_connect_worker+0x2a6/0x470 [ 593.376159][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 593.382212][ C0] ? rds_addr_cmp+0x200/0x200 [ 593.386888][ C0] process_one_work+0x1555/0x1f40 [ 593.391912][ C0] worker_thread+0xef6/0x2450 [ 593.396591][ C0] kthread+0x4b5/0x4f0 [ 593.400644][ C0] ? process_one_work+0x1f40/0x1f40 [ 593.405831][ C0] ? kthread_blkcg+0xf0/0xf0 [ 593.410414][ C0] ret_from_fork+0x35/0x40 [ 593.414829][ C0] Uninit was stored to memory at: [ 593.419837][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.425554][ C0] __msan_chain_origin+0x50/0x90 [ 593.430485][ C0] tcp_conn_request+0x1781/0x4d10 [ 593.435494][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.440595][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.445607][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.450974][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.455567][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.460058][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.465502][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.470332][ C0] ip_rcv+0x6cf/0x750 [ 593.474301][ C0] process_backlog+0xf0b/0x1410 [ 593.479135][ C0] net_rx_action+0x786/0x1aa0 [ 593.483796][ C0] __do_softirq+0x311/0x83d [ 593.488272][ C0] [ 593.490586][ C0] Uninit was stored to memory at: [ 593.495598][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.501303][ C0] __msan_chain_origin+0x50/0x90 [ 593.506222][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 593.511503][ C0] tcp_conn_request+0x33d7/0x4d10 [ 593.516517][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.521615][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.526620][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.531974][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.536546][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.541040][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.546495][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.551331][ C0] ip_rcv+0x6cf/0x750 [ 593.555294][ C0] process_backlog+0xf0b/0x1410 [ 593.560128][ C0] net_rx_action+0x786/0x1aa0 [ 593.564787][ C0] __do_softirq+0x311/0x83d [ 593.569267][ C0] [ 593.571580][ C0] Uninit was stored to memory at: [ 593.576594][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.582299][ C0] __msan_chain_origin+0x50/0x90 [ 593.587233][ C0] tcp_conn_request+0x1781/0x4d10 [ 593.592246][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.597350][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.602371][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.607728][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.612302][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.616788][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.622230][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.627059][ C0] ip_rcv+0x6cf/0x750 [ 593.631023][ C0] process_backlog+0xf0b/0x1410 [ 593.635854][ C0] net_rx_action+0x786/0x1aa0 [ 593.640519][ C0] __do_softirq+0x311/0x83d [ 593.645013][ C0] [ 593.647324][ C0] Uninit was stored to memory at: [ 593.652331][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.658047][ C0] __msan_chain_origin+0x50/0x90 [ 593.662969][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 593.668237][ C0] tcp_conn_request+0x33d7/0x4d10 [ 593.673243][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.678350][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.683358][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.688708][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.693277][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.697759][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.703208][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.708130][ C0] ip_rcv+0x6cf/0x750 [ 593.712094][ C0] process_backlog+0xf0b/0x1410 [ 593.716926][ C0] net_rx_action+0x786/0x1aa0 [ 593.721596][ C0] __do_softirq+0x311/0x83d [ 593.726072][ C0] [ 593.728378][ C0] Uninit was stored to memory at: [ 593.733388][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.739101][ C0] __msan_chain_origin+0x50/0x90 [ 593.744022][ C0] tcp_conn_request+0x1781/0x4d10 [ 593.749027][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.754120][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.759128][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.764481][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.769048][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.773534][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.778974][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.783814][ C0] ip_rcv+0x6cf/0x750 [ 593.787774][ C0] process_backlog+0xf0b/0x1410 [ 593.792602][ C0] net_rx_action+0x786/0x1aa0 [ 593.797256][ C0] __do_softirq+0x311/0x83d [ 593.801731][ C0] [ 593.804037][ C0] Uninit was stored to memory at: [ 593.809044][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.814744][ C0] __msan_chain_origin+0x50/0x90 [ 593.819664][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 593.824932][ C0] tcp_conn_request+0x33d7/0x4d10 [ 593.829938][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.835033][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.840043][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.845401][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.849970][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.855074][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.860524][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.865353][ C0] ip_rcv+0x6cf/0x750 [ 593.869318][ C0] process_backlog+0xf0b/0x1410 [ 593.874152][ C0] net_rx_action+0x786/0x1aa0 [ 593.878812][ C0] __do_softirq+0x311/0x83d [ 593.883288][ C0] [ 593.885597][ C0] Uninit was stored to memory at: [ 593.890605][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 593.896306][ C0] __msan_chain_origin+0x50/0x90 [ 593.901226][ C0] tcp_conn_request+0x1781/0x4d10 [ 593.906231][ C0] tcp_v4_conn_request+0x19b/0x240 [ 593.911588][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 593.916600][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 593.921954][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 593.926524][ C0] tcp_v4_rcv+0x425c/0x5040 [ 593.931009][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 593.936447][ C0] ip_local_deliver+0x62a/0x7c0 [ 593.941451][ C0] ip_rcv+0x6cf/0x750 [ 593.945412][ C0] process_backlog+0xf0b/0x1410 [ 593.950247][ C0] net_rx_action+0x786/0x1aa0 [ 593.954902][ C0] __do_softirq+0x311/0x83d [ 593.959388][ C0] [ 593.961705][ C0] Uninit was created at: [ 593.965929][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 593.971542][ C0] kmsan_alloc_page+0xb9/0x180 [ 593.976289][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 593.981818][ C0] alloc_pages_current+0x67d/0x990 [ 593.986921][ C0] alloc_slab_page+0x122/0x1310 [ 593.991755][ C0] new_slab+0x2bc/0x1130 [ 593.995977][ C0] ___slab_alloc+0x14a3/0x2040 [ 594.000735][ C0] kmem_cache_alloc+0xb23/0xd70 [ 594.005569][ C0] inet_reqsk_alloc+0xac/0x830 [ 594.010315][ C0] tcp_conn_request+0x753/0x4d10 [ 594.015233][ C0] tcp_v4_conn_request+0x19b/0x240 [ 594.020325][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 594.025674][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 594.030243][ C0] tcp_v4_rcv+0x425c/0x5040 [ 594.034738][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 594.040176][ C0] ip_local_deliver+0x62a/0x7c0 [ 594.045006][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 594.049844][ C0] ip_list_rcv+0x8eb/0x950 [ 594.054244][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 594.060392][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 594.066619][ C0] napi_complete_done+0x2ef/0xb60 [ 594.071638][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 594.076995][ C0] virtnet_poll+0x1468/0x19f0 [ 594.081665][ C0] net_rx_action+0x786/0x1aa0 [ 594.086324][ C0] __do_softirq+0x311/0x83d [ 594.994131][T18713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.029684][T18713] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.121621][T18713] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.220544][T10957] tipc: TX() has been purged, node left! [ 595.391521][T10957] tipc: TX() has been purged, node left! [ 595.860559][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.871409][T18713] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 21:57:54 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x1102004, 0x0, 0x0, 0x0, 0x4}}, 0x50) 21:57:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:57:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x9f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 21:57:54 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sync() r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) read$dsp(r0, 0x0, 0xc) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e21, 0xffff753a, @dev={0xfe, 0x80, [], 0x19}, 0xfac8}, {0xa, 0x4e23, 0x9054, @local, 0x8}, 0x1, [0x3, 0x0, 0x100, 0x10000, 0x3f, 0x5, 0x6, 0x5]}, 0x5c) 21:57:54 executing program 3: unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000000)={'lo\x00', r4}) 21:57:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 596.204162][T18731] IPVS: ftp: loaded support on port[0] = 21 21:57:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000400000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00006e0000000024ffffffffff0000000000000000f0000000f0000000200100006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000020020000000000000000000000000000f8ffffffffffffff0000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000002f7eb54a6e3000000000000000000000006c6f000000000000000000000000000044fc736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 21:57:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201}, 0x14}}, 0x0) 21:57:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x842) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x60) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "36476a4c0678a8711000000000000000000004"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 21:57:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="35d1d64459b31f1d", 0x8, r0) [ 596.806484][T18749] xt_cluster: cannot load conntrack support for proto=7 [ 596.898330][T18773] xt_cluster: cannot load conntrack support for proto=7 21:57:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000044c00020008000c00000000000800050100000000380003001000000033d137deb19f03000000000000000000000000720000000000000000000000001c00"/96], 0x7c}}, 0x0) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x42, 0x0) 21:57:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201}, 0x14}}, 0x0) 21:57:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x842) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x60) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "36476a4c0678a8711000000000000000000004"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 21:57:56 executing program 3: unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000000)={'lo\x00', r4}) 21:57:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="35d1d64459b31f1d", 0x8, r0) [ 597.498700][T18793] IPVS: ftp: loaded support on port[0] = 21 21:57:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) 21:57:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201}, 0x14}}, 0x0) 21:57:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r5 = getpid() sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x40}}, 0x0) 21:57:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="35d1d64459b31f1d", 0x8, r0) 21:57:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x842) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x60) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "36476a4c0678a8711000000000000000000004"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 21:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x119, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x3, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 21:57:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201}, 0x14}}, 0x0) 21:57:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(0x0, &(0x7f0000000100), 0x2d) semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 599.165948][T18835] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 21:57:58 executing program 3: keyctl$chown(0x4, 0x0, 0xee01, 0xffffffffffffffff) 21:57:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="35d1d64459b31f1d", 0x8, r0) 21:57:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 21:57:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}]}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 21:57:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x842) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x60) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "36476a4c0678a8711000000000000000000004"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 599.470893][T10957] tipc: TX() has been purged, node left! 21:57:58 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000000080)={r4}, 0x8) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r1) dup3(r7, r0, 0x0) [ 599.631042][T10957] tipc: TX() has been purged, node left! [ 599.781494][T10957] tipc: TX() has been purged, node left! [ 600.203840][T18864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 21:57:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x3c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/141, 0x8d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000bc0)=""/142, 0x8e}, {&(0x7f0000000c80)=""/232, 0xe8}], 0x8}}], 0x2, 0x0, 0x0) 21:57:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:57:59 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) 21:57:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="df", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) close(r0) 21:57:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '{ppp0self\xbc^(mime_type'}]}, 0x21) 21:57:59 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 21:57:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 21:57:59 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) 21:57:59 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 21:57:59 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ff01000c00000000040000000000000100000000000c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000219aeb45000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf10000200000000000000000000000000000000000000000000000000000ffffffffffffffdd0000000000000000000000000020000000ff0100000002000000000000000000000e6000020063626328646573335f65646529"], 0x158}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 21:57:59 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) splice(r0, 0x0, r3, 0x0, 0x81420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x96) 21:57:59 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x119) sendfile(r1, r0, &(0x7f0000d83ff8), 0x8000fffffffe) [ 601.116857][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.207739][T18899] UHID_CREATE from different security context by process 969 (syz-executor.1), this is not allowed. [ 601.892316][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:01 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r0, &(0x7f0000000280)="c0", 0x1, 0x4000052, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 21:58:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 21:58:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:58:01 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) 21:58:01 executing program 1: r0 = socket(0x800000002b, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 21:58:01 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ff01000c00000000040000000000000100000000000c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000219aeb45000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf10000200000000000000000000000000000000000000000000000000000ffffffffffffffdd0000000000000000000000000020000000ff0100000002000000000000000000000e6000020063626328646573335f65646529"], 0x158}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 602.314206][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:01 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x3001, 0x9}}) 21:58:01 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000001c0)=0xffffffffffffff39) io_setup(0x0, &(0x7f0000000200)=0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000010801020000000000000900010073797a30000000000901010000000131000000351400010073797a310000000005000300886a2b040d914f768e3998afbc680d9c0000000000000071c806836a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYBLOB="6c7d984c4433101f86394ad4c2ae380a4d7a1b2361267011807c3ca2f69b9d4d79e9d86d7f384b28e64582c9673309f035f24ce001094e692bb24eebed8a12672fd56a51cbe4b6d32022875fd9938fdf9deb9aeed22394fddd55f3719cbbecd30a978ba3a020ae3f6fa3676ac560d8fffe08c7c168544396ad87dd8b2253d31cced608d3cf930056f79aa2df9f95c5622655491029b58e4fccb404acc04ef3937367ab9300da64e4de8caa053de8921ccc78d34fb1b54ea66ebcd1ebed9a4bb0b2a4d212da9b0fbb3c15d53a1997967fa8e503d7661bb566079983b66aefe131c47e5ef6fe74", @ANYRES16, @ANYRESHEX, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x2048100) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfcd4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff774f27e59ab500000000090000003f0fc7ec6e26560000000049"], 0x58) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6, &(0x7f0000000040)}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='/dev/sg#\x00', &(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000540)='/dev/autofs\x00', &(0x7f0000000680)='/dev/autofs\x00', &(0x7f00000006c0)='\x00'], 0x0) 21:58:01 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1, 0x0, 0x0, 0x300}}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) [ 602.724787][ C1] sd 0:0:1:0: [sg0] tag#7502 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 602.735454][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB: Test Unit Ready [ 602.742311][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.752147][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.761969][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.771850][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.781857][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.791691][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.801517][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.811319][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.821128][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.830927][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.840740][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.850561][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.860377][ C1] sd 0:0:1:0: [sg0] tag#7502 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:58:01 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ff01000c00000000040000000000000100000000000c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000219aeb45000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf10000200000000000000000000000000000000000000000000000000000ffffffffffffffdd0000000000000000000000000020000000ff0100000002000000000000000000000e6000020063626328646573335f65646529"], 0x158}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 603.235986][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 603.536894][ C0] sd 0:0:1:0: [sg0] tag#7503 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 603.547703][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB: Test Unit Ready [ 603.554412][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.564278][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.574172][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 21:58:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) [ 603.584038][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.593873][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.603704][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.613536][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.623371][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.633201][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.643029][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.652884][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.662715][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.672541][ C0] sd 0:0:1:0: [sg0] tag#7503 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000000c0)={0xf2e}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 21:58:03 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1, 0x0, 0x0, 0x300}}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 21:58:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:58:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000001c0)=0xffffffffffffff39) io_setup(0x0, &(0x7f0000000200)=0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000010801020000000000000900010073797a30000000000901010000000131000000351400010073797a310000000005000300886a2b040d914f768e3998afbc680d9c0000000000000071c806836a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYBLOB="6c7d984c4433101f86394ad4c2ae380a4d7a1b2361267011807c3ca2f69b9d4d79e9d86d7f384b28e64582c9673309f035f24ce001094e692bb24eebed8a12672fd56a51cbe4b6d32022875fd9938fdf9deb9aeed22394fddd55f3719cbbecd30a978ba3a020ae3f6fa3676ac560d8fffe08c7c168544396ad87dd8b2253d31cced608d3cf930056f79aa2df9f95c5622655491029b58e4fccb404acc04ef3937367ab9300da64e4de8caa053de8921ccc78d34fb1b54ea66ebcd1ebed9a4bb0b2a4d212da9b0fbb3c15d53a1997967fa8e503d7661bb566079983b66aefe131c47e5ef6fe74", @ANYRES16, @ANYRESHEX, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x2048100) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfcd4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff774f27e59ab500000000090000003f0fc7ec6e26560000000049"], 0x58) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6, &(0x7f0000000040)}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='/dev/sg#\x00', &(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000540)='/dev/autofs\x00', &(0x7f0000000680)='/dev/autofs\x00', &(0x7f00000006c0)='\x00'], 0x0) 21:58:03 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ff01000c00000000040000000000000100000000000c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000219aeb45000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf10000200000000000000000000000000000000000000000000000000000ffffffffffffffdd0000000000000000000000000020000000ff0100000002000000000000000000000e6000020063626328646573335f65646529"], 0x158}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 21:58:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) [ 604.626740][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.627686][ C1] sd 0:0:1:0: [sg0] tag#7504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 604.646763][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB: Test Unit Ready [ 604.653472][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.663322][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.673237][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.683062][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.692877][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.702687][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.712504][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.722311][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.732109][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.741925][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.751731][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.761539][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.771349][ C1] sd 0:0:1:0: [sg0] tag#7504 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 21:58:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000001c0)=0xffffffffffffff39) io_setup(0x0, &(0x7f0000000200)=0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000010801020000000000000900010073797a30000000000901010000000131000000351400010073797a310000000005000300886a2b040d914f768e3998afbc680d9c0000000000000071c806836a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYBLOB="6c7d984c4433101f86394ad4c2ae380a4d7a1b2361267011807c3ca2f69b9d4d79e9d86d7f384b28e64582c9673309f035f24ce001094e692bb24eebed8a12672fd56a51cbe4b6d32022875fd9938fdf9deb9aeed22394fddd55f3719cbbecd30a978ba3a020ae3f6fa3676ac560d8fffe08c7c168544396ad87dd8b2253d31cced608d3cf930056f79aa2df9f95c5622655491029b58e4fccb404acc04ef3937367ab9300da64e4de8caa053de8921ccc78d34fb1b54ea66ebcd1ebed9a4bb0b2a4d212da9b0fbb3c15d53a1997967fa8e503d7661bb566079983b66aefe131c47e5ef6fe74", @ANYRES16, @ANYRESHEX, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x2048100) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfcd4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff774f27e59ab500000000090000003f0fc7ec6e26560000000049"], 0x58) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6, &(0x7f0000000040)}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='/dev/sg#\x00', &(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000540)='/dev/autofs\x00', &(0x7f0000000680)='/dev/autofs\x00', &(0x7f00000006c0)='\x00'], 0x0) [ 605.236625][ C1] sd 0:0:1:0: [sg0] tag#7505 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 605.247371][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB: Test Unit Ready [ 605.254085][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.263945][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.275676][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.285524][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.295353][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.305184][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.315001][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.324811][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.334609][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.344412][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.354224][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.364027][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.373823][ C1] sd 0:0:1:0: [sg0] tag#7505 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:04 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x98, 0x198, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x7}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 21:58:04 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ftruncate(r4, 0x400) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}}}, 0x0) [ 605.594909][T19000] Cannot find del_set index 0 as target [ 605.652342][T19003] Cannot find del_set index 0 as target 21:58:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b60a9ecf"}, 0x0, 0x0, @userptr}) 21:58:04 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000001c0)=0xffffffffffffff39) io_setup(0x0, &(0x7f0000000200)=0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000010801020000000000000900010073797a30000000000901010000000131000000351400010073797a310000000005000300886a2b040d914f768e3998afbc680d9c0000000000000071c806836a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYBLOB="6c7d984c4433101f86394ad4c2ae380a4d7a1b2361267011807c3ca2f69b9d4d79e9d86d7f384b28e64582c9673309f035f24ce001094e692bb24eebed8a12672fd56a51cbe4b6d32022875fd9938fdf9deb9aeed22394fddd55f3719cbbecd30a978ba3a020ae3f6fa3676ac560d8fffe08c7c168544396ad87dd8b2253d31cced608d3cf930056f79aa2df9f95c5622655491029b58e4fccb404acc04ef3937367ab9300da64e4de8caa053de8921ccc78d34fb1b54ea66ebcd1ebed9a4bb0b2a4d212da9b0fbb3c15d53a1997967fa8e503d7661bb566079983b66aefe131c47e5ef6fe74", @ANYRES16, @ANYRESHEX, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x2048100) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfcd4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff774f27e59ab500000000090000003f0fc7ec6e26560000000049"], 0x58) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6, &(0x7f0000000040)}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='/dev/sg#\x00', &(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000540)='/dev/autofs\x00', &(0x7f0000000680)='/dev/autofs\x00', &(0x7f00000006c0)='\x00'], 0x0) [ 605.905163][ C0] sd 0:0:1:0: [sg0] tag#7506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 605.915819][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB: Test Unit Ready [ 605.922528][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.932376][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.942287][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.952109][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.961954][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.971795][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.981625][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.991451][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.001297][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.011131][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.020916][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.030697][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.040497][ C0] sd 0:0:1:0: [sg0] tag#7506 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 21:58:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42) 21:58:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001adda63a6c2e2ae78000a000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 21:58:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x80f0f000, 0x0, "b366928b0396f21f95bca51c197afbca6e688aa1d2c2d28b767085b473032be9"}) 21:58:05 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1, 0x0, 0x0, 0x300}}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 21:58:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}]) 21:58:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522}, 0x0) 21:58:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 21:58:05 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50}, 0x50) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537b22ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x400, 0x8}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/168, &(0x7f0000000180), &(0x7f0000000b80), 0x6, r0}, 0x38) [ 606.817721][T19037] vivid-008: ================= START STATUS ================= [ 606.825632][T19037] v4l2-ctrls: vivid-008: Enable Output Cropping: true [ 606.833840][T19037] v4l2-ctrls: vivid-008: Enable Output Composing: true [ 606.840886][T19037] v4l2-ctrls: vivid-008: Enable Output Scaler: true [ 606.847538][T19037] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic [ 606.855222][T19037] v4l2-ctrls: vivid-008: Transmit Mode: HDMI [ 606.861410][T19037] v4l2-ctrls: vivid-008: Display Present: true inactive [ 606.868411][T19037] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001 [ 606.875319][T19037] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001 [ 606.882236][T19037] v4l2-ctrls: vivid-008: EDID Present: 0x00000001 [ 606.888714][T19037] vivid-008: ================== END STATUS ================== 21:58:06 executing program 2: r0 = memfd_create(&(0x7f0000000580)='keyringlo\x00\xf9\xe32\x10\xd4w\xf0\xfb\xca\x82\xbf\xc2K\x1c\x95\xaaPv\xben\x8b\xd7\xaf\fn\xdd\xf0\x18\'\"\xfe\xff+\x9a\x00\xce\xf0\xfbi\x84\xe5``\xde\xb0\x90\x81]\x9e\xf9\xfb\xc9\xfe\xbc\xd2e}\x98\x06_c\x0f\x14\n\xe0\xb6.,\x81\xa5\xbf4\xf6\x03D\xd5\xd1tU\xfd\x1b\x7f&`+t\xc3F<\x13\xbf\xbd\xc2c\xe8\xe6\xc0\xe4\xfd\xb0\xb3S\xd9n\x05\xf4\xaf\xda\xa5\xe9\xa21\x1e\v\x047\xb3\xd7yO\xd3>\xcc\x81\x1fm\xb8\x06\xdaT\xef+:\xc6l\xdbA\xbd\xb6B-8\x9e\xf5;\x01l\xb1\'\xcb\xae|ggX\xe1\x99u$\xeaoW\xfc\x8e1X\xa0\xb8\x939\xf5Mm\x86\xb3\xf1\xd5\xebN\x93.J\"\xb6\xda\r\x1d>\xaf\xf99\xd91 \x19\xfc\x98\x82\xc3{d\xcc?\xf3\xe0\x01(\x1cv#\xc8\x91\x16\xa7\xdd\x8a\xefj!\x10\xb5\xc8\"q}\x7f\x9d\x03\x01a(\xean\x95\xa6ok\xb4\x17X;\xf0\xddT\xd1\xcd\x01[0\xf2\x96\xd8\xf6\xe5\xeeC\x8b&\xf9\xf4\x03\x9a\x90_j\x83\t\x92v\x96\xe6\xdc\xfb\xa6\x1b\x16\x10u\x85\xa2/I\xba\x10\xeaWk\xd6\x9d\xbc\x90x\xd3\xed\xec\xcf\xbd\x03\x00_C\xdd\x899\x9e\xd3XD\xe7{\xf9[\xa7\x9f\x17\xbb\x93\xbf\x85\xe1l\xf6*\x13\xb5,%\xc2R\xb7\xe4QO\x01\x1c\x9d\xa6\xb2\xa7\xd1v\xcb\x7f\x19\b\xfeX\xceer\x16\xb2\xa5\x19\x0e\nrp\x99\xab\r\x83\xcc\xdd\xdb\xaag\x92\xf2\xbe\xbf\x9a\x8bqk=\xd8\x8d\x15\x90\xc1\xd4\xfc\xc1\xe8\x18\xdc\x82C\xa0\xd6\xd5\x9eD\x9f\xcf\xf4\x97\x0f\xf8\x88\xefc\xc1\'}v\xc8Y\xf6\xeb\xa0\x8c\x01=+\xba\ry\x18t\x03\xbf\xe4]\"\xa2\xb8\xdc\xb5\xffg\x9et\x81V\xc5{2e%os\x97\xf6\xc1\x8c\x91\"\xdb[\xdf\xb6pv\xee\x1a\x04\xdc\xcf\xd3&\x99\xaa\xd4q\x99', 0x0) write(r0, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) 21:58:06 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1, 0x0, 0x0, 0x300}}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 21:58:06 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) ioctl$KDGKBLED(r2, 0xc0045405, &(0x7f0000000000)) 21:58:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4, 0x10, &(0x7f0000000000), 0x4}, 0x14) 21:58:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x400, 0x8}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000b80), 0x6, r0}, 0x38) 21:58:06 executing program 2: madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0xc) 21:58:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 21:58:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = gettid() tkill(r3, 0x3c) 21:58:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) 21:58:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 21:58:06 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200), &(0x7f0000000000)=0x8) [ 608.233086][T19083] vivid-008: ================= START STATUS ================= [ 608.240996][T19083] v4l2-ctrls: vivid-008: Enable Output Cropping: true [ 608.248086][T19083] v4l2-ctrls: vivid-008: Enable Output Composing: true [ 608.255186][T19083] v4l2-ctrls: vivid-008: Enable Output Scaler: true [ 608.262010][T19083] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic [ 608.269532][T19083] v4l2-ctrls: vivid-008: Transmit Mode: HDMI [ 608.275777][T19083] v4l2-ctrls: vivid-008: Display Present: true inactive 21:58:07 executing program 4: unshare(0x40400) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) fchdir(r0) 21:58:07 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) setpgid(0x0, r1) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000000)) ioprio_set$uid(0x2, 0x0, 0x0) [ 608.282952][T19083] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001 [ 608.289848][T19083] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001 [ 608.296583][T19083] v4l2-ctrls: vivid-008: EDID Present: 0x00000001 [ 608.303418][T19083] vivid-008: ================== END STATUS ================== 21:58:07 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000012ffc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 21:58:07 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) 21:58:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000002000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000900"/276], 0x15c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 21:58:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4}) r5 = dup3(r3, r1, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r4, 0x0, 0x1}) 21:58:07 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='#\"\x00') 21:58:07 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000030000000000b37200000b000100666c6f776572"], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:58:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 21:58:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) r3 = socket(0x40000000000001e, 0x2000000000000805, 0x0) dup3(r3, r2, 0x0) [ 609.108260][T19117] vivid-008: ================= START STATUS ================= [ 609.116350][T19117] v4l2-ctrls: vivid-008: Enable Output Cropping: true [ 609.123383][T19117] v4l2-ctrls: vivid-008: Enable Output Composing: true [ 609.130502][T19117] v4l2-ctrls: vivid-008: Enable Output Scaler: true [ 609.137149][T19117] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic [ 609.144801][T19117] v4l2-ctrls: vivid-008: Transmit Mode: HDMI [ 609.151086][T19117] v4l2-ctrls: vivid-008: Display Present: true inactive [ 609.158157][T19117] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001 [ 609.165026][T19117] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001 [ 609.171912][T19117] v4l2-ctrls: vivid-008: EDID Present: 0x00000001 [ 609.178444][T19117] vivid-008: ================== END STATUS ================== [ 609.222793][T19116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.301854][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$pptp(0x18, 0x1, 0x2) dup3(r2, r3, 0x0) [ 609.412332][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r1, &(0x7f0000000040)={0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffd, 0xb66}, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0) 21:58:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='{'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) [ 609.522058][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="fd", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8072}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='|', 0x1}], 0x1}}], 0x2, 0x4000040) 21:58:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) 21:58:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) [ 609.975886][T19157] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 610.093241][T19160] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 21:58:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000002000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000900"/276], 0x15c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 21:58:09 executing program 2: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000040)=[{0x80000006, 0x0, 0x0, 0xa}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 21:58:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="b9800000c00f3235010000000f300f009298000000660f3882af724d00002ed8ddc74424008fc4bd8774c744012402c43af27ff27f2406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x53}], 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000000000000000000000000400000000000000f6ffffff00000000010000000000000000000000000000000000f2ffff0700000a000000ff"]) getsockname(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40018, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:58:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000100100000d00000077000000", @ANYRES32=r0, @ANYBLOB="939976"], 0x28}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r1, &(0x7f0000005c00), 0x1, 0x0) 21:58:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="98", 0x0}, 0x20) 21:58:09 executing program 1: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:58:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) 21:58:09 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600030001000200000094060434cf6efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) 21:58:09 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 21:58:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000001, 0x0, 0x28120001) lseek(r0, 0x8001, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000003, 0x0, 0x28120001) [ 610.794375][T19186] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. 