[T14500] __msan_chain_origin+0x50/0x90 [ 677.158720][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.163866][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.168823][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.173364][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.178104][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.184292][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.190479][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.195713][T14500] do_fast_syscall_32+0x6b/0xd0 [ 677.200610][T14500] do_SYSENTER_32+0x73/0x90 [ 677.205144][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.211480][T14500] [ 677.213843][T14500] Uninit was stored to memory at: [ 677.219333][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 677.225082][T14500] __msan_chain_origin+0x50/0x90 [ 677.230067][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.235203][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.240172][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.244692][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.249407][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.255587][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.261768][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.266993][T14500] do_fast_syscall_32+0x6b/0xd0 [ 677.271868][T14500] do_SYSENTER_32+0x73/0x90 [ 677.276395][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.282726][T14500] [ 677.285069][T14500] Local variable ----msg_sys@do_recvmmsg created at: [ 677.291764][T14500] do_recvmmsg+0xbf/0x22c0 [ 677.296195][T14500] do_recvmmsg+0xbf/0x22c0 [ 677.541764][T14500] not chained 100000 origins [ 677.546418][T14500] CPU: 0 PID: 14500 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 677.555128][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.565201][T14500] Call Trace: [ 677.568598][T14500] dump_stack+0x21c/0x280 [ 677.572993][T14500] kmsan_internal_chain_origin+0x6f/0x130 [ 677.578766][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.584017][T14500] ? kmsan_set_origin_checked+0x95/0xf0 [ 677.589603][T14500] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 677.595721][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.600966][T14500] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 677.606799][T14500] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 677.612893][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.618230][T14500] ? kmsan_set_origin_checked+0x95/0xf0 [ 677.623824][T14500] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 677.629929][T14500] ? _copy_from_user+0x201/0x310 [ 677.635282][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.640517][T14500] __msan_chain_origin+0x50/0x90 [ 677.645498][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.650684][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.659840][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.664393][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.669721][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.674962][T14500] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 677.680892][T14500] ? kmsan_get_metadata+0x116/0x180 [ 677.686133][T14500] ? kmsan_internal_set_origin+0x75/0xb0 [ 677.691830][T14500] ? __msan_poison_alloca+0xf0/0x120 [ 677.697147][T14500] ? __sys_recvmmsg+0xbb/0x610 [ 677.701965][T14500] ? __sys_recvmmsg+0xbb/0x610 [ 677.706765][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.711520][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.717645][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.723845][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.729118][T14500] do_fast_syscall_32+0x6b/0xd0 [ 677.734018][T14500] do_SYSENTER_32+0x73/0x90 [ 677.738825][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.745174][T14500] RIP: 0023:0xf7fd8549 [ 677.749247][T14500] Code: Bad RIP value. [ 677.753329][T14500] RSP: 002b:00000000f55b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 677.761936][T14500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 677.769950][T14500] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 677.777944][T14500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.785936][T14500] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 677.793923][T14500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.802051][T14500] Uninit was stored to memory at: [ 677.807121][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 677.812879][T14500] __msan_chain_origin+0x50/0x90 [ 677.817837][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.822967][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.827923][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.832447][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.837143][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.843230][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.849579][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.854799][T14500] do_fast_syscall_32+0x6b/0xd0 [ 677.859671][T14500] do_SYSENTER_32+0x73/0x90 [ 677.864192][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.870534][T14500] [ 677.872863][T14500] Uninit was stored to memory at: [ 677.878269][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 677.884009][T14500] __msan_chain_origin+0x50/0x90 [ 677.888966][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.894104][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.899064][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.903589][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.908302][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.914394][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.920601][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.925917][T14500] do_fast_syscall_32+0x6b/0xd0 [ 677.931104][T14500] do_SYSENTER_32+0x73/0x90 [ 677.935640][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.941975][T14500] [ 677.944315][T14500] Uninit was stored to memory at: [ 677.949408][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 677.955152][T14500] __msan_chain_origin+0x50/0x90 [ 677.960120][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 677.965272][T14500] get_compat_msghdr+0x108/0x2b0 [ 677.970227][T14500] do_recvmmsg+0xdbb/0x22c0 [ 677.974751][T14500] __sys_recvmmsg+0x5dd/0x610 [ 677.979453][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.985570][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.991753][T14500] __do_fast_syscall_32+0x2af/0x480 [ 677.996979][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.001857][T14500] do_SYSENTER_32+0x73/0x90 [ 678.006421][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.012763][T14500] [ 678.015094][T14500] Uninit was stored to memory at: [ 678.020139][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.025879][T14500] __msan_chain_origin+0x50/0x90 [ 678.030837][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.035975][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.040936][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.045683][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.050386][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.056481][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.062662][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.067891][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.072784][T14500] do_SYSENTER_32+0x73/0x90 [ 678.077321][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.083650][T14500] [ 678.085981][T14500] Uninit was stored to memory at: [ 678.091035][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.096769][T14500] __msan_chain_origin+0x50/0x90 [ 678.101760][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.106903][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.111893][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.116427][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.121130][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.127225][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.133405][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.139069][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.143944][T14500] do_SYSENTER_32+0x73/0x90 [ 678.148470][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.154991][T14500] [ 678.157328][T14500] Uninit was stored to memory at: [ 678.162385][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.168122][T14500] __msan_chain_origin+0x50/0x90 [ 678.173080][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.178211][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.183169][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.187824][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.192522][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.198612][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.204797][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.210194][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.215083][T14500] do_SYSENTER_32+0x73/0x90 [ 678.219612][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.225935][T14500] [ 678.228276][T14500] Uninit was stored to memory at: [ 678.233415][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.239182][T14500] __msan_chain_origin+0x50/0x90 [ 678.244151][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.249298][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.254275][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.258796][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.263845][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.269936][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.276118][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.281357][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.286404][T14500] do_SYSENTER_32+0x73/0x90 [ 678.290951][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.297275][T14500] [ 678.299617][T14500] Local variable ----msg_sys@do_recvmmsg created at: [ 678.306309][T14500] do_recvmmsg+0xbf/0x22c0 [ 678.310743][T14500] do_recvmmsg+0xbf/0x22c0 [ 678.420273][T14500] not chained 110000 origins [ 678.424922][T14500] CPU: 0 PID: 14500 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 678.433675][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.443748][T14500] Call Trace: [ 678.447071][T14500] dump_stack+0x21c/0x280 [ 678.451438][T14500] kmsan_internal_chain_origin+0x6f/0x130 [ 678.457190][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.462677][T14500] ? kmsan_set_origin_checked+0x95/0xf0 [ 678.468266][T14500] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 678.474371][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.479715][T14500] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 678.485572][T14500] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 678.491672][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.496914][T14500] ? kmsan_set_origin_checked+0x95/0xf0 [ 678.502500][T14500] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 678.508872][T14500] ? _copy_from_user+0x201/0x310 [ 678.513845][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.519083][T14500] __msan_chain_origin+0x50/0x90 [ 678.524236][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.529436][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.534419][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.538992][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.544228][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.549473][T14500] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 678.555442][T14500] ? kmsan_get_metadata+0x116/0x180 [ 678.560675][T14500] ? kmsan_internal_set_origin+0x75/0xb0 [ 678.566344][T14500] ? __msan_poison_alloca+0xf0/0x120 [ 678.571665][T14500] ? __sys_recvmmsg+0xbb/0x610 [ 678.576479][T14500] ? __sys_recvmmsg+0xbb/0x610 [ 678.581286][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.586046][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.592204][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.598432][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.603677][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.608573][T14500] do_SYSENTER_32+0x73/0x90 [ 678.613640][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.619999][T14500] RIP: 0023:0xf7fd8549 [ 678.624080][T14500] Code: Bad RIP value. [ 678.628168][T14500] RSP: 002b:00000000f55b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 678.636606][T14500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 678.644612][T14500] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 678.652622][T14500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.660615][T14500] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 678.668635][T14500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.676643][T14500] Uninit was stored to memory at: [ 678.681718][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.687733][T14500] __msan_chain_origin+0x50/0x90 [ 678.692700][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.697864][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.702848][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.707379][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.712092][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.718194][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.724466][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.730047][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.734924][T14500] do_SYSENTER_32+0x73/0x90 [ 678.739485][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.746091][T14500] [ 678.748431][T14500] Uninit was stored to memory at: [ 678.753510][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.759263][T14500] __msan_chain_origin+0x50/0x90 [ 678.764235][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.769465][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.774431][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.778967][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.783685][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.789795][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.795989][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.801238][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.806125][T14500] do_SYSENTER_32+0x73/0x90 [ 678.810668][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.817002][T14500] [ 678.819342][T14500] Uninit was stored to memory at: [ 678.824398][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.830146][T14500] __msan_chain_origin+0x50/0x90 [ 678.835145][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.840300][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.845383][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.850863][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.855573][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.861673][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.867857][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.873104][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.877990][T14500] do_SYSENTER_32+0x73/0x90 [ 678.882522][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.888865][T14500] [ 678.891377][T14500] Uninit was stored to memory at: [ 678.896442][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.902210][T14500] __msan_chain_origin+0x50/0x90 [ 678.907197][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.912344][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.917303][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.921831][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.926527][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.932630][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.939073][T14500] __do_fast_syscall_32+0x2af/0x480 [ 678.944302][T14500] do_fast_syscall_32+0x6b/0xd0 [ 678.950232][T14500] do_SYSENTER_32+0x73/0x90 [ 678.954792][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.961128][T14500] [ 678.963470][T14500] Uninit was stored to memory at: [ 678.968708][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 678.974473][T14500] __msan_chain_origin+0x50/0x90 [ 678.979443][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 678.984578][T14500] get_compat_msghdr+0x108/0x2b0 [ 678.989541][T14500] do_recvmmsg+0xdbb/0x22c0 [ 678.994156][T14500] __sys_recvmmsg+0x5dd/0x610 [ 678.998857][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.004950][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.011141][T14500] __do_fast_syscall_32+0x2af/0x480 [ 679.016537][T14500] do_fast_syscall_32+0x6b/0xd0 [ 679.021410][T14500] do_SYSENTER_32+0x73/0x90 [ 679.025961][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.032296][T14500] [ 679.034634][T14500] Uninit was stored to memory at: [ 679.039786][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 679.045541][T14500] __msan_chain_origin+0x50/0x90 [ 679.050869][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 679.056021][T14500] get_compat_msghdr+0x108/0x2b0 [ 679.060995][T14500] do_recvmmsg+0xdbb/0x22c0 [ 679.065526][T14500] __sys_recvmmsg+0x5dd/0x610 [ 679.070234][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.076347][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.082535][T14500] __do_fast_syscall_32+0x2af/0x480 [ 679.087768][T14500] do_fast_syscall_32+0x6b/0xd0 [ 679.092665][T14500] do_SYSENTER_32+0x73/0x90 [ 679.097210][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.103562][T14500] [ 679.105908][T14500] Uninit was stored to memory at: [ 679.110989][T14500] kmsan_internal_chain_origin+0xad/0x130 [ 679.116759][T14500] __msan_chain_origin+0x50/0x90 [ 679.121814][T14500] __get_compat_msghdr+0x6db/0x9d0 [ 679.126968][T14500] get_compat_msghdr+0x108/0x2b0 [ 679.132025][T14500] do_recvmmsg+0xdbb/0x22c0 [ 679.136560][T14500] __sys_recvmmsg+0x5dd/0x610 [ 679.141463][T14500] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.147665][T14500] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.153858][T14500] __do_fast_syscall_32+0x2af/0x480 [ 679.159113][T14500] do_fast_syscall_32+0x6b/0xd0 [ 679.164000][T14500] do_SYSENTER_32+0x73/0x90 [ 679.168572][T14500] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.175257][T14500] [ 679.177607][T14500] Local variable ----msg_sys@do_recvmmsg created at: [ 679.184315][T14500] do_recvmmsg+0xbf/0x22c0 [ 679.188788][T14500] do_recvmmsg+0xbf/0x22c0 [ 679.328151][T14516] not chained 120000 origins [ 679.332810][T14516] CPU: 1 PID: 14516 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 679.341582][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.351787][T14516] Call Trace: [ 679.355118][T14516] dump_stack+0x21c/0x280 [ 679.359494][T14516] kmsan_internal_chain_origin+0x6f/0x130 [ 679.365280][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.370518][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 679.376104][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 679.382206][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.387454][T14516] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.393303][T14516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 679.399403][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.404661][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 679.410242][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 679.416358][T14516] ? _copy_from_user+0x201/0x310 [ 679.421329][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.426580][T14516] __msan_chain_origin+0x50/0x90 [ 679.431592][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.436763][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.441769][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.446335][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.451565][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.456792][T14516] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 679.462820][T14516] ? kmsan_get_metadata+0x116/0x180 [ 679.468045][T14516] ? kmsan_internal_set_origin+0x75/0xb0 [ 679.473706][T14516] ? __msan_poison_alloca+0xf0/0x120 [ 679.479026][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 679.483813][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 679.488610][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.493344][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.499514][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.505725][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.510972][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.515864][T14516] do_SYSENTER_32+0x73/0x90 [ 679.520407][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.526812][T14516] RIP: 0023:0xf7fd8549 [ 679.530892][T14516] Code: Bad RIP value. [ 679.535448][T14516] RSP: 002b:00000000f556f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 679.543913][T14516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 679.551927][T14516] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 679.559920][T14516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.568052][T14516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 679.576048][T14516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.584057][T14516] Uninit was stored to memory at: [ 679.589117][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.594904][T14516] __msan_chain_origin+0x50/0x90 [ 679.599876][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.605015][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.610239][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.615638][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.620604][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.626704][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.632893][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.638124][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.643007][T14516] do_SYSENTER_32+0x73/0x90 [ 679.647561][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.654186][T14516] [ 679.656524][T14516] Uninit was stored to memory at: [ 679.662201][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.670022][T14516] __msan_chain_origin+0x50/0x90 [ 679.675008][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.680142][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.685103][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.689627][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.694333][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.700479][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.706657][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.711912][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.716787][T14516] do_SYSENTER_32+0x73/0x90 [ 679.721333][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.727698][T14516] [ 679.730032][T14516] Uninit was stored to memory at: [ 679.735086][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.740842][T14516] __msan_chain_origin+0x50/0x90 [ 679.745813][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.750951][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.755917][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.760452][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.765185][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.771282][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.777471][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.782881][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.788915][T14516] do_SYSENTER_32+0x73/0x90 [ 679.794091][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.800514][T14516] [ 679.802852][T14516] Uninit was stored to memory at: [ 679.808000][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.814272][T14516] __msan_chain_origin+0x50/0x90 [ 679.819252][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.824407][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.829359][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.833888][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.838585][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.844671][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.850847][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.856268][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.861142][T14516] do_SYSENTER_32+0x73/0x90 [ 679.866564][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.873859][T14516] [ 679.876213][T14516] Uninit was stored to memory at: [ 679.881260][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.887003][T14516] __msan_chain_origin+0x50/0x90 [ 679.891983][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.897128][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.902108][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.906746][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.911457][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.917574][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.923752][T14516] __do_fast_syscall_32+0x2af/0x480 [ 679.928993][T14516] do_fast_syscall_32+0x6b/0xd0 [ 679.934387][T14516] do_SYSENTER_32+0x73/0x90 [ 679.939100][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.945542][T14516] [ 679.947993][T14516] Uninit was stored to memory at: [ 679.954088][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 679.960287][T14516] __msan_chain_origin+0x50/0x90 [ 679.965960][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 679.976235][T14516] get_compat_msghdr+0x108/0x2b0 [ 679.981723][T14516] do_recvmmsg+0xdbb/0x22c0 [ 679.986264][T14516] __sys_recvmmsg+0x5dd/0x610 [ 679.991057][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.997152][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.003327][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.008568][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.013438][T14516] do_SYSENTER_32+0x73/0x90 [ 680.017960][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.024288][T14516] [ 680.026635][T14516] Uninit was stored to memory at: [ 680.031824][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.037625][T14516] __msan_chain_origin+0x50/0x90 [ 680.046081][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.052628][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.059339][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.063876][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.068590][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.074713][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.080998][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.086313][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.091178][T14516] do_SYSENTER_32+0x73/0x90 [ 680.095706][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.102824][T14516] [ 680.105162][T14516] Local variable ----msg_sys@do_recvmmsg created at: [ 680.111860][T14516] do_recvmmsg+0xbf/0x22c0 [ 680.116386][T14516] do_recvmmsg+0xbf/0x22c0 [ 680.233840][T14516] not chained 130000 origins [ 680.238500][T14516] CPU: 1 PID: 14516 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 680.247448][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.257732][T14516] Call Trace: [ 680.261060][T14516] dump_stack+0x21c/0x280 [ 680.265424][T14516] kmsan_internal_chain_origin+0x6f/0x130 [ 680.271168][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.276393][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 680.281971][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 680.288065][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.293323][T14516] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.299155][T14516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 680.305248][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.310823][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 680.316413][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 680.322512][T14516] ? _copy_from_user+0x201/0x310 [ 680.327479][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.332704][T14516] __msan_chain_origin+0x50/0x90 [ 680.337668][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.342862][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.347849][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.352393][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.357624][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.362873][T14516] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 680.368796][T14516] ? kmsan_get_metadata+0x116/0x180 [ 680.374022][T14516] ? kmsan_internal_set_origin+0x75/0xb0 [ 680.379688][T14516] ? __msan_poison_alloca+0xf0/0x120 [ 680.385017][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 680.389797][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 680.394592][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.399324][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.405430][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.411606][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.416882][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.421759][T14516] do_SYSENTER_32+0x73/0x90 [ 680.426293][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.432629][T14516] RIP: 0023:0xf7fd8549 [ 680.436700][T14516] Code: Bad RIP value. [ 680.440774][T14516] RSP: 002b:00000000f556f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 680.449218][T14516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 680.457209][T14516] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 680.465199][T14516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.473185][T14516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 680.481170][T14516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.489179][T14516] Uninit was stored to memory at: [ 