21:58:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) 21:58:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) socket(0x15, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 21:58:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x0, 'none\x00'}, 0x2c) 21:58:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000002000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000900"/276], 0x15c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 21:58:10 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) 21:58:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000580)='\x00@\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xcajU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) 21:58:10 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x2, 0x0, &(0x7f0000001500)) 21:58:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f00000000c0)="f30f33260fc7b92400fe0b0f1b9f0300f32e66658f870000821fe536f3f20f0865df068d7a66b9b10a00006671f42c", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000000000000000000000000000000000faffffffffffffff00000000000a0000000065e937225be7a98469"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:10 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="76ad6847a154bf37", 0x8}, {&(0x7f0000000240)="117a82cafa97e911", 0x8}], 0x2) 21:58:10 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) 21:58:10 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x2}}, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000000100), 0x5a, 0x0) 21:58:10 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x13c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xfc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3f, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4f4, 0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x7}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffd4, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe51, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20100003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x13c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 611.746999][T19227] team0: Device vlan2 is already an upper device of the team interface 21:58:10 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='T', 0x1}, {&(0x7f0000000380)='{', 0x1}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r2, 0x0, r4, 0x0, 0x18ec3, 0x0) splice(r0, 0x0, r3, 0x0, 0x90005, 0x0) 21:58:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) [ 611.976288][T19227] team0: Device vlan2 is already an upper device of the team interface 21:58:10 executing program 1: unshare(0x20400) r0 = socket$kcm(0x10, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x6) 21:58:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000002000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000900"/276], 0x15c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 21:58:11 executing program 3: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x4) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 21:58:11 executing program 2: ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@ipv4={[], [], @multicast2}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x100}) io_setup(0xa, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) 21:58:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x30, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x0, 0x0, @empty={[0xff]}, @loopback}}}}}}}, 0x0) 21:58:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0x113}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2000000, 0x9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:58:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) dup3(r0, r1, 0x0) [ 612.453120][T19254] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.462761][T19254] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.472276][T19254] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 21:58:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'security.', '(\x8a\x00'/14}, &(0x7f00000000c0)=""/69, 0x45) 21:58:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}], 0x1c) 21:58:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x0, 0x0, 0x0, 0x0, 0x110, 0x1d8, 0x110, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) [ 612.650106][T19269] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.659624][T19269] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.668962][T19269] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 21:58:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x88802) write(r0, &(0x7f0000000200)="b63db85e1e8d020000000002003ef0606a0137c5107a0b56f8909b86204955ad4a590000000000000000", 0x2a) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, 0x0) 21:58:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x8000003}) 21:58:11 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 21:58:12 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') setns(r0, 0x0) 21:58:12 executing program 1: time(&(0x7f0000000080)) 21:58:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001580)={@void, @val={0x0, 0x0, 0x20}, @mpls={[], @ipv6=@generic={0x0, 0x6, "f4e243", 0x790, 0x2f, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x1f1, [], [@generic={0x0, 0xf87, "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"}]}]}}}}, 0xfca) 21:58:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'security.', '(\x8a\x00'/14}, &(0x7f00000000c0)=""/69, 0x45) 21:58:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) 21:58:12 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80002015}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0xffffffa2) 21:58:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="2e0000001a008102e00f80ecdb4c39020a000004a1dc5f09850569556a7c40fb1200dbf0db000000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f210c804a01e000000302e20000000a3030e001a000a000200aacc2b2043b2", 0x2e}], 0x2, 0x0, 0x0, 0xf000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000023a00)={0x0, 0x0, 0x0}, 0x0) 21:58:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0xf764}, 0x10) write(r0, &(0x7f0000000200)="200000001a00010000000066835f7f081c000000000000000000000004000700", 0x20) 21:58:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22) 21:58:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'security.', '(\x8a\x00'/14}, &(0x7f00000000c0)=""/69, 0x45) 21:58:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'security.', '(\x8a\x00'/14}, &(0x7f00000000c0)=""/69, 0x45) 21:58:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd8b11d2a83a178e3a56f7200d380209950f32fea06facb1b4c5d4a1b0352c99c0793778a2263b105caae1d2494c5d37a3d912f45c8845cda00000049a6285ef5b328e73ba44931eaeffa65d849f7aa547ad02bdf176d7b01c9ad96b8c462384544df67f62d7c502d68f3620f8a26df5344ee0dca80a6eeb64a428d861a9e78b4f25a28cf2d5e71ca8e6a3cd538b8d167c076367a9f0e040c227ed3f19c811bd644df9c4118c0562ebf42dc194a9580ee7a881f229cd8109370b9e6a18792b0f1cec7cd1b92de997359c60be9873d13"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 614.062787][T19322] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:13 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, r0, r1, r3, 0x2e, 0x1}, 0x7, 0x47, 0x0, 0x0, 0x0, 0x0, 0x6}) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000000}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:13 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, 0x0) [ 614.451029][T19348] __nla_validate_parse: 3 callbacks suppressed [ 614.451059][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.507918][ T33] audit: type=1800 audit(1590530293.322:14): pid=19351 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 [ 614.527285][ T33] audit: type=1804 audit(1590530293.332:15): pid=19351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/329/file0/bus" dev="sda1" ino=15762 res=1 [ 614.547598][ T33] audit: type=1804 audit(1590530293.332:16): pid=19351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/329/file0/bus" dev="sda1" ino=15762 res=1 [ 614.748156][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.830422][ T33] audit: type=1800 audit(1590530293.582:17): pid=19352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 [ 614.849587][ T33] audit: type=1804 audit(1590530293.592:18): pid=19353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/329/file0/bus" dev="sda1" ino=15762 res=1 [ 614.869865][ T33] audit: type=1804 audit(1590530293.592:19): pid=19352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/329/file0/bus" dev="sda1" ino=15762 res=1 21:58:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000800030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 21:58:13 executing program 4: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0x5101, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0x5101, 0x0) dup2(r1, r4) 21:58:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @private0}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 615.088862][ C0] not chained 40000 origins [ 615.093396][ C0] CPU: 0 PID: 13054 Comm: kworker/u4:5 Not tainted 5.7.0-rc4-syzkaller #0 [ 615.102054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.112105][ C0] Workqueue: krdsd rds_connect_worker [ 615.117469][ C0] Call Trace: [ 615.120735][ C0] [ 615.123573][ C0] dump_stack+0x1c9/0x220 [ 615.127895][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 615.133599][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.139663][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 615.144582][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.149764][ C0] ? __should_failslab+0x1f6/0x290 [ 615.154859][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 615.159955][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.165747][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 615.171896][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 615.177178][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.182363][ C0] __msan_chain_origin+0x50/0x90 [ 615.187289][ C0] tcp_conn_request+0x1781/0x4d10 [ 615.192321][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.198374][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 615.203211][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.209257][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.214436][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.219623][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.224725][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.229737][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 615.235006][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.240364][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.246151][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.251347][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.257140][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 615.263195][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.268378][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.272958][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.277446][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 615.283531][ C0] ? tcp_filter+0xf0/0xf0 [ 615.287842][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.293289][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.298130][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 615.303136][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 615.308750][ C0] ip_rcv+0x6cf/0x750 [ 615.312719][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 615.317466][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 615.323101][ C0] process_backlog+0xf0b/0x1410 [ 615.327950][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 615.333574][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 615.338842][ C0] net_rx_action+0x786/0x1aa0 [ 615.343523][ C0] ? net_tx_action+0xc30/0xc30 [ 615.348303][ C0] __do_softirq+0x311/0x83d [ 615.352801][ C0] do_softirq_own_stack+0x49/0x80 [ 615.357816][ C0] [ 615.360755][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 615.365948][ C0] local_bh_enable+0x36/0x40 [ 615.370526][ C0] ip_finish_output2+0x2115/0x2610 [ 615.375626][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 615.381332][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 615.387310][ C0] __ip_finish_output+0xaa7/0xd80 [ 615.392332][ C0] ip_finish_output+0x166/0x410 [ 615.397180][ C0] ip_output+0x593/0x680 [ 615.401416][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 615.406686][ C0] ? ip_finish_output+0x410/0x410 [ 615.411694][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 615.416732][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 615.422268][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.427456][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.432644][ C0] ip_queue_xmit+0xcc/0xf0 [ 615.437053][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 615.441892][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 615.447085][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.452281][ C0] tcp_connect+0x420a/0x6830 [ 615.456860][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 615.462149][ C0] tcp_v4_connect+0x21fd/0x2370 [ 615.467006][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 615.471946][ C0] __inet_stream_connect+0x2fb/0x1340 [ 615.477308][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 615.482582][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.487768][ C0] inet_stream_connect+0x101/0x180 [ 615.492867][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 615.498487][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 615.504111][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 615.509294][ C0] ? rds_tcp_state_change+0x390/0x390 [ 615.514663][ C0] rds_connect_worker+0x2a6/0x470 [ 615.519682][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 615.525733][ C0] ? rds_addr_cmp+0x200/0x200 [ 615.530393][ C0] process_one_work+0x1555/0x1f40 [ 615.535416][ C0] worker_thread+0xef6/0x2450 [ 615.540094][ C0] kthread+0x4b5/0x4f0 [ 615.544147][ C0] ? process_one_work+0x1f40/0x1f40 [ 615.549341][ C0] ? kthread_blkcg+0xf0/0xf0 [ 615.553922][ C0] ret_from_fork+0x35/0x40 [ 615.558322][ C0] Uninit was stored to memory at: [ 615.563335][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.569036][ C0] __msan_chain_origin+0x50/0x90 [ 615.573966][ C0] tcp_conn_request+0x1781/0x4d10 [ 615.578972][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.584078][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.589093][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.594456][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.599032][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.603521][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.608959][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.613832][ C0] ip_rcv+0x6cf/0x750 [ 615.617807][ C0] process_backlog+0xf0b/0x1410 [ 615.622640][ C0] net_rx_action+0x786/0x1aa0 [ 615.627384][ C0] __do_softirq+0x311/0x83d [ 615.631864][ C0] [ 615.634184][ C0] Uninit was stored to memory at: [ 615.639192][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.644904][ C0] __msan_chain_origin+0x50/0x90 [ 615.649831][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 615.655101][ C0] tcp_conn_request+0x33d7/0x4d10 [ 615.660108][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.665201][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.670210][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.675576][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.680149][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.684639][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.690080][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.694914][ C0] ip_rcv+0x6cf/0x750 [ 615.698880][ C0] process_backlog+0xf0b/0x1410 [ 615.703715][ C0] net_rx_action+0x786/0x1aa0 [ 615.708372][ C0] __do_softirq+0x311/0x83d [ 615.712857][ C0] [ 615.715171][ C0] Uninit was stored to memory at: [ 615.720187][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.725892][ C0] __msan_chain_origin+0x50/0x90 [ 615.730813][ C0] tcp_conn_request+0x1781/0x4d10 [ 615.735822][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.740920][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.745928][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.751281][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.755852][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.760334][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.765771][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.770613][ C0] ip_rcv+0x6cf/0x750 [ 615.774581][ C0] process_backlog+0xf0b/0x1410 [ 615.779413][ C0] net_rx_action+0x786/0x1aa0 [ 615.784079][ C0] __do_softirq+0x311/0x83d [ 615.788554][ C0] [ 615.790858][ C0] Uninit was stored to memory at: [ 615.795867][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.801571][ C0] __msan_chain_origin+0x50/0x90 [ 615.806577][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 615.811845][ C0] tcp_conn_request+0x33d7/0x4d10 [ 615.816851][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.821957][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.826972][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.832325][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.836896][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.841391][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.846827][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.851658][ C0] ip_rcv+0x6cf/0x750 [ 615.855619][ C0] process_backlog+0xf0b/0x1410 [ 615.860452][ C0] net_rx_action+0x786/0x1aa0 [ 615.865111][ C0] __do_softirq+0x311/0x83d [ 615.869598][ C0] [ 615.871907][ C0] Uninit was stored to memory at: [ 615.876914][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.882613][ C0] __msan_chain_origin+0x50/0x90 [ 615.887545][ C0] tcp_conn_request+0x1781/0x4d10 [ 615.892551][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.897646][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.902657][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.908011][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.912581][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.917064][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 615.922503][ C0] ip_local_deliver+0x62a/0x7c0 [ 615.927333][ C0] ip_rcv+0x6cf/0x750 [ 615.931314][ C0] process_backlog+0xf0b/0x1410 [ 615.936145][ C0] net_rx_action+0x786/0x1aa0 [ 615.940819][ C0] __do_softirq+0x311/0x83d [ 615.945296][ C0] [ 615.947603][ C0] Uninit was stored to memory at: [ 615.952613][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 615.958315][ C0] __msan_chain_origin+0x50/0x90 [ 615.963233][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 615.968498][ C0] tcp_conn_request+0x33d7/0x4d10 [ 615.973501][ C0] tcp_v4_conn_request+0x19b/0x240 [ 615.978593][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 615.983600][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 615.988951][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 615.993539][ C0] tcp_v4_rcv+0x425c/0x5040 [ 615.998022][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 616.003462][ C0] ip_local_deliver+0x62a/0x7c0 [ 616.008303][ C0] ip_rcv+0x6cf/0x750 [ 616.012265][ C0] process_backlog+0xf0b/0x1410 [ 616.017107][ C0] net_rx_action+0x786/0x1aa0 [ 616.021768][ C0] __do_softirq+0x311/0x83d [ 616.026243][ C0] [ 616.028547][ C0] Uninit was stored to memory at: [ 616.033567][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 616.039267][ C0] __msan_chain_origin+0x50/0x90 [ 616.044197][ C0] tcp_conn_request+0x1781/0x4d10 [ 616.049203][ C0] tcp_v4_conn_request+0x19b/0x240 [ 616.054297][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 616.059308][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 616.064665][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 616.069232][ C0] tcp_v4_rcv+0x425c/0x5040 [ 616.073728][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 616.079176][ C0] ip_local_deliver+0x62a/0x7c0 [ 616.084007][ C0] ip_rcv+0x6cf/0x750 [ 616.087974][ C0] process_backlog+0xf0b/0x1410 [ 616.092808][ C0] net_rx_action+0x786/0x1aa0 [ 616.097484][ C0] __do_softirq+0x311/0x83d [ 616.101964][ C0] [ 616.104276][ C0] Uninit was created at: [ 616.108516][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 616.114135][ C0] kmsan_alloc_page+0xb9/0x180 [ 616.118884][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 616.124499][ C0] alloc_pages_current+0x67d/0x990 [ 616.129593][ C0] alloc_slab_page+0x122/0x1310 [ 616.134436][ C0] new_slab+0x2bc/0x1130 [ 616.138840][ C0] ___slab_alloc+0x14a3/0x2040 [ 616.143585][ C0] kmem_cache_alloc+0xb23/0xd70 [ 616.148423][ C0] inet_reqsk_alloc+0xac/0x830 [ 616.153170][ C0] tcp_conn_request+0x753/0x4d10 [ 616.158100][ C0] tcp_v4_conn_request+0x19b/0x240 [ 616.163206][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 616.168558][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 616.173133][ C0] tcp_v4_rcv+0x425c/0x5040 [ 616.177619][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 616.183056][ C0] ip_local_deliver+0x62a/0x7c0 [ 616.187886][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 616.192720][ C0] ip_list_rcv+0x8eb/0x950 [ 616.197300][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 616.203434][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 616.209655][ C0] napi_complete_done+0x2ef/0xb60 [ 616.214674][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 616.220025][ C0] virtnet_poll+0x1468/0x19f0 [ 616.224695][ C0] net_rx_action+0x786/0x1aa0 [ 616.229356][ C0] __do_softirq+0x311/0x83d 21:58:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 21:58:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, r0, r1, r3, 0x2e, 0x1}, 0x7, 0x47, 0x0, 0x0, 0x0, 0x0, 0x6}) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000000}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3148", 0xff7c}], 0x1) 21:58:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x300704cdda2b62d6}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) dup3(r1, r0, 0x0) 21:58:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x44}}, 0x0) [ 616.716306][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.776516][ T33] audit: type=1800 audit(1590530295.592:20): pid=19382 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 [ 616.808986][ T33] audit: type=1804 audit(1590530295.622:21): pid=19374 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/330/file0/bus" dev="sda1" ino=15762 res=1 [ 616.811761][ T33] audit: type=1804 audit(1590530295.632:22): pid=19374 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/330/file0/bus" dev="sda1" ino=15762 res=1 21:58:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 616.812110][T19385] qfq: invalid max length 0 [ 616.930090][T19385] qfq: invalid max length 0 21:58:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd8b11d2a83a178e3a56f7200d380209950f32fea06facb1b4c5d4a1b0352c99c0793778a2263b105caae1d2494c5d37a3d912f45c8845cda00000049a6285ef5b328e73ba44931eaeffa65d849f7aa547ad02bdf176d7b01c9ad96b8c462384544df67f62d7c502d68f3620f8a26df5344ee0dca80a6eeb64a428d861a9e78b4f25a28cf2d5e71ca8e6a3cd538b8d167c076367a9f0e040c227ed3f19c811bd644df9c4118c0562ebf42dc194a9580ee7a881f229cd8109370b9e6a18792b0f1cec7cd1b92de997359c60be9873d13"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:58:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, r0, r1, r3, 0x2e, 0x1}, 0x7, 0x47, 0x0, 0x0, 0x0, 0x0, 0x6}) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000000}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:16 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x95}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 617.430861][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.502755][ T33] audit: type=1800 audit(1590530296.322:23): pid=19401 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 21:58:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x51) 21:58:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 21:58:16 executing program 4: futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x80000000) [ 617.805383][T19412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.822860][T19412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.833452][T19412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.127306][T19414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 618.144092][T19414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 618.153523][T19414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:58:17 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) shutdown(r0, 0x0) 21:58:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 21:58:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000075c0)={0x3, &(0x7f0000007580)=[{}, {0x28}, {0x6}]}) 21:58:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, r0, r1, r3, 0x2e, 0x1}, 0x7, 0x47, 0x0, 0x0, 0x0, 0x0, 0x6}) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000000}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)) dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 618.523953][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="61144170bd4bac220db52ce1afe1ebe56ed29a2bc0b4c2aff11b78b4fe66413ca109aef09827d40139725c0534a97ba012fb5fe406937a6f1c355c20a2423ba6afb45070814415a35a0503460bbfe7d83d8d6657ad1b97beea1c6ce2e755fb9231e5e26c68e6af6cd75854d71c0e774eeb85e0089c87dd2f85dd8fe6a2955f88cfc01187986b031ac100e0f84034aca5473f14d2a14df50afeb7f5f3c34df3d777", 0xa1}, {&(0x7f0000000140)="f42e10", 0x3}, {&(0x7f0000000340)="36677951719ef8b169101fd3943cbfbc7f919c6b6157000d9e9605f8ece445e5cfd4c943a7077f29dc5c42b72d5f5b0bc7ef3acd4e76f3878f3b3cd50ee8f64ea6cf82952dbaee0d4ad797859a97a464bd840ea53cbee52c79fff16b7800e1468ef60a3a859b0e57259fefc44d2623ce0a2d40bdc32e3936557ec644ce537ee79c11e96f5194763a383d70db8faa9c8d0e8360709fee3c351d393ab4a2df7423cb0ce9f4031c4d0a4cce64ac5bc54cbeb6457a6ddf361c5bc3a85203534f6b0b5de339c32c91db8a", 0xc8}, {&(0x7f0000000440)="cd708334e2c2b44f3ed3ef2c5fcc7ca4817602c22f6cdd89e4142bb1890ca9fba8bb51ce1b27fe7749bb43bc25c75949c929efa0d307c229d2808b0d951166b44b5bad3a037244a39ae9d6fc9b841000646cd044b02f5dbe3c61d010300db4b4a11c4a8be6ccb41e2fa43392c1ba4434d443c9a9e58477c1b3e61a5a4a5b5dbeae64b6fd9a7a151f93f97dbb142458961540fe2304dacbcf97c72cde43b91a89c37926442842b89107413e7ed7c40c2f6171b27ff4", 0xb5}, {&(0x7f0000000500)="42dd5d16ed4c4bc91c491c54f454d85766be144ad8a080340b19c3cc313ace96bf8f5bb21bf310e49cc9e450326e772ff6aa2ffefdeb37b4d27ef5f00d7378f46b8858eb1bc205e4f30c013f033231e47235899610342136c7c9cf683b763d236c743010cfa207235336c77243748280e4e91771bd48f382383622a97b36bebd61652726a37ac2eb7aae0c5b08b9b72e002ad56229a489b49fd03bb6d78b4f73297778bc9f30e498cf257d57dd1b33787f3c41c85165ba59fbe1301d2d34c1bf1de79a26560fae1cacc1ceec6dcfb093826d56c5cc4d4f8ccfaee17e3301f3679131f22e2425442b2b5200baa396773630efc73a7d", 0xf5}, {&(0x7f00000002c0)="76a7bf0b13fc0cfb390ec1675a3406c45cc1", 0x12}], 0x6, &(0x7f0000000300)=[@iv={0x18}], 0x18, 0x65c5c613220e85ae}], 0x1, 0x10000000) 21:58:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd8b11d2a83a178e3a56f7200d380209950f32fea06facb1b4c5d4a1b0352c99c0793778a2263b105caae1d2494c5d37a3d912f45c8845cda00000049a6285ef5b328e73ba44931eaeffa65d849f7aa547ad02bdf176d7b01c9ad96b8c462384544df67f62d7c502d68f3620f8a26df5344ee0dca80a6eeb64a428d861a9e78b4f25a28cf2d5e71ca8e6a3cd538b8d167c076367a9f0e040c227ed3f19c811bd644df9c4118c0562ebf42dc194a9580ee7a881f229cd8109370b9e6a18792b0f1cec7cd1b92de997359c60be9873d13"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:58:19 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) recvmmsg(r1, &(0x7f0000007780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r1, r0) 21:58:19 executing program 0: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) r0 = memfd_create(&(0x7f0000000000)='dummy0\x00', 0x0) r1 = geteuid() fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) 21:58:19 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0xff, 0x11}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 21:58:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="61144170bd4bac220db52ce1afe1ebe56ed29a2bc0b4c2aff11b78b4fe66413ca109aef09827d40139725c0534a97ba012fb5fe406937a6f1c355c20a2423ba6afb45070814415a35a0503460bbfe7d83d8d6657ad1b97beea1c6ce2e755fb9231e5e26c68e6af6cd75854d71c0e774eeb85e0089c87dd2f85dd8fe6a2955f88cfc01187986b031ac100e0f84034aca5473f14d2a14df50afeb7f5f3c34df3d777", 0xa1}, {&(0x7f0000000140)="f42e10", 0x3}, {&(0x7f0000000340)="36677951719ef8b169101fd3943cbfbc7f919c6b6157000d9e9605f8ece445e5cfd4c943a7077f29dc5c42b72d5f5b0bc7ef3acd4e76f3878f3b3cd50ee8f64ea6cf82952dbaee0d4ad797859a97a464bd840ea53cbee52c79fff16b7800e1468ef60a3a859b0e57259fefc44d2623ce0a2d40bdc32e3936557ec644ce537ee79c11e96f5194763a383d70db8faa9c8d0e8360709fee3c351d393ab4a2df7423cb0ce9f4031c4d0a4cce64ac5bc54cbeb6457a6ddf361c5bc3a85203534f6b0b5de339c32c91db8a", 0xc8}, {&(0x7f0000000440)="cd708334e2c2b44f3ed3ef2c5fcc7ca4817602c22f6cdd89e4142bb1890ca9fba8bb51ce1b27fe7749bb43bc25c75949c929efa0d307c229d2808b0d951166b44b5bad3a037244a39ae9d6fc9b841000646cd044b02f5dbe3c61d010300db4b4a11c4a8be6ccb41e2fa43392c1ba4434d443c9a9e58477c1b3e61a5a4a5b5dbeae64b6fd9a7a151f93f97dbb142458961540fe2304dacbcf97c72cde43b91a89c37926442842b89107413e7ed7c40c2f6171b27ff4", 0xb5}, {&(0x7f0000000500)="42dd5d16ed4c4bc91c491c54f454d85766be144ad8a080340b19c3cc313ace96bf8f5bb21bf310e49cc9e450326e772ff6aa2ffefdeb37b4d27ef5f00d7378f46b8858eb1bc205e4f30c013f033231e47235899610342136c7c9cf683b763d236c743010cfa207235336c77243748280e4e91771bd48f382383622a97b36bebd61652726a37ac2eb7aae0c5b08b9b72e002ad56229a489b49fd03bb6d78b4f73297778bc9f30e498cf257d57dd1b33787f3c41c85165ba59fbe1301d2d34c1bf1de79a26560fae1cacc1ceec6dcfb093826d56c5cc4d4f8ccfaee17e3301f3679131f22e2425442b2b5200baa396773630efc73a7d", 0xf5}, {&(0x7f00000002c0)="76a7bf0b13fc0cfb390ec1675a3406c45cc1", 0x12}], 0x6, &(0x7f0000000300)=[@iv={0x18}], 0x18, 0x65c5c613220e85ae}], 0x1, 0x10000000) 21:58:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 21:58:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x2000000000077f}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000700feffffff0800000000000000", 0x24) 21:58:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00f6ff0f000580070001006962000004000280"], 0x24}}, 0x0) 21:58:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="61144170bd4bac220db52ce1afe1ebe56ed29a2bc0b4c2aff11b78b4fe66413ca109aef09827d40139725c0534a97ba012fb5fe406937a6f1c355c20a2423ba6afb45070814415a35a0503460bbfe7d83d8d6657ad1b97beea1c6ce2e755fb9231e5e26c68e6af6cd75854d71c0e774eeb85e0089c87dd2f85dd8fe6a2955f88cfc01187986b031ac100e0f84034aca5473f14d2a14df50afeb7f5f3c34df3d777", 0xa1}, {&(0x7f0000000140)="f42e10", 0x3}, {&(0x7f0000000340)="36677951719ef8b169101fd3943cbfbc7f919c6b6157000d9e9605f8ece445e5cfd4c943a7077f29dc5c42b72d5f5b0bc7ef3acd4e76f3878f3b3cd50ee8f64ea6cf82952dbaee0d4ad797859a97a464bd840ea53cbee52c79fff16b7800e1468ef60a3a859b0e57259fefc44d2623ce0a2d40bdc32e3936557ec644ce537ee79c11e96f5194763a383d70db8faa9c8d0e8360709fee3c351d393ab4a2df7423cb0ce9f4031c4d0a4cce64ac5bc54cbeb6457a6ddf361c5bc3a85203534f6b0b5de339c32c91db8a", 0xc8}, {&(0x7f0000000440)="cd708334e2c2b44f3ed3ef2c5fcc7ca4817602c22f6cdd89e4142bb1890ca9fba8bb51ce1b27fe7749bb43bc25c75949c929efa0d307c229d2808b0d951166b44b5bad3a037244a39ae9d6fc9b841000646cd044b02f5dbe3c61d010300db4b4a11c4a8be6ccb41e2fa43392c1ba4434d443c9a9e58477c1b3e61a5a4a5b5dbeae64b6fd9a7a151f93f97dbb142458961540fe2304dacbcf97c72cde43b91a89c37926442842b89107413e7ed7c40c2f6171b27ff4", 0xb5}, {&(0x7f0000000500)="42dd5d16ed4c4bc91c491c54f454d85766be144ad8a080340b19c3cc313ace96bf8f5bb21bf310e49cc9e450326e772ff6aa2ffefdeb37b4d27ef5f00d7378f46b8858eb1bc205e4f30c013f033231e47235899610342136c7c9cf683b763d236c743010cfa207235336c77243748280e4e91771bd48f382383622a97b36bebd61652726a37ac2eb7aae0c5b08b9b72e002ad56229a489b49fd03bb6d78b4f73297778bc9f30e498cf257d57dd1b33787f3c41c85165ba59fbe1301d2d34c1bf1de79a26560fae1cacc1ceec6dcfb093826d56c5cc4d4f8ccfaee17e3301f3679131f22e2425442b2b5200baa396773630efc73a7d", 0xf5}, {&(0x7f00000002c0)="76a7bf0b13fc0cfb390ec1675a3406c45cc1", 0x12}], 0x6, &(0x7f0000000300)=[@iv={0x18}], 0x18, 0x65c5c613220e85ae}], 0x1, 0x10000000) [ 620.855664][T19454] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="61144170bd4bac220db52ce1afe1ebe56ed29a2bc0b4c2aff11b78b4fe66413ca109aef09827d40139725c0534a97ba012fb5fe406937a6f1c355c20a2423ba6afb45070814415a35a0503460bbfe7d83d8d6657ad1b97beea1c6ce2e755fb9231e5e26c68e6af6cd75854d71c0e774eeb85e0089c87dd2f85dd8fe6a2955f88cfc01187986b031ac100e0f84034aca5473f14d2a14df50afeb7f5f3c34df3d777", 0xa1}, {&(0x7f0000000140)="f42e10", 0x3}, {&(0x7f0000000340)="36677951719ef8b169101fd3943cbfbc7f919c6b6157000d9e9605f8ece445e5cfd4c943a7077f29dc5c42b72d5f5b0bc7ef3acd4e76f3878f3b3cd50ee8f64ea6cf82952dbaee0d4ad797859a97a464bd840ea53cbee52c79fff16b7800e1468ef60a3a859b0e57259fefc44d2623ce0a2d40bdc32e3936557ec644ce537ee79c11e96f5194763a383d70db8faa9c8d0e8360709fee3c351d393ab4a2df7423cb0ce9f4031c4d0a4cce64ac5bc54cbeb6457a6ddf361c5bc3a85203534f6b0b5de339c32c91db8a", 0xc8}, {&(0x7f0000000440)="cd708334e2c2b44f3ed3ef2c5fcc7ca4817602c22f6cdd89e4142bb1890ca9fba8bb51ce1b27fe7749bb43bc25c75949c929efa0d307c229d2808b0d951166b44b5bad3a037244a39ae9d6fc9b841000646cd044b02f5dbe3c61d010300db4b4a11c4a8be6ccb41e2fa43392c1ba4434d443c9a9e58477c1b3e61a5a4a5b5dbeae64b6fd9a7a151f93f97dbb142458961540fe2304dacbcf97c72cde43b91a89c37926442842b89107413e7ed7c40c2f6171b27ff4", 0xb5}, {&(0x7f0000000500)="42dd5d16ed4c4bc91c491c54f454d85766be144ad8a080340b19c3cc313ace96bf8f5bb21bf310e49cc9e450326e772ff6aa2ffefdeb37b4d27ef5f00d7378f46b8858eb1bc205e4f30c013f033231e47235899610342136c7c9cf683b763d236c743010cfa207235336c77243748280e4e91771bd48f382383622a97b36bebd61652726a37ac2eb7aae0c5b08b9b72e002ad56229a489b49fd03bb6d78b4f73297778bc9f30e498cf257d57dd1b33787f3c41c85165ba59fbe1301d2d34c1bf1de79a26560fae1cacc1ceec6dcfb093826d56c5cc4d4f8ccfaee17e3301f3679131f22e2425442b2b5200baa396773630efc73a7d", 0xf5}, {&(0x7f00000002c0)="76a7bf0b13fc0cfb390ec1675a3406c45cc1", 0x12}], 0x6, &(0x7f0000000300)=[@iv={0x18}], 0x18, 0x65c5c613220e85ae}], 0x1, 0x10000000) 21:58:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/../file0\x00') [ 620.912366][T19457] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) [ 621.851693][ T0] NOHZ: local_softirq_pending 08 21:58:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe8, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd8b11d2a83a178e3a56f7200d380209950f32fea06facb1b4c5d4a1b0352c99c0793778a2263b105caae1d2494c5d37a3d912f45c8845cda00000049a6285ef5b328e73ba44931eaeffa65d849f7aa547ad02bdf176d7b01c9ad96b8c462384544df67f62d7c502d68f3620f8a26df5344ee0dca80a6eeb64a428d861a9e78b4f25a28cf2d5e71ca8e6a3cd538b8d167c076367a9f0e040c227ed3f19c811bd644df9c4118c0562ebf42dc194a9580ee7a881f229cd8109370b9e6a18792b0f1cec7cd1b92de997359c60be9873d13"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:58:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x3}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x0, @in6=@mcast1}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001040)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 21:58:22 executing program 3: io_setup(0x409, &(0x7f0000000080)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 21:58:22 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='security.capability\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 21:58:22 executing program 5: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @echo}}}}, 0x0) 21:58:22 executing program 1: io_setup(0x6, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x802, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xa22}]) 21:58:22 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:58:22 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="8c", 0x1}], 0x1}, 0x24014044) close(r0) 21:58:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7ffffff5, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x9, @raw_data="3f57af87cc7777cd594d3132619e35c32281e1dad5e1e72850527194b46f687b35f1d3a7109bebaf492db617a91a7dcbafbf585c9ada5050efb316abac6bb92486a030127df87f3077c4772ca216e6f7c5a502cc591141cace8a157c418934c2762f24b1a440d7d5ff1432d073f37692d9ab23d4aa9c344cc535e720f96141054f30d800d037cc567691d52ad8e18f21d1ab9ca1b58dd5caa034717634edd26f30d15047ec0acfcaba97eecdc803897ba1ca6c58be0897b130fe021684f78c2f80e45f1bd06bd7ce"}) 21:58:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x13}) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:58:23 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000002, 0x0, 0x2, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 624.341465][T19504] syz-executor.4 (19504) used greatest stack depth: 3272 bytes left [ 626.331047][ T0] NOHZ: local_softirq_pending 08 [ 626.410807][ C0] not chained 50000 origins [ 626.415328][ C0] CPU: 0 PID: 24 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 626.423538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.433597][ C0] Workqueue: krdsd rds_connect_worker [ 626.438948][ C0] Call Trace: [ 626.442217][ C0] [ 626.445097][ C0] dump_stack+0x1c9/0x220 [ 626.449422][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 626.455144][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.461326][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 626.466243][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.471433][ C0] ? __should_failslab+0x1f6/0x290 [ 626.476574][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 626.481659][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.487462][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 626.493595][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 626.498863][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.504037][ C0] __msan_chain_origin+0x50/0x90 [ 626.508952][ C0] tcp_conn_request+0x174b/0x4d10 [ 626.514083][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.520136][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 626.524963][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.531004][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.536180][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.541355][ C0] tcp_v4_conn_request+0x19b/0x240 [ 626.546459][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 626.551494][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 626.556754][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 626.562102][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.567884][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.573069][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.578855][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 626.584944][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.590123][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 626.594739][ C0] tcp_v4_rcv+0x425c/0x5040 [ 626.599221][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 626.605284][ C0] ? tcp_filter+0xf0/0xf0 [ 626.609589][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 626.615066][ C0] ip_local_deliver+0x62a/0x7c0 [ 626.620268][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 626.625285][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 626.630900][ C0] ip_rcv+0x6cf/0x750 [ 626.634899][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 626.639639][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 626.645245][ C0] process_backlog+0xf0b/0x1410 [ 626.650074][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 626.655701][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 626.660962][ C0] net_rx_action+0x786/0x1aa0 [ 626.665640][ C0] ? net_tx_action+0xc30/0xc30 [ 626.670397][ C0] __do_softirq+0x311/0x83d [ 626.674898][ C0] do_softirq_own_stack+0x49/0x80 [ 626.679902][ C0] [ 626.682822][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 626.688023][ C0] local_bh_enable+0x36/0x40 [ 626.692613][ C0] ip_finish_output2+0x2115/0x2610 [ 626.697720][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 626.703437][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 626.709433][ C0] __ip_finish_output+0xaa7/0xd80 [ 626.714471][ C0] ip_finish_output+0x166/0x410 [ 626.719324][ C0] ip_output+0x593/0x680 [ 626.723574][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 626.728842][ C0] ? ip_finish_output+0x410/0x410 [ 626.733848][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 626.738771][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 626.744303][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.749491][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.754676][ C0] ip_queue_xmit+0xcc/0xf0 [ 626.759082][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 626.763915][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 626.769102][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.774301][ C0] tcp_connect+0x420a/0x6830 [ 626.778878][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 626.784163][ C0] tcp_v4_connect+0x21fd/0x2370 [ 626.789023][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 626.793961][ C0] __inet_stream_connect+0x2fb/0x1340 [ 626.799333][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 626.804607][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.809791][ C0] inet_stream_connect+0x101/0x180 [ 626.814890][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 626.820522][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 626.826148][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 626.831351][ C0] ? rds_tcp_state_change+0x390/0x390 [ 626.836717][ C0] rds_connect_worker+0x2a6/0x470 [ 626.841726][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 626.847778][ C0] ? rds_addr_cmp+0x200/0x200 [ 626.852446][ C0] process_one_work+0x1555/0x1f40 [ 626.857467][ C0] worker_thread+0xef6/0x2450 [ 626.862144][ C0] kthread+0x4b5/0x4f0 [ 626.866207][ C0] ? process_one_work+0x1f40/0x1f40 [ 626.871394][ C0] ? kthread_blkcg+0xf0/0xf0 [ 626.875972][ C0] ret_from_fork+0x35/0x40 [ 626.880372][ C0] Uninit was stored to memory at: [ 626.885382][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 626.891083][ C0] __msan_chain_origin+0x50/0x90 [ 626.896002][ C0] tcp_conn_request+0x1781/0x4d10 [ 626.901007][ C0] tcp_v4_conn_request+0x19b/0x240 [ 626.906099][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 626.911106][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 626.916467][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 626.921048][ C0] tcp_v4_rcv+0x425c/0x5040 [ 626.925532][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 626.930971][ C0] ip_local_deliver+0x62a/0x7c0 [ 626.935800][ C0] ip_rcv+0x6cf/0x750 [ 626.939762][ C0] process_backlog+0xf0b/0x1410 [ 626.944592][ C0] net_rx_action+0x786/0x1aa0 [ 626.949247][ C0] __do_softirq+0x311/0x83d [ 626.953725][ C0] [ 626.956031][ C0] Uninit was stored to memory at: [ 626.961039][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 626.966739][ C0] __msan_chain_origin+0x50/0x90 [ 626.971658][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 626.976925][ C0] tcp_conn_request+0x33d7/0x4d10 [ 626.981927][ C0] tcp_v4_conn_request+0x19b/0x240 [ 626.987021][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 626.992028][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 626.997377][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.001948][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.006432][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.011870][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.016699][ C0] ip_rcv+0x6cf/0x750 [ 627.020662][ C0] process_backlog+0xf0b/0x1410 [ 627.025492][ C0] net_rx_action+0x786/0x1aa0 [ 627.030148][ C0] __do_softirq+0x311/0x83d [ 627.034622][ C0] [ 627.036927][ C0] Uninit was stored to memory at: [ 627.041931][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 627.047634][ C0] __msan_chain_origin+0x50/0x90 [ 627.052552][ C0] tcp_conn_request+0x1781/0x4d10 [ 627.057559][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.062654][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 627.067661][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.073013][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.077583][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.082065][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.087506][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.092335][ C0] ip_rcv+0x6cf/0x750 [ 627.096566][ C0] process_backlog+0xf0b/0x1410 [ 627.101413][ C0] net_rx_action+0x786/0x1aa0 [ 627.106080][ C0] __do_softirq+0x311/0x83d [ 627.110556][ C0] [ 627.112864][ C0] Uninit was stored to memory at: [ 627.122738][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 627.128439][ C0] __msan_chain_origin+0x50/0x90 [ 627.133375][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 627.138641][ C0] tcp_conn_request+0x33d7/0x4d10 [ 627.143651][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.148843][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 627.153861][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.159212][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.163785][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.168282][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.173720][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.178549][ C0] ip_rcv+0x6cf/0x750 [ 627.182513][ C0] process_backlog+0xf0b/0x1410 [ 627.187354][ C0] net_rx_action+0x786/0x1aa0 [ 627.192011][ C0] __do_softirq+0x311/0x83d [ 627.196489][ C0] [ 627.198805][ C0] Uninit was stored to memory at: [ 627.203822][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 627.209522][ C0] __msan_chain_origin+0x50/0x90 [ 627.214443][ C0] tcp_conn_request+0x1781/0x4d10 [ 627.219444][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.224622][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 627.229630][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.234980][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.239551][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.244035][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.249475][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.254302][ C0] ip_rcv+0x6cf/0x750 [ 627.258267][ C0] process_backlog+0xf0b/0x1410 [ 627.263113][ C0] net_rx_action+0x786/0x1aa0 [ 627.267780][ C0] __do_softirq+0x311/0x83d [ 627.272257][ C0] [ 627.274587][ C0] Uninit was stored to memory at: [ 627.279592][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 627.285296][ C0] __msan_chain_origin+0x50/0x90 [ 627.290242][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 627.295507][ C0] tcp_conn_request+0x33d7/0x4d10 [ 627.300521][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.305611][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 627.310618][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.315971][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.320538][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.325022][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.330459][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.335292][ C0] ip_rcv+0x6cf/0x750 [ 627.339267][ C0] process_backlog+0xf0b/0x1410 [ 627.344103][ C0] net_rx_action+0x786/0x1aa0 [ 627.348759][ C0] __do_softirq+0x311/0x83d [ 627.353245][ C0] [ 627.355551][ C0] Uninit was stored to memory at: [ 627.360558][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 627.366256][ C0] __msan_chain_origin+0x50/0x90 [ 627.371180][ C0] tcp_conn_request+0x1781/0x4d10 [ 627.376198][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.381308][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 627.386321][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.391674][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.396246][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.400817][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.406257][ C0] ip_local_deliver+0x62a/0x7c0 [ 627.411097][ C0] ip_rcv+0x6cf/0x750 [ 627.415070][ C0] process_backlog+0xf0b/0x1410 [ 627.420080][ C0] net_rx_action+0x786/0x1aa0 [ 627.424758][ C0] __do_softirq+0x311/0x83d [ 627.429253][ C0] [ 627.431565][ C0] Uninit was created at: [ 627.435794][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 627.441411][ C0] kmsan_alloc_page+0xb9/0x180 [ 627.446163][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 627.451701][ C0] alloc_pages_current+0x67d/0x990 [ 627.456796][ C0] alloc_slab_page+0x122/0x1310 [ 627.461628][ C0] new_slab+0x2bc/0x1130 [ 627.465855][ C0] ___slab_alloc+0x14a3/0x2040 [ 627.470601][ C0] kmem_cache_alloc+0xb23/0xd70 [ 627.475450][ C0] inet_reqsk_alloc+0xac/0x830 [ 627.480202][ C0] tcp_conn_request+0x753/0x4d10 [ 627.485122][ C0] tcp_v4_conn_request+0x19b/0x240 [ 627.490219][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 627.495600][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 627.500174][ C0] tcp_v4_rcv+0x425c/0x5040 [ 627.504664][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 627.510119][ C0] ip_local_deliver+0x62a/0x7c0 21:58:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10\x9cist\xe3cusgrVid:De', 0x0) 21:58:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2800203d}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) 21:58:26 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:58:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') r3 = gettid() tkill(r3, 0x1000000000016) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r2, 0x0, 0x10001ff) 21:58:26 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "97d47f", 0x18, 0x0, 0x0, @remote, @dev, {[@dstopts={0x0, 0x2, [], [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x47}}, @jumbo]}]}}}}}, 0x0) [ 627.514949][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 627.519780][ C0] ip_list_rcv+0x8eb/0x950 [ 627.524185][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 627.530324][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 627.536549][ C0] napi_complete_done+0x2ef/0xb60 [ 627.541559][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 627.546912][ C0] virtnet_poll+0x1468/0x19f0 [ 627.551573][ C0] net_rx_action+0x786/0x1aa0 [ 627.556248][ C0] __do_softirq+0x311/0x83d 21:58:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x3, r4}]}}}]}, 0x3c}}, 0x0) 21:58:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@polexpire={0xcc, 0x1b, 0xfc1c61f2f5a227a3, 0x0, 0x0, {{{@in=@local, @in6=@loopback}}}, [@mark={0xc}]}, 0xcc}}, 0x0) 21:58:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd}) 21:58:27 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:58:27 executing program 0: unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 21:58:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x3, r4}]}}}]}, 0x3c}}, 0x0) 21:58:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 21:58:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') lseek(r0, 0x200, 0x0) [ 628.768887][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.776696][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 21:58:27 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60000000, 0x0}}], 0x210, 0x0, 0x0) 21:58:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') lseek(r0, 0x200, 0x0) 21:58:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x3, r4}]}}}]}, 0x3c}}, 0x0) 21:58:28 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "0d0d0400000002b40d0d0404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 21:58:28 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) 21:58:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') lseek(r0, 0x200, 0x0) 21:58:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x3, r4}]}}}]}, 0x3c}}, 0x0) 21:58:28 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 21:58:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') lseek(r0, 0x200, 0x0) 21:58:28 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 21:58:28 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') r1 = gettid() tkill(r1, 0x3c) wait4(0x0, 0x0, 0x40000000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 21:58:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:58:28 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000002c0)=[@request_death], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 21:58:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCGETA(r1, 0x5405, 0x0) 21:58:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) [ 630.028230][T19600] xt_CT: No such helper "pptp" [ 630.056840][T19610] xt_CT: No such helper "pptp" 21:58:30 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xb0}}, 0x0) 21:58:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:58:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800b595000006000000f60000000000", @ANYRES32=0x0, @ANYBLOB="14000200ff020002ff"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21:58:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) 21:58:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:58:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) [ 631.791912][T19620] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 631.948324][T19634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:58:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) [ 632.043556][T19633] xt_CT: No such helper "pptp" 21:58:30 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) shutdown(r2, 0x1) [ 632.100039][T19632] xt_CT: No such helper "pptp" 21:58:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:58:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:58:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 632.443984][T19645] xt_CT: No such helper "pptp" [ 632.472761][T19643] xt_CT: No such helper "pptp" 21:58:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) 21:58:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x618) close(r0) 21:58:32 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001580)="ab885dd644e941e95a70e4d2ac54afe8442e9a6cc87b9250ba12d028f55f515cf91950b885d410b2f49c8c928a1148b1dc5d7e6f1e381152ad317292cbc395518caef1d7a1e894bb56c4a59bca5c848d25a130c9d3404f82da53d1de67dc6c8174ac7e6752c76f595c6e7000c7ebb5559ded99eb8fd9d9efce6a75885fed82990deda93a9226", 0x86}, {&(0x7f0000001640)="01002bbf4c991bb69e1d4c7a0834d4a274e15abae6eb9eb2b06fd05736e979f48010b0ff322d9f712370a783f268ac7f502869a9e1f4f59e2749c72402df9e1757fd14160cf0b45d5c2b22f9a027f34bea976da318099ccc1137cf9a8528c7fb2e286d119fb61726c751c23dc75ee5fc7cf256967ab999", 0x77}, {&(0x7f00000016c0)="be8cb0f197fa23bb7eecf660599ebf8d159b02f3b62023525473afe9da87e800e9f2bea74225ab51ebdb9b04b5b915cb61827bddb9966fdb04102cc0b62d4410cda8cd57b5349d50a5d088162be0a00eeea63aaa296d783ef644fcc2eec77acd250f862661ff851fdf2aacc4f8b78fd537d4827e9f5b660a005493f7d2c332054de5f368f5969db6ac48e03a3812514635e80d9ca780b8a134d907", 0x9b}, {&(0x7f0000001780)="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", 0xee1}], 0x4}}], 0x3, 0x0) 21:58:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:58:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x14c, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x11b, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 21:58:32 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/387], 0x2c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 21:58:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="7261770000000000000155000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000800000000000000000000000e229817c43bcfda500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004972db85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 633.423459][T19673] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.536488][T19674] xt_CT: No such helper "pptp" [ 633.537537][T19685] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.574330][T19680] xt_CT: No such helper "pptp" 21:58:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100), 0x8) 21:58:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x6, 0x1e, &(0x7f0000937fed)=""/16, &(0x7f0000000000)=0x10) 21:58:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) dup2(r5, r7) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36) 21:58:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:32 executing program 3: r0 = socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x201, 0x3, 0x270, 0x0, 0x100, 0x0, 0x100, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "590a6c55ff2457cbe1e08f613bf59643dd2d1d3341ac9d176d522f7871ac"}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 21:58:32 executing program 3: uname(&(0x7f0000000100)=""/239) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r1, r1}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000200)={&(0x7f0000000100)={'rmd256-generic\x00'}}) 21:58:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80d5) r3 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xf8, 0xf8, 0xf8, 0x0, 0xf8, 0x1c8, 0x208, 0x208, 0x1c8, 0x208, 0x10, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x42]}, @local, [], [], 'team_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 21:58:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}}, 0x0) 21:58:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) dup2(r5, r7) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36) 21:58:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10020}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{}, 0x1, 0x7a, 0x400000002}], 0xf5) fcntl$getflags(r1, 0x401) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 21:58:33 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f3d303030303030309443ec01735930303030303030302edfba5130303130303137322cfa"]) 21:58:33 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000280)=0x1000001, 0x1dc) bind$unix(r3, &(0x7f0000000000)=@abs={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 634.483591][T19725] fuse: Unknown parameter 'ú' 21:58:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8c) syz_open_dev$vcsa(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 21:58:33 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f3d303030303030309443ec01735930303030303030302edfba5130303130303137322cfa"]) 21:58:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) dup2(r5, r7) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36) 21:58:33 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}}, 0x14}, 0x1, 0x60}, 0x0) 21:58:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x2, &(0x7f00000006c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 634.814846][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 634.814885][ T33] audit: type=1800 audit(1590530313.633:29): pid=19739 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 21:58:33 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f3d303030303030309443ec01735930303030303030302edfba5130303130303137322cfa"]) [ 634.911859][T19744] fuse: Unknown parameter 'ú' [ 635.194541][T19765] fuse: Unknown parameter 'ú' [ 635.549649][ T33] audit: type=1800 audit(1590530314.363:30): pid=19742 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15763 res=0 21:58:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/2, 0x2) 21:58:34 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f3d303030303030309443ec01735930303030303030302edfba5130303130303137322cfa"]) 21:58:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) dup2(r5, r7) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36) 21:58:34 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}}, 0x14}, 0x1, 0x60}, 0x0) 21:58:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x2, &(0x7f00000006c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:58:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10}, {0x10, 0x1, 0x1}], 0x20}}], 0x2, 0x0) [ 635.777915][T19771] xt_NFQUEUE: number of total queues is 0 [ 635.827579][T19775] fuse: Unknown parameter 'ú' 21:58:34 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300f}) 21:58:35 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 21:58:35 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) 21:58:35 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}}, 0x14}, 0x1, 0x60}, 0x0) 21:58:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='dummy0\x00', 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x8, 0x28, 0x0, 0x0, 0x0, 0xd}) ioctl$KVM_SET_CPUID(r5, 0xae80, 0x0) 21:58:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x2, &(0x7f00000006c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 636.517550][T19806] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:58:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b452bb0b4179b315d", 0xff7c}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 21:58:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3200000000050001000600000005000500020000000c0007"], 0x54}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 21:58:36 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}}, 0x14}, 0x1, 0x60}, 0x0) 21:58:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') dup2(r3, r0) 21:58:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20404}}, 0x20) 21:58:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x2, &(0x7f00000006c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:58:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') dup2(r3, r0) 21:58:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20404}}, 0x20) 21:58:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r1, 0x3, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x117}]}, 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 21:58:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') dup2(r3, r0) 21:58:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20404}}, 0x20) 21:58:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff004003000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000200010000000000", 0x58}], 0x1) 21:58:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200001c0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 21:58:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b452bb0b4179b315d", 0xff7c}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 21:58:37 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') dup2(r3, r0) 21:58:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20404}}, 0x20) 21:58:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) clone(0x1918ffd, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0x140, 0x0, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6gre0\x00', {}, 'veth0_vlan\x00', {}, 0x0, 0xb}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 21:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@acquire={0x134, 0x17, 0x7, 0x0, 0x0, {{@in6=@dev}, @in6=@private0, {@in6=@mcast2, @in=@local}, {{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0x134}, 0x8}, 0x0) [ 638.794853][T19886] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic 21:58:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101641) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f00000000c0)=[0x0], 0x1}) 21:58:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f800000300000030"], 0x1) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x800009, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:37 executing program 1: unshare(0xc000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae05, &(0x7f0000000100)) 21:58:38 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, [{}]}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 21:58:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x81, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0xe4c1) [ 639.296753][T19902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:58:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) 21:58:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b452bb0b4179b315d", 0xff7c}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 21:58:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:58:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f800000300000030"], 0x1) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x800009, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:58:39 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000480)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="9cffffffffffba007a9b807a8035", 0xe}], 0x1}, 0x0) 21:58:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x5, 0xe00000000000000}, [@typed={0x5, 0x11, 0x0, 0x0, @binary="b6"}]}, 0x1c}, 0x1, 0x60}, 0x0) 21:58:39 executing program 1: syz_emit_ethernet(0x12, &(0x7f0000000040)={@remote, @remote, @val={@void}, {@generic={0x8ff}}}, 0x0) [ 640.272753][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:58:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2, 0x3a}, 0x10) [ 640.404668][T19939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:58:39 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 21:58:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:58:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x5, 0xe00000000000000}, [@typed={0x5, 0x11, 0x0, 0x0, @binary="b6"}]}, 0x1c}, 0x1, 0x60}, 0x0) 21:58:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7b) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x19da22, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 21:58:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f800000300000030"], 0x1) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x800009, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 640.868623][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:58:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b452bb0b4179b315d", 0xff7c}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 21:58:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x5, 0xe00000000000000}, [@typed={0x5, 0x11, 0x0, 0x0, @binary="b6"}]}, 0x1c}, 0x1, 0x60}, 0x0) 21:58:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x0) 21:58:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:58:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f800000300000030"], 0x1) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x800009, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:58:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000103, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 641.672210][T19977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:58:40 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140), 0x14, 0x0) 21:58:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:58:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x5, 0xe00000000000000}, [@typed={0x5, 0x11, 0x0, 0x0, @binary="b6"}]}, 0x1c}, 0x1, 0x60}, 0x0) 21:58:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000240007377f4da1a10516100000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000c00000040cb080009000000000008000b000002000008000a"], 0x60}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) 21:58:41 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140), 0x14, 0x0) [ 642.426039][T19996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:58:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x0) [ 642.605403][T20006] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.733755][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140), 0x14, 0x0) 21:58:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) 21:58:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31}, 0x24}}, 0x0) 21:58:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @pic={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:58:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x0) 21:58:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x80047437, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "da1ee9a1f244ca94bde8d170c631e419e21617"}) [ 643.619927][T20025] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 21:58:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140), 0x14, 0x0) 21:58:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0, 0xffffffffffffffff], 0x2) 21:58:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) 21:58:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 644.278048][T20041] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 644.427220][T20042] tpacket_rcv: packet too big, clamped from 64980 to 32624. macoff=96 21:58:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 21:58:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x34, 0x2, [@TCA_TCINDEX_ACT={0x30, 0x7, [@m_csum={0x2c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x15, 0x6, "e0a5b82f99e72610b350e711d7d55ece55"}}}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:58:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) 21:58:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x0) [ 644.676140][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:43 executing program 2: r0 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) 21:58:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 21:58:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) [ 