680.494231][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.499993][T14516] __msan_chain_origin+0x50/0x90 [ 680.504962][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.510183][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.515136][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.519681][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.524380][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.530471][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.536660][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.541878][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.546756][T14516] do_SYSENTER_32+0x73/0x90 [ 680.551277][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.557605][T14516] [ 680.559940][T14516] Uninit was stored to memory at: [ 680.565002][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.570737][T14516] __msan_chain_origin+0x50/0x90 [ 680.575687][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.580830][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.585784][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.590313][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.595010][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.601104][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.607304][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.612528][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.617399][T14516] do_SYSENTER_32+0x73/0x90 [ 680.621918][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.628245][T14516] [ 680.630585][T14516] Uninit was stored to memory at: [ 680.635642][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.641379][T14516] __msan_chain_origin+0x50/0x90 [ 680.646330][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.651462][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.656414][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.660964][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.666116][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.672204][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.678434][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.683662][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.688534][T14516] do_SYSENTER_32+0x73/0x90 [ 680.693054][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.699374][T14516] [ 680.701705][T14516] Uninit was stored to memory at: [ 680.706746][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.712482][T14516] __msan_chain_origin+0x50/0x90 [ 680.717441][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.722576][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.727556][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.732079][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.736776][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.742901][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.749110][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.754327][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.759190][T14516] do_SYSENTER_32+0x73/0x90 [ 680.763844][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.770172][T14516] [ 680.773123][T14516] Uninit was stored to memory at: [ 680.778456][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.784194][T14516] __msan_chain_origin+0x50/0x90 [ 680.789172][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.794304][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.799265][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.803778][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.808488][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.814661][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.820860][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.826084][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.830982][T14516] do_SYSENTER_32+0x73/0x90 [ 680.835946][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.842292][T14516] [ 680.844630][T14516] Uninit was stored to memory at: [ 680.849675][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.855420][T14516] __msan_chain_origin+0x50/0x90 [ 680.860383][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.865537][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.870522][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.875045][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.879833][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.886014][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.892206][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.897437][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.902308][T14516] do_SYSENTER_32+0x73/0x90 [ 680.906870][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.913202][T14516] [ 680.915552][T14516] Uninit was stored to memory at: [ 680.920592][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 680.926356][T14516] __msan_chain_origin+0x50/0x90 [ 680.931336][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 680.936475][T14516] get_compat_msghdr+0x108/0x2b0 [ 680.941444][T14516] do_recvmmsg+0xdbb/0x22c0 [ 680.945969][T14516] __sys_recvmmsg+0x5dd/0x610 [ 680.950672][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.956795][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.962992][T14516] __do_fast_syscall_32+0x2af/0x480 [ 680.968215][T14516] do_fast_syscall_32+0x6b/0xd0 [ 680.973086][T14516] do_SYSENTER_32+0x73/0x90 [ 680.977693][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.984020][T14516] [ 680.986355][T14516] Local variable ----msg_sys@do_recvmmsg created at: [ 680.993063][T14516] do_recvmmsg+0xbf/0x22c0 [ 680.997494][T14516] do_recvmmsg+0xbf/0x22c0 [ 681.133361][T14516] not chained 140000 origins [ 681.138105][T14516] CPU: 1 PID: 14516 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 681.147157][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.158200][T14516] Call Trace: [ 681.161532][T14516] dump_stack+0x21c/0x280 [ 681.165903][T14516] kmsan_internal_chain_origin+0x6f/0x130 [ 681.171657][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.176886][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 681.182654][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 681.188755][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.193988][T14516] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 681.199863][T14516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 681.205988][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.211225][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 681.216919][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 681.223029][T14516] ? _copy_from_user+0x201/0x310 [ 681.228004][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.234277][T14516] __msan_chain_origin+0x50/0x90 [ 681.239253][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.244508][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.249515][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.254089][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.259336][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.264688][T14516] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 681.270621][T14516] ? kmsan_get_metadata+0x116/0x180 [ 681.275876][T14516] ? kmsan_internal_set_origin+0x75/0xb0 [ 681.281553][T14516] ? __msan_poison_alloca+0xf0/0x120 [ 681.286873][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 681.291660][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 681.296713][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.301616][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.307739][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.314192][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.319527][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.327107][T14516] do_SYSENTER_32+0x73/0x90 [ 681.331727][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.338081][T14516] RIP: 0023:0xf7fd8549 [ 681.342148][T14516] Code: Bad RIP value. [ 681.346217][T14516] RSP: 002b:00000000f556f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 681.355257][T14516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 681.363253][T14516] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 681.371266][T14516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.379254][T14516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 681.387236][T14516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.395233][T14516] Uninit was stored to memory at: [ 681.400280][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.406020][T14516] __msan_chain_origin+0x50/0x90 [ 681.410970][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.416091][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.421054][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.425566][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.430260][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.436343][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.442515][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.447730][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.452611][T14516] do_SYSENTER_32+0x73/0x90 [ 681.457131][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.463451][T14516] [ 681.465810][T14516] Uninit was stored to memory at: [ 681.470854][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.476584][T14516] __msan_chain_origin+0x50/0x90 [ 681.481535][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.486659][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.491606][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.496131][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.500837][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.506919][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.513097][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.518310][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.523180][T14516] do_SYSENTER_32+0x73/0x90 [ 681.527708][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.534054][T14516] [ 681.536387][T14516] Uninit was stored to memory at: [ 681.541442][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.547190][T14516] __msan_chain_origin+0x50/0x90 [ 681.552144][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.557268][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.562221][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.566758][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.571472][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.577732][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.583905][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.589122][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.593992][T14516] do_SYSENTER_32+0x73/0x90 [ 681.598515][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.604840][T14516] [ 681.607169][T14516] Uninit was stored to memory at: [ 681.612228][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.617969][T14516] __msan_chain_origin+0x50/0x90 [ 681.622930][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.628060][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.633011][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.637532][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.642230][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.648317][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.654492][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.659721][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.664681][T14516] do_SYSENTER_32+0x73/0x90 [ 681.669202][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.675525][T14516] [ 681.677858][T14516] Uninit was stored to memory at: [ 681.682907][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.688659][T14516] __msan_chain_origin+0x50/0x90 [ 681.693632][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.698758][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.703709][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.708231][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.712943][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.719121][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.725301][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.730524][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.735395][T14516] do_SYSENTER_32+0x73/0x90 [ 681.739926][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.746255][T14516] [ 681.748590][T14516] Uninit was stored to memory at: [ 681.753637][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.759382][T14516] __msan_chain_origin+0x50/0x90 [ 681.764356][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.769753][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.774711][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.779497][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.784191][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.790304][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.796487][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.801708][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.806596][T14516] do_SYSENTER_32+0x73/0x90 [ 681.811119][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.817442][T14516] [ 681.819774][T14516] Uninit was stored to memory at: [ 681.824909][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 681.830648][T14516] __msan_chain_origin+0x50/0x90 [ 681.835601][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 681.840730][T14516] get_compat_msghdr+0x108/0x2b0 [ 681.845683][T14516] do_recvmmsg+0xdbb/0x22c0 [ 681.850201][T14516] __sys_recvmmsg+0x5dd/0x610 [ 681.854904][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.860996][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.867169][T14516] __do_fast_syscall_32+0x2af/0x480 [ 681.872387][T14516] do_fast_syscall_32+0x6b/0xd0 [ 681.877257][T14516] do_SYSENTER_32+0x73/0x90 [ 681.881783][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.888107][T14516] [ 681.890456][T14516] Local variable ----msg_sys@do_recvmmsg created at: [ 681.897158][T14516] do_recvmmsg+0xbf/0x22c0 [ 681.901620][T14516] do_recvmmsg+0xbf/0x22c0 [ 682.185450][T14516] not chained 150000 origins [ 682.190181][T14516] CPU: 1 PID: 14516 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 682.199306][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.209638][T14516] Call Trace: [ 682.212966][T14516] dump_stack+0x21c/0x280 [ 682.217341][T14516] kmsan_internal_chain_origin+0x6f/0x130 [ 682.224926][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.230176][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 682.235810][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 682.242003][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.247242][T14516] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 682.253083][T14516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 