645.324579][T20062] __nla_validate_parse: 2 callbacks suppressed [ 645.324610][T20062] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 645.355451][T20063] new mount options do not match the existing superblock, will be ignored [ 645.425048][T20063] new mount options do not match the existing superblock, will be ignored 21:58:44 executing program 3: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x13e, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:58:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x16, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x5c8}]) 21:58:44 executing program 5: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="06", 0xfc28) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f00000001c0)) 21:58:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x70, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 21:58:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 21:58:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x202002) keyctl$chown(0x4, r1, 0x0, 0x0) 21:58:44 executing program 0: open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000001) 21:58:44 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000013000)) 21:58:45 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003f00)=@newqdisc={0x154, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "02cf22d486d143e79d854dd5f8bfff8c322c2c60619fc9a30fb0d030bcb855b5d0eee35709f54235747723ce1cbfa2b9d54347d8efc9b47d8b3063fd5bdf683764a9f67fb73915f3459c7c44878b3c63f17788c5aab8193d5e247b03b60638fa5fa1aeea9513a380bac8ba42956e9a08739be305544a21029ee9538dfb1b6e2429603ec8b993b2f004ce98968b73b9d8978c64a3c2fb5b504c60ce635177c66ca51de8cfeff3f87cb97b1f9ee7281a80d9944f6604824929859c0c6e64384505506eb6c4511e0cfa87151113adfcba72d2d1bfda7443ae007cdd984de8a67399e8aa73441bcaa5f2c957d30ba97310e6927802358e0d0bc19535626687a263ae"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, @TCA_RED_FLAGS={0xc}]}}]}, 0x154}}, 0x0) 21:58:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 21:58:45 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) 21:58:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:58:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r2, 0x0, 0xc, 0x0, &(0x7f0000000080)=0x6) [ 646.678223][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 646.728601][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:58:46 executing program 5: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1d9, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}}, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=0xb0) r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@broadcast, @empty, @broadcast}, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="530000004ca6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe8081b7041a4eae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80ae1ea6e457ebc93981b20e03b86d4e999bb073a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d44317f9eb96ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff0400731a859500000000000000001f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30fecb4e10b447543c729bc4721d0420bb1a261a8817d692cbb6a711c06aca3439fcccf694e15c20ed2a09c8e312e65cf0000000000000000000000000000029ab1d451de6c556ffffffff68683f23d0ca2e00"/505], 0x1ba) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl$KDADDIO(r2, 0x4004510d, 0x400000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000002c0)) getitimer(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)="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", 0x311, r3) r4 = add_key(&(0x7f0000000580)='id_legacy\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="7d091869f5edc0bc337226f2db4ed7989cda5bac48bd021b95c4d886507953b0633fe0dd23981260648dc68386f4e97cdf07105b1be6675f445b93aa945e37be7151f1af8758a47b0bb639b3aed33ac60f1ae1fb155dad58d282babdb12621256ae850c96622925b3b8f62b85f5d", 0x6e, r3) keyctl$setperm(0x5, r4, 0x2200000) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x2, &(0x7f0000000200)={[0x6]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000002d040000000000001d400500000000004704000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06859ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5471569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9221b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045b2dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1fafec198899b212c85318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead55a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702b21b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff46200803187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80889020013a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91951ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f222d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f35221403212bfde6559e93d2c5e424c17a9500314a0010000000000000089fe0120f64c62e8e3ed8bcb05202c3d4bbec8d722824c0fbca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d10008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bda7a2ad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684446f3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9de113d19e8d525206c0a728cfd421ec3ed8d22aa60ef469841f3d7799ac04bdc590bb1c89b9c695f163e57343c9730bf99c6c86d057ee7ba99d6c18c14ede9e1f944a741a0e11e7feb0428bee80e94a8ea7ffb1bce7b003336e8e3bba32553c5b2aab5465271e9bdec146d81699b2632ac22dc8f15d20d599674ea7d4cdaaabb77488019695270e7d4ee6fb60345422b07ba17b52a150813e7dca6fc4fd2bfe2284c8a0ce4cac9a67598c194d69c9c03f5556aee4dc048a7888abb03eb41a0295a7eb8757e42e09df59cdf30050a8fc855c2fe75053ddb7d400c39bcaac19764de69d1abbed36074ad719936e48327fe589bc296c28d9b4fe183a7aa806d7a09dcb720144cfc7d5489c05aa313cdacf00"/2508], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 21:58:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000100)="f2a50fc77050670f01cf66b8009000000f23c80f21f86635000060000f23f80f2019f3ad0f92b723412e0f2025f38000002ef0ff40ec", 0x36}], 0xaaaaaaaaaaaaba9, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x4000000000dc) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 21:58:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 21:58:46 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000b80)="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", 0x481}], 0x1) 21:58:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 21:58:46 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)=""/9, 0x9}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="01", 0x1}], 0x1, &(0x7f0000001680)=ANY=[], 0x10c8}, 0x0) 21:58:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x10fec0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 647.759364][T20129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) [ 647.830230][T20135] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.893626][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) [ 648.174815][T20135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.222093][T20129] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.238605][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.258585][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x300}]}, 0x2c}}, 0x0) 21:58:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x120000000002) [ 648.388134][ C1] not chained 60000 origins [ 648.392677][ C1] CPU: 1 PID: 24 Comm: kworker/u4:2 Not tainted 5.7.0-rc4-syzkaller #0 [ 648.400914][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.410981][ C1] Workqueue: krdsd rds_connect_worker [ 648.416350][ C1] Call Trace: [ 648.419633][ C1] [ 648.422492][ C1] dump_stack+0x1c9/0x220 [ 648.426849][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 648.432609][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 648.438766][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 648.443709][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.448914][ C1] ? __should_failslab+0x1f6/0x290 [ 648.454027][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 648.459134][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 648.464930][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 648.471076][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 648.476378][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.481580][ C1] __msan_chain_origin+0x50/0x90 [ 648.486514][ C1] tcp_conn_request+0x1781/0x4d10 [ 648.491550][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 648.497692][ C1] ? cache_from_obj+0x3d5/0x6b0 [ 648.502530][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 648.508580][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.513766][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.518961][ C1] tcp_v4_conn_request+0x19b/0x240 [ 648.524069][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 648.529093][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 648.534366][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 648.539726][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 648.545521][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.550710][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 648.556508][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 648.562567][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.567755][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 648.572339][ C1] tcp_v4_rcv+0x425c/0x5040 [ 648.576845][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 648.582931][ C1] ? tcp_filter+0xf0/0xf0 [ 648.587260][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 648.592734][ C1] ip_local_deliver+0x62a/0x7c0 [ 648.597594][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 648.602605][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 648.608227][ C1] ip_rcv+0x6cf/0x750 [ 648.612204][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 648.616956][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 648.622580][ C1] process_backlog+0xf0b/0x1410 [ 648.627426][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 648.633071][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 648.638340][ C1] net_rx_action+0x786/0x1aa0 [ 648.643014][ C1] ? net_tx_action+0xc30/0xc30 [ 648.647764][ C1] __do_softirq+0x311/0x83d [ 648.652264][ C1] do_softirq_own_stack+0x49/0x80 [ 648.657265][ C1] [ 648.660195][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 648.665397][ C1] local_bh_enable+0x36/0x40 [ 648.669985][ C1] ip_finish_output2+0x2115/0x2610 [ 648.675084][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 648.680789][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 648.686767][ C1] __ip_finish_output+0xaa7/0xd80 [ 648.691784][ C1] ip_finish_output+0x166/0x410 [ 648.696625][ C1] ip_output+0x593/0x680 [ 648.700859][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 648.706133][ C1] ? ip_finish_output+0x410/0x410 [ 648.711140][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 648.716080][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 648.721615][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.726806][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.732007][ C1] ip_queue_xmit+0xcc/0xf0 [ 648.736413][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 648.741248][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 648.746436][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.751630][ C1] tcp_connect+0x420a/0x6830 [ 648.756207][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 648.761492][ C1] tcp_v4_connect+0x21fd/0x2370 [ 648.766343][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 648.771271][ C1] __inet_stream_connect+0x2fb/0x1340 [ 648.776631][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 648.781906][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.787094][ C1] inet_stream_connect+0x101/0x180 [ 648.792195][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 648.797819][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 648.803443][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 648.808635][ C1] ? rds_tcp_state_change+0x390/0x390 [ 648.813995][ C1] rds_connect_worker+0x2a6/0x470 [ 648.819007][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 648.825061][ C1] ? rds_addr_cmp+0x200/0x200 [ 648.829735][ C1] process_one_work+0x1555/0x1f40 [ 648.834775][ C1] worker_thread+0xef6/0x2450 [ 648.839457][ C1] kthread+0x4b5/0x4f0 [ 648.843509][ C1] ? process_one_work+0x1f40/0x1f40 [ 648.848702][ C1] ? kthread_blkcg+0xf0/0xf0 [ 648.853278][ C1] ret_from_fork+0x35/0x40 [ 648.857679][ C1] Uninit was stored to memory at: [ 648.862712][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 648.868417][ C1] __msan_chain_origin+0x50/0x90 [ 648.873339][ C1] tcp_conn_request+0x1781/0x4d10 [ 648.878345][ C1] tcp_v4_conn_request+0x19b/0x240 [ 648.883440][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 648.888446][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 648.893800][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 648.898387][ C1] tcp_v4_rcv+0x425c/0x5040 [ 648.902875][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 648.908314][ C1] ip_local_deliver+0x62a/0x7c0 [ 648.913162][ C1] ip_rcv+0x6cf/0x750 [ 648.917129][ C1] process_backlog+0xf0b/0x1410 [ 648.921977][ C1] net_rx_action+0x786/0x1aa0 [ 648.926636][ C1] __do_softirq+0x311/0x83d [ 648.931114][ C1] [ 648.933420][ C1] Uninit was stored to memory at: [ 648.938429][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 648.944132][ C1] __msan_chain_origin+0x50/0x90 [ 648.949075][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 648.954341][ C1] tcp_conn_request+0x33d7/0x4d10 [ 648.959348][ C1] tcp_v4_conn_request+0x19b/0x240 [ 648.964460][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 648.969469][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 648.974823][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 648.979409][ C1] tcp_v4_rcv+0x425c/0x5040 [ 648.983911][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 648.989352][ C1] ip_local_deliver+0x62a/0x7c0 [ 648.994182][ C1] ip_rcv+0x6cf/0x750 [ 648.998161][ C1] process_backlog+0xf0b/0x1410 [ 649.002994][ C1] net_rx_action+0x786/0x1aa0 [ 649.007650][ C1] __do_softirq+0x311/0x83d [ 649.012128][ C1] [ 649.014453][ C1] Uninit was stored to memory at: [ 649.019462][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 649.025165][ C1] __msan_chain_origin+0x50/0x90 [ 649.030085][ C1] tcp_conn_request+0x1781/0x4d10 [ 649.035091][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.040185][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 649.045193][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.050544][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.055121][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.059608][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.065047][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.069880][ C1] ip_rcv+0x6cf/0x750 [ 649.073845][ C1] process_backlog+0xf0b/0x1410 [ 649.078675][ C1] net_rx_action+0x786/0x1aa0 [ 649.083352][ C1] __do_softirq+0x311/0x83d [ 649.087837][ C1] [ 649.090146][ C1] Uninit was stored to memory at: [ 649.095158][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 649.100860][ C1] __msan_chain_origin+0x50/0x90 [ 649.105779][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 649.111070][ C1] tcp_conn_request+0x33d7/0x4d10 [ 649.116095][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.121192][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 649.126217][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.131573][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.136159][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.140645][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.146083][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.150913][ C1] ip_rcv+0x6cf/0x750 [ 649.154877][ C1] process_backlog+0xf0b/0x1410 [ 649.159711][ C1] net_rx_action+0x786/0x1aa0 [ 649.164367][ C1] __do_softirq+0x311/0x83d [ 649.168846][ C1] [ 649.171164][ C1] Uninit was stored to memory at: [ 649.176189][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 649.181893][ C1] __msan_chain_origin+0x50/0x90 [ 649.186816][ C1] tcp_conn_request+0x1781/0x4d10 [ 649.191824][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.196921][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 649.201932][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.207285][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.211857][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.216342][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.221780][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.226611][ C1] ip_rcv+0x6cf/0x750 [ 649.230585][ C1] process_backlog+0xf0b/0x1410 [ 649.235415][ C1] net_rx_action+0x786/0x1aa0 [ 649.240071][ C1] __do_softirq+0x311/0x83d [ 649.244549][ C1] [ 649.246858][ C1] Uninit was stored to memory at: [ 649.251869][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 649.257570][ C1] __msan_chain_origin+0x50/0x90 [ 649.262490][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 649.267763][ C1] tcp_conn_request+0x33d7/0x4d10 [ 649.272784][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.277882][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 649.282889][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.288260][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.292833][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.297335][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.302774][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.307605][ C1] ip_rcv+0x6cf/0x750 [ 649.311571][ C1] process_backlog+0xf0b/0x1410 [ 649.316404][ C1] net_rx_action+0x786/0x1aa0 [ 649.321062][ C1] __do_softirq+0x311/0x83d [ 649.325540][ C1] [ 649.327848][ C1] Uninit was stored to memory at: [ 649.332859][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 649.338569][ C1] __msan_chain_origin+0x50/0x90 [ 649.343492][ C1] tcp_conn_request+0x1781/0x4d10 [ 649.348498][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.353592][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 649.358607][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.363965][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.368536][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.373022][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.378462][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.383291][ C1] ip_rcv+0x6cf/0x750 [ 649.387253][ C1] process_backlog+0xf0b/0x1410 [ 649.392083][ C1] net_rx_action+0x786/0x1aa0 [ 649.396739][ C1] __do_softirq+0x311/0x83d [ 649.401233][ C1] [ 649.403540][ C1] Uninit was created at: [ 649.407789][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 649.413414][ C1] kmsan_alloc_page+0xb9/0x180 [ 649.418252][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 649.423800][ C1] alloc_pages_current+0x67d/0x990 [ 649.428918][ C1] alloc_slab_page+0x122/0x1310 [ 649.433842][ C1] new_slab+0x2bc/0x1130 [ 649.438073][ C1] ___slab_alloc+0x14a3/0x2040 [ 649.442828][ C1] kmem_cache_alloc+0xb23/0xd70 [ 649.447695][ C1] inet_reqsk_alloc+0xac/0x830 [ 649.452447][ C1] tcp_conn_request+0x753/0x4d10 [ 649.457369][ C1] tcp_v4_conn_request+0x19b/0x240 [ 649.462483][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 649.467838][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 649.472413][ C1] tcp_v4_rcv+0x425c/0x5040 [ 649.476900][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 649.482349][ C1] ip_local_deliver+0x62a/0x7c0 [ 649.487191][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 649.492114][ C1] ip_list_rcv+0x8eb/0x950 [ 649.496515][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 649.502659][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 649.508885][ C1] napi_complete_done+0x2ef/0xb60 [ 649.513894][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 649.519246][ C1] virtnet_poll+0x1468/0x19f0 [ 649.524864][ C1] net_rx_action+0x786/0x1aa0 [ 649.529523][ C1] __do_softirq+0x311/0x83d [ 650.251767][ C1] sd 0:0:1:0: [sg0] tag#7490 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 650.262435][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB: Test Unit Ready [ 650.269191][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.279043][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.288859][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.298592][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.308409][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.318342][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.328189][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.338005][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.347820][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.357629][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.367444][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.377267][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 650.387087][ C1] sd 0:0:1:0: [sg0] tag#7490 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 21:58:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 21:58:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3016}) 21:58:50 executing program 0: r0 = socket$inet6(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="4c00000052001f15b9d522849ac000000ae24ec88cbe55c5ac27a6c5b068afbf2cf223fcc4373a5ad94a461cdbfee9bdb9b64a74786e2a1358b9aa189dbb140a9b4a7d3569359b358451d1ec", 0x4c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99) 21:58:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xf88, &(0x7f0000000440)={@ptr={0x77682a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/228, 0xe4}, @fda}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}], 0xfeffff, 0x73b000, 0x0}) 21:58:50 executing program 3: unshare(0x40600) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9bc21a9b6829afbbb844576db378db836cf621debc6adf7f6f2871719f2c9acf"}) [ 651.553395][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.607769][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 651.636165][T20197] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.675037][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xf88, &(0x7f0000000440)={@ptr={0x77682a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/228, 0xe4}, @fda}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}], 0xfeffff, 0x73b000, 0x0}) 21:58:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) [ 651.777707][T20196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:58:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x10136) splice(r2, 0x0, r4, 0x0, 0x70196c71, 0x0) 21:58:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 21:58:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x10136) splice(r2, 0x0, r4, 0x0, 0x70196c71, 0x0) 21:58:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x698cb70ad8153459, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000340086059509", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303000000c7771000"], 0x48}}, 0x8000) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:58:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 21:58:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xf88, &(0x7f0000000440)={@ptr={0x77682a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/228, 0xe4}, @fda}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}], 0xfeffff, 0x73b000, 0x0}) [ 652.244363][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.295402][T20232] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.396552][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 21:58:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x10136) splice(r2, 0x0, r4, 0x0, 0x70196c71, 0x0) 21:58:51 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 21:58:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xf88, &(0x7f0000000440)={@ptr={0x77682a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/228, 0xe4}, @fda}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}], 0xfeffff, 0x73b000, 0x0}) 21:58:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 21:58:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x72, &(0x7f00000002c0)="94a4b04e04000000000000002b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b895b5804ef58d7cee1761cd167fd6e40d0b1eb346f19367f420083cff2dc39f3cc1e564cd165167d6872a0cdd716000000e1d60bef63eaef5d00001c5449c865576d0cfefa36566d4c68b24ec011e163f29752"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 652.843382][T20248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 652.911457][T20261] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x111) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) read$midi(r2, &(0x7f0000000000)=""/37, 0x25) ioctl$TCXONC(r2, 0x541b, 0x71b000) 21:58:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x10136) splice(r2, 0x0, r4, 0x0, 0x70196c71, 0x0) 21:58:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 21:58:52 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 21:58:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 21:58:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4004800) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffe, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedc0) [ 653.899860][T20279] sg_write: data in/out 50331612/78 bytes for SCSI command 0x0-- guessing data in; [ 653.899860][T20279] program syz-executor.5 not setting count and/or reply_len properly 21:58:52 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000001680)) 21:58:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0xb0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) mq_getsetattr(r1, 0x0, &(0x7f0000356000)) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x0) r4 = gettid() fcntl$setown(r3, 0x8, r4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x1d, r5}, 0x10) 21:58:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) 21:58:52 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0xd0, 0x0, 0x0, 0xd0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x29) [ 654.127896][T20301] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 654.138786][T20301] ipt_CLUSTERIP: Please specify destination IP 21:58:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0xfffffffffffffffe) 21:58:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4004800) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffe, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedc0) 21:58:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'gretap0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d4, &(0x7f0000000040)={'vxcan1\x00'}) 21:58:54 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 21:58:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:54 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007f5a480500b2a4a280930206000400a843096c2623692500160013140102", 0x24}], 0x1, 0x0, 0x0, 0x46020068}, 0x0) r0 = socket(0x10, 0x80002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214ff040000000000000000000000000000000000080002", 0x34) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 655.914536][ C0] sd 0:0:1:0: [sg0] tag#7491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 655.925293][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB: Test Unit Ready [ 655.932136][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.941937][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.951745][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.961616][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.971421][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.981232][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 655.991046][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.004951][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.014780][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.024577][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.034380][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.044189][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.053971][ C0] sd 0:0:1:0: [sg0] tag#7491 CDB[c0]: 00 00 00 00 00 00 00 00 [ 656.105824][ T33] audit: type=1800 audit(1590530334.923:31): pid=20316 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:58:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 656.206850][ T33] audit: type=1800 audit(1590530334.983:32): pid=20316 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:58:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4004800) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffe, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedc0) [ 656.336984][ C1] sd 0:0:1:0: [sg0] tag#7496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.347648][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB: Test Unit Ready [ 656.354371][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.364241][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.374112][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.384070][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.393929][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.403844][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.413695][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.423560][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.432325][ C0] sd 0:0:1:0: [sg0] tag#7495 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.433428][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.443929][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB: Test Unit Ready [ 656.453571][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.460134][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.469828][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.479501][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.489276][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.498949][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.508638][ C1] sd 0:0:1:0: [sg0] tag#7496 CDB[c0]: 00 00 00 00 00 00 00 00 [ 656.518267][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.530640][ T33] audit: type=1800 audit(1590530335.213:33): pid=20331 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 [ 656.535485][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.563944][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.573752][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.583549][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.593891][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.603697][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.613491][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.623305][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4004800) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffe, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedc0) [ 656.633097][ C0] sd 0:0:1:0: [sg0] tag#7495 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 656.951431][ T33] audit: type=1800 audit(1590530335.773:34): pid=20339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:58:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 657.113700][ T33] audit: type=1800 audit(1590530335.883:35): pid=20340 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15759 res=0 [ 657.260822][ T33] audit: type=1800 audit(1590530336.073:36): pid=20342 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 [ 657.410917][ C0] sd 0:0:1:0: [sg0] tag#7500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 657.421582][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB: Test Unit Ready [ 657.428294][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.438211][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.448081][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.457949][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.467803][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.477660][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.487516][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.497381][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.507242][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.517100][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.526961][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.536812][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.546661][ C0] sd 0:0:1:0: [sg0] tag#7500 CDB[c0]: 00 00 00 00 00 00 00 00 [ 657.554570][ C0] sd 0:0:1:0: [sg0] tag#7504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 657.565213][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB: Test Unit Ready [ 657.571952][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.581847][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.591736][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.601606][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.611463][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.621319][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.631175][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.641031][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.650888][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.660754][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.670618][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.680483][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.690338][ C0] sd 0:0:1:0: [sg0] tag#7504 CDB[c0]: 00 00 00 00 00 00 00 00 [ 657.698208][ C0] sd 0:0:1:0: [sg0] tag#7508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 657.708853][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB: Test Unit Ready [ 657.715534][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.725406][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.735278][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.745151][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.755160][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.765041][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.774900][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.784767][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.796382][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.806352][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.816231][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.826098][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.835959][ C0] sd 0:0:1:0: [sg0] tag#7508 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:56 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r2, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 21:58:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 658.005749][ C0] sd 0:0:1:0: [sg0] tag#7512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.016440][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB: Test Unit Ready [ 658.023159][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.032959][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.042753][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.052572][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.062398][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.072239][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.082161][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.092173][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.102112][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.111950][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.121779][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.131619][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.141439][ C0] sd 0:0:1:0: [sg0] tag#7512 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111}}, 0x20) close(r0) 21:58:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:57 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 658.180607][ T33] audit: type=1800 audit(1590530336.993:37): pid=20350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15759 res=0 [ 658.288010][ C1] sd 0:0:1:0: [sg0] tag#7516 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.298780][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB: Test Unit Ready [ 658.305448][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.315278][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.325138][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.326667][ C0] sd 0:0:1:0: [sg0] tag#7517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.334967][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.345373][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB: Test Unit Ready [ 658.355047][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.361598][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.371315][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.380954][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.390621][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.400367][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.410052][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.419738][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.429410][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.439072][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.448761][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.458345][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.468033][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.477703][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.487370][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.497042][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.506696][ C1] sd 0:0:1:0: [sg0] tag#7516 CDB[c0]: 00 00 00 00 00 00 00 00 [ 658.516356][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.533584][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.543404][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.555836][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.565658][ C0] sd 0:0:1:0: [sg0] tag#7517 CDB[c0]: 00 00 00 00 00 00 00 00 [ 658.597400][ T33] audit: type=1800 audit(1590530337.413:38): pid=20359 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:58:57 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x8000400) ioctl$int_in(r0, 0x4008af00, 0x0) 21:58:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fcntl$setstatus(r2, 0x4, 0x2000) 21:58:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:57 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080), &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}}) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x311, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/sg#\x00', 0x0) [ 658.670619][ T33] audit: type=1800 audit(1590530337.443:39): pid=20358 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 [ 658.886901][ C1] sd 0:0:1:0: [sg0] tag#7526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.897619][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB: Test Unit Ready [ 658.904351][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.914178][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.924018][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.933833][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.944794][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.954620][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.964437][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.974237][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.984050][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.993865][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 659.003727][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 659.013543][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 659.023345][ C1] sd 0:0:1:0: [sg0] tag#7526 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:57 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getlink={0x28, 0x12, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1, 0x348}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0) [ 659.032176][ T33] audit: type=1800 audit(1590530337.783:40): pid=20378 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15759 res=0 [ 659.152299][T20382] __nla_validate_parse: 1 callbacks suppressed [ 659.152329][T20382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 659.217205][T20387] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 659.233971][T20387] device ipvlan2 entered promiscuous mode 21:58:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2}], 0x1}, 0x0) 21:58:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}, 0x4000041) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650200000000000000"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40002, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@audit='audit'}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 21:58:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:58:58 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x98}}, 0x0) [ 660.094370][T20408] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 660.110659][T20408] device ipvlan2 entered promiscuous mode 21:58:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:58:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x98}}, 0x0) 21:58:59 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x3, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x0, 0x0, r0, 0x0, 0x2000000}]) 21:58:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:58:59 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x8004550f, 0x0) dup2(r0, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 21:58:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 661.201688][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 661.201738][ T33] audit: type=1800 audit(1590530340.023:45): pid=20435 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:59:00 executing program 2: unshare(0x20400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)) [ 661.361607][ T33] audit: type=1800 audit(1590530340.113:46): pid=20435 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:59:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x98}}, 0x0) 21:59:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:59:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:59:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2, 0x0) 21:59:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x1, 0x0, 0x0, 0x2, 0x0) 21:59:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:59:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, {0x4}}) 21:59:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:59:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2, 0x0) 21:59:01 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x98}}, 0x0) 21:59:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r0, 0x0, 0x12b, 0x2000004a, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 21:59:01 executing program 1: readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020000000000000000000000000200000000000000006f0d"], 0x3}}, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) splice(0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000040)='1\x00\x00\x00\x00\x00\xf8\xff\x00\x00x\xc7WA\xa1jB\xb3\x02\xffm\xf3\x9d!\xb0\x9b\xc2|\x1ct\xe8`\xe2<\xeb\xb2\x91l\xd5\xb1g?q\xd5\x98\x97\x94\xd9\xf9t\xc4/O\xe2\xa1\x0f\xa4m\xab\x1fL\xb8>\xfbs\x1c\x9dy1M\x1f+:\xf0\xff\x93\xf6\xd5\x0e\x88\xd2\x1d@\x9dK8A\v]k\x10\x9b0\xe0\xf1\xa7\xee@\xc3\xbf\xf4U\xb9-E\v(\xffs)\x8f\xdb\xf1\x91\xd64\xcfcD\xf6\x14\xeb\x14\xbd\x1d\xdc|\x9b\xe8\x8a{3\x04\xb8\aA\xe2\xaa\x02\xa8\a\x02<\xca~\xd7\x1d\xd0Jmn\xac\x04\xac#t\xe3\xdek\r', 0x0) 21:59:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2, 0x0) 21:59:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af20, &(0x7f00000000c0)) 21:59:01 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001480)=""/1677, 0x68d) getdents(r0, &(0x7f0000000600)=""/200, 0xc8) getdents64(r0, &(0x7f0000179f35)=""/203, 0xcb) 21:59:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 21:59:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r0, 0x0, 0x12b, 0x2000004a, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 21:59:02 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) [ 663.409727][T20501] IPVS: ftp: loaded support on port[0] = 21 [ 664.535069][T20501] IPVS: ftp: loaded support on port[0] = 21 21:59:04 executing program 5: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xad) 21:59:04 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2, 0x0) 21:59:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffff8, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000340)={0x0, 0x1, 0x100000000}) 21:59:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r0, 0x0, 0x12b, 0x2000004a, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 21:59:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) [ 665.623452][T13054] tipc: TX() has been purged, node left! 21:59:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r0, 0x0, 0x12b, 0x2000004a, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 21:59:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 21:59:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, [@private0, @mcast2]}, 0x3b) 21:59:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000040)={0xfffffffffffffffc}) [ 666.300621][T20578] ion_ioctl: ioctl validate failed 21:59:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:59:05 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 21:59:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) getsockname(r0, 0x0, &(0x7f0000000440)) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[], 0x2c, 0x0) dup3(r1, r2, 0x0) [ 666.772385][ C1] not chained 70000 origins [ 666.776923][ C1] CPU: 1 PID: 13162 Comm: kworker/u4:6 Not tainted 5.7.0-rc4-syzkaller #0 [ 666.785416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.795485][ C1] Workqueue: krdsd rds_connect_worker [ 666.800853][ C1] Call Trace: [ 666.804133][ C1] [ 666.807075][ C1] dump_stack+0x1c9/0x220 [ 666.811416][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 666.817145][ C1] ? xfrm_lookup_route+0x2c1/0x370 [ 666.822269][ C1] ? ip_route_output_flow+0x35a/0x3d0 [ 666.827637][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.832834][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.838036][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.843849][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 666.849999][ C1] ? tcp_select_initial_window+0x60d/0x6c0 [ 666.855808][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.861016][ C1] __msan_chain_origin+0x50/0x90 [ 666.865965][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 666.871270][ C1] tcp_conn_request+0x33d7/0x4d10 [ 666.876323][ C1] ? __update_load_avg_cfs_rq+0x1a8/0x13b0 [ 666.882129][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.887334][ C1] tcp_v4_conn_request+0x19b/0x240 [ 666.892453][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 666.897481][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 666.902771][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 666.908140][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.913947][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.919147][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.924954][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 666.931026][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 666.936225][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 666.940823][ C1] tcp_v4_rcv+0x425c/0x5040 [ 666.945331][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 666.951448][ C1] ? tcp_filter+0xf0/0xf0 [ 666.955779][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 666.961245][ C1] ip_local_deliver+0x62a/0x7c0 [ 666.966102][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 666.971123][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 666.976752][ C1] ip_rcv+0x6cf/0x750 [ 666.980737][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 666.985498][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 666.991128][ C1] process_backlog+0xf0b/0x1410 [ 666.995984][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 667.001639][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 667.006923][ C1] net_rx_action+0x786/0x1aa0 [ 667.011616][ C1] ? net_tx_action+0xc30/0xc30 [ 667.016380][ C1] __do_softirq+0x311/0x83d [ 667.020992][ C1] do_softirq_own_stack+0x49/0x80 [ 667.026009][ C1] [ 667.028956][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 667.034592][ C1] local_bh_enable+0x36/0x40 [ 667.039183][ C1] ip_finish_output2+0x2115/0x2610 [ 667.044296][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 667.050019][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 667.056012][ C1] __ip_finish_output+0xaa7/0xd80 [ 667.061033][ C1] ip_finish_output+0x166/0x410 [ 667.065964][ C1] ip_output+0x593/0x680 [ 667.070229][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 667.075499][ C1] ? ip_finish_output+0x410/0x410 [ 667.080510][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 667.085452][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 667.090991][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 667.096183][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 667.101457][ C1] ip_queue_xmit+0xcc/0xf0 [ 667.105867][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 667.110702][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 667.115980][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 667.121174][ C1] tcp_connect+0x420a/0x6830 [ 667.125759][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 667.131048][ C1] tcp_v4_connect+0x21fd/0x2370 [ 667.135899][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 667.140824][ C1] __inet_stream_connect+0x2fb/0x1340 [ 667.146193][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 667.151470][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 667.156656][ C1] inet_stream_connect+0x101/0x180 [ 667.161754][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 667.167374][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 667.173013][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 667.178200][ C1] ? rds_tcp_state_change+0x390/0x390 [ 667.183555][ C1] rds_connect_worker+0x2a6/0x470 [ 667.188584][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 667.194640][ C1] ? rds_addr_cmp+0x200/0x200 [ 667.199301][ C1] process_one_work+0x1555/0x1f40 [ 667.204325][ C1] worker_thread+0xef6/0x2450 [ 667.209019][ C1] kthread+0x4b5/0x4f0 [ 667.213073][ C1] ? process_one_work+0x1f40/0x1f40 [ 667.218273][ C1] ? kthread_blkcg+0xf0/0xf0 [ 667.222858][ C1] ret_from_fork+0x35/0x40 [ 667.227265][ C1] Uninit was stored to memory at: [ 667.232276][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.237979][ C1] __msan_chain_origin+0x50/0x90 [ 667.242900][ C1] tcp_conn_request+0x1781/0x4d10 [ 667.248010][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.253115][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.258122][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.263477][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.268076][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.272561][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.278017][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.282852][ C1] ip_rcv+0x6cf/0x750 [ 667.286819][ C1] process_backlog+0xf0b/0x1410 [ 667.291655][ C1] net_rx_action+0x786/0x1aa0 [ 667.296320][ C1] __do_softirq+0x311/0x83d [ 667.300799][ C1] [ 667.303108][ C1] Uninit was stored to memory at: [ 667.308118][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.314256][ C1] __msan_chain_origin+0x50/0x90 [ 667.319202][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 667.324470][ C1] tcp_conn_request+0x33d7/0x4d10 [ 667.329479][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.334574][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.339584][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.344936][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.349511][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.353996][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.359436][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.364282][ C1] ip_rcv+0x6cf/0x750 [ 667.368284][ C1] process_backlog+0xf0b/0x1410 [ 667.373128][ C1] net_rx_action+0x786/0x1aa0 [ 667.377796][ C1] __do_softirq+0x311/0x83d [ 667.385486][ C1] [ 667.387797][ C1] Uninit was stored to memory at: [ 667.392810][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.398512][ C1] __msan_chain_origin+0x50/0x90 [ 667.403435][ C1] tcp_conn_request+0x1781/0x4d10 [ 667.408450][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.413549][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.418567][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.423923][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.428498][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.433001][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.438450][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.443285][ C1] ip_rcv+0x6cf/0x750 [ 667.447255][ C1] process_backlog+0xf0b/0x1410 [ 667.452090][ C1] net_rx_action+0x786/0x1aa0 [ 667.456750][ C1] __do_softirq+0x311/0x83d [ 667.461227][ C1] [ 667.463535][ C1] Uninit was stored to memory at: [ 667.468547][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.474250][ C1] __msan_chain_origin+0x50/0x90 [ 667.479171][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 667.484448][ C1] tcp_conn_request+0x33d7/0x4d10 [ 667.489472][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.494567][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.499574][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.504929][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.509512][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.513995][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.519435][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.524282][ C1] ip_rcv+0x6cf/0x750 [ 667.528261][ C1] process_backlog+0xf0b/0x1410 [ 667.533106][ C1] net_rx_action+0x786/0x1aa0 [ 667.537773][ C1] __do_softirq+0x311/0x83d [ 667.542255][ C1] [ 667.544568][ C1] Uninit was stored to memory at: [ 667.549588][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.555308][ C1] __msan_chain_origin+0x50/0x90 [ 667.560231][ C1] tcp_conn_request+0x1781/0x4d10 [ 667.565254][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.570352][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.575360][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.580713][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.585294][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.590214][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.595671][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.600509][ C1] ip_rcv+0x6cf/0x750 [ 667.604478][ C1] process_backlog+0xf0b/0x1410 [ 667.609316][ C1] net_rx_action+0x786/0x1aa0 [ 667.613979][ C1] __do_softirq+0x311/0x83d [ 667.618461][ C1] [ 667.620771][ C1] Uninit was stored to memory at: [ 667.625782][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.631492][ C1] __msan_chain_origin+0x50/0x90 [ 667.636432][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 667.641702][ C1] tcp_conn_request+0x33d7/0x4d10 [ 667.646712][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.651817][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.656927][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.662297][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.667311][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.671799][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.677252][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.682088][ C1] ip_rcv+0x6cf/0x750 [ 667.686063][ C1] process_backlog+0xf0b/0x1410 [ 667.690897][ C1] net_rx_action+0x786/0x1aa0 [ 667.695581][ C1] __do_softirq+0x311/0x83d [ 667.700061][ C1] [ 667.702371][ C1] Uninit was stored to memory at: [ 667.707385][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 667.713087][ C1] __msan_chain_origin+0x50/0x90 [ 667.718010][ C1] tcp_conn_request+0x1781/0x4d10 [ 667.723034][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.728146][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 667.733156][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.738510][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.743082][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.747566][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.753006][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.757853][ C1] ip_rcv+0x6cf/0x750 [ 667.761816][ C1] process_backlog+0xf0b/0x1410 [ 667.766650][ C1] net_rx_action+0x786/0x1aa0 [ 667.771308][ C1] __do_softirq+0x311/0x83d [ 667.775784][ C1] [ 667.778095][ C1] Uninit was created at: [ 667.782322][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 667.787936][ C1] kmsan_alloc_page+0xb9/0x180 [ 667.792684][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 667.798217][ C1] alloc_pages_current+0x67d/0x990 [ 667.803312][ C1] alloc_slab_page+0x122/0x1310 [ 667.808143][ C1] new_slab+0x2bc/0x1130 [ 667.812383][ C1] ___slab_alloc+0x14a3/0x2040 [ 667.817128][ C1] kmem_cache_alloc+0xb23/0xd70 [ 667.821963][ C1] inet_reqsk_alloc+0xac/0x830 [ 667.826713][ C1] tcp_conn_request+0x753/0x4d10 [ 667.831631][ C1] tcp_v4_conn_request+0x19b/0x240 [ 667.836743][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 667.842096][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 667.846668][ C1] tcp_v4_rcv+0x425c/0x5040 [ 667.851159][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 667.856598][ C1] ip_local_deliver+0x62a/0x7c0 [ 667.861430][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 667.866278][ C1] ip_list_rcv+0x8eb/0x950 [ 667.870677][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 667.876818][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 667.883044][ C1] napi_complete_done+0x2ef/0xb60 [ 667.888053][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 667.893497][ C1] virtnet_poll+0x1468/0x19f0 [ 667.898153][ C1] net_rx_action+0x786/0x1aa0 [ 667.902809][ C1] __do_softirq+0x311/0x83d [ 668.682623][T13054] tipc: TX() has been purged, node left! 21:59:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "4acdbf0522fd6a5d805f1e4b834dfb00ea002857819706542175027b75617fc5", "3da9874f30c6f9e582c60e20a3d14f7d", {"a59ddfa0f017f669df95d97b19269e08", "478273564b7cf8c50a8000007100004b"}}}}}}}, 0x0) 21:59:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000400"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) r1 = syz_open_pts(r0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) dup2(r0, r1) 21:59:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) chroot(&(0x7f0000000180)='./file0\x00') 21:59:07 executing program 0: pipe(&(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1fc}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:59:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000100)) 21:59:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7b, &(0x7f0000000240)={r4}, 0x9c) 21:59:08 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000047c0)) syz_open_procfs(0x0, 0x0) 21:59:08 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 21:59:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x141d42, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 21:59:08 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) 21:59:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:59:08 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000001e, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) tkill(r0, 0x5000000000016) 21:59:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) 21:59:10 executing program 0: pipe(&(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1fc}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:59:10 executing program 1: clock_getres(0xe1a3eff6cffd6963, 0x0) 21:59:10 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x2000400) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0984124, 0x0) 21:59:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4004ae86, 0x0) dup2(r5, r4) 21:59:10 executing program 4: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) 21:59:10 executing program 4: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002e0, 0x78, 0x0, &(0x7f00000011c0)="d5982f643f9fb70ed761ec9c9caa5cb590b05cfacc3aa6e95b78ee1480350a438014f8c358bddc7176592c9c2bab4e54b986df312bba6dc3c4d0a6ffca694ad63385783575acccbdf3ab9d85ef6f5638f79c776dd57fc06fe272d18d2cd259fdf2050f9e7a74c9a6d4493edb5147bd132334234218dc8ee8", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 21:59:10 executing program 0: pipe(&(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1fc}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:59:10 executing program 1: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) 21:59:10 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x2000400) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0984124, 0x0) 21:59:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:59:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9f", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 21:59:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) 21:59:10 executing program 4: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x7}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex\x06\x00e', 0x0) 21:59:10 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x2000400) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0984124, 0x0) 21:59:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}, @rr={0x7, 0x3}]}}}], 0x8}}], 0x1, 0x0) 21:59:10 executing program 4: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x7}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex\x06\x00e', 0x0) 21:59:11 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x2000400) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0984124, 0x0) 21:59:11 executing program 4: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x7}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex\x06\x00e', 0x0) 21:59:11 executing program 0: pipe(&(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1fc}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:59:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r0, 0x540a, 0x3) 21:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@allocspi={0xf4, 0x15, 0x337, 0x0, 0x0, {{{@in=@remote, @in6=@ipv4={[], [], @broadcast}}, {@in=@local}, @in6=@remote}}}, 0xf4}}, 0x0) 21:59:11 executing program 2: unshare(0x8000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 21:59:13 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000dedf2f)='rw') 21:59:13 executing program 4: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x7}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex\x06\x00e', 0x0) 21:59:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:13 executing program 2: unshare(0x8000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 21:59:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000003fc0)=@assoc_value, &(0x7f0000002a80)=0x8) 21:59:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) 21:59:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)='+', 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000580)={r1}) 21:59:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8932, &(0x7f0000000040)={'dummy0\x00'}) 21:59:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) r4 = socket(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 21:59:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 21:59:14 executing program 2: unshare(0x8000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 21:59:14 executing program 1: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000001c0)={0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x10001) ioctl$MON_IOCX_MFETCH(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x0) tkill(r1, 0x800000015) 21:59:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 21:59:14 executing program 2: unshare(0x8000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 21:59:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 21:59:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) 21:59:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8d\xce\xc0\xa3L\x7f\x00\xa2\xba\xe5\xf4\x97\xac#*\xff\xd0\xbd \xa23i\x8c\xa5D\xf6\xa2\x92\xb1\xd1\\l\x0e$\x9a0\x1a\xf9\xf6f\x05\x1a\xdcL\xf3\"\"+\t\xfc\x99\xb7\xba\xae\a\x933\x8d\x13\xdd\xd9N\xcc\xa2\x98\x81\x03\x8ei\x9b\xf8\x91\xf3\xde\x15U\x13A\x80\x83\xc1\xb5\x8d\xa8\'\xa5N\xb5\xcd\x10v5\xda\xa8\xecI\xf1\x90\xed\xfb\xe9\x0fh\b)\x81\x88|\xe8E\xb4w\xcb\x01.\xf2\x85h\x8eU\x88#\xa9\xc8\x9b\xae\xa0\xe8\x7f\xe4\xb2-\x83\x88\x8f\xc6\xfb?/K\bx\x06\xc6\x7f\t8\xdd\xcc\x12\xf4', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') ioctl$FICLONE(r1, 0x40049409, r2) 21:59:17 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 21:59:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$binfmt_script(r1, &(0x7f0000001740)=ANY=[], 0x15a) fsync(r0) 21:59:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:17 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:59:17 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 21:59:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 21:59:18 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080)) [ 679.462032][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:59:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 679.895960][T20795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:59:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 21:59:19 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32, @ANYBLOB="ff7f000000000000140012800b00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 21:59:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0xffff4bca}}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0x0) 21:59:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x30, 0xffffffffffffffff, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 680.319635][T20802] IPVS: ftp: loaded support on port[0] = 21 [ 680.437865][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.455536][T20828] device vxlan0 entered promiscuous mode [ 680.579679][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:59:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 680.738862][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:59:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 21:59:19 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32, @ANYBLOB="ff7f000000000000140012800b00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 681.092258][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 681.150381][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:59:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16f, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:59:20 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32, @ANYBLOB="ff7f000000000000140012800b00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 681.659812][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.870147][ C1] not chained 80000 origins [ 681.874688][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc4-syzkaller #0 [ 681.882832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.892884][ C1] Call Trace: [ 681.896180][ C1] dump_stack+0x1c9/0x220 [ 681.900527][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 681.906763][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 681.912819][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 681.917746][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 681.922931][ C1] ? __should_failslab+0x1f6/0x290 [ 681.928026][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 681.933121][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 681.938914][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 681.945053][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 681.950335][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 681.955519][ C1] __msan_chain_origin+0x50/0x90 [ 681.960447][ C1] tcp_conn_request+0x1781/0x4d10 [ 681.965490][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 681.971539][ C1] ? cache_from_obj+0x3d5/0x6b0 [ 681.976376][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 681.982425][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 681.987607][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 681.992796][ C1] tcp_v4_conn_request+0x19b/0x240 [ 681.997901][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.002917][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 682.008195][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.013559][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 682.019349][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 682.024546][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 682.030344][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 682.036401][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 682.041596][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.046178][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.050671][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 682.056748][ C1] ? tcp_filter+0xf0/0xf0 [ 682.061065][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.066515][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.071361][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 682.076370][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 682.082421][ C1] ip_rcv+0x6cf/0x750 [ 682.086395][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 682.091145][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 682.096762][ C1] process_backlog+0xf0b/0x1410 [ 682.101604][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 682.107233][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 682.112501][ C1] net_rx_action+0x786/0x1aa0 [ 682.117175][ C1] ? net_tx_action+0xc30/0xc30 [ 682.121923][ C1] __do_softirq+0x311/0x83d [ 682.126418][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 682.131609][ C1] ? takeover_tasklets+0x8f0/0x8f0 [ 682.136710][ C1] run_ksoftirqd+0x25/0x40 [ 682.141116][ C1] smpboot_thread_fn+0x493/0x980 [ 682.146048][ C1] kthread+0x4b5/0x4f0 [ 682.150101][ C1] ? cpu_report_death+0x180/0x180 [ 682.155132][ C1] ? kthread_blkcg+0xf0/0xf0 [ 682.159798][ C1] ret_from_fork+0x35/0x40 [ 682.164204][ C1] Uninit was stored to memory at: [ 682.169219][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.174927][ C1] __msan_chain_origin+0x50/0x90 [ 682.179848][ C1] tcp_conn_request+0x1781/0x4d10 [ 682.184856][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.189954][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.194979][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.200333][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.204909][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.209397][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.214852][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.219683][ C1] ip_rcv+0x6cf/0x750 [ 682.223648][ C1] process_backlog+0xf0b/0x1410 [ 682.228478][ C1] net_rx_action+0x786/0x1aa0 [ 682.233143][ C1] __do_softirq+0x311/0x83d [ 682.237636][ C1] [ 682.239946][ C1] Uninit was stored to memory at: [ 682.244957][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.250661][ C1] __msan_chain_origin+0x50/0x90 [ 682.255583][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 682.260870][ C1] tcp_conn_request+0x33d7/0x4d10 [ 682.265878][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.270972][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.275979][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.281333][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.285905][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.290393][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.295835][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.300668][ C1] ip_rcv+0x6cf/0x750 [ 682.304736][ C1] process_backlog+0xf0b/0x1410 [ 682.309590][ C1] net_rx_action+0x786/0x1aa0 [ 682.314255][ C1] __do_softirq+0x311/0x83d [ 682.318747][ C1] [ 682.321056][ C1] Uninit was stored to memory at: [ 682.326153][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.331873][ C1] __msan_chain_origin+0x50/0x90 [ 682.336811][ C1] tcp_conn_request+0x1781/0x4d10 [ 682.341817][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.346926][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.351939][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.357306][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.361889][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.366383][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.371829][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.376664][ C1] ip_rcv+0x6cf/0x750 [ 682.380634][ C1] process_backlog+0xf0b/0x1410 [ 682.385472][ C1] net_rx_action+0x786/0x1aa0 [ 682.390137][ C1] __do_softirq+0x311/0x83d [ 682.394616][ C1] [ 682.396928][ C1] Uninit was stored to memory at: [ 682.401966][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.407675][ C1] __msan_chain_origin+0x50/0x90 [ 682.412606][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 682.417902][ C1] tcp_conn_request+0x33d7/0x4d10 [ 682.422915][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.428018][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.433034][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.438396][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.442970][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.447458][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.452897][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.457729][ C1] ip_rcv+0x6cf/0x750 [ 682.461693][ C1] process_backlog+0xf0b/0x1410 [ 682.466528][ C1] net_rx_action+0x786/0x1aa0 [ 682.471191][ C1] __do_softirq+0x311/0x83d [ 682.475668][ C1] [ 682.477994][ C1] Uninit was stored to memory at: [ 682.483005][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.488727][ C1] __msan_chain_origin+0x50/0x90 [ 682.493650][ C1] tcp_conn_request+0x1781/0x4d10 [ 682.498658][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.503754][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.508800][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.514157][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.518730][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.523215][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.528669][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.533513][ C1] ip_rcv+0x6cf/0x750 [ 682.537486][ C1] process_backlog+0xf0b/0x1410 [ 682.542328][ C1] net_rx_action+0x786/0x1aa0 [ 682.546998][ C1] __do_softirq+0x311/0x83d [ 682.551480][ C1] [ 682.553809][ C1] Uninit was stored to memory at: [ 682.558840][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.564568][ C1] __msan_chain_origin+0x50/0x90 [ 682.569504][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 682.574774][ C1] tcp_conn_request+0x33d7/0x4d10 [ 682.579783][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.584908][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.589931][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.595292][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.599868][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.604358][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.609890][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.615174][ C1] ip_rcv+0x6cf/0x750 [ 682.619148][ C1] process_backlog+0xf0b/0x1410 [ 682.624428][ C1] net_rx_action+0x786/0x1aa0 [ 682.629106][ C1] __do_softirq+0x311/0x83d [ 682.633602][ C1] [ 682.635912][ C1] Uninit was stored to memory at: [ 682.640930][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 682.646634][ C1] __msan_chain_origin+0x50/0x90 [ 682.651571][ C1] tcp_conn_request+0x1781/0x4d10 [ 682.656587][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.661682][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 682.666690][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.672060][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.676633][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.681120][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.686563][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.691408][ C1] ip_rcv+0x6cf/0x750 [ 682.695375][ C1] process_backlog+0xf0b/0x1410 [ 682.700232][ C1] net_rx_action+0x786/0x1aa0 [ 682.704977][ C1] __do_softirq+0x311/0x83d [ 682.709456][ C1] [ 682.711781][ C1] Uninit was created at: [ 682.716009][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 682.721626][ C1] kmsan_alloc_page+0xb9/0x180 [ 682.726374][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 682.731904][ C1] alloc_pages_current+0x67d/0x990 [ 682.737002][ C1] alloc_slab_page+0x122/0x1310 [ 682.741835][ C1] new_slab+0x2bc/0x1130 [ 682.746056][ C1] ___slab_alloc+0x14a3/0x2040 [ 682.750804][ C1] kmem_cache_alloc+0xb23/0xd70 [ 682.757482][ C1] inet_reqsk_alloc+0xac/0x830 [ 682.762230][ C1] tcp_conn_request+0x753/0x4d10 [ 682.767149][ C1] tcp_v4_conn_request+0x19b/0x240 [ 682.772246][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 682.777599][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 682.782170][ C1] tcp_v4_rcv+0x425c/0x5040 [ 682.786666][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 682.792107][ C1] ip_local_deliver+0x62a/0x7c0 [ 682.796949][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 682.801783][ C1] ip_list_rcv+0x8eb/0x950 [ 682.806188][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 682.812330][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 682.818552][ C1] napi_complete_done+0x2ef/0xb60 [ 682.823562][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 682.828916][ C1] virtnet_poll+0x1468/0x19f0 [ 682.833574][ C1] net_rx_action+0x786/0x1aa0 [ 682.838236][ C1] __do_softirq+0x311/0x83d 21:59:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20a000, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 21:59:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d000000030300000000000000"], 0x48}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:59:21 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32, @ANYBLOB="ff7f000000000000140012800b00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 683.106706][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:59:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x100000001) 21:59:22 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:22 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x84}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x60}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) [ 683.316024][T20818] IPVS: ftp: loaded support on port[0] = 21 [ 683.958503][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 21:59:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$TCXONC(r4, 0x540a, 0x0) write(r4, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) dup3(r4, r0, 0x0) 21:59:23 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x100000001) 21:59:23 executing program 2: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {r1}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 21:59:23 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:59:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 685.414195][ T409] tipc: TX() has been purged, node left! 21:59:24 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x44fffffe) 21:59:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x100000001) 21:59:24 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x44fffffe) 21:59:24 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x100000001) 21:59:25 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:59:26 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000}) 21:59:26 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x44fffffe) 21:59:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 21:59:26 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:59:26 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:59:26 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x44fffffe) 21:59:27 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:59:27 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 21:59:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 21:59:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000080000000000000000000000200000007"], 0x78}}, 0x0) 21:59:27 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) [ 689.716991][ T409] tipc: TX() has been purged, node left! 21:59:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100002400290d00"/20, @ANYRES32=r1, @ANYBLOB="00000022ffffffff000000000a00010063686f6b650000002401020008000300000000001400010000000000000000090000000000000000040102"], 0x154}}, 0x0) 21:59:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 21:59:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) 21:59:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="fd20000000000000500012800b000100697036746e6c00004000028008000f002c00001004001300060012"], 0x90}}, 0x0) 21:59:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRK(r0, 0x542e, 0x73b000) 21:59:29 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) [ 690.790119][T21001] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 690.799951][T21001] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 690.808170][T21001] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:59:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x7, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) 21:59:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x2c}}, 0x0) 21:59:29 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x178) r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xb6c}}], 0x34, 0xac0, 0x0) 21:59:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 21:59:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35acd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 21:59:30 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) [ 691.515142][T21050] batman_adv: Cannot find parent device [ 691.527439][T21050] bridge2: port 1(gretap1) entered blocking state [ 691.534221][T21050] bridge2: port 1(gretap1) entered disabled state [ 691.544158][T21050] device gretap1 entered promiscuous mode 21:59:31 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001, 0x2}, [@jmp]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x12}, 0x48) 21:59:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 21:59:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 21:59:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:59:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x24, &(0x7f0000000000), 0x20a154cc) 21:59:31 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffffffffffffbc7000ffffffff0000fffc0c00000000000000000000015b659a62290fc0ffffffffffffff13e1a04810b904fbc3f4c1b4e2bf501fb1bb949869c200f0ffff9f04005e4fcd4dd3050bc1700612dbac10c3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 21:59:31 executing program 1: clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:u'], 0x80752ced1d6eb88b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 21:59:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 21:59:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 21:59:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa506f52ccbdb3080046000018000000000002"], 0x0) 21:59:31 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r0) [ 692.552886][T21080] encrypted_key: keylen parameter is missing [ 692.570344][T21085] encrypted_key: keylen parameter is missing 21:59:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@empty}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x4}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@dev}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in=@dev}]}]}, 0x1bc}}, 0x0) 21:59:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 21:59:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x10f, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:59:32 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 21:59:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1, 0x4000000b6) 21:59:34 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 21:59:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2, 0x4, 0x2, 0x2, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 21:59:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa506f52ccbdb3080046000018000000000002"], 0x0) 21:59:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) [ 695.387884][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 695.394975][ C0] sd 0:0:1:0: [sg0] tag#7521 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.405602][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB: Test Unit Ready [ 695.412302][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.422119][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.433800][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.443776][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.453613][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.463482][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.473262][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.483039][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.492823][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.502637][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.512425][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.522227][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.532017][ C0] sd 0:0:1:0: [sg0] tag#7521 CDB[c0]: 00 00 00 00 00 00 00 00 21:59:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x170, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x0) [ 695.841697][ C1] sd 0:0:1:0: [sg0] tag#7522 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.852548][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB: Test Unit Ready [ 695.859278][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.869110][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.878976][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.888830][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.898635][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.908440][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.918254][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.927980][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.937791][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.947599][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.957411][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.967230][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.977034][ C1] sd 0:0:1:0: [sg0] tag#7522 CDB[c0]: 00 00 00 00 00 00 00 00 21:59:34 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64007db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801da96c697d5005fa8ab950f42c0945c08ba8c55299a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc1fc2442eac2d344609aba9e6000000000000000000000000000000f390d71c1c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca29ece518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037e3a11886a0ecfea4342b11a5dbb27622cd9e9d843a8d256996ab6f2dc045421994d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73df040000005f1feb88914dab57e869048821b68b5f2e9c06b3592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e207267bd20d5b1349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47b19b56"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 21:59:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa506f52ccbdb3080046000018000000000002"], 0x0) 21:59:35 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 21:59:35 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 696.338325][ C0] sd 0:0:1:0: [sg0] tag#7525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 696.348928][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB: Test Unit Ready [ 696.355540][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.365404][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.375279][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.385167][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.394990][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.405103][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.414944][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.424886][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.434727][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.444553][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.454403][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.464772][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.474596][ C0] sd 0:0:1:0: [sg0] tag#7525 CDB[c0]: 00 00 00 00 00 00 00 00 21:59:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) dup(0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) [ 696.825799][ C1] sd 0:0:1:0: [sg0] tag#7523 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 696.836424][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB: Test Unit Ready [ 696.843134][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.852956][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.862772][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:59:35 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 696.872581][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.882396][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.892209][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.902019][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.911871][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.921679][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.931537][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.941412][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.951278][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.961112][ C1] sd 0:0:1:0: [sg0] tag#7523 CDB[c0]: 00 00 00 00 00 00 00 00 [ 696.968983][ C1] sd 0:0:1:0: [sg0] tag#7524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 696.979630][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB: Test Unit Ready [ 696.986234][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.996087][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.005935][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.015757][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.025632][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.035514][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.045368][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.055226][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.065073][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.074937][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.084794][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.094653][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.104513][ C1] sd 0:0:1:0: [sg0] tag#7524 CDB[c0]: 00 00 00 00 00 00 00 00 21:59:35 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 697.311290][ C0] sd 0:0:1:0: [sg0] tag#7526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 697.321895][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB: Test Unit Ready [ 697.328610][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.338409][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.348225][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.357964][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.367746][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.377545][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.387845][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.397625][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:59:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa506f52ccbdb3080046000018000000000002"], 0x0) [ 697.408791][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.418690][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.428493][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.438282][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.448004][ C0] sd 0:0:1:0: [sg0] tag#7526 CDB[c0]: 00 00 00 00 00 00 00 00 [ 697.521118][ C0] sd 0:0:1:0: [sg0] tag#7527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 697.531747][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB: Test Unit Ready [ 697.538501][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.548309][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.558042][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.567887][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.577722][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.587520][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.597365][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.607243][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.615377][ C1] not chained 90000 origins [ 697.617044][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.621362][ C1] CPU: 1 PID: 10957 Comm: kworker/u4:1 Not tainted 5.7.0-rc4-syzkaller #0 [ 697.621370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.621391][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 697.621399][ C1] Call Trace: [ 697.621464][ C1] [ 697.631118][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.639472][ C1] dump_stack+0x1c9/0x220 [ 697.639497][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 697.639512][ C1] ? inet_twsk_alloc+0xab6/0xba0 [ 697.639584][ C1] ? tcp_time_wait+0xcd/0x10b0 [ 697.649835][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.655374][ C1] ? tcp_fin+0x1f9/0x890 [ 697.658764][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 697.661520][ C1] ? tcp_data_queue+0x24ce/0x9c40 [ 697.671159][ C0] sd 0:0:1:0: [sg0] tag#7527 CDB[c0]: 00 00 00 00 00 00 00 00 [ 697.675394][ C1] ? tcp_rcv_state_process+0x5ba3/0x71c0 [ 697.732023][ C1] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 697.736769][ C1] ? tcp_v4_rcv+0x4c77/0x5040 [ 697.741520][ C1] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 697.747139][ C1] ? ip_local_deliver+0x62a/0x7c0 [ 697.752148][ C1] ? ip_rcv+0x6cf/0x750 [ 697.756290][ C1] ? process_backlog+0xf0b/0x1410 [ 697.761300][ C1] ? net_rx_action+0x786/0x1aa0 [ 697.766134][ C1] ? __do_softirq+0x311/0x83d [ 697.770798][ C1] ? do_softirq_own_stack+0x49/0x80 [ 697.776070][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 697.781960][ C1] ? ip_finish_output2+0x2115/0x2610 [ 697.787401][ C1] ? __ip_finish_output+0xaa7/0xd80 [ 697.792584][ C1] ? ip_finish_output+0x166/0x410 [ 697.797599][ C1] ? ip_output+0x593/0x680 [ 697.802020][ C1] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 697.807116][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 697.811691][ C1] ? __tcp_transmit_skb+0x4221/0x6090 [ 697.817048][ C1] ? tcp_write_xmit+0x30e1/0xb470 [ 697.822057][ C1] ? __tcp_push_pending_frames+0x124/0x4e0 [ 697.827847][ C1] ? tcp_send_fin+0x131e/0x1570 [ 697.832685][ C1] ? tcp_shutdown+0x188/0x200 [ 697.837367][ C1] ? inet_shutdown+0x342/0x5e0 [ 697.842116][ C1] ? kernel_sock_shutdown+0x9d/0xc0 [ 697.847301][ C1] ? rds_tcp_accept_one+0xe17/0x1060 [ 697.852573][ C1] ? rds_tcp_accept_worker+0x61/0x160 [ 697.858796][ C1] ? process_one_work+0x1555/0x1f40 [ 697.863990][ C1] ? worker_thread+0xef6/0x2450 [ 697.868825][ C1] ? kthread+0x4b5/0x4f0 [ 697.873052][ C1] ? ret_from_fork+0x35/0x40 [ 697.877642][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 697.882824][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 697.888615][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 697.894670][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 697.899851][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 697.905644][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 697.911783][ C1] ? __msan_get_context_state+0x9/0x20 [ 697.917227][ C1] ? __module_get+0x19/0x230 [ 697.921803][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 697.926986][ C1] __msan_chain_origin+0x50/0x90 [ 697.931910][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 697.937099][ C1] tcp_time_wait+0xaca/0x10b0 [ 697.941770][ C1] tcp_fin+0x1f9/0x890 [ 697.945832][ C1] tcp_data_queue+0x24ce/0x9c40 [ 697.950672][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 697.956568][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 697.962633][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 697.968097][ C1] ? apic_timer_interrupt+0xa/0x40 [ 697.973206][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 697.978392][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 697.982974][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 697.987465][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 697.993533][ C1] ? tcp_v4_rcv+0x1511/0x5040 [ 697.998204][ C1] ? tcp_filter+0xf0/0xf0 [ 698.002556][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.008018][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.012877][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 698.017885][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 698.023503][ C1] ip_rcv+0x6cf/0x750 [ 698.027476][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 698.032240][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 698.037857][ C1] process_backlog+0xf0b/0x1410 [ 698.042717][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 698.048341][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 698.053608][ C1] net_rx_action+0x786/0x1aa0 [ 698.058282][ C1] ? net_tx_action+0xc30/0xc30 [ 698.063031][ C1] __do_softirq+0x311/0x83d [ 698.067527][ C1] do_softirq_own_stack+0x49/0x80 [ 698.072529][ C1] [ 698.075473][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 698.080675][ C1] local_bh_enable+0x36/0x40 [ 698.086118][ C1] ip_finish_output2+0x2115/0x2610 [ 698.091216][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 698.096935][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 698.102914][ C1] __ip_finish_output+0xaa7/0xd80 [ 698.107932][ C1] ip_finish_output+0x166/0x410 [ 698.112772][ C1] ip_output+0x593/0x680 [ 698.117009][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 698.122290][ C1] ? ip_finish_output+0x410/0x410 [ 698.127313][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 698.132239][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 698.137767][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 698.142958][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 698.148152][ C1] ip_queue_xmit+0xcc/0xf0 [ 698.152563][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 698.158091][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 698.163296][ C1] tcp_write_xmit+0x30e1/0xb470 [ 698.168180][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 698.173804][ C1] tcp_send_fin+0x131e/0x1570 [ 698.178491][ C1] tcp_shutdown+0x188/0x200 [ 698.182986][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 698.187833][ C1] inet_shutdown+0x342/0x5e0 [ 698.192414][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 698.197078][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 698.202094][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 698.207196][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 698.212392][ C1] rds_tcp_accept_worker+0x61/0x160 [ 698.217576][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 698.222582][ C1] process_one_work+0x1555/0x1f40 [ 698.227603][ C1] worker_thread+0xef6/0x2450 [ 698.232267][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 698.238056][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 698.243248][ C1] kthread+0x4b5/0x4f0 [ 698.247302][ C1] ? process_one_work+0x1f40/0x1f40 [ 698.252491][ C1] ? kthread_blkcg+0xf0/0xf0 [ 698.257069][ C1] ret_from_fork+0x35/0x40 [ 698.261498][ C1] Uninit was stored to memory at: [ 698.266525][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.272229][ C1] __msan_chain_origin+0x50/0x90 [ 698.277158][ C1] inet_twsk_alloc+0xab6/0xba0 [ 698.281907][ C1] tcp_time_wait+0xcd/0x10b0 [ 698.286482][ C1] tcp_fin+0x1f9/0x890 [ 698.290534][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.295384][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.300852][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.305424][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.309916][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.315353][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.320190][ C1] ip_rcv+0x6cf/0x750 [ 698.324155][ C1] process_backlog+0xf0b/0x1410 [ 698.328987][ C1] net_rx_action+0x786/0x1aa0 [ 698.333659][ C1] __do_softirq+0x311/0x83d [ 698.338140][ C1] [ 698.340451][ C1] Uninit was stored to memory at: [ 698.345458][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.351160][ C1] __msan_chain_origin+0x50/0x90 [ 698.356081][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 698.361261][ C1] tcp_time_wait+0xaca/0x10b0 [ 698.365935][ C1] tcp_fin+0x1f9/0x890 [ 698.369989][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.374825][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.380265][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.384839][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.389324][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.394762][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.399594][ C1] ip_rcv+0x6cf/0x750 [ 698.403558][ C1] process_backlog+0xf0b/0x1410 [ 698.408391][ C1] net_rx_action+0x786/0x1aa0 [ 698.413062][ C1] __do_softirq+0x311/0x83d [ 698.417545][ C1] [ 698.419864][ C1] Uninit was stored to memory at: [ 698.424885][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.430592][ C1] __msan_chain_origin+0x50/0x90 [ 698.435520][ C1] tcp_time_wait+0xb7e/0x10b0 [ 698.440187][ C1] tcp_fin+0x1f9/0x890 [ 698.444247][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.449091][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.454559][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.459136][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.463623][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.469066][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.473896][ C1] ip_rcv+0x6cf/0x750 [ 698.477862][ C1] process_backlog+0xf0b/0x1410 [ 698.482710][ C1] net_rx_action+0x786/0x1aa0 [ 698.487386][ C1] __do_softirq+0x311/0x83d [ 698.491864][ C1] [ 698.494191][ C1] Uninit was stored to memory at: [ 698.499219][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.506054][ C1] __msan_chain_origin+0x50/0x90 [ 698.510979][ C1] inet_twsk_alloc+0xab6/0xba0 [ 698.515725][ C1] tcp_time_wait+0xcd/0x10b0 [ 698.520299][ C1] tcp_fin+0x1f9/0x890 [ 698.524351][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.529194][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.534635][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.539208][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.543698][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.549140][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.553993][ C1] ip_rcv+0x6cf/0x750 [ 698.557966][ C1] process_backlog+0xf0b/0x1410 [ 698.562933][ C1] net_rx_action+0x786/0x1aa0 [ 698.567706][ C1] __do_softirq+0x311/0x83d [ 698.572202][ C1] [ 698.574516][ C1] Uninit was stored to memory at: [ 698.579533][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.585243][ C1] __msan_chain_origin+0x50/0x90 [ 698.590178][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 698.595369][ C1] tcp_time_wait+0xaca/0x10b0 [ 698.600031][ C1] tcp_fin+0x1f9/0x890 [ 698.604083][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.608924][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.614371][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.618951][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.623439][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.628884][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.633718][ C1] ip_rcv+0x6cf/0x750 [ 698.637684][ C1] process_backlog+0xf0b/0x1410 [ 698.642514][ C1] net_rx_action+0x786/0x1aa0 [ 698.647171][ C1] __do_softirq+0x311/0x83d [ 698.651654][ C1] [ 698.653963][ C1] Uninit was stored to memory at: [ 698.658970][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.664670][ C1] __msan_chain_origin+0x50/0x90 [ 698.669589][ C1] tcp_time_wait+0xb7e/0x10b0 [ 698.674359][ C1] tcp_fin+0x1f9/0x890 [ 698.678412][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.683249][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.688690][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.693264][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.697751][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.703209][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.708039][ C1] ip_rcv+0x6cf/0x750 [ 698.712004][ C1] process_backlog+0xf0b/0x1410 [ 698.716835][ C1] net_rx_action+0x786/0x1aa0 [ 698.721493][ C1] __do_softirq+0x311/0x83d [ 698.725969][ C1] [ 698.728278][ C1] Uninit was stored to memory at: [ 698.733289][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 698.738992][ C1] __msan_chain_origin+0x50/0x90 [ 698.743913][ C1] inet_twsk_alloc+0xab6/0xba0 [ 698.748673][ C1] tcp_time_wait+0xcd/0x10b0 [ 698.753254][ C1] tcp_fin+0x1f9/0x890 [ 698.757313][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.762151][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 [ 698.767624][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.772206][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.776702][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.782148][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.786995][ C1] ip_rcv+0x6cf/0x750 [ 698.790977][ C1] process_backlog+0xf0b/0x1410 [ 698.795810][ C1] net_rx_action+0x786/0x1aa0 [ 698.800475][ C1] __do_softirq+0x311/0x83d [ 698.804955][ C1] [ 698.807263][ C1] Uninit was created at: [ 698.811506][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 698.817165][ C1] kmsan_alloc_page+0xb9/0x180 [ 698.821912][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 698.827441][ C1] alloc_pages_current+0x67d/0x990 [ 698.832537][ C1] alloc_slab_page+0x122/0x1310 [ 698.837371][ C1] new_slab+0x2bc/0x1130 [ 698.841596][ C1] ___slab_alloc+0x14a3/0x2040 [ 698.846363][ C1] kmem_cache_alloc+0xb23/0xd70 [ 698.851200][ C1] inet_twsk_alloc+0x135/0xba0 [ 698.855952][ C1] tcp_time_wait+0xcd/0x10b0 [ 698.860524][ C1] tcp_fin+0x1f9/0x890 [ 698.864588][ C1] tcp_data_queue+0x24ce/0x9c40 [ 698.869423][ C1] tcp_rcv_state_process+0x5ba3/0x71c0 21:59:37 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 698.874863][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 698.879435][ C1] tcp_v4_rcv+0x4c77/0x5040 [ 698.883922][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 698.889363][ C1] ip_local_deliver+0x62a/0x7c0 [ 698.894198][ C1] ip_rcv+0x6cf/0x750 [ 698.898173][ C1] process_backlog+0xf0b/0x1410 [ 698.903005][ C1] net_rx_action+0x786/0x1aa0 [ 698.907764][ C1] __do_softirq+0x311/0x83d 21:59:37 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 699.586043][ C0] sd 0:0:1:0: [sg0] tag#7529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 699.596725][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB: Test Unit Ready [ 699.603537][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.613460][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.623359][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.633259][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.643150][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.653069][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.662984][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.672895][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.682815][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.692747][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.702682][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.712602][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.722516][ C0] sd 0:0:1:0: [sg0] tag#7529 CDB[c0]: 00 00 00 00 00 00 00 00 [ 699.730491][ C0] sd 0:0:1:0: [sg0] tag#7530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 699.741183][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB: Test Unit Ready [ 699.747957][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.757873][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.767815][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.777742][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.787619][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.797495][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.807351][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.817224][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.827182][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.837485][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.847356][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.857224][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.867076][ C0] sd 0:0:1:0: [sg0] tag#7530 CDB[c0]: 00 00 00 00 00 00 00 00 21:59:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 21:59:39 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 21:59:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 21:59:39 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=""/16, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 21:59:39 executing program 4: r0 = socket(0x10, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200006f94007134cf6efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) 21:59:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) dup(0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) [ 700.774563][ C0] sd 0:0:1:0: [sg0] tag#7531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 700.785176][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB: Test Unit Ready [ 700.792000][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.802250][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.812107][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.822131][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.832056][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.838880][ C1] sd 0:0:1:0: [sg0] tag#7532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 700.841938][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.852406][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB: Test Unit Ready [ 700.864031][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.870697][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.880369][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.890134][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.899748][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.909459][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.919128][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.928804][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.938567][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.948254][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.958558][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.968241][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 700.977823][ C0] sd 0:0:1:0: [sg0] tag#7531 CDB[c0]: 00 00 00 00 00 00 00 00 [ 700.987501][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.005495][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.015456][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.025284][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.035111][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.044948][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.054855][ C1] sd 0:0:1:0: [sg0] tag#7532 CDB[c0]: 00 00 00 00 00 00 00 00 [ 701.067670][T21183] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 701.144298][T21183] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. 