682.259177][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.264759][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 682.270338][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 682.276454][T14516] ? _copy_from_user+0x201/0x310 [ 682.281441][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.286667][T14516] __msan_chain_origin+0x50/0x90 [ 682.291642][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.296811][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.301793][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.306346][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.311580][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.316814][T14516] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 682.322765][T14516] ? kmsan_get_metadata+0x116/0x180 [ 682.327995][T14516] ? kmsan_internal_set_origin+0x75/0xb0 [ 682.333653][T14516] ? __msan_poison_alloca+0xf0/0x120 [ 682.338967][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 682.343757][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 682.348553][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.353282][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.359400][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.365602][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.370911][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.375795][T14516] do_SYSENTER_32+0x73/0x90 [ 682.380332][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.386677][T14516] RIP: 0023:0xf7fd8549 [ 682.390762][T14516] Code: Bad RIP value. [ 682.394837][T14516] RSP: 002b:00000000f556f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 682.403268][T14516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 682.411256][T14516] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 682.419241][T14516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.427253][T14516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 682.435241][T14516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.443249][T14516] Uninit was stored to memory at: [ 682.448305][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.454049][T14516] __msan_chain_origin+0x50/0x90 [ 682.459013][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.464151][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.469135][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.473653][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.478351][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.484438][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.491246][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.496465][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.501332][T14516] do_SYSENTER_32+0x73/0x90 [ 682.505852][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.512180][T14516] [ 682.514530][T14516] Uninit was stored to memory at: [ 682.519601][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.525345][T14516] __msan_chain_origin+0x50/0x90 [ 682.530404][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.535535][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.540496][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.545060][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.549766][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.555862][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.562059][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.567284][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.572154][T14516] do_SYSENTER_32+0x73/0x90 [ 682.576681][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.583010][T14516] [ 682.585341][T14516] Uninit was stored to memory at: [ 682.590400][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.596317][T14516] __msan_chain_origin+0x50/0x90 [ 682.601275][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.606408][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.611374][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.615900][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.620595][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.626682][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.632885][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.638200][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.643102][T14516] do_SYSENTER_32+0x73/0x90 [ 682.647623][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.654089][T14516] [ 682.656430][T14516] Uninit was stored to memory at: [ 682.661490][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.667247][T14516] __msan_chain_origin+0x50/0x90 [ 682.672227][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.677376][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.682483][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.687027][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.691732][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.698098][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.704300][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.709552][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.714437][T14516] do_SYSENTER_32+0x73/0x90 [ 682.718970][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.725300][T14516] [ 682.727640][T14516] Uninit was stored to memory at: [ 682.732699][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.738458][T14516] __msan_chain_origin+0x50/0x90 [ 682.743427][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.748565][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.753523][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.758045][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.762744][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.768834][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.775007][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.780232][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.785101][T14516] do_SYSENTER_32+0x73/0x90 [ 682.789632][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.795961][T14516] [ 682.798299][T14516] Uninit was stored to memory at: [ 682.803348][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.809092][T14516] __msan_chain_origin+0x50/0x90 [ 682.814062][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.819201][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.824155][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.828692][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.833389][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.839476][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.845645][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.850875][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.855773][T14516] do_SYSENTER_32+0x73/0x90 [ 682.860292][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.866614][T14516] [ 682.868944][T14516] Uninit was stored to memory at: [ 682.874011][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 682.879843][T14516] __msan_chain_origin+0x50/0x90 [ 682.884833][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 682.889990][T14516] get_compat_msghdr+0x108/0x2b0 [ 682.894949][T14516] do_recvmmsg+0xdbb/0x22c0 [ 682.899475][T14516] __sys_recvmmsg+0x5dd/0x610 [ 682.904178][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.910288][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.916465][T14516] __do_fast_syscall_32+0x2af/0x480 [ 682.921694][T14516] do_fast_syscall_32+0x6b/0xd0 [ 682.926568][T14516] do_SYSENTER_32+0x73/0x90 [ 682.931102][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.937431][T14516] [ 682.939769][T14516] Local variable ----msg_sys@do_recvmmsg created at: [ 682.946822][T14516] do_recvmmsg+0xbf/0x22c0 [ 682.951251][T14516] do_recvmmsg+0xbf/0x22c0 [ 683.023985][T14516] not chained 160000 origins [ 683.028631][T14516] CPU: 1 PID: 14516 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 683.037311][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.047377][T14516] Call Trace: [ 683.050704][T14516] dump_stack+0x21c/0x280 [ 683.055064][T14516] kmsan_internal_chain_origin+0x6f/0x130 [ 683.060805][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.066019][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 683.071585][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 683.077692][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.083008][T14516] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 683.089529][T14516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 683.095616][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.100835][T14516] ? kmsan_set_origin_checked+0x95/0xf0 [ 683.106422][T14516] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 683.112791][T14516] ? _copy_from_user+0x201/0x310 [ 683.117759][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.122977][T14516] __msan_chain_origin+0x50/0x90 [ 683.127943][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.133379][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.138353][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.142905][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.148171][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.153402][T14516] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 683.159413][T14516] ? kmsan_get_metadata+0x116/0x180 [ 683.164692][T14516] ? kmsan_internal_set_origin+0x75/0xb0 [ 683.170361][T14516] ? __msan_poison_alloca+0xf0/0x120 [ 683.175679][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 683.180452][T14516] ? __sys_recvmmsg+0xbb/0x610 [ 683.185233][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.189964][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.196068][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.202245][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.207568][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.212446][T14516] do_SYSENTER_32+0x73/0x90 [ 683.216972][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.223305][T14516] RIP: 0023:0xf7fd8549 [ 683.227370][T14516] Code: Bad RIP value. [ 683.231531][T14516] RSP: 002b:00000000f556f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 683.239963][T14516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 683.247949][T14516] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 683.255930][T14516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.263911][T14516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 683.271893][T14516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.279905][T14516] Uninit was stored to memory at: [ 683.284950][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.290678][T14516] __msan_chain_origin+0x50/0x90 [ 683.295640][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.300785][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.305751][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.310264][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.314963][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.321042][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.327206][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.332414][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.337280][T14516] do_SYSENTER_32+0x73/0x90 [ 683.341801][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.348121][T14516] [ 683.350451][T14516] Uninit was stored to memory at: [ 683.355490][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.361226][T14516] __msan_chain_origin+0x50/0x90 [ 683.366181][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.371304][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.376254][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.380764][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.385454][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.391532][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.397700][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.402921][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.407785][T14516] do_SYSENTER_32+0x73/0x90 [ 683.412302][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.418624][T14516] [ 683.420949][T14516] Uninit was stored to memory at: [ 683.425992][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.431734][T14516] __msan_chain_origin+0x50/0x90 [ 683.436685][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.441818][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.446764][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.451274][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.455964][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.462043][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.468217][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.473433][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.478302][T14516] do_SYSENTER_32+0x73/0x90 [ 683.482822][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.489166][T14516] [ 683.491496][T14516] Uninit was stored to memory at: [ 683.496541][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.502276][T14516] __msan_chain_origin+0x50/0x90 [ 683.507224][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.512356][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.517307][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.521836][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.526528][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.532613][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.538786][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.544006][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.548875][T14516] do_SYSENTER_32+0x73/0x90 [ 683.553414][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.559756][T14516] [ 683.562088][T14516] Uninit was stored to memory at: [ 683.567129][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.572864][T14516] __msan_chain_origin+0x50/0x90 [ 683.577823][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.582951][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.587909][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.592423][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.597130][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.603214][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.609386][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.614690][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.619550][T14516] do_SYSENTER_32+0x73/0x90 [ 683.624081][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.630498][T14516] [ 683.632828][T14516] Uninit was stored to memory at: [ 683.637891][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.643626][T14516] __msan_chain_origin+0x50/0x90 [ 