21:59:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r3 = epoll_create(0x1) dup3(r3, r0, 0x0) 21:59:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a66b7925"}, 0x0, 0x0, @userptr}) 21:59:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x25, 0x80, 0x0, 'queue1\x00'}) 21:59:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r3 = epoll_create(0x1) dup3(r3, r0, 0x0) 21:59:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a66b7925"}, 0x0, 0x0, @userptr}) 21:59:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f00000006c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x64}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:59:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 21:59:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:59:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a66b7925"}, 0x0, 0x0, @userptr}) 21:59:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r3 = epoll_create(0x1) dup3(r3, r0, 0x0) 21:59:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) dup(0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) 21:59:42 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}}, 0x0) [ 703.571680][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:59:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a66b7925"}, 0x0, 0x0, @userptr}) [ 703.698511][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:59:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r3 = epoll_create(0x1) dup3(r3, r0, 0x0) 21:59:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000040)) 21:59:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) 21:59:43 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGFLAGS(r2, 0x80487436, 0x0) 21:59:43 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000ec000200a000548014000380050001000100000008000200000000004c0002800800010000000000080001000900000008000100c800000008000100050003000800010000feffff08000100050000000800010004000000080001000700000008000100018000003c0003800800020009000000000100000000000005000400020000000500040002000000050001000500000005000300060000000800020036000000480055"], 0x11c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 705.290805][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.329726][T21261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.411413][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.437307][T21270] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 21:59:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 21:59:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0xea}], 0x1) 21:59:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) dup(0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) 21:59:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4092, 0xffc}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 21:59:45 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) flock(r0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) flock(r0, 0x2) dup3(r2, r1, 0x0) [ 707.520120][T21223] IPVS: ftp: loaded support on port[0] = 21 [ 707.520449][T21230] IPVS: ftp: loaded support on port[0] = 21 21:59:48 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='G\x00\x00\x00%\x00\''], 0x24}, 0x1, 0x1400}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:59:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) 21:59:48 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0x3d}) 21:59:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0xea}], 0x1) 21:59:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) clone3(&(0x7f00000005c0)={0x14078800, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x4}, &(0x7f0000000380)=""/175, 0xaf, &(0x7f0000000440)=""/253, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x50) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x6) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000000)=0xfaa5, 0x4) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x7) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@local}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) [ 710.029784][T21303] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 710.043567][T21312] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.2'. 21:59:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3d8027f4e32f61bcdf1e422000000000100804824cabecc4b289277eb14cd2e688e41a1bbe35da95aaa000000c600000000000000feff2c707f8f00ff0000000000", 0x58}], 0x1) 21:59:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) dup3(r0, r1, 0x0) 21:59:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0xea}], 0x1) 21:59:49 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) flock(r0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) flock(r0, 0x2) dup3(r2, r1, 0x0) 21:59:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3d8027f4e32f61bcdf1e422000000000100804824cabecc4b289277eb14cd2e688e41a1bbe35da95aaa000000c600000000000000feff2c707f8f00ff0000000000", 0x58}], 0x1) 21:59:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0xea}], 0x1) 21:59:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3d8027f4e32f61bcdf1e422000000000100804824cabecc4b289277eb14cd2e688e41a1bbe35da95aaa000000c600000000000000feff2c707f8f00ff0000000000", 0x58}], 0x1) 21:59:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x4c}}, 0x0) 21:59:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) dup3(r0, r1, 0x0) 21:59:49 executing program 0: io_setup(0x2, &(0x7f0000000180)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000001740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0xd5, 0x0, 0x1, r3}]) 21:59:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x188, 0x188, 0x0, 0x188, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x120, 0x188, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'bridge_slave_1\x00', {}, 'ip6erspan0\x00', {}, 0x4, 0x17}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'hsr0\x00', 'geneve1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 21:59:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3d8027f4e32f61bcdf1e422000000000100804824cabecc4b289277eb14cd2e688e41a1bbe35da95aaa000000c600000000000000feff2c707f8f00ff0000000000", 0x58}], 0x1) [ 711.214054][T21336] xt_CT: No such helper "pptp" 21:59:50 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='trustedvboxnet0mime_typevboxnet1\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r2, 0x0) 21:59:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() io_setup(0x6d29, &(0x7f0000000040)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 711.300570][T21347] xt_CT: No such helper "pptp" 21:59:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) dup3(r0, r1, 0x0) 21:59:51 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) flock(r0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) flock(r0, 0x2) dup3(r2, r1, 0x0) 21:59:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 21:59:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @enter_looper], 0x1, 0xfeffff, &(0x7f00000001c0)="fc"}) 21:59:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet(0x2, 0x0, 0xa386) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x619, 0x2, 0x209, 0x4, 0x0, 0x5, 0xa82a, 0x86e}, &(0x7f00000001c0)=0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 21:59:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) dup3(r0, r1, 0x0) 21:59:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() io_setup(0x6d29, &(0x7f0000000040)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 21:59:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @enter_looper], 0x1, 0xfeffff, &(0x7f00000001c0)="fc"}) 21:59:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 21:59:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) sched_setattr(0x0, &(0x7f0000000000)={0x38}, 0x0) 21:59:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 21:59:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @enter_looper], 0x1, 0xfeffff, &(0x7f00000001c0)="fc"}) 21:59:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet(0x2, 0x0, 0xa386) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x619, 0x2, 0x209, 0x4, 0x0, 0x5, 0xa82a, 0x86e}, &(0x7f00000001c0)=0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) [ 713.618203][ C1] not chained 100000 origins [ 713.622890][ C1] CPU: 1 PID: 13162 Comm: kworker/u4:6 Not tainted 5.7.0-rc4-syzkaller #0 [ 713.631380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.641445][ C1] Workqueue: krdsd rds_connect_worker [ 713.646813][ C1] Call Trace: [ 713.650098][ C1] [ 713.652954][ C1] dump_stack+0x1c9/0x220 [ 713.657294][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 713.663015][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 713.669079][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 713.674019][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.679223][ C1] ? __should_failslab+0x1f6/0x290 [ 713.684329][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 713.689434][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 713.695239][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 713.701391][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 713.706692][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.711893][ C1] __msan_chain_origin+0x50/0x90 [ 713.716828][ C1] tcp_conn_request+0x13ce/0x4d10 [ 713.721857][ C1] ? hrtimer_active+0x309/0x330 [ 713.726722][ C1] ? run_posix_cpu_timers+0x3ae/0x1e40 [ 713.732166][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 713.737264][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 713.743055][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.748244][ C1] tcp_v4_conn_request+0x19b/0x240 [ 713.753348][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 713.758360][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 713.763628][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 713.770459][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 713.776249][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.781431][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 713.787224][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 713.793314][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.798505][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 713.803089][ C1] tcp_v4_rcv+0x425c/0x5040 [ 713.807598][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 713.813696][ C1] ? tcp_filter+0xf0/0xf0 [ 713.818033][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 713.823503][ C1] ip_local_deliver+0x62a/0x7c0 [ 713.828350][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 713.833376][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 713.839001][ C1] ip_rcv+0x6cf/0x750 [ 713.842974][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 713.847725][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 713.853358][ C1] process_backlog+0xf0b/0x1410 [ 713.858202][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 713.863826][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 713.869093][ C1] net_rx_action+0x786/0x1aa0 [ 713.873787][ C1] ? net_tx_action+0xc30/0xc30 [ 713.878552][ C1] __do_softirq+0x311/0x83d [ 713.883061][ C1] do_softirq_own_stack+0x49/0x80 [ 713.888079][ C1] [ 713.891028][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 713.896226][ C1] local_bh_enable+0x36/0x40 [ 713.901012][ C1] ip_finish_output2+0x2115/0x2610 [ 713.906110][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 713.911815][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 713.917794][ C1] __ip_finish_output+0xaa7/0xd80 [ 713.922813][ C1] ip_finish_output+0x166/0x410 [ 713.927670][ C1] ip_output+0x593/0x680 [ 713.931906][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 713.937175][ C1] ? ip_finish_output+0x410/0x410 [ 713.942199][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 713.947126][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 713.952672][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.957865][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.963054][ C1] ip_queue_xmit+0xcc/0xf0 [ 713.967458][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 713.972469][ C1] __tcp_transmit_skb+0x4221/0x6090 [ 713.977659][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 713.982853][ C1] tcp_connect+0x420a/0x6830 [ 713.987434][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 713.992725][ C1] tcp_v4_connect+0x21fd/0x2370 [ 713.997579][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 714.002505][ C1] __inet_stream_connect+0x2fb/0x1340 [ 714.007881][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 714.013170][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 714.018366][ C1] inet_stream_connect+0x101/0x180 [ 714.023477][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 714.029098][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 714.034738][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 714.039927][ C1] ? rds_tcp_state_change+0x390/0x390 [ 714.045283][ C1] rds_connect_worker+0x2a6/0x470 [ 714.050294][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 714.056348][ C1] ? rds_addr_cmp+0x200/0x200 [ 714.061010][ C1] process_one_work+0x1555/0x1f40 [ 714.066032][ C1] worker_thread+0xef6/0x2450 [ 714.070714][ C1] kthread+0x4b5/0x4f0 [ 714.074768][ C1] ? process_one_work+0x1f40/0x1f40 [ 714.079956][ C1] ? kthread_blkcg+0xf0/0xf0 [ 714.084535][ C1] ret_from_fork+0x35/0x40 [ 714.088937][ C1] Uninit was stored to memory at: [ 714.093948][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.099753][ C1] __msan_chain_origin+0x50/0x90 [ 714.104674][ C1] tcp_conn_request+0x1781/0x4d10 [ 714.109686][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.114786][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.119800][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.125240][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.129827][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.134313][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.139752][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.144597][ C1] ip_rcv+0x6cf/0x750 [ 714.148562][ C1] process_backlog+0xf0b/0x1410 [ 714.153495][ C1] net_rx_action+0x786/0x1aa0 [ 714.158156][ C1] __do_softirq+0x311/0x83d [ 714.162634][ C1] [ 714.164943][ C1] Uninit was stored to memory at: [ 714.169952][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.175656][ C1] __msan_chain_origin+0x50/0x90 [ 714.180577][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 714.185861][ C1] tcp_conn_request+0x33d7/0x4d10 [ 714.190891][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.196074][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.201084][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.206458][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.211044][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.215535][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.220982][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.225833][ C1] ip_rcv+0x6cf/0x750 [ 714.229803][ C1] process_backlog+0xf0b/0x1410 [ 714.234640][ C1] net_rx_action+0x786/0x1aa0 [ 714.239302][ C1] __do_softirq+0x311/0x83d [ 714.243804][ C1] [ 714.246118][ C1] Uninit was stored to memory at: [ 714.251572][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.257649][ C1] __msan_chain_origin+0x50/0x90 [ 714.262573][ C1] tcp_conn_request+0x1781/0x4d10 [ 714.267580][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.272676][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.277686][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.283822][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.288394][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.292881][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.298328][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.303178][ C1] ip_rcv+0x6cf/0x750 [ 714.307142][ C1] process_backlog+0xf0b/0x1410 [ 714.311976][ C1] net_rx_action+0x786/0x1aa0 [ 714.316634][ C1] __do_softirq+0x311/0x83d [ 714.321114][ C1] [ 714.323511][ C1] Uninit was stored to memory at: [ 714.328543][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.334248][ C1] __msan_chain_origin+0x50/0x90 [ 714.339171][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 714.344438][ C1] tcp_conn_request+0x33d7/0x4d10 [ 714.349447][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.354541][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.359547][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.365422][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.369995][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.374480][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.379923][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.384761][ C1] ip_rcv+0x6cf/0x750 [ 714.388732][ C1] process_backlog+0xf0b/0x1410 [ 714.393565][ C1] net_rx_action+0x786/0x1aa0 [ 714.398238][ C1] __do_softirq+0x311/0x83d [ 714.402732][ C1] [ 714.405041][ C1] Uninit was stored to memory at: [ 714.410062][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.415784][ C1] __msan_chain_origin+0x50/0x90 [ 714.420892][ C1] tcp_conn_request+0x1781/0x4d10 [ 714.425903][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.431003][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.436028][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.441405][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.445981][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.450488][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.455929][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.460791][ C1] ip_rcv+0x6cf/0x750 [ 714.464773][ C1] process_backlog+0xf0b/0x1410 [ 714.469620][ C1] net_rx_action+0x786/0x1aa0 [ 714.474288][ C1] __do_softirq+0x311/0x83d [ 714.478766][ C1] [ 714.481077][ C1] Uninit was stored to memory at: [ 714.486088][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.491807][ C1] __msan_chain_origin+0x50/0x90 [ 714.497177][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 714.502450][ C1] tcp_conn_request+0x33d7/0x4d10 [ 714.507474][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.512570][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.517579][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.522957][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.527544][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.532037][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.537616][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.542474][ C1] ip_rcv+0x6cf/0x750 [ 714.546443][ C1] process_backlog+0xf0b/0x1410 [ 714.551279][ C1] net_rx_action+0x786/0x1aa0 [ 714.555963][ C1] __do_softirq+0x311/0x83d [ 714.560457][ C1] [ 714.562767][ C1] Uninit was stored to memory at: [ 714.567782][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 714.573579][ C1] __msan_chain_origin+0x50/0x90 [ 714.578510][ C1] tcp_conn_request+0x1781/0x4d10 [ 714.583518][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.588631][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 714.593646][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.599004][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.603584][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.608076][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.613551][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.618390][ C1] ip_rcv+0x6cf/0x750 [ 714.622358][ C1] process_backlog+0xf0b/0x1410 [ 714.627191][ C1] net_rx_action+0x786/0x1aa0 [ 714.631855][ C1] __do_softirq+0x311/0x83d [ 714.636359][ C1] [ 714.638671][ C1] Uninit was created at: [ 714.642902][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 714.648514][ C1] kmsan_alloc_page+0xb9/0x180 [ 714.653263][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 714.658792][ C1] alloc_pages_current+0x67d/0x990 [ 714.663888][ C1] alloc_slab_page+0x122/0x1310 [ 714.668722][ C1] new_slab+0x2bc/0x1130 [ 714.672949][ C1] ___slab_alloc+0x14a3/0x2040 [ 714.677696][ C1] kmem_cache_alloc+0xb23/0xd70 [ 714.682532][ C1] inet_reqsk_alloc+0xac/0x830 [ 714.687279][ C1] tcp_conn_request+0x753/0x4d10 [ 714.692200][ C1] tcp_v4_conn_request+0x19b/0x240 [ 714.697296][ C1] tcp_rcv_state_process+0x26b/0x71c0 [ 714.702652][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 714.707221][ C1] tcp_v4_rcv+0x425c/0x5040 [ 714.711714][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 714.717156][ C1] ip_local_deliver+0x62a/0x7c0 [ 714.730334][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 714.735802][ C1] ip_list_rcv+0x8eb/0x950 [ 714.740209][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 714.746346][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 714.752571][ C1] napi_complete_done+0x2ef/0xb60 [ 714.757579][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 714.762934][ C1] virtnet_poll+0x1468/0x19f0 [ 714.767592][ C1] net_rx_action+0x786/0x1aa0 [ 714.772252][ C1] __do_softirq+0x311/0x83d 21:59:54 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) flock(r0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) flock(r0, 0x2) dup3(r2, r1, 0x0) 21:59:54 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x29bab387756084c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x8000000000cf, &(0x7f0000000440), 0x4) 21:59:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @enter_looper], 0x1, 0xfeffff, &(0x7f00000001c0)="fc"}) 21:59:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 21:59:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet(0x2, 0x0, 0xa386) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x619, 0x2, 0x209, 0x4, 0x0, 0x5, 0xa82a, 0x86e}, &(0x7f00000001c0)=0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 21:59:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() io_setup(0x6d29, &(0x7f0000000040)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 21:59:54 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1) 21:59:54 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x29bab387756084c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x8000000000cf, &(0x7f0000000440), 0x4) 21:59:54 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 21:59:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet(0x2, 0x0, 0xa386) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x619, 0x2, 0x209, 0x4, 0x0, 0x5, 0xa82a, 0x86e}, &(0x7f00000001c0)=0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 21:59:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140), 0x2cc, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x14}, 0x14}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 21:59:55 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x29bab387756084c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x8000000000cf, &(0x7f0000000440), 0x4) 21:59:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() io_setup(0x6d29, &(0x7f0000000040)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 21:59:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x88}}, 0x0) 21:59:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="0a4ff61e35428ccd524131325efb2a3064856ad9056d9ac6bc0bcd980ce99f039c00761ab371a71d9e5ed44f80006291eb454d6d720d74b812c2e05f668f8fd92b04602292c3e4f50e3b0b4bbb0daaff7cc809d03492133a77bf49f2497cb8410f316291518ddc3329acf406b7a8596f5adb89c4e8c024f3557b03f683b3e28eee6c20cf8a3a00e80b7f946df70ffef192eb0b8e9dedef706a02b1f2bac8378311eeb109306c279ac1bff9d74c7efd17fa003d166861a073e1881831d9580a7b66077aad5eff6b05"}) 21:59:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0xfc, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000002, 0x9}, 0x1c0e, 0x0, 0x0, 0x4, 0x4, 0xfffffffd}, 0x0, 0xfffffffb, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000003c0)=0x7, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x9, 0x164a, 0xfffffffb}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x803, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4800000010000507000000000000c406000000002029a05bde6d1babbcc000d00e0429ae88c9f70132758f3f6a645634eef97a7e32270a3a3458819a35ebc5149de2a0e06c5daf10eac9dc9e183b97af8114d09a9c41194dffa73ece68b277c81c8f38f0f2e25577b42dd4c53e9c717ae3d3f762f1ac95a5ec201b", @ANYRES32, @ANYBLOB="0a897e5d525600280012000980c329c37c7468939069bb71132d2c1480c5728ddbd5f50070800000a89e588e9792b4396691e06dd49c1afeb77e0cfe87e182d75971fc5364015ed3cffe1b0c0f81f636dc2ce983d4839c19ac099a7d521a424a7ef823f4f5dc93bde2c05f430e582f321b0608bcb6f91a15884085000000000000493d20620c8dd3c80e480518e72fd6f5a2f90afb24a638", @ANYRESDEC=r4, @ANYRES16, @ANYRES16=r4, @ANYBLOB], 0x7}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100002400070500009199e074f59d03f55a27fc004007a2a3000500000002ba5a3b42deebead006dbba7867c448583f673400"/61, @ANYRESHEX=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRES64=r4], 0x3}}, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00'}, &(0x7f0000000380)=0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000011ed260d372d9a68c7aae7000086b7eb", @ANYRES32, @ANYBLOB="000000630000581169d00000f7628173c5d96da82a3f5753fb5adf2a943f67f999a46e61636ab252dae8c799b8032a3a3a61e8fe60007e3e205dac4a5db306c51a46521f8f01749c177321530e5b25b92b64edb133bd7bd807b5bd816272026ac1618a87bd3f9c011f6f82e21233eb927995ed"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) 21:59:57 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x29bab387756084c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x8000000000cf, &(0x7f0000000440), 0x4) 21:59:57 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x4) dup3(r0, r1, 0x0) [ 718.303824][T21436] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 21:59:57 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r1, r0, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) getpid() ioctl$int_in(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)={0xb8, 0x2, 0x1, 0x0, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@nested={0xa2, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32}, @generic="03d06edbedbdff4145657d3c7e1cca13f7f8700298f0482945eed1b34f343d0ac9abf8bf348128362a47ec0c4ca250126a9d638b3fadb823bd4b25b49b284b56eb43a41c863b632dfe6b47f984e06a8617719131f77169973723f434513556d4f9b9ac1bd1c3204ec71509b117c0a5dc19eb7a9abd85b6996998eddc8c2b6a5a9d1816ebb5b4b997b554add502d9c0528b392d56efa1"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 21:59:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/135, 0xeb}], 0x1, 0x0) 21:59:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000040)=""/101) 21:59:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="a7b7c61caafbcded43c0a0b5ac00b9b2f46120db2d29bb138b20a894e3", 0x0}}) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:59:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100003}]}}}]}, 0x40}}, 0x0) 21:59:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 21:59:59 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:59:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:59:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 21:59:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0xc6, 0x4) 21:59:59 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaae9819ed662e6eeb30727eab8b91f00dd60083ff200140200fe"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 21:59:59 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) ioprio_set$pid(0x2, 0x0, 0x0) 21:59:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000002440)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "010159", 0xf98, 0x2f, 0x0, @empty, @loopback, {[], {{}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1d0ed51d30b74ff624ecd4a84320d5d02a6c05db75ce0def458db78dd54b9eb1b45174661543d72471c791de34b7cd8711d3d6ab4da420626bc1c9eb125f01dc43c3cc3496529310d860a1ce872e575a01b0f1723d5b7e52db838878af6a0a489a10c504b35931a26d4be54b20433611f7afd1f055b2ceccb06b552cf321f8df7c1d4cefd434687fb3a4c440d70bc6189cacab34d78d0a5eab74303da9fab770bda65c86a06d3eea8c4d040750e280a08d7bae75c5d442f9336bd4819cd6ff48fb49a4a65c148610acc8fd78df7b671f0ee238259472c50c8d66fdcdb5c3bbb183b5625fb811165bf16833b3e969e9d6834d29414ead4ca0b2819545d0b0ee638684397279f456e477ffc9e146dd3a2b498dafd1cd91fd69c98d3367b78a9b76cce553d768df985d6d2b389cef96bfbc593bbf3f80f2cf8f4a0f42002e0899f6a6cd9647b249f9334645ff7b4c78d8c281169fa2228598a5db859f5f6024f6fefb9ecf13ba34440792102aeae0a31ed945efe6644ad9bc6a2f4347f094c6c77b02e56cd385cab89df8d3c93a7501af44be3a1a0696b0312f59ab0364ff9bf9450c3090727cb63bd0f8d1530c3b10441e5d4724b91e87ab7fd2e9394d224e02c7cb4f502b1a82c21a5f6dc49a93d6d536a4c1aa951bdcdc4ec052ce723b2aa14fd4b1b3f34dcf00576bfe85e5e18ee01f4885b447883cfdae9d6d7dcbb727268fd2a1e3b5d2b89122b3b9753eca7b519deb767e225942615692f23fbe0c9725b9334db8b22e6b53af7236df5577a966146ea02a4c79794dedfb76ac685c6646da44db7d317eeb15420fcac4e84055238d6cf797f55ffcfcb83716113869c9e9f6d15733d059717cbc92af2de38035f4216a007a45e1c8238a95499dff357e54d22bba56fca721fe2e31c1217ca8614dd94fd891b977a52d235fc1bfdb9976def2088b6fb05929c1098ffa798b9356f5faf6fda3cecefb091653804903764558df2f224cd7134f2919cab83559905960f9779c3fa6dde94e7385b499b7bb8bb65153f0b17eca835b8ff38493a57e01423efb80e58b80572daccb9c3b2fdf98fe9dc6a50b55b5c62689fca174cdad37c7b30a8116a98914b2c48e883b1114cac34ce6901ddb37e0520d1f8f6a1f3a73b6339c6b724d24f378e01670039419335ae9cad000e25e8fd53e562f2995d2453dca286e1dcbdfcb8bc7c3a41095982eb8aa11a66a10eab6e173b801f85815a4f532848129006157db454ac516e56d1bacc106bdd8e2257a2590b5cde68d95f53aad0eeafad6ee76b1483e74c24f844258f3a6e520440370d873695e3d0b5472395f08a72d9236f1cf9d8f2e5ad9af8954f098c5105d0313029b267d6b29a6951f9ece158697b0d0b9595c12a9c91f58d462dfe370c571958646474fee0fb86ad0748c6ef7472ffbb2b53af7e9924077474f6e8cf26242bb27257d1fa8763f24b75ce5ea5e29dd6146f97335ef971cb0ff93035bac312b4c2f11315322cee8e900670e912538b7132e1260ed02a649dbc38be44f5fbf1d254ae4de9c56e523f952a36f7e18881e5b3e72abd4fae1bdf8d50f6b0c23ef8470ee3f8138e2da10eacca42090c8c3534b0c7365f8bf04ef3a5e28803d33576cb4064e7c291b8e8ed4301a61310a515c72672106623642f3dcd07f898b1b78c103b8c012025d02a4a8cfc5eb3edb8041ff29108a7a97a7d43e680ab63c788703b2ae614dbc12da0fa4abbff1120bf225279d98e5c47da1a8fb674a5824112eb9aefeeb1b7e8f512b6c32243b709de76a9eb9e508062b8885965dd8fffc1e5071f10542afb4827ce935723d4d115bc05d4bd27ba6c6221fbc9803e77f31c17279077a11b2a98e80f07ca9773043018a1a7abfb5c5cb0ade5a9e3b5458bf10efbb13a32197f39381a78b1abe0bcadbdf174ad1168019cb367e229618487bd4cd4f45e53b1420a2a71984ace09182b5ad0436347dc7bc4af7a5d437b3343d6bffa4a6592c03d017f977a66efa94f28b584be4951dbe7fbe34c2e9bdfaea611468e131b0be5030f8088831a7f8eda757fa444dcb7b642297f6315d52e16b554fc5362272e21182d2ad4bc971ed8bdf3dd9dedef8f82663a27ff6bb66b27ccaf5306c4bb75365cb521397e3a9763453fbffa56af63d5fddce14938460d80a5cb4a0584312224446117ffabff666802d8e5441408e94700a8e32063e260b035d6e5ed460e7f8f911f0c9b4dc37d1fc05c971423361d7245b73aed9c5df885ba008731fa1c10604b4dac3482a13c7c24f0640eb6ec8dd198086d3f9efdb884bfd2c1d9b3e704f3529900b5a367e7b02a7a5b22e953f597004b7be581918b03b3eb4e0f9344865d0ea8b32e1a53c45445a752313d2b9b919057661d53a31534af3b2a87e96c973ba1465e22e148c2d7903ea33c320a35c934a12b5015d4112041097db6a328c4cb447fda8e0fe0273723419a2114396d8dad186c1e8a9f2f12abf37a98ee52d742242f2305326d5c8e3871b51a2d46cbeb69c0d46ef6762330250cbbc025d2b093fbcdf73bc634a4b16e5dcf5a082549d9cdcede6be63caaca2f8b49207efa1db5183e49dd7b2fd181d0e50948571f8ccbd76b399c41c2690f60d348220411e7c55b3ad9f1a0bea1af9f8887312d987ca0c303c605aa60312c4e1a07732f0b078929bfc6f096b2c289aa7be8a686dba171658494da45e1dfdadc41a1eb9a9a6f102ff84a83b019048f33dc8cf5bb9e90e30dac9e5d11cf99404554a3136b6f450adac861eedeff93c1d25d3c9f34fac498d854ae304c42dd5a84dd03978a95bb77c35f22b3aae3dd295babe9c129eaf5409fe3ea27c17b137b1dd34bd496a6f9aa8f1cbfe6856a486e3b617828e2303ebf4e177b4191120c02af8effd825393bdefaea59677966050da594b0f0acdd9902bd7b211d00f45b6a066ab12181364661f6e8939b02f50568cdfd1937100e8c83ff302db583d647ae2133ebcdf3dc45e980f894a7d6d935be3f10dd9ed167f7e5924c740237ae4f476ae99e1b724fbcc101eb0371f500c83405236e1b8c184218220ce03ad30762f86090692eb5066b3280721fe29db30190376365d511a80ca4c75ad5e6e1a8aebe9fcb0e8711cbfeec20b9d1110e4e4bbe40b9535a0ff940dd133807f0dc878453a4a426f08649fe2731e91a5198240307d4dffffceb702ccbc34f44a44525e7911499ab8d05a04803f94301f47b85cf591270147900324899f1f53a13899a9ee7a955f95185797bd005ac3a5c9a63e99c3142bb31d26b026080164a6f4b8a965607235b542971a8ed7297f930fd283b7eaba09bc55afeb3f37a63071e3a2207b15c38960799e740a0a322356012e064801fe65e1904cfc7afaa65579b1e0a095acafae1037191fbe3b399784a46dc6fbd952a439630bc297a8fe056e9aeafcae7bf5e53dd1599dd5a467bda6b5aa48943dd69d8c04e31d2429dca0e61b506b262737f9569f7096d67ef914c869583583e4716fc2c1f8e6cc1eff6bf7b813f7a89d8483c725517826a9cea289eb3af012ecf9d5abdcc27bb53bbc6c35033680edf4986bb9a875a904cc41dd304cd59b51b6da19f671b968355a087a013c414c604bdc5838fe8453d136263e409132d6c6134d5f53e5c5a125434b3dc76af67ce6e7944da35c79de2d5cfb2d9f54328a3f1f1f0e4754f2ec248c16cbfbaac00934951f775227c549943103a498c7872904322d4617837c8969eb81e73d6822ef3040f1fbe835230aec29a03ccc1012307beff7bfb8de11a94b95ed4a6893ea2366618565bc4cc871e1063238b59deb40898e4d88563db921dcc8a74216e41a242ba77c927dc9c942b533b2261e53aeac4f173511e66d1eeef0fa463a38434d4cac327e5226e7bcc5f7ebce368b48c49637fbd3663b88aa73fa4678d150b96169761bf28cc0fb4376a4bd5dbb9611335084632af5bdd32940f57a7a9f4b4bd6c1844d67c28a1231a82b40f81a8ae620fd316ce012f93792922404b6a64c080977111155bc68b785a81544d4f0564aaa26fa33e7941c5b5e459a62504572f1b3ab9c89bad7dfa158722bb9bd3613b307b69b5b966707554b4ee9b484a5dd327175a39a91c35f6f1b3a8ac3ae27b0e4a7bcb3446ba4190ee54912ee8e463085ba7791ed24ac014ff99f817414805a3a16a10e206a41bb6c3807a98836a31b58bd67554c17ad01f4b2c32c0fecfe4445ea6326290d5d23c9c6443d5b892bd8fef44458fec64548008ddc292992cadfa6094826ffd6b7b632a9546ef5f03cd1754473122ce0103895257f1761031e87fb02f5a74cb97e91a419679f805d43d6e77d5978bb5c81952e6a00beef8f4209a4805aa6f5bd298483f9fdc72babf0d29dddc99ab6efa8384aafb83cf2a7409286f81c640be600992b333be3d2b00af38dcb971b929fa03d92046312db3f8192478d056276a2b048980a8dcc3433bf725500680178b4ce658ca91c8410f2c43610083888f1f9e4a82411407dd5017691a7618ea348920f0192ed12a60d1b2d9b6210f996b0fc6b01f33c1d2c9840102b1b444b372e98bd6880b5cc38ad2dce6ba382c19982922e317e7e1cafaef7296766341aa31724f59246d3b26ddd97563cea2e6f334fbd7e2459a9d9721774fa5dc9ca70aaab6493047ea48b5aa02ea6dabcb6cd0160b5364ef1b70247bfa41a02a11f2d9d23de36485ae6ce9b52a67b978493cc71adcd43efb31c5afa042ac78657f12d8d2448e4114148f0e896613738973414c46d1c2a31e2bdaafeb4c4f7faf3f06e385698a7fcdda1d7f8418d461c27de4ffb46885d7466d2fade8c7b8bcc68091153c9392cc37a4136cec54fbda5935232d4e28aad06f71ece213bb73ecc40881a49deae619c2ecd268452c558c03bce5bc28adcaf6b60d88774f7538e1f4f0dac825187db0d5a6667d6eace54c432d1e0a6ce959f12b3ce9e80bc520b01dc19255b2a45f19e4db808e05dd5a80e0e22e85f0fbc3d047890e6a1fc24c8dbf662bf5d57fcbfce1df92b4e8798cf35746bd99114ed1f003c854e13914449fe97230b1a190eb62b01b5e31233bde85fec044656aa8101000e9e242a257e7e7a8bc8ebcb37f316437c9046848dcf096e90a0182c63dcfe16ba96b7e6d9d333ad7d0b4641a57e54bf5761d50c02d24bf2fce997baf1d5294b154540575684632d9a81560b58c81d8bdf6691e96dcf842f4dc3af0710f2bdb0bc7708617ab6215a835dece8c38bc2f8b6af5ac1c97b49c5c45cec2530df488ccf69b1f8355db9e58bd3e9ee612b19416fc4ea63b478e5d6ac546f222501d07418e8339c09a941a9c59ad3585b9cfa2bbcd053af7380891b0a14a217550fee16af8e35dee1d3664f6f9cc630f21fbdcff18a36f3bc29bf2aebeff86f5ac3fdb30a3a25c38e97c4ea7abfa20729d156a0b508bdfb4160afed8059bd8ead473f35a91d6491095d244e9306a85d7ba01448d3c10c01c17cba69a8fbfc3a89b61770ed5502"}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a3e67b39a7b4af4f0bbe95b0933971f65f6bc4d5d9c7d859ad14068b6c"}}}}}}, 