683.648600][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.653745][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.658707][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.663233][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.667942][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.674225][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.680395][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.685618][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.690495][T14516] do_SYSENTER_32+0x73/0x90 [ 683.695022][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.701373][T14516] [ 683.703710][T14516] Uninit was stored to memory at: [ 683.708768][T14516] kmsan_internal_chain_origin+0xad/0x130 [ 683.714506][T14516] __msan_chain_origin+0x50/0x90 [ 683.719464][T14516] __get_compat_msghdr+0x6db/0x9d0 [ 683.724596][T14516] get_compat_msghdr+0x108/0x2b0 [ 683.729558][T14516] do_recvmmsg+0xdbb/0x22c0 [ 683.734094][T14516] __sys_recvmmsg+0x5dd/0x610 [ 683.738818][T14516] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.744922][T14516] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.751365][T14516] __do_fast_syscall_32+0x2af/0x480 [ 683.756605][T14516] do_fast_syscall_32+0x6b/0xd0 [ 683.761561][T14516] do_SYSENTER_32+0x73/0x90 [ 683.766110][T14516] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.772534][T14516] [ 683.774871][T14516] Local variable ----msg_sys@do_recvmmsg created at: [ 683.781559][T14516] do_recvmmsg+0xbf/0x22c0 [ 683.785981][T14516] do_recvmmsg+0xbf/0x22c0 12:30:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) 12:30:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="04", 0x1}], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x100}) 12:30:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") bind$alg(0xffffffffffffffff, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x30}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) 12:30:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x5e) sendfile(r3, r1, &(0x7f0000000080)=0x7fff, 0x4000000000000003) 12:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) 12:30:27 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) read(r1, &(0x7f0000000540)=""/4096, 0x1000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) [ 684.214174][T14557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:30:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000080)='\x00', 0x1) sendmmsg$sock(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000005, 0x0) 12:30:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="0a00161ae8afec72563504a73603e1be5d042e27", 0x2c}], 0x1}}], 0x3, 0x2401ebc4) [ 684.662141][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.683250][T14568] device bridge2 entered promiscuous mode [ 684.708267][T14569] device bridge_slave_0 left promiscuous mode [ 684.715477][T14569] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.815150][T14569] bridge2: port 1(bridge_slave_0) entered blocking state [ 684.822984][T14569] bridge2: port 1(bridge_slave_0) entered disabled state [ 684.832901][T14569] device bridge_slave_0 entered promiscuous mode [ 684.843504][T14569] bridge2: port 1(bridge_slave_0) entered blocking state [ 684.850989][T14569] bridge2: port 1(bridge_slave_0) entered forwarding state 12:30:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNATTACHFILTER(r0, 0x400454d8, &(0x7f0000000080)={0x0, 0x0}) [ 684.864544][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000180)="240000001a005f2014f9f407000004000a000000000400000000000008000100816f4dd4", 0x24) [ 685.234773][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 12:30:28 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000f3280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffffff000000090001006866736300010000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4c, 0x2, [@TCA_FLOW_ACT={0x48, 0x9, 0x0, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 12:30:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 12:30:29 executing program 4: socket(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12:30:29 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 12:30:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}]}]}, 0x30}}, 0x0) [ 686.138606][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 686.393050][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x741882de26a818e7, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 12:30:29 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:30:29 executing program 2: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x0, 0x213515de20012852, "0452f7a514202982f752d96b60ae7d531148da5960cc0b53aaddd206992093866b9fdfb86a8265b606f2302cb28528b7f760ed03077e2d8a6e9bf62ae3ab430666be031ad814918032c0707bd04c1e59f5e8bb0fd300ee05da2b85b9c90ae391fd14593702714ce42d5fe1981d45664ae13ed7870379bf01000ac0ecd6e43d4631042e44245df39af5e9dafe4a542cbf0b387a89052d0196764c8b8dfcb188a581aeb21c57c9a57f3b43d969ef120f7fd1a5d3024500"/191}, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)={r5, 0x0, 0xbf, "0452f7a514202982f752d96b60ae7d531148da5960cc0b53aaddd206992093866b9fdfb86a8265b606f2302cb28528b7f760ed03077e2d8a6e9bf62ae3ab430666be031ad814918032c0707bd04c1e59f5e8bb0fd300ee05da2b85b9c90ae391fd14593702714ce42d5fe1981d45664ae13ed7870379bf01000ac0ecd6e43d4631042e44245df39af5e9dafe4a542cbf0b387a89052d0196764c8b8dfcb188a581aeb21c57c9a57f3b43d969ef120f7fd1a5d3024500"/191}, 0xc7) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x9, 0x20}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0xa0, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7e, @empty, 0xffff}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x5, @local}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0xffffffff, @loopback, 0xffffffff}, @in6={0xa, 0x4e22, 0x7, @private1, 0x81}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r7, @ANYBLOB="001005c43e00000000000000000000003f9c374d74fb6fffc70dce342f6f31866f1817f3013b9e5c4138dc7ab549def149bc38dc378f29f14c853d50b652a56847a70fc68378ebb2cbe3420000"], &(0x7f0000000340)=0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 12:30:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000001070101000000000000000000000000140007800800014000000000080002"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:30:30 executing program 1: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000002840)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000003300)=[@iv={0x18}], 0x18}], 0x3, 0x0) 12:30:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x6) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800008000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x8c, 0x1, 0x2, 0x301, 0x0, 0x0, {0xc}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, 0x0, 0x1, 0x0, 0x0, {0x27}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 12:30:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100260000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) [ 687.247408][ T8708] Bluetooth: hci5: command 0x0406 tx timeout 12:30:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x1000000, 0x0, 0x0, 0x6}]}}, &(0x7f00000000c0)=""/236, 0x26, 0xec, 0x8}, 0x20) 12:30:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) 12:30:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xfffffffd}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 687.753899][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 687.753966][ T28] audit: type=1804 audit(1599568230.876:98): pid=14648 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/59/cgroup.controllers" dev="sda1" ino=15906 res=1 12:30:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001e000511d25a80648c63940d0224fc6004000440140002000200000037153e370a00088004000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 688.120728][T14658] BPF:[1] Invalid name_offset:16777216 [ 688.157827][T14658] BPF:[1] Invalid name_offset:16777216 12:30:31 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 12:30:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000600)={0x33, 0x26, [], [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}, @enc_lim={0x4, 0x1, 0x9c}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x8, [0x3, 0xfffffffffffffffc, 0x6, 0x40000000, 0x3, 0xffffffffffffff81]}}, @generic={0x9, 0xde, "f8f84cd3e162265ff28752d71ead271433dfa21fe01b28b3be97a0aedcf1d902df655ed9bcaf7c6ff2269597a9c5c00c2b7ff0a635732d222760741235d9aeaef4f0aca1bb2aaa37e3c5ead6a22cce68be0d95f0c4a025819622b56b2e4fb3fd373ac3823b24566166db01c416b96bf392f7948930e2cb64f6e8c954a2a52b4db6a138c0a24a9a6c9e8c6bf9772741b4311dc9de683233022e5bc94177100b01c6700f6a263829ac5ec00dccc82459c538c8b67d71f48da2eb66835d8b32e0504138228820954ba268c605ac38635da07d9ac18bb4ed7ab6373bce272da8"}]}, 0x138) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000000)=0x7, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0x28) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8000}]}}}]}, 0x50}}, 0x80) 12:30:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x268, 0x1, 0x5, 0x39923dc1b90bf8b3, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x40, 0x0, 0x0, 0x0, 'syz1\x00', "7e8d08d0be16833da53c9417d367e642571e7ecbe015ca7555b533513ea5546f", "5646df5fbe989edc9d9fb4c9472046bf413ad4905689e8b7b0657361485ca83b"}}}]}, 0x268}}, 0x0) 12:30:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4090, 0xffa}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 12:30:32 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f00000004c0)=0xfffffffffffffda2) 12:30:32 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x6, 0x0, 0xb}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000300)=""/244, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:30:32 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060100efffffff000000000000000011000300686173683a69702c040000000000000005000400000000000900020073797a30000000000c0007800800120000000000050005000a0000000500010007000000"], 0x58}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000480)=0x10) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/159, 0x9f}], 0x1, &(0x7f00000004c0)=""/158, 0x9e}, 0x0) 12:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a001102764a5a4320fa4b5e95d7874aa60012ff000000078a", 0x27) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a001102764a5a4320fa4b5e95d7874aa60012ff000000078a", 0x27) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000200)={0x0, 'dummy0\x00', {}, 0x4}) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r3, 0x3, 0xa13, 0x80000000}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a001102764a5a4320fa4b5e95d7874aa60012ff000000078a", 0x27) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x400, 0x70bd23, 0x25dfdbfb, {0xa, 0x20, 0x20, 0x1, 0x2f, 0x0, 0x0, 0x2, 0xb}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x884) syz_open_procfs$namespace(0x0, &(0x7f00000016c0)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 12:30:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @enum={0x0, 0x0, 0x0, 0xb}]}}, &(0x7f0000003580)=""/4096, 0x32, 0x1000, 0x1041}, 0x20) 12:30:32 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 690.045142][T14692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=14692 comm=syz-executor.3 [ 690.214807][T14692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=14692 comm=syz-executor.3 12:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000540002002f0054803c"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 12:30:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800}, 0x0) 12:30:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 12:30:34 executing program 3: r0 = socket(0x10, 0x80002, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0xb, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 12:30:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f000017e000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4}, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x40000000000037c, 0x2, &(0x7f00000001c0)={0x77359400}) 12:30:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 691.853514][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.872875][T14717] device vxlan0 entered promiscuous mode [ 691.900553][T14716] sctp: [Deprecated]: syz-executor.5 (pid 14716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.900553][T14716] Use struct sctp_sack_info instead [ 691.974461][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:30:35 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x7}]}}]}, 0x40}}, 0x0) [ 692.198432][T14727] sctp: [Deprecated]: syz-executor.5 (pid 14727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.198432][T14727] Use struct sctp_sack_info instead [ 692.353028][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 692.425332][T14735] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.434948][T14735] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1f8, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd5fcfe01b2a4a269930a06000000a8430891000000040008000800020000dc13382d000f009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd}], 0x492492492492805, 0x0) [ 692.662094][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x7c}, [@call={0x1d}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x20, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 692.728855][T14738] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.738605][T14738] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r4, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 12:30:36 executing program 1: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) pread64(r3, 0x0, 0x0, 0x80000000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x4000000, 0xfffffffffffffbff}) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, 0xffffffffffffff96) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) connect$inet(r3, 0x0, 0x0) [ 693.146661][T14746] IPVS: ftp: loaded support on port[0] = 21 12:30:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$xdp(0x2c, 0x3, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x94}]}, 0x24}}, 0x0) [ 693.796450][T14746] IPVS: ftp: loaded support on port[0] = 21 12:30:37 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000001c80)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}}], 0x1, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x17) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:37 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 694.122807][T10661] tipc: TX() has been purged, node left! [ 694.758867][ T28] audit: type=1804 audit(1599568237.887:99): pid=14806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/130/memory.events" dev="sda1" ino=16367 res=1 [ 694.786236][ T28] audit: type=1800 audit(1599568237.887:100): pid=14806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16367 res=0 [ 694.807836][ T28] audit: type=1804 audit(1599568237.917:101): pid=14808 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/130/memory.events" dev="sda1" ino=16367 res=1 [ 694.833391][ T28] audit: type=1804 audit(1599568237.937:102): pid=14808 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/130/memory.events" dev="sda1" ino=16367 res=1 12:30:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 12:30:38 executing program 5: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x100000000000015b, 0x0, 0x0) 12:30:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 12:30:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000540002002f0054"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 695.229669][ T28] audit: type=1800 audit(1599568237.997:103): pid=14806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16367 res=0 [ 695.252543][ T28] audit: type=1804 audit(1599568237.997:104): pid=14808 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/130/memory.events" dev="sda1" ino=16367 res=1 [ 695.755385][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.822150][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.962994][T14820] not chained 170000 origins [ 695.967772][T14820] CPU: 1 PID: 14820 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 695.976461][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.986545][T14820] Call Trace: [ 695.989888][T14820] dump_stack+0x21c/0x280 [ 695.994253][T14820] kmsan_internal_chain_origin+0x6f/0x130 [ 696.000534][T14820] ? ip_do_fragment+0x3b50/0x3b50 [ 696.005628][T14820] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 696.011481][T14820] ? kmsan_get_metadata+0x116/0x180 [ 696.016720][T14820] ? kmsan_set_origin_checked+0x95/0xf0 [ 696.022307][T14820] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 696.029286][T14820] ? _copy_from_user+0x201/0x310 [ 696.034269][T14820] ? kmsan_get_metadata+0x116/0x180 [ 696.039767][T14820] __msan_chain_origin+0x50/0x90 [ 696.044769][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.049935][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.054911][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.059648][T14820] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 696.065584][T14820] ? __msan_poison_alloca+0xf0/0x120 [ 696.071008][T14820] ? kmsan_copy_to_user+0x81/0x90 [ 696.076071][T14820] ? _copy_to_user+0x1bf/0x260 [ 696.080997][T14820] ? put_old_timespec32+0x231/0x2d0 [ 696.086326][T14820] ? kmsan_get_metadata+0x116/0x180 [ 696.091809][T14820] ? kmsan_get_metadata+0x116/0x180 [ 696.097037][T14820] ? kmsan_get_metadata+0x116/0x180 [ 696.102279][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.107715][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.113288][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.118528][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.123496][T14820] do_SYSENTER_32+0x73/0x90 [ 696.128405][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.134750][T14820] RIP: 0023:0xf7f14549 [ 696.138816][T14820] Code: Bad RIP value. [ 696.142895][T14820] RSP: 002b:00000000f550e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 696.151525][T14820] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200092c0 [ 696.159516][T14820] RDX: 00000000000004ff RSI: 0000000000000bb8 RDI: 0000000000000000 [ 696.167509][T14820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.175508][T14820] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 696.184123][T14820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.192134][T14820] Uninit was stored to memory at: [ 696.197208][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.202967][T14820] __msan_chain_origin+0x50/0x90 [ 696.207935][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.213076][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.218034][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.222737][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.228141][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.233729][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.238956][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.244149][T14820] do_SYSENTER_32+0x73/0x90 [ 696.249029][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.255366][T14820] [ 696.257711][T14820] Uninit was stored to memory at: [ 696.262777][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.268527][T14820] __msan_chain_origin+0x50/0x90 [ 696.273520][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.278667][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.283638][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.288353][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.293777][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.299353][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.304602][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.309488][T14820] do_SYSENTER_32+0x73/0x90 [ 696.314052][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.320384][T14820] [ 696.322720][T14820] Uninit was stored to memory at: [ 696.327877][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.333790][T14820] __msan_chain_origin+0x50/0x90 [ 696.338762][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.343903][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.348867][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.353682][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.359074][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.364674][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.369961][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.374973][T14820] do_SYSENTER_32+0x73/0x90 [ 696.379528][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.385862][T14820] [ 696.388207][T14820] Uninit was stored to memory at: [ 696.393264][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.399041][T14820] __msan_chain_origin+0x50/0x90 [ 696.404007][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.409155][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.414151][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.418865][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.424294][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.429875][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.435113][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.440015][T14820] do_SYSENTER_32+0x73/0x90 [ 696.444558][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.450891][T14820] [ 696.453226][T14820] Uninit was stored to memory at: [ 696.458300][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.464043][T14820] __msan_chain_origin+0x50/0x90 [ 696.469033][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.474167][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.479124][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.483834][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.489257][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.495308][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.500686][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.505579][T14820] do_SYSENTER_32+0x73/0x90 [ 696.510332][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.516660][T14820] [ 696.518997][T14820] Uninit was stored to memory at: [ 696.524050][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.530305][T14820] __msan_chain_origin+0x50/0x90 [ 696.535276][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.540446][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.545428][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.550139][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.555545][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.561125][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.566354][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.573597][T14820] do_SYSENTER_32+0x73/0x90 [ 696.578137][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.584901][T14820] [ 696.587260][T14820] Uninit was stored to memory at: [ 696.592320][T14820] kmsan_internal_chain_origin+0xad/0x130 [ 696.598094][T14820] __msan_chain_origin+0x50/0x90 [ 696.603066][T14820] __get_compat_msghdr+0x6db/0x9d0 [ 696.608212][T14820] get_compat_msghdr+0x108/0x2b0 [ 696.613267][T14820] __sys_sendmmsg+0x755/0xf70 [ 696.618000][T14820] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 696.623429][T14820] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 696.629386][T14820] __do_fast_syscall_32+0x2af/0x480 [ 696.634618][T14820] do_fast_syscall_32+0x6b/0xd0 [ 696.639612][T14820] do_SYSENTER_32+0x73/0x90 [ 696.644159][T14820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.651587][T14820] [ 696.654141][T14820] Local variable ----msg_sys@__sys_sendmmsg created at: [ 696.661122][T14820] __sys_sendmmsg+0xbb/0xf70 [ 696.666193][T14820] __sys_sendmmsg+0xbb/0xf70 12:30:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 12:30:40 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0xb8a2, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x40) 12:30:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setneightbl={0x13, 0x43, 0x1}, 0x14}}, 0x0) 12:30:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000017c0)=[{0xa0, 0x0, 0x7fffffff, "b1284ce88d5740b1a1d090b76dba45832824882508ea5732818223dc7c0c9eefb8bb131382a17e3cefa3e1f94c5ab430208165484a8838632681e865df601694bd2e3ffe2a2467a55066070aca50ee8c3fa011ca37b2230d1c1b5a8ea63d8b89b60f6956c084d591181572df5ec77e9dab92577584694c99ea834f1fafc5b2005608fffdf2fba1f3a65dc797bb"}], 0xa0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001880)="471088047a17e1b5f8867a018643982edd563d2d21d62555e616eae5353d21f9f0299cfbaaf50c1ebb7dd4b53f96c811cacd4175b19af7faa42ec37f7951bcd0b187ca476288143264ce4590c6df7d0339d522ffb259c863509f633fbf507fa0830efde004", 0x65}, {&(0x7f0000001900)="af87314759437f685deaa644afedcc6a95b5f413bb5b2128b736530e0d8a05a62b66b7db8080d7735c5848df6d55f274336102ed51931984ff173f3d35b420daf6b9cb061d72fa14009b0ce15c438cbfeff31540bca054bec1875c9bc2cdfe2cd05101d068a660", 0x67}, {&(0x7f0000001a00)="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", 0xbff}, {&(0x7f0000002a00)="a08e4425896e1b3b8388643e77b8c0b423f45783685cdd5a26ee8f8d33aef461e385d3ab157b07d1a15f05eed8fea8ab7059550003e4a5a3f43cb5948eadd6d2110922179e9b881b71c8da7b2357e34761af1d7f8cbe988da932de9d6453f06b801a5d13c96a03a5b7201051b86349fb7204c29e2de56781505d66ac122a513b66c2213aa2e4ba34f9370cc57a1ddd94d40993662a09b35474689d93525543e2c975d155d2f19deecc47788985f1dbe4824e52281d0b22441b1378d2a0e095f26ec2667c9c25295b34b1de1e7db2f15ebe0641865a4032bcf9a1b735c6abc73663f6ea41223012a5dbae0f68c01743510b04", 0xf2}, {&(0x7f0000002b00)="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", 0xffe}], 0x5, &(0x7f0000003b80)=ANY=[@ANYBLOB="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"], 0x1020}}], 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYBLOB], 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}}) sendfile(r3, r4, 0x0, 0xf03b0000) socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 12:30:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)) 12:30:40 executing program 3: r0 = socket(0x23, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x891d, &(0x7f0000000800)={'caif0\x00'}) 12:30:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 12:30:41 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$kcm(0x29, 0x2, 0x0) readv(r2, &(0x7f0000000840), 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 12:30:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x82, 0x4, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000000c0), 0x1000, r0}, 0x38) [ 698.351514][T10661] tipc: TX() has been purged, node left! 12:30:41 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0xaf00000000000000) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x7fffffff) 12:30:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) 12:30:43 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r1) close(r0) 12:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x24, r1, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 12:30:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) 12:30:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f", 0x12}, {&(0x7f0000001500)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d4", 0xb7}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 12:30:44 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 12:30:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x741882de26a818e7, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 12:30:44 executing program 5: socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) recvfrom$phonet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="cfc76c5d95ebc0097ebee6a0b1cef5300d129849212cfdbf644f825e5a2faaebb7642870f27a1bea58acd0fed2fa20e7b35693ec4389f94e2e86a3c9c84772887464790f16c4a5072052deedcf5151df0e5b69", 0x53}, {&(0x7f00000004c0)="714552882a82e3a0231ffe6f1377f45ef631bb6cc5dd5af3e6c6a6c2885047d190ae171db37be14476d34c535727f9f552249f0ffd62dee6c95631e668c9ca3c56ba1cd902d5e250e3bfbc86749483fbe89229de831f72528b92f6a10a0c70b56b20da1489a66fca8a70b5e6e50360fa09bf22bdd6759e116acc1b7dd57cb6efed4284ea7ff7eea3d4047e8e19257e1529ea2cea663b038ede963a3bdfab5532e9d42c2c7ca16cdb969941e1f5fda99a991de8713d683e69496a1bb2aff7f7", 0xbf}], 0x2, &(0x7f0000000780)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x4040805}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x100}], 0x60, 0x8000}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)="44f3d717b00a64ce76236994281687cc01979ea911f289062fefcc4c13", 0x1d}, {&(0x7f0000000f40)="9fab5317aaf964f6706bc721e1b176d5ef8379b0168a9a9fbc6f0e9fd937d327e04f63a5d3ba6fd25a153d2f0435ac58c2fa38600bceb138818e3b2c9d0e3aa1f41edb15d99ec518309bad00021cb0fbea4132ba115b46d16cb8e7c38a95f6a96d0ff4818cdc4ef3ba159a4c8d9ac1545ba149b751c8986e8c3861abca2dd9c478f4428e55f2da980859775677fa538887ae5bd83635f4278528ef438f424d12c4d429e4a051f8c672b4375e88c6f6617eb17f64b5786e1fe1a9a0a1cd7507071adcf5d2b0cd055f31b37e676c3a2eb2776707241abf7f", 0xd7}], 0x2, 0x0, 0x0, 0xc0}], 0x3, 0x40) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20008801) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001140)={0x150, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x11da}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x800, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 702.009086][T14906] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 702.170829][T14912] __nla_validate_parse: 4 callbacks suppressed [ 702.170867][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.209052][T14912] bond1: (slave bridge3): making interface the new active one [ 702.221554][T14912] bond1: (slave bridge3): Enslaving as an active interface with an up link 12:30:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r4}, 0x8) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 702.395996][T14916] bond1 (unregistering): (slave bridge3): Releasing active interface 12:30:45 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5800039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x3c}}, 