0xfca) 21:59:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 21:59:59 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaae9819ed662e6eeb30727eab8b91f00dd60083ff200140200fe"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 21:59:59 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r1, r0, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) getpid() ioctl$int_in(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)={0xb8, 0x2, 0x1, 0x0, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@nested={0xa2, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32}, @generic="03d06edbedbdff4145657d3c7e1cca13f7f8700298f0482945eed1b34f343d0ac9abf8bf348128362a47ec0c4ca250126a9d638b3fadb823bd4b25b49b284b56eb43a41c863b632dfe6b47f984e06a8617719131f77169973723f434513556d4f9b9ac1bd1c3204ec71509b117c0a5dc19eb7a9abd85b6996998eddc8c2b6a5a9d1816ebb5b4b997b554add502d9c0528b392d56efa1"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) [ 720.933387][T21504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:59:59 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaae9819ed662e6eeb30727eab8b91f00dd60083ff200140200fe"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 22:00:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000040)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in6=@remote}, {@in=@dev, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:00:00 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaae9819ed662e6eeb30727eab8b91f00dd60083ff200140200fe"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 721.669590][T21513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:00:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:00:02 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="1eea01e62b16f3d81e7254d7d547f329", 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) close(0xffffffffffffffff) 22:00:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa6f0}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 22:00:02 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000240)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 22:00:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a80140007"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 22:00:02 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r1, r0, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) getpid() ioctl$int_in(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)={0xb8, 0x2, 0x1, 0x0, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@nested={0xa2, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32}, @generic="03d06edbedbdff4145657d3c7e1cca13f7f8700298f0482945eed1b34f343d0ac9abf8bf348128362a47ec0c4ca250126a9d638b3fadb823bd4b25b49b284b56eb43a41c863b632dfe6b47f984e06a8617719131f77169973723f434513556d4f9b9ac1bd1c3204ec71509b117c0a5dc19eb7a9abd85b6996998eddc8c2b6a5a9d1816ebb5b4b997b554add502d9c0528b392d56efa1"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 22:00:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa6f0}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 22:00:02 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 22:00:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa6f0}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 724.281234][T21549] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 724.295895][T21549] CPU: 0 PID: 21549 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 724.304630][T21549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.314734][T21549] Call Trace: [ 724.318091][T21549] dump_stack+0x1c9/0x220 [ 724.322566][T21549] warn_alloc+0x4cc/0x680 [ 724.326953][T21549] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 724.332807][T21549] __alloc_pages_nodemask+0x5aa6/0x5dc0 [ 724.338438][T21549] ? kmsan_set_origin_checked+0x95/0xf0 [ 724.344064][T21549] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 724.350165][T21549] ? cpuset_nodemask_valid_mems_allowed+0x5a/0xc0 [ 724.356644][T21549] alloc_pages_current+0x67d/0x990 [ 724.361803][T21549] ion_page_pool_alloc+0x6db/0x830 [ 724.366948][T21549] ? kmsan_get_metadata+0x11d/0x180 [ 724.372185][T21549] ion_system_heap_allocate+0x45f/0x13f0 [ 724.377878][T21549] ? ion_system_contig_heap_create+0x210/0x210 [ 724.384595][T21549] ion_ioctl+0x79d/0x1fc0 [ 724.388993][T21549] ? debug_shrink_set+0x220/0x220 [ 724.394054][T21549] __se_sys_ioctl+0x2e9/0x410 [ 724.398774][T21549] __x64_sys_ioctl+0x4a/0x70 [ 724.403433][T21549] do_syscall_64+0xb8/0x160 [ 724.407998][T21549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 724.413921][T21549] RIP: 0033:0x45ca29 [ 724.417865][T21549] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 724.437593][T21549] RSP: 002b:00007fda168acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.446058][T21549] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 724.454057][T21549] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 724.462056][T21549] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 724.470068][T21549] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 724.478069][T21549] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fda168ad6d4 [ 724.486574][T21549] Mem-Info: [ 724.489974][T21549] active_anon:123286 inactive_anon:4805 isolated_anon:0 [ 724.489974][T21549] active_file:9156 inactive_file:73019 isolated_file:32 [ 724.489974][T21549] unevictable:1 dirty:67 writeback:0 unstable:0 [ 724.489974][T21549] slab_reclaimable:5763 slab_unreclaimable:24499 [ 724.489974][T21549] mapped:60449 shmem:5020 pagetables:3077 bounce:0 [ 724.489974][T21549] free:206188 free_pcp:0 free_cma:0 [ 724.528554][T21549] Node 0 active_anon:464784kB inactive_anon:19152kB active_file:36728kB inactive_file:289768kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:233868kB dirty:256kB writeback:0kB shmem:19976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 477184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 724.558181][T21549] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.587601][T21549] lowmem_reserve[]: 0 996 1224 1224 [ 724.592968][T21549] Node 0 DMA32 free:43316kB min:42412kB low:53012kB high:63612kB reserved_highatomic:0KB active_anon:448976kB inactive_anon:0kB active_file:4004kB inactive_file:283148kB unevictable:0kB writepending:152kB present:3129332kB managed:1019904kB mlocked:0kB kernel_stack:384kB pagetables:2104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.624935][T21549] lowmem_reserve[]: 0 0 228 228 [ 724.629964][T21549] Node 0 Normal free:23344kB min:24044kB low:26468kB high:28892kB reserved_highatomic:0KB active_anon:15808kB inactive_anon:19152kB active_file:33528kB inactive_file:4436kB unevictable:0kB writepending:104kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:3384kB pagetables:2328kB bounce:0kB free_pcp:348kB local_pcp:0kB free_cma:0kB [ 724.662396][T21549] lowmem_reserve[]: 0 0 0 0 [ 724.666973][T21549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 724.679359][T21549] Node 0 DMA32: 582*4kB (UME) 163*8kB (UME) 66*16kB (UME) 63*32kB (UME) 22*64kB (UME) 15*128kB (UME) 3*256kB (U) 0*512kB 2*1024kB (UM) 1*2048kB (E) 7*4096kB (M) = 43568kB [ 724.696680][T21549] Node 0 Normal: 695*4kB (UME) 416*8kB (UME) 243*16kB (UME) 143*32kB (UME) 64*64kB (UME) 22*128kB (ME) 5*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 23276kB [ 724.713570][T21549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.723339][T21549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 724.732837][T21549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.743712][T21549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 724.753211][T21549] 46735 total pagecache pages [ 724.757931][T21549] 0 pages in swap cache [ 724.762303][T21549] Swap cache stats: add 0, delete 0, find 0/0 [ 724.768522][T21549] Free swap = 0kB [ 724.772276][T21549] Total swap = 0kB [ 724.776036][T21549] 1965979 pages RAM 22:00:03 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) [ 724.780058][T21549] 0 pages HighMem/MovableOnly [ 724.784791][T21549] 1423249 pages reserved [ 724.790267][T21549] 0 pages cma reserved 22:00:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa6f0}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 22:00:04 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) [ 726.406736][ C0] not chained 110000 origins [ 726.411449][ C0] CPU: 0 PID: 721 Comm: kworker/u4:13 Not tainted 5.7.0-rc4-syzkaller #0 [ 726.419838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.429903][ C0] Workqueue: krdsd rds_connect_worker [ 726.435253][ C0] Call Trace: [ 726.438536][ C0] [ 726.441382][ C0] dump_stack+0x1c9/0x220 [ 726.445705][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 726.451426][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 726.457485][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 726.462442][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.467621][ C0] ? __should_failslab+0x1f6/0x290 [ 726.472713][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 726.477804][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 726.483592][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 726.489749][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 726.495037][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.500219][ C0] __msan_chain_origin+0x50/0x90 [ 726.505388][ C0] tcp_conn_request+0x13ce/0x4d10 [ 726.510398][ C0] ? rb_first+0x31/0x100 [ 726.514650][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 726.521236][ C0] ? cache_from_obj+0x3d5/0x6b0 [ 726.526087][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 726.532153][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.537357][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.542566][ C0] tcp_v4_conn_request+0x19b/0x240 [ 726.547684][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 726.552706][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 726.557983][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 726.563350][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 726.569149][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.574344][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 726.580273][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 726.586335][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.591527][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 726.596123][ C0] tcp_v4_rcv+0x425c/0x5040 [ 726.600617][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 726.606716][ C0] ? tcp_filter+0xf0/0xf0 [ 726.611038][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 726.616495][ C0] ip_local_deliver+0x62a/0x7c0 [ 726.621340][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 726.626348][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 726.631965][ C0] ip_rcv+0x6cf/0x750 [ 726.635936][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 726.640685][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 726.646300][ C0] process_backlog+0xf0b/0x1410 [ 726.651143][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 726.656771][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 726.662053][ C0] net_rx_action+0x786/0x1aa0 [ 726.666726][ C0] ? net_tx_action+0xc30/0xc30 [ 726.671482][ C0] __do_softirq+0x311/0x83d [ 726.675980][ C0] do_softirq_own_stack+0x49/0x80 [ 726.680987][ C0] [ 726.683937][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 726.689126][ C0] local_bh_enable+0x36/0x40 [ 726.693703][ C0] ip_finish_output2+0x2115/0x2610 [ 726.698802][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 726.704509][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 726.710490][ C0] __ip_finish_output+0xaa7/0xd80 [ 726.715509][ C0] ip_finish_output+0x166/0x410 [ 726.720349][ C0] ip_output+0x593/0x680 [ 726.724583][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 726.729852][ C0] ? ip_finish_output+0x410/0x410 [ 726.734862][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 726.739791][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 726.745322][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.750598][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.755785][ C0] ip_queue_xmit+0xcc/0xf0 [ 726.760190][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 726.765023][ C0] __tcp_transmit_skb+0x4221/0x6090 [ 726.770214][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.776522][ C0] tcp_connect+0x420a/0x6830 [ 726.781102][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 726.786390][ C0] tcp_v4_connect+0x21fd/0x2370 [ 726.791245][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 726.796168][ C0] __inet_stream_connect+0x2fb/0x1340 [ 726.801530][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 726.806804][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.811993][ C0] inet_stream_connect+0x101/0x180 [ 726.817093][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 726.822729][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 726.828366][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 726.833652][ C0] ? rds_tcp_state_change+0x390/0x390 [ 726.839011][ C0] rds_connect_worker+0x2a6/0x470 [ 726.844027][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 726.850085][ C0] ? rds_addr_cmp+0x200/0x200 [ 726.854750][ C0] process_one_work+0x1555/0x1f40 [ 726.859773][ C0] worker_thread+0xef6/0x2450 [ 726.864452][ C0] kthread+0x4b5/0x4f0 [ 726.868508][ C0] ? process_one_work+0x1f40/0x1f40 [ 726.873696][ C0] ? kthread_blkcg+0xf0/0xf0 [ 726.878277][ C0] ret_from_fork+0x35/0x40 [ 726.882700][ C0] Uninit was stored to memory at: [ 726.887711][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 726.893417][ C0] __msan_chain_origin+0x50/0x90 [ 726.898339][ C0] tcp_conn_request+0x1781/0x4d10 [ 726.903345][ C0] tcp_v4_conn_request+0x19b/0x240 [ 726.908454][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 726.913564][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 726.918918][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 726.923595][ C0] tcp_v4_rcv+0x425c/0x5040 [ 726.928085][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 726.933530][ C0] ip_local_deliver+0x62a/0x7c0 [ 726.938361][ C0] ip_rcv+0x6cf/0x750 [ 726.942326][ C0] process_backlog+0xf0b/0x1410 [ 726.947160][ C0] net_rx_action+0x786/0x1aa0 [ 726.951818][ C0] __do_softirq+0x311/0x83d [ 726.956309][ C0] [ 726.959226][ C0] Uninit was stored to memory at: [ 726.964244][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 726.969948][ C0] __msan_chain_origin+0x50/0x90 [ 726.974868][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 726.980139][ C0] tcp_conn_request+0x33d7/0x4d10 [ 726.985145][ C0] tcp_v4_conn_request+0x19b/0x240 [ 726.990242][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 726.995251][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.000602][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.005172][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.009658][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.015096][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.019929][ C0] ip_rcv+0x6cf/0x750 [ 727.023895][ C0] process_backlog+0xf0b/0x1410 [ 727.028727][ C0] net_rx_action+0x786/0x1aa0 [ 727.033399][ C0] __do_softirq+0x311/0x83d [ 727.037891][ C0] [ 727.040205][ C0] Uninit was stored to memory at: [ 727.045216][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 727.050918][ C0] __msan_chain_origin+0x50/0x90 [ 727.055840][ C0] tcp_conn_request+0x1781/0x4d10 [ 727.060846][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.065943][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 727.070952][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.076308][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.080879][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.085363][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.090804][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.095636][ C0] ip_rcv+0x6cf/0x750 [ 727.099599][ C0] process_backlog+0xf0b/0x1410 [ 727.104448][ C0] net_rx_action+0x786/0x1aa0 [ 727.109107][ C0] __do_softirq+0x311/0x83d [ 727.113584][ C0] [ 727.115894][ C0] Uninit was stored to memory at: [ 727.120906][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 727.126624][ C0] __msan_chain_origin+0x50/0x90 [ 727.131543][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 727.136812][ C0] tcp_conn_request+0x33d7/0x4d10 [ 727.141819][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.146915][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 727.151939][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.157291][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.161880][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.166368][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.171810][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.176729][ C0] ip_rcv+0x6cf/0x750 [ 727.180697][ C0] process_backlog+0xf0b/0x1410 [ 727.185530][ C0] net_rx_action+0x786/0x1aa0 [ 727.190188][ C0] __do_softirq+0x311/0x83d [ 727.194755][ C0] [ 727.197063][ C0] Uninit was stored to memory at: [ 727.202073][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 727.207776][ C0] __msan_chain_origin+0x50/0x90 [ 727.212700][ C0] tcp_conn_request+0x1781/0x4d10 [ 727.217706][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.222801][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 727.227810][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.233181][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.237754][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.242254][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.247708][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.252540][ C0] ip_rcv+0x6cf/0x750 [ 727.256504][ C0] process_backlog+0xf0b/0x1410 [ 727.261341][ C0] net_rx_action+0x786/0x1aa0 [ 727.266015][ C0] __do_softirq+0x311/0x83d [ 727.270492][ C0] [ 727.272801][ C0] Uninit was stored to memory at: [ 727.277900][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 727.283611][ C0] __msan_chain_origin+0x50/0x90 [ 727.288542][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 727.293820][ C0] tcp_conn_request+0x33d7/0x4d10 [ 727.298827][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.303922][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 727.308933][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.314304][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.318878][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.323365][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.328819][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.333651][ C0] ip_rcv+0x6cf/0x750 [ 727.337614][ C0] process_backlog+0xf0b/0x1410 [ 727.342444][ C0] net_rx_action+0x786/0x1aa0 [ 727.347103][ C0] __do_softirq+0x311/0x83d [ 727.351596][ C0] [ 727.353904][ C0] Uninit was stored to memory at: [ 727.358915][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 727.364618][ C0] __msan_chain_origin+0x50/0x90 [ 727.369562][ C0] tcp_conn_request+0x1781/0x4d10 [ 727.374567][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.379665][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 727.384700][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.390068][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.394654][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.399155][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.404612][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.409540][ C0] ip_rcv+0x6cf/0x750 [ 727.413520][ C0] process_backlog+0xf0b/0x1410 [ 727.418357][ C0] net_rx_action+0x786/0x1aa0 [ 727.423048][ C0] __do_softirq+0x311/0x83d [ 727.427544][ C0] [ 727.429853][ C0] Uninit was created at: [ 727.434084][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 727.439699][ C0] kmsan_alloc_page+0xb9/0x180 [ 727.444447][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 727.449997][ C0] alloc_pages_current+0x67d/0x990 [ 727.455095][ C0] alloc_slab_page+0x122/0x1310 [ 727.459933][ C0] new_slab+0x2bc/0x1130 [ 727.464170][ C0] ___slab_alloc+0x14a3/0x2040 [ 727.468918][ C0] kmem_cache_alloc+0xb23/0xd70 [ 727.473759][ C0] inet_reqsk_alloc+0xac/0x830 [ 727.478530][ C0] tcp_conn_request+0x753/0x4d10 [ 727.483452][ C0] tcp_v4_conn_request+0x19b/0x240 [ 727.488637][ C0] tcp_rcv_state_process+0x26b/0x71c0 [ 727.494006][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 727.498600][ C0] tcp_v4_rcv+0x425c/0x5040 [ 727.503694][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 727.509133][ C0] ip_local_deliver+0x62a/0x7c0 [ 727.513966][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 727.518798][ C0] ip_list_rcv+0x8eb/0x950 [ 727.523199][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 727.529438][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 727.535660][ C0] napi_complete_done+0x2ef/0xb60 [ 727.540669][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 727.546022][ C0] virtnet_poll+0x1468/0x19f0 [ 727.550709][ C0] net_rx_action+0x786/0x1aa0 [ 727.555389][ C0] __do_softirq+0x311/0x83d 22:00:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:00:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x7}]}, 0x30}}, 0x0) 22:00:06 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r1, r0, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) getpid() ioctl$int_in(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)={0xb8, 0x2, 0x1, 0x0, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@nested={0xa2, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32}, @generic="03d06edbedbdff4145657d3c7e1cca13f7f8700298f0482945eed1b34f343d0ac9abf8bf348128362a47ec0c4ca250126a9d638b3fadb823bd4b25b49b284b56eb43a41c863b632dfe6b47f984e06a8617719131f77169973723f434513556d4f9b9ac1bd1c3204ec71509b117c0a5dc19eb7a9abd85b6996998eddc8c2b6a5a9d1816ebb5b4b997b554add502d9c0528b392d56efa1"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 22:00:06 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 22:00:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:00:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0xb, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) [ 727.823696][T21590] team0: Port device bridge1 added [ 727.941635][T21597] team0: Port device bridge2 added 22:00:07 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x100a, 0x0}) 22:00:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x9c}, {0x80000006}]}, 0x10) 22:00:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x15, 0xa, 0x101}, 0x14}}, 0x0) 22:00:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181"], 0x58) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x8000000}}}]}, 0x78}}, 0x0) [ 728.553085][ T721] ===================================================== [ 728.560071][ T721] BUG: KMSAN: uninit-value in ___bpf_prog_run+0x8b1b/0x97a0 [ 728.567363][ T721] CPU: 1 PID: 721 Comm: kworker/u4:13 Not tainted 5.7.0-rc4-syzkaller #0 [ 728.575768][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.585932][ T721] Workqueue: krdsd rds_connect_worker [ 728.591302][ T721] Call Trace: [ 728.594860][ T721] dump_stack+0x1c9/0x220 [ 728.599201][ T721] kmsan_report+0xf7/0x1e0 [ 728.603629][ T721] __msan_warning+0x58/0xa0 [ 728.608141][ T721] ___bpf_prog_run+0x8b1b/0x97a0 [ 728.613081][ T721] ? tcp_v4_connect+0x21fd/0x2370 [ 728.618105][ T721] ? __inet_stream_connect+0x2fb/0x1340 [ 728.623660][ T721] ? kmsan_internal_set_origin+0x75/0xb0 [ 728.629300][ T721] ? tcp_connect+0x420a/0x6830 [ 728.634073][ T721] __bpf_prog_run32+0x101/0x170 [ 728.638929][ T721] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 728.644746][ T721] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 728.650899][ T721] ? kmsan_get_metadata+0x4f/0x180 [ 728.656014][ T721] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 728.661822][ T721] ? ___bpf_prog_run+0x97a0/0x97a0 [ 728.666937][ T721] packet_rcv+0x70f/0x2160 [ 728.671357][ T721] ? ktime_get_with_offset+0x336/0x4a0 [ 728.676956][ T721] ? packet_sock_destruct+0x1e0/0x1e0 [ 728.682332][ T721] dev_queue_xmit_nit+0x1199/0x1270 [ 728.687552][ T721] dev_hard_start_xmit+0x20f/0xab0 [ 728.692677][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.697884][ T721] __dev_queue_xmit+0x2f8d/0x3b20 [ 728.703015][ T721] ? ctnetlink_conntrack_event+0xd14/0x4240 [ 728.708932][ T721] dev_queue_xmit+0x4b/0x60 [ 728.713438][ T721] ip_finish_output2+0x20fd/0x2610 [ 728.718552][ T721] ? ctnetlink_net_exit_batch+0x180/0x180 [ 728.724299][ T721] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 728.731414][ T721] __ip_finish_output+0xaa7/0xd80 [ 728.736449][ T721] ip_finish_output+0x166/0x410 [ 728.741307][ T721] ip_output+0x593/0x680 [ 728.745544][ T721] ? ip_mc_finish_output+0x6c0/0x6c0 [ 728.750818][ T721] ? ip_finish_output+0x410/0x410 [ 728.755845][ T721] __ip_queue_xmit+0x1b5c/0x21a0 [ 728.760774][ T721] ? kmsan_set_origin_checked+0x95/0xf0 [ 728.766308][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.771500][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.776691][ T721] ip_queue_xmit+0xcc/0xf0 [ 728.781100][ T721] ? tcp_v4_fill_cb+0x580/0x580 [ 728.785951][ T721] __tcp_transmit_skb+0x4221/0x6090 [ 728.791139][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.796365][ T721] tcp_connect+0x420a/0x6830 [ 728.800965][ T721] ? __msan_poison_alloca+0xf0/0x120 [ 728.806255][ T721] tcp_v4_connect+0x21fd/0x2370 [ 728.811122][ T721] ? tcp_twsk_unique+0xba0/0xba0 [ 728.816052][ T721] __inet_stream_connect+0x2fb/0x1340 [ 728.821419][ T721] ? __local_bh_enable_ip+0x97/0x1d0 [ 728.826697][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.831893][ T721] inet_stream_connect+0x101/0x180 [ 728.836992][ T721] ? __inet_stream_connect+0x1340/0x1340 [ 728.842617][ T721] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 728.848244][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 728.853448][ T721] ? rds_tcp_state_change+0x390/0x390 [ 728.858806][ T721] rds_connect_worker+0x2a6/0x470 [ 728.863820][ T721] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 728.869874][ T721] ? rds_addr_cmp+0x200/0x200 [ 728.874536][ T721] process_one_work+0x1555/0x1f40 [ 728.879560][ T721] worker_thread+0xef6/0x2450 [ 728.884242][ T721] kthread+0x4b5/0x4f0 [ 728.888295][ T721] ? process_one_work+0x1f40/0x1f40 [ 728.893484][ T721] ? kthread_blkcg+0xf0/0xf0 [ 728.898078][ T721] ret_from_fork+0x35/0x40 [ 728.902487][ T721] [ 728.904796][ T721] Uninit was stored to memory at: [ 728.909810][ T721] kmsan_internal_chain_origin+0xad/0x130 [ 728.915599][ T721] __msan_chain_origin+0x50/0x90 [ 728.920535][ T721] ___bpf_prog_run+0x6cbe/0x97a0 [ 728.925456][ T721] __bpf_prog_run32+0x101/0x170 [ 728.930300][ T721] packet_rcv+0x70f/0x2160 [ 728.934706][ T721] dev_queue_xmit_nit+0x1199/0x1270 [ 728.939906][ T721] dev_hard_start_xmit+0x20f/0xab0 [ 728.945000][ T721] __dev_queue_xmit+0x2f8d/0x3b20 [ 728.950008][ T721] dev_queue_xmit+0x4b/0x60 [ 728.954496][ T721] ip_finish_output2+0x20fd/0x2610 [ 728.959603][ T721] __ip_finish_output+0xaa7/0xd80 [ 728.964612][ T721] ip_finish_output+0x166/0x410 [ 728.969465][ T721] ip_output+0x593/0x680 [ 728.973689][ T721] __ip_queue_xmit+0x1b5c/0x21a0 [ 728.978609][ T721] ip_queue_xmit+0xcc/0xf0 [ 728.983025][ T721] __tcp_transmit_skb+0x4221/0x6090 [ 728.988211][ T721] tcp_connect+0x420a/0x6830 [ 728.992799][ T721] tcp_v4_connect+0x21fd/0x2370 [ 728.997634][ T721] __inet_stream_connect+0x2fb/0x1340 [ 729.002987][ T721] inet_stream_connect+0x101/0x180 [ 729.008092][ T721] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 729.013726][ T721] rds_connect_worker+0x2a6/0x470 [ 729.018745][ T721] process_one_work+0x1555/0x1f40 [ 729.023751][ T721] worker_thread+0xef6/0x2450 [ 729.028413][ T721] kthread+0x4b5/0x4f0 [ 729.032467][ T721] ret_from_fork+0x35/0x40 [ 729.036857][ T721] [ 729.039167][ T721] Uninit was stored to memory at: [ 729.044179][ T721] kmsan_internal_chain_origin+0xad/0x130 [ 729.049886][ T721] __msan_chain_origin+0x50/0x90 [ 729.054823][ T721] ___bpf_prog_run+0x6c64/0x97a0 [ 729.059743][ T721] __bpf_prog_run32+0x101/0x170 [ 729.064578][ T721] packet_rcv+0x70f/0x2160 [ 729.068981][ T721] dev_queue_xmit_nit+0x1199/0x1270 [ 729.074164][ T721] dev_hard_start_xmit+0x20f/0xab0 [ 729.079276][ T721] __dev_queue_xmit+0x2f8d/0x3b20 [ 729.084283][ T721] dev_queue_xmit+0x4b/0x60 [ 729.088771][ T721] ip_finish_output2+0x20fd/0x2610 [ 729.093879][ T721] __ip_finish_output+0xaa7/0xd80 [ 729.098899][ T721] ip_finish_output+0x166/0x410 [ 729.103730][ T721] ip_output+0x593/0x680 [ 729.107953][ T721] __ip_queue_xmit+0x1b5c/0x21a0 [ 729.112876][ T721] ip_queue_xmit+0xcc/0xf0 [ 729.117276][ T721] __tcp_transmit_skb+0x4221/0x6090 [ 729.122457][ T721] tcp_connect+0x420a/0x6830 [ 729.127031][ T721] tcp_v4_connect+0x21fd/0x2370 [ 729.131864][ T721] __inet_stream_connect+0x2fb/0x1340 [ 729.137240][ T721] inet_stream_connect+0x101/0x180 [ 729.142427][ T721] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 729.148055][ T721] rds_connect_worker+0x2a6/0x470 [ 729.153066][ T721] process_one_work+0x1555/0x1f40 [ 729.158076][ T721] worker_thread+0xef6/0x2450 [ 729.162742][ T721] kthread+0x4b5/0x4f0 [ 729.166820][ T721] ret_from_fork+0x35/0x40 [ 729.171241][ T721] [ 729.173564][ T721] Local variable ----regs@__bpf_prog_run32 created at: [ 729.180396][ T721] __bpf_prog_run32+0x87/0x170 [ 729.185141][ T721] __bpf_prog_run32+0x87/0x170 [ 729.189881][ T721] ===================================================== [ 729.196813][ T721] Disabling lock debugging due to kernel taint [ 729.202943][ T721] Kernel panic - not syncing: panic_on_warn set ... [ 729.209515][ T721] CPU: 1 PID: 721 Comm: kworker/u4:13 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 729.219311][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.229366][ T721] Workqueue: krdsd rds_connect_worker [ 729.234720][ T721] Call Trace: [ 729.238001][ T721] dump_stack+0x1c9/0x220 [ 729.242324][ T721] panic+0x3d5/0xc3e [ 729.246227][ T721] kmsan_report+0x1df/0x1e0 [ 729.250727][ T721] __msan_warning+0x58/0xa0 [ 729.255306][ T721] ___bpf_prog_run+0x8b1b/0x97a0 [ 729.260230][ T721] ? tcp_v4_connect+0x21fd/0x2370 [ 729.265241][ T721] ? __inet_stream_connect+0x2fb/0x1340 [ 729.270775][ T721] ? kmsan_internal_set_origin+0x75/0xb0 [ 729.276392][ T721] ? tcp_connect+0x420a/0x6830 [ 729.281167][ T721] __bpf_prog_run32+0x101/0x170 [ 729.286008][ T721] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 729.291822][ T721] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 729.297959][ T721] ? kmsan_get_metadata+0x4f/0x180 [ 729.303057][ T721] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 729.308847][ T721] ? ___bpf_prog_run+0x97a0/0x97a0 [ 729.313945][ T721] packet_rcv+0x70f/0x2160 [ 729.318366][ T721] ? ktime_get_with_offset+0x336/0x4a0 [ 729.323821][ T721] ? packet_sock_destruct+0x1e0/0x1e0 [ 729.329203][ T721] dev_queue_xmit_nit+0x1199/0x1270 [ 729.334404][ T721] dev_hard_start_xmit+0x20f/0xab0 [ 729.339509][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.344699][ T721] __dev_queue_xmit+0x2f8d/0x3b20 [ 729.349730][ T721] ? ctnetlink_conntrack_event+0xd14/0x4240 [ 729.355628][ T721] dev_queue_xmit+0x4b/0x60 [ 729.360121][ T721] ip_finish_output2+0x20fd/0x2610 [ 729.365220][ T721] ? ctnetlink_net_exit_batch+0x180/0x180 [ 729.370940][ T721] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 729.376921][ T721] __ip_finish_output+0xaa7/0xd80 [ 729.381967][ T721] ip_finish_output+0x166/0x410 [ 729.386840][ T721] ip_output+0x593/0x680 [ 729.391080][ T721] ? ip_mc_finish_output+0x6c0/0x6c0 [ 729.396353][ T721] ? ip_finish_output+0x410/0x410 [ 729.401388][ T721] __ip_queue_xmit+0x1b5c/0x21a0 [ 729.406316][ T721] ? kmsan_set_origin_checked+0x95/0xf0 [ 729.411848][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.417040][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.422229][ T721] ip_queue_xmit+0xcc/0xf0 [ 729.426668][ T721] ? tcp_v4_fill_cb+0x580/0x580 [ 729.431510][ T721] __tcp_transmit_skb+0x4221/0x6090 [ 729.436707][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.441908][ T721] tcp_connect+0x420a/0x6830 [ 729.446494][ T721] ? __msan_poison_alloca+0xf0/0x120 [ 729.451792][ T721] tcp_v4_connect+0x21fd/0x2370 [ 729.456653][ T721] ? tcp_twsk_unique+0xba0/0xba0 [ 729.461578][ T721] __inet_stream_connect+0x2fb/0x1340 [ 729.466939][ T721] ? __local_bh_enable_ip+0x97/0x1d0 [ 729.472237][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.477427][ T721] inet_stream_connect+0x101/0x180 [ 729.482527][ T721] ? __inet_stream_connect+0x1340/0x1340 [ 729.488154][ T721] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 729.493811][ T721] ? kmsan_get_metadata+0x11d/0x180 [ 729.499001][ T721] ? rds_tcp_state_change+0x390/0x390 [ 729.504358][ T721] rds_connect_worker+0x2a6/0x470 [ 729.509370][ T721] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 729.515424][ T721] ? rds_addr_cmp+0x200/0x200 [ 729.520085][ T721] process_one_work+0x1555/0x1f40 [ 729.525110][ T721] worker_thread+0xef6/0x2450 [ 729.529898][ T721] kthread+0x4b5/0x4f0 [ 729.533970][ T721] ? process_one_work+0x1f40/0x1f40 [ 729.539160][ T721] ? kthread_blkcg+0xf0/0xf0 [ 729.543738][ T721] ret_from_fork+0x35/0x40 [ 729.549447][ T721] Kernel Offset: 0xd000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 729.560971][ T721] Rebooting in 86400 seconds..