0x0) 12:30:45 executing program 0: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, 0x0, @local}, 0x47) r0 = accept4(0xffffffffffffffff, &(0x7f000001e280)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f000001e340)=0x80, 0x80000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f000001f4c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}, 'dummy0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) recvmmsg(r1, &(0x7f000001e380)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f000001e580)=""/163, 0xa3}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000180)=""/11, 0xb}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/40, 0x28}], 0x1, &(0x7f0000000800)=""/27, 0x1b}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/177, 0xb1}, {&(0x7f000001a000)=""/4096, 0x1000}, {&(0x7f000001b000)=""/4096, 0x1000}], 0x4, &(0x7f000001c000)=""/4096, 0x1000}, 0x101}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/184, 0xb8}], 0x1, &(0x7f0000000b00)=""/124, 0x7c}, 0x5d}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/186, 0xba}, {&(0x7f0000000d40)=""/67, 0x43}, {&(0x7f0000000dc0)=""/33, 0x21}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/105, 0x69}], 0x6, &(0x7f0000000f80)=""/43, 0x2b}, 0x80000000}, {{&(0x7f000001d000)=@hci, 0x80, &(0x7f000001e300)=[{&(0x7f000001d080)=""/170, 0xaa}, {&(0x7f000001d140)=""/4096, 0x1000}, {&(0x7f000001e140)=""/185, 0xb9}, {&(0x7f000001e200)=""/101, 0x65}], 0x4, &(0x7f0000000fc0)}, 0x3}], 0x6, 0x0, &(0x7f000001e500)={0x0, 0x989680}) bind$bt_rfcomm(r5, &(0x7f000001e540)={0x1f, @any, 0x4}, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r3, &(0x7f0000022680)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000020980)=[{&(0x7f000001e640)="6338e6fbb7fa1d4acae80d062ef04c1bca4522844e3ba253a623496300acb79f32918bfc385897ad57fe8e57d4932d9244d871fe83becea3d67a7ec9e1d66c41dc4637e99e86a82e", 0x48}, {&(0x7f000001e6c0)="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", 0xe00}, {&(0x7f000001f6c0)="a8498b246a8db16b25e44021b48a1de59406566faa6d7ee7ee8e005fa229c86739e7b8118b4bdc07cbe0ce7522967d0c76e54a2dfe42ae1030b72f06e3b86af2a261fb818ab7978b9dc473315ab5d6c08b99f32cc8b76b33bed588e52aab2c67ec1b52ce4b1b13113fa665d5a88d0177ba645e6e68dad98a55978be9efa71d09a8bac4ca618e498a27f4e7ed2f3dd78a9e7e61c2bd024392a42c97327b46f73fe2793db9b759bbb013e2f372ef86ce6c79890b6064", 0xb5}, {0x0}, {&(0x7f000001f840)="f5b517243a7d2f7180610917c66ca89e2f36890d0ef267c5484a8bc28c71bae6c28e8f709c5f39ead16e76ffab3987c051fdb06363eef6d1bee57b85c84799ff53142742e8bb661a29e35a9bd2792a317e3d3468edc0e9401efdc4dc99a74b1a2c313756be4b93dc0a7a7c61b26523505205d0c33d2aa927338574e8b41600dfff8ca3289da42416a0d06055f49d94ba4626af4d7a01cfb1860acb2ded0ae661b0820d8370cef0b43e559e1c96bff03ae62232b7c9c4ffb81d", 0xb9}, {&(0x7f000001f900)="0975fc153dacb6690345653a75fe8482ea4ddde7b7dc22c1d01b613e952055b3eb3fb40c89d455095582314f76a2dfdd18c44e82aa6ec7e76ae103a01c066acaeeaeb4655e00e722faee83b40162b6cc6c00f947a6203d097a9fe4fb9e479d1e1cdc530cae1d779b0f5109ef11b2c5aa458346319f955a506ad55b804e7aede5f6668602ff0de01a92f4da8929d71ee6c3c824b7eb9fc5075cedc1d000a3e535c5a6f3e8e971f33d75a613ec4a64b0f7ec759735404376fd24203c690bf136c510d38c2a2c90255ac91399cf508f1ca279e0616d4817ca1d85915353785afed4566052bc8ab9537a12344af87d4aada72bc39dba6b3220656441e03a0cc118a6a12054fc7ebc22fc49a53c4e51fcc41adfa33b2b40c3661492273864b57a2ced10f39e9ab957567656a31a1201934b901997a09a537e4e4ef5889194514c0092e754146e0cf9d4adc796749179c0453f48fa9b969a72ce0dced9a718ef6f248880ab6c3f35d58c320c91834e714987d9961bf6f7025b22b78027c21120b714faaf6700e1bca4b48a2f9b003dcf8ed1197aeb06c377774fd50d09c38797acb7f9757ebed9ce10d94336cd6d22d9186952de64d52971f680e5a53bef5e780df122b2d23825c4b0dfd5360ef1aae00a9d6f4dd1258ada8ff413519ad27e4bd657633c783476958aff86849fbb37ad132d78fe87de8ff1f3a61463525248bc59e454f245f0cef1c2f16cf9404b5ab76e747dc9f1735acc41f94ca671d9c1c239b1da1abea3c8ce68610a39a9c808c40b6eca81cb39c54907d15746082925de2e8155767a4722a8d7ef1c3eaac7e6336de2c082223b37a1c4c298ac80b4b5cd48644eb44410d84250dcd25233141c1674f10ed65d93241c58965c4e6dcf196fc6fd73194a2780cb57647839b27739b3ff942cbffeeaab50848b1e6c333b1d433958bfc72e5065c45f994ac491bdc4e94e7823fa6fc564f90c1954e31ac90b6a7736862e31718446e9919037ae2a00113db837a5f804d7ba1f004aaa928e4025cdef93d6d3d42598bbaa87082b23fc5669bc1b2c602f20165b915c734570bbdb9348f21ef270c801e4311cba773e9dad6d51d0ca897a301267bf158c35a9564ced348451561c9febf29cc2603f412a50dfdc2abb7c2cebdf9986e69b8dfc4062c3dfc42ad387c47e9d81e38c9101a6708cd5ad191334b355c93c535d1ee4d4a84b1484e1d71fb9f3c3c00c3ee9ce05b1916243f2f06f509ca8656ef98b97c9964361020174f84c7b72ceed006880d1adba56160ab9e57bfe1aa65a01cb47c986b4917c80d46df7a4253253b5e0c4b5dd8978a0ba62c4ebd7926c67236ba9ac330ed7f9cf66aefb39863e25e666693a55f150cda1252973df68a112b7fabf4bb82538679fa6dac17b6fa930e5abcf5ecef6e6697fdc974b9ce791b790cbb3bba80e633199ea3afe30f09ec829e16849d445e62657f41be2be81c9d657aad6b7ab9e8f04a302ae3fe0f13df6237de08a61e95d815676e0f72edf06ee5c32be8c00a84218a3f0f3c276df1f0b8657c4aa548f3bde4b086378b825b1e436ded9bd0054e0c7f209e2267646353693a9799c421cc9de755431ebfaed10677d18aa913e636c7d0295b83eb9fdb29e17c2935cd5050de3cd3b3941544dca15f62a8e5fff2f10cc9051dc8e53ee37e504c8b27a376975149fbc0b0ebc66bddfd3699591fd42d72de4ca3a063cb365be9a3788c020251cad56628bcb53d0e38d93b680d90053656917c9a5f5cb44e1dac52f33734b4c51f76689512a45078d156320c9139727b5ae98cf425baa363255484e8f9d0921315da05f4e340a494481e3f2edd2c10acb1558c87861cb5011018581aae7f463d635fca7da695fe13be889b2be0558507d33542a9b78b2d8660e19802e14f6bcc36f79d310091d083b9350f613a03d9d8259d0bcd1645ce9416c5c757c862b5125ab516d3af48d355bc26b3dffc58a76a11a3492f31cde96b070a6bf42fb701b8d27fa2f8097d840e44e2c1402f61fb5c937b65500b7dfd53156a6f7d0feebd5dc2ae0c505325890419403e89d5ac64bed56ebbe75ffd27d72fcc8a26e47236085c91d541bd7afa1225f4a32011e0382271d214eaf063e21bee3f613872d9457696f23fd45a40f719ee2a60cf8ba28dcc9d2cbd381f54f785a42f628d5a79c10c870115cbb19ee179d56c1f2fac3abe01a01c44f5a88ba496f2be84d2d42c411d76d3a813b58ca6c63c9fb45cd620d2ccb75dcd66956d80912209358118cfb3fbafd10ec7638604490f7dacd3bd72259ee5d59b3d240f9bbd16574b840e7e524c3d94deb9e8fe626c09816332c2725bb55c8aeffad1ae6ca2c7f404cc860afe7f8f791158922fce4840da2644b43a3b3333118edf1f777f74b6aa5f0be56865b9315401aceb8dd90ba683580b5d153cc9dce33c2eb7b788ec6d53e7d85df77902963ab1caa6fede2e4f0157233adab8fde885fd593d4d461403a21dd8ed6231065f4595a9003540837b40d8472865da523f9c1008c98924656a2ab58862f239df1698ed6e23d5c0d572eac8cb9d3e9743dac3a4c63f7cd53d6388d49b21be8c78e7064501bad599dd702e169262e96297bef37e076079cab4728f92fb818af5e2431fe2d01af5d661e76415d6ca8b4b1ed53cc5247216e9299d9456a6a45f854b78fbca8e7dc8a3e3db458618b01f2b1391ba1c64d69e0f828451ac01a218afbf1527088690cfc21b3b532fe5120b12d1b4d212d8d3cfb63f39e8ed17941006622ad0428f70effb28b9b60b890fcf309b564d1117f2aa21efd16ddb106e0237877ee3b6eb778b1d45032123d420f5618aa5ef59f3988069d528aaf586ea3c839b7d8b7e06d6c14b9b06c4e24d3ae8bed481c4959126fd9855fdeabde835e5c39cf03bfc632e428d3db5a8b48b34d7b10f4dc2704d6b4bacf0a20d01ad3dc346e3e5b0156231399f0b2206b8f68b69e0fe5afbf135659cf1780cd166896bb85ff989fed7d8485783b8eed34f1e9e0f57931ef0480235127b8a9159e170408b97c21feb0876c35380ce95bcb402d152512557cdf1630a126fa69260285a44f13ca1e749cdd1e17d643c2238ae723284e5570cd29d9df41150e42470e438a4c5f6c2a2b399765ee808b5acd6cc9a99b9beec47b60d669f1cad017ff54a0a07620b7e2024f6fa1655162b7134a0ad92c9b794025eee9889d43de54907edb9ef2f64e103c737fc1366d8babf5effb9b1157fc6acfc6a8d7e4646023555d0d7b5a091f0388361711f00093ed955e60b0d62af90802c6aa42ab72efa919d710282adda4739ff9d174c3979ebf1f9303c87e6c12f79d30952af875da2ad4fdf9668cc603043e0a5017ab6206cc8e5189eef460a8f95a9f791516cbcfde3a46bb210d7ee6e2bfc6e6bd7f5e7fe655a157eaed7df7295c4b137f3a880e4576a47e5b16dcb483baccfac48a3ffdfd4a8f28b33a788eb9565413e5bbc31d6bbb534300d38672866ffb2b883da8348483a47aec3efd4cbff77e80b8d4811a649f38d60fa1ef527e802348b3f42f08857060dfa292275ad384c89dd9815e79a8d1d4642b63288cccb1ae57f585bff694878ecffb501f119b316901bcbc99602a39c7683c9b7879a96ff8bdb7d797effc840eee0a6e63bf83d499b542b30efdaacb476541d34ea1e844707d22f480c221bc571a207e438803693e335a7a61e9286f7701a791b723ebae7d9e013fb1254779f8d1a8f2790e1f4e981dbff031c1e4776dd5e74b2d2facb821d25e3eeaa72a6a82fa089c1d72c20ac39d9b784e699fb67075341f5cbb522bb26e27182a3b2eb0060d34fa26c26342cd235393a1c0cb13b226e43839112da7d3d8985df7510b9fad3c24f54cb7628bef1e7caff55149239ba883a6bb1f4b6f7eeab5f1e16a7530df65eb35b445cf5d9754eadaee992e87f5052fb55c46ce7062e7b4afc4209d33b9f78d7ab9985af58a8d990b94023da2cb191c5abc493dd4c9ceef3c47f32e96037003d78a3cf50a4561ae82a8afee5025af642a2646c1d3443b1b9416c610f4d52091dc4c8fc7d62df91b66d2d4529f97f50c16cd53c476e80069c7060cdf186a1312fe8d22f3b1575482659fd57ba486732bb2117d975666a90dbf841e5642d81dab124535327362637dd02e93c0017bab25e5419112bcdc376032160e8932ba38f4a031535883c0dd669cf2540f2caa6c99fbfd2b006e92e5ceb5996d4e1d9da11a44e1336ccd21e9ef642dd58b525acf4aa2db2e772972ad9edb2fdca6eb7a8696009de47b9683fe253eff26e11aae3b7cc8e937ff9b575bde29d8ece3beb0a93fa843169d228347a277cd30dcf076b9ca13ec4008552012ca413f1886e21db85719a77b40bb5482a37057ac93666d1212f32a08bd1852f956de8a2d1f4f30c7418c84faca8a701dbc7a0ebe97e5590183b9691940752e227fda5d665be16f92462b2868852d77a5bc02283146a780a6af8a773791eb6e0e2c1a549c598a9391e28f719551310ca95d1cbd2eea9da719f0f9b32d79a2f08558fd934f4f181b9b2a686d44fa51ef36b2c11c3f7d003361caacc41c02d521c21d18c139ce08fe535f130a1d79998b52d600777de5bcf285ed47738eeb8d9f7f28da0b573f0e4c636b67149e393bc60d25ed44ce921660afa5f2bbf00f2e05aa164f792ed7e728e335a28a4d7acdbfabef80e9a30096e494e279b971bd70fb1ca599c9d9cf8a2d9aae17cb4fcbf8739dc2c092893b218ba05e1239f3ebbfa60a7384dbcddd73cc5947c639f966556d3cd44577b9b51554607c9ed3526b2d7225cd819aabf151dde67c3d52c40eca03c82d13dc9b0927fa8bec0274663d4ffc67e104f657c84917837e39c76c41d74d1d91d4c943ec7f39f8bb09d53369966c273e74e2cd23bfbe39f63d887b04a69c0ceb2ad2e6efe60d27b2f7bc31bae35158feb9cefb57e714455f58ceb7ce592aa428bded3cde557c29057090a173e04299125a1ecec0bed99d97327da5014ef11d4f566ecc59bab97148acf9275a1573263f3cfbcd004d4f5450d7461473cf0b6c4609a4895a8254c1de33cd8bbb0cb38e6088ee38c09d38fed9c4ac263ede5aeb80d26f552b2a59773c8a4643783da51278f19c3974b6a721a1fcf7b48a6ebdcb4873abbce88caf482131fd3995bdb14c65ac315b7766be9408c0b57075ef74159c9bb1779c680aa8fa687d5a192fddcd096d2c627d26df52a5947eb52192d19fd839b189be355c2a77a842848594d0a3fb1b01e9921d477b844004a0bed9b328a14c327ab27cc142f36056c9f033c91be648912ec75f795353da60425f32890d5b26eb14a3d78ec3d0d78f5fa23d6856be7d5947c771e65eb97706e2d27f89a0b5cf89096c68d8ca974b5ff648f2d3491be3a6bde47555e3dab6f0f4784a4c26e85c7b79ce33ae190114f348ea959229840842729158d5b3d5e8504724475f898ed806d4f4b32225464c5298b3dd5e82c58c2aaf63778dc4df51287f7f3e4bcbffbcc02f50d5664c145dec06e38f18d41bc2a182a3106fe5ebac7e77065468a0cd4f5031f15bfaa00dc23173e0700b1aaf66748101ca02b9bfc5b848538d", 0xf80}, {&(0x7f0000020900)="edc995a4f29c07db97e8abd7c9a34adfb658d261e2790e71cfccc2a21539bae6724521c80e82db24658ac42767e071e4ada6c692ce50b957c3f254e6a4fbaed9335883691de9d671d8798395f2658b07fb89c07ca02ab6235a7160d6effb5fddbf4bfb05f8d14e18b9373984bae2c928bc8811cf", 0x74}], 0x7}}, {{&(0x7f0000020a00)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x80, &(0x7f0000020f00), 0x0, &(0x7f0000020f80)=[{0xb0, 0x109, 0x80000001, "6064d17cc08c42f7f005c3839b49009065345374a953c32dc6d2f92ddb069315b85d53e92772af5499f7c984067c7a786c9a6e91644a2cdbdd2abf1b1e14006bb72e278d2882a5e61e7639ad919e8c8105abc47c0e65469cbc7ee88684d142a1b4712317fe84797dd68cb9e2081f86d10bbea2394980fd171948d2bfbd6b319d30d5f97fa4320aa66773a2e86bef5a6fe0d1580fdc4d1097b56acfc3d1181615"}, {0xf0, 0x84, 0x8, "074b83df343b9bca9ae5e5a28ad1ffa357170d385ef95fc962a534b2e730504bdac6b2e194c74c6f89dba9a8b66a8d8d077635ca961878b0dd1a071038ab8f3a32b88441245734dd0d6380f43dc8d125b6417fc0531f5f9adce3daa6ba6838a258b5847353fb6ffe504128eeb9aada8bde75659a3e39ff58e46c399c9eadbc4fbe2c6fd56c7602bb91e14d67a0f15e435e3484f9fe2d388cc7effa8535368e53b0693353d1ec704a9ec452f7bda5acfe2f58dbbba466d1e2d31fbabb1f1b451590f180d9efb37b806ab9add3df9f0cb9896a41276cdac63a1e92508f2f920f58"}, {0xc0, 0x127, 0x0, "9ba783d6115eed10147e1eb9c96ce2dfd7490925e3f966f2852e8dca0c7a8314c51baaa97f3dbfaa47c67fd1932f66b75890ed5e9712d40a9c0652ef979e1d9199e95bc9ce77dce396e9524f60a5e68cfe5f29af3526bbd1baeb6616c61879e1c52bf81afbcfb0f2bdc9e33f501435c20fad31b2db6056160328217251528037b5349b04d2e8ba635d26f5ab891cfc3a7e2f90f1a91ac75e6ee2ff23781e6ff1d38cca6ba09bcf4c7c1d"}, {0x40, 0x109, 0x3, "7157dc9d5d0217731fc565ef3725f3325142c65f5194eeadaa6f82cba1dc4c099a25577d727de8e6ed3f436c"}, {0xe8, 0x103, 0x8428, "3d90e6bba0d97534cc83dc7c6a0cbdce732b84b2ee1f1ec05221c0739a348adf979a4827298882d5dafc765a1bdb38b2f367b019ebbe9607116476ffab6456c55c8c344cecb6682277082a44de981965ef2323892d1d339191783da7acb9623a878880f3593c9b2687b930a78108b93069b7a414753436ec2890d40eeaa7f6cd64fdc1fa6794e496b59695479ae3e2a72c43fa6da7907c3e058ac8eb5972bd2b1833194afbe7735bc3640b1390823991933205154709a28735ce6ea68d8e5daad6f333f8e3fe49aeff4f41b9e556d3757259624868ca"}, {0x60, 0x0, 0x1, "16787ae9638b216331a184ef4d0a3ec93988e5e766e0164b617f919019102aa536ac6bb341648af163a2b0b7f9cc4e86bcf50ac18ae5e9d8653c24c70812b2f95f6d38a77e569e5f6abc84a4187e1846"}, {0x1010, 0x113, 0x5, "f595b7967661f0c8a473419fcd663f00c0be37569eb71de0309eb4a127b3f186b4c79859d7edf126d6a1a78b79c6e22dcf602d53ba53a36ce4222f03ca6a9a88379c384f614a749c0f4001ae3a582d9cdeadbe62d8f7227ae22a186ba3e6d1a441fc5c14192d12495f84d3e7cb3ea35049a2901bdaf011dabdb11d7514ca5f503f5a4e5e63f1281f1d92922ec47d2f5e58f0b9d5bd54a7d78c9c1e2c13dfcefaa1bc1824f8366b0938810794fb442a1c643fdf668abda296af301dfe8ff34ceb05e11542b6c8e635c36316f7d2c06629de00731934a3c3a59e3f3f0bd02b8d32ef2cd57f7a0db79697000bf5115a3041da81c92085d2bfc55d6fcd7289efa1301bd539072bc3b6b585da4fa2f62820c2d468139f7c64a034359c883048de36a992ec1b5fcf358d5a71165a547a9ce8bd0a9144026694bc64515b5396aa9886354f8fd4c78844333a062c4a598c4d407585adf7532a99fd6803c05aec6cd0603f0054ad69c62fbd7f06167605210b0948ac6b413aad3393016d830e0105ffd034c9864a3dd53d2b98633ea576b1aff0e70a6f02cf661d2191d6c2a70762fa6958ee2dfea47db3210bd54d9685c0f87684903604b208dadd974d33eeaf25788230a72d2a39d847e9bacac97b19e6024f104f10f5a6c4ef5a7968c8785e0074479bf84ca700a7914e9a98d237230a1ad98c8130e6bbd64e8329f0fa4873bfd8a96cf81e9935709b4a39aec0faeed5ba91252069e078d1644c9b9cebba65ed58a8b252ee793e45b3100ce776011222ab81e6608cb869e68b2a981cfbfb432ddfd90c8513a3f7fcc602f40bcfb1f2f515550ad9680dec0ebbfe6cad5c19d854f7a3350a3c446db51a62a1dc44602753abd120fe38aa4b21e30fed1dbab79eb81392bd1044c518289e596aa3140e88c7e72c9f94f6da049178a90fba93416fe04c38278342bf631adbb931d2d770e16090974706ac8fd79b9f2e0435edb93a6c929cb780ed4b1de01b243d1c201bbaedc8c8ccd237480529e922a66ce73e8fe346538e6a9d6e5898ed0e770bfaf73ddb30d2a08bb22264554e69db36b7fe4a03d9157a499a55def14158bbabf78e44b8e9f50eabd88523f31332f96accbe8ae221a5960736ab9641b79a0fffb3e38c25538186b2c507ade10858af4b2682d23dafde7013360b33779d22c29827f10c9e5d21b48e4f3328c9bb8b5f63d8423ae2974571e0136f39b0c4708446fcfe100174b9779d1ddcc1d1554e973d6475a8068954630d1a977a81af3e8003770f323aa0d19d4e55472cade403aac5f6abb9204e1c7b2e68be6349c5b2b03c05eccebc21c1bdd57a96e9fc1743bcf12cc4dcb1c0d0979cb3155506581f351aacf2db4675db4823c228f950741d91c02a2220b9bdfc92531c751e43558285e4115df03ed42d5dfe6c6dd576ba7fe539b2025a384588c0cd8a56a018765a3e29cd3dbf427a5da5b14d4c5eb9cfd9a5ef9aa7b3bc3b1a9c3bd6115d6bdccefcc3e5e5a58c3232f5a7fddd70859b3003d87812e3016cef7ad359c6ae3f2fa2f181824a8dec173c5fa1f9f1e281fbc713bde19bb0e547ca19d32784a4c413f5391f5ec717f473bd66dac08b419efc600d700161ec68a9270b65175b2174e262360e3f769753876fb5f0c5837d06ab475b7cfeba3c1214ad56b0f24c43f3afd80f7a77e9a1ce7559f6e43c55cc1e48315f0d56de40c56056ccfa19e84c045fb91f015254178783e1ced047ff373916453cf0d24aabeed833ec8de9db5098aadec0a6ceb2ea08e65d91882d210796ec643d1826813e3c76fbb1a0bdd087b02feb51bda99362ebcf8c8e6c5d62f240467b8f2ce208a951de31de93fc6b2d79dd0cf5c60a54947c8507ecd484dc3b478d833ae30174c9ebe0c19c931655755d94123bfdd0b6ed14d30d7b2cf6bd1bfda80ad9a980cd4d67019285faf6d7e223d9b7720b4b26539ada5576f2584b77b7f60d5f06dee8a9399a0ac49c8557ccf8380c60c1538e873fea2fd9d16dc43d2acd92ad5c9111b44631f883ebfbf9fb1b286ee0836e0b589a33c83ba5e41b15ff7e0e3ce7bcb1cb3814e63a09547605918fcd775c0b66dfb57ed8f4ead7dab9a253f7f78376fa5aa0dce6eee867c180e6789748b4ff05854bbf758241d51688349b55a3b75187d33825618bf947916bcc499ca14205f43e5ffe34d12c37a7cd9ff4ecdd7e81864523bb67294182b2694a5f7c953c1ebe4e1f2d2755a0bbf6bca1976fcd20e82a0d5278175a094aa21f90ca13674c41f1b39d193dbf0900ebcc2fdd794cedff2aee329c93da068396d69257e733a7e63f10c7c4a743d3465591b1fd7ea60cb2ffe28fb476914c03b6b65486f3d045ec8475dc6b8fb1c179f5dd67283be5d8d3378ff42f640233981b036ccdbf1330a71efdcb8391997cdcdd7af6e23c2bc21e1ef0a0644d9c622a88df29f4b82e9aafd4a63ff57ac0fb95951402f19d3d78bdf7ce89dc8a3d0b45f84f9c04890536fa0d4ee11092d7b46ce5c72c2ed314476e3c179af91626748d1909370daacf1aa0f25648911b46c84e13afb3fda9a9f72045ba9eb6ca2eeb1483ab2c5814ed2fd2980ec8058a377140b9ec7f909b6c6886caad265319b53e7b0b8e667f57159cd3d232f3af09a0882b51390cf4072c8ece7f2e2999cbdd7dda889cfb1b2e36f5816216bebf2b00376875d61d0de71316af9091eef9a33a403e74ce6ebef344b060477b6796a14b15293ffe44d7c0d6d1b9b56f559d0822c817ee53717a6439b58fc14b6201aa91f8f1b419ac77a66893fdf485ff5e098b9054bf0154ad544777e872b8cbf5da40f4aea240d63653be0d83590e4049ba164552628d4c0f525e91064437b9b8b65baad083231c2eb1e69647af5480d9937dd2ad6800f09a0e568253c7d64b6234bb0a90a318884649928ccc6c2a6a2ecc259a3e54a43f817505b55d00fb3876abb405c6ce25fe234f98632a2c38eaaff3739f32c19f6517d8506c6d0b166d9cd65a8b5503402abb230f6623a60a57553b03e719961d82a8964931830cdf2c5e6af71525a72790e7f9acb87cc686d125e96d82ead1bf3599a32332d5fdb0be164e44f636fa1565dd8b132dda6e99f47ff0aa95b848cfc8573f0d18c36c5289935d1223b3e31e30ebc65239e07df3e8f6dbb0148fc7467093ab4d4ed30dbc4aa7a1dcd2e6e571ffd35360f976cb016d42862743aa65f6c6c90698ab91f9357acffb7b8f3b2fc9b688f52b32c89638661ebbe9f4c6d3eff0db42e18db5457bd712730f5ab0285ee32cc6d175a144673a98ff97e6936fcc0c4075e4416172ab20e4efc7ba2f525796dcbeedc3ad2c89d7c2b4b7fafe156b298829859270780d497c86a7df84faedcd392c20bea885a50f83c24be8a45e3b4ed58b3eaf5979ee9c739b0452fac94a1a2b528d69773dab96f68d560c98d0d380a5d4287e508a8e8b5c5c5aae3cd7514fd1060ca9fc822403d8cc8dbf01c56095bdf327e6ff0d6249fe1f79d5e6f154c4cf84cedb98f196eb5570dbecab50df3a5f22bcd39cf63cb313f713188a65e45458a7c2fddf64fcb6eee2e21a46b45330f21803c140f233980e8d9c5082a8a9ce87a0d85260014ed283f2c3937e8fa0441bc2abbaf313f93a11afb4dba8e07f679643d6df823b44d9e09d046319b27d0c37733dbae85a0f5d15d8f34588d4460360ff82689b70b3f5dafa35191cbd9f67e93b4ff407e5e6428e1e5f877d223299db6ec0cd41c4f9e7dcfa58554885eb87dc90ae73867fd008433fcddb8bbde6829768180a1c83e31d68993543a79f08cb8f3008ea6a72762142aa931cdbbecff7d03d3753ab89753d7ecffc8c6fdb3c682821727ab512efc0d93257e2c342f01cb8cc594b8c0a65b8850206926c0373fd5a18b551e7771ef4564c850094d3e1c6330bda389a22c8619c8079feea4a9b7df87bda97fa8f23130432d819145c1a31bb0545de30dae7b289b92254995270010e95b89cbeb38ae230961577779dbf8c0a6dfb8c38e7fbef16c1c444a2ef501212e492a9ed3f85ec7abc70ea488bb15060986db486e9c751e33c1c9eaa7f9b0f09f8aa1361d0ea83f0568a7048e673285d146d178b404b04fe7812265a6d120ddbbdfb7512bc9c0b5bec54097ea669174eae054fb7edb96807da25614b58c927f77ca97a7dc7a4c80c2f536596fe36e4897df3b517f34a39d6f9a5913146e7572155cfa8cbb9d2f2c426ae81875ca9759549e01bff5b217283251bfc41ff90c6a7f67cb2c57aa7d9538954015bb61e9e50e7822c8f920e1481ac591ed16853869b5c8a2ac329ad24bef62eb6d63b9a6c840524d7191e93fbdf92f2dadf75f1d825e3ec45ec9224e6d2028e0945ee164085dc70508e559edf520b82c1c856d71eaec7419883749a0fe629d94ea98743a8bad5e1720eeaf574ce5cd7b79f9cbba369645aada6b982d6df808d9f47544e23afe24b0b14b0a36e75b4e909ffe92a8eeb08ce612b847b5cb3b353bb06dad4a951b29c7db057957ca8604f6ebbfbb3a08b8b68eda9c74bcf41fb20ae35915b2a2679e444ea30bc7ec24149702235661f20d972fb9afd35d857368122b463dfc3c5e122116cc5a1aeed1d7cf60772e4860543bd679acf6465b15000a7b92781282ec0019836a998107289ccfba16381aecf58d2ec9f05b450bf15c834dca05f23c3d2af36b439672cf4bb839d9212a4c28ef67fdae908de6d2e3775b61ccf91a9a47e2f784f514aa9e8d894fa0db8ec70583b2d58c8ac4af52cd80b1694a91c0a2a8900dcba4bd637906028c49844053c24946cdc0232fefaa6a676ec13bace77a9ae428a888e6b0b8f02d426f1b8565cb8677f0abe9f92d3048b2c60a6bf7635fce69507482773911e78f7f6aa57ede78ee45b8abc36431039194a98f96c4c1339f93fefd771192e0b5d9aca2ed1a06522d18d4615d5b3add54db29257955ec4338df1fd3ce60133506a5ddc90c671bb80c15735ce08d0fc9a4226fb9d708a32340b93755554386c3fd7b14bff834e79a5d73a7e60db71a440c6ef62fad7480b2cc30ee9dfe93e8b4a64a7fa7ac4f88179937a7bef862c2b53a23c0bfa3b88390c6f127e350b7b61924a33b6b5ad9539a02131f5f3f72a9e333cdaefb12c573c57db68bcead6c1cca186f7dc7ee82fb867b5b4c3056870952ebe16feff32b18941496b85fa952dde8c988055610592f35a96f32e1cac743d0d1e0b1a1507f8dc3828b70d5f5d7fe5de874df4b77ede24fd3e7e187ce3375abbf8c6a07ded00a7bc70566a74b2aa116d11d0ea35b410b67793a7e6a85a47f9af98fde11f7cf44f486edca2f7b8432962be56b27b822449cc02ee1d81b743b5e6a42563b66570c36d1c3e088c6485795deab0e2f6511116bd9df93c3ca02379675f85e7dc5bad75f28a1c24ae1d5934e58936119861f668e49ebfa9e715c296c2cb875b5e5a87bd639ca4e74090351948d099437ddec28e7cc9d6ac4e99712cb293f1eddd37d5c3faa1ba689f8b079d2800377b5332da27952ac708c19f2680e16abad37cde0bf28a16ec68fd6c956450b15ca811a3f54080c023558dd9035c15014e9d24f3ae37728a0f438067555c16a11919d20177501866817fbaaa52acbee99ee19ed48809aefd1a3964521bc7bbe3bc5fe5832a243c284c589c72ac50b7e3fde4a4042bba64ba1e2f741465d6fb83bfee9976d8adb7c7789a418a8b48b58f1ffc71f1b7213061093744f549612ddd9bcfbba34cfea7c9a7fb3ecf75bf92a883aa4f43644a0ffd8cd1ad56cf2fd7012a"}], 0x13f8}}, {{&(0x7f0000022380)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000022400)="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", 0xfc}, {&(0x7f00000005c0)="c8ea3d8b2dedd74a970fcc41f22ce5f31eb4d29e2fb726825f7d91928324bec25dd7", 0x22}, {&(0x7f0000022500)="ba0c51c288c41fce94924d7acc24006d108a4cbb4c1ea2a305b859ce379d4515d19929fc93490422a6ab4dfbbcb496ed3d6de3c38f1f32c3202aedd26c2443e0b8a1cf3a35a6285acb863e8ef3d235ed299737963b207e27f0120d1f8e42482e89d06de5fd2052d3f9f388e40b7dfc575eec8943fcd5bf1706abcabe8c363a38fbe27af35f88d88c2c91fe3c20f126663a38d45e51986e6b11609c69a2314569140d2070d66de26a7757ef8f814a6d2e546de422ab035ac4b27ae9ded836430be81554649ce7e08832ba57d08e5a3a97c6cd4837bd8b1a5e95fce5584990cb4a0287c37cc0085b84cfb6be", 0xeb}, {&(0x7f000001f540)="8540bd0dd4bb89c7ed7154361d3814fe33cc0d52f63e02ca903a4dcbb9012c4c361c933eb7a005ed0f2ecb2164fad19b53d86f3b3e05380cefe923d5ea533002ccc7aded27d0f3b873fbf942a8dce405c7970ce5850592a526b27ef29ddee3faf49f4f83d98343469dc16a09b23f14f9833a520889a8", 0x76}], 0x4}}], 0x3, 0x8000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 12:30:46 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6=r1}, 0x20) [ 703.171354][T14916] bond1 (unregistering): Released all slaves [ 703.488083][ T28] audit: type=1804 audit(1599568246.617:105): pid=15000 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/148/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 703.565215][T14906] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 703.576027][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001cc0)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d133b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e03f11f086e6bf39ab074b690284b6d6af4a433dfe6c63a50047a263f6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e216667c6f72b64fdcad802718d16b390d4b4dc05bffb838b7e6831cc53b65b1de0bbf6af1311a722a80065913d37bea8c988e3b3f05ab1eb02d6b52a11191f1ced75b0200502e5f2881204104e152b5644da9d26301ed8905156a069c61444d44d82c135ff4f20574247a4a5cc963e3c395a029125ccae1f1564a3e28e06b1a08e47bd1a9621edf1003d167cbdfc0be2a4914908198575a688a38d24bdc9881ced9fe04e119a87b9286ea15aa168163a9650a26a926c571f2f0e0b2102de1fd1a6920cb71d846f02b2c23f80a3c0116b48d14925e69c4a65126e544995e0cb5fefaa870ddd66e8eb47a3be8f07fcd361dcf144c865fe355e3b98e6d4694d74aa6d3d75c7c568feabdcb483c5c22ca40782cd2dea789dc677c603227878c369a3b7a3204bf1bc9b1fdb1e00447152e854095b9527d6e980b1bac1b1ec6e9706084ac77b383bd4e555a11410f6a830b66ec9b0fa58abf222386386a06bad5baa2b55174b0db5108d79849c1028550fb3c7138754788000000009cd6a0975db4257bf599f7d82462f914e4e641aa399ba721e72fd53d21af1f5d2a075bfd90044c562027ec840170b2d6499adf68ed790a5ce5a49933f55c0df0b2a2ae252b5bf00b5ca0ec0005674ac62eee923cae59edeab59c1d00ca6d6f56c5ed757ce4cb67a55bcc9fb79105dbf6d0bb978631ac3bb68fc7bf0b2e88a056f10ba6174b9a511d8cd7257c82a9c66f399d5d9bda583af51f9a2dc086e1ca1a9bc7c57329d4932960b4594c94a8ef63132321531d313651616f40a0d63dc130d362f080edce63bece561f21bb9f52b5a37146f85fff27bbd5c8c7f3665ec7aa5de0c848ff2917fbe32f4a5af72687bf7fe8b2c1dadd2fb040d42735b6aad007b5ecd21b0c54cfbfd39774d3ea03f8249b733671b40a14bccd53bb017e05d75edeece9b46543d99fda74492185b63aad493bc152d17cb5839b04a4f60c32d82d8b2d5118399a45f51f8089a514f663f89bcc2dc360593e2000000000000000000000000000000002e1e35d950f90bd9f93ee7adb2bf669003bd0e898a8601114e0855f57921a795c153fa7b132a97eb6a3edcace0155ee9df8ec96b00"/994, 0x3e2}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430c907ece20848c55cb51bd29bc11e20d0f35708eed18d4b01c01ce4e7011ca4b676628888dbe06b", 0x75}, {&(0x7f0000001500)="2962f81f3b492c550a8c23ef6b05668596ff29a3eb3e577ba6ba7d198ec18a2e35358d03c8c9abb1cc225873b8435c3cb24254ccbb69f18a633497c3918affcfb40fecf3f86837349f65f05b76bd424111de16aba7c05e8f084be60baaf9571c93185578f05a9c218b99f56695d69fcf7be61d87b3cfb6c3aa6a247da33ab9b620a0acc6000a461b753d17c9066bae35847767e5fae8b49fc3775830ca74810416684dfc33780812551ae1d8103aed9144a6d5d29472bfff7cd6975e126120831163dd4e9013271960c9dd768080000e18bf6cf63f1874fd000004233eddfb330d4d3c3894d96e6556be", 0xea}], 0x3) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180)=0x2, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6", 0x15, 0x0, 0x0, 0x0) 12:30:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 12:30:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @ipv4={[], [], @multicast1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:30:47 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/201, 0xc9}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) 12:30:47 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)) 12:30:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf71731", 0x69}], 0x1}}], 0x1, 0x0) 12:30:48 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvfrom$l2tp(r0, &(0x7f0000000140)=""/209, 0xd1, 0x0, 0x0, 0x0) 12:30:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newnexthop={0x24, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1}]}]}, 0x24}}, 0x0) 12:30:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x3f7, 0x205, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x24000081) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r4, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}}, 0x28000001) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) accept4$ax25(r1, &(0x7f0000000200)={{}, [@null, @rose, @rose, @remote, @rose, @default, @netrom, @default]}, &(0x7f0000000040)=0x48, 0x80000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x2, 0x3, 0x320, 0x0, 0x190, 0x0, 0x0, 0x190, 0x288, 0x288, 0x288, 0x288, 0x288, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) 12:30:49 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1000, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 12:30:49 executing program 1: r0 = socket(0x11, 0x80003, 0x0) sendmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000001080)=@caif=@rfm={0x25, 0x7, "ead81247489eb0082358b551bab9d41a"}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)="62fd6003aa03f416567cd7e54e80a05cf0098e08934666a2e5428486aaf7d101dec69cdcf64f528d", 0x28}], 0x1}}], 0x1, 0x0) 12:30:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000e00)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a6f1163ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a3908a6886cceed10ab", 0xd8}, {&(0x7f0000000c40)="5f9257f0f2bcff3ba8d986b579c537d9cf75cb611f5d6194c2bb8399098b4abe54414cfe9b7bd7cae1eca27c3ddb4aa90092f63db6903d2da0bdd36eae532df7a7d4a83c1048fa", 0x47}], 0x2}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 12:30:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x300, 0xf8, 0x300, 0x230, 0x230, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 12:30:50 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 12:30:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12:30:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x601, 0x0, 0x0, {{}, {0x0, 0x4}}}, 0x1c}}, 0x0) 12:30:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 12:30:51 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvfrom$netrom(r0, &(0x7f00000000c0)=""/195, 0xc3, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) close(r2) 12:30:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x890c, &(0x7f0000000000)) 12:30:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0xb6020000, 0x230, 0x230, 0x418, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0x40, 0x31}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@mcast2, @local, [], [], 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r3 = accept4(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80, 0x800) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @remote, 0x4}, 0x1c) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 12:30:51 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x29, 0xac0e6a4dcd5fba4c, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x400, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="2f13c285a23264d068e975e3390bf809d4e10e0000", 0x15}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private}}}], 0x20}, 0x4080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xff4d) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x55, "27e1035cc34e4bdcf58c9c6ab8e3d770710bee524107e117fb3222061832a3cd04b1d8bc468f8208c5bde6fe27eef5ac3b321a421c6c2704171bbd03e0bfa12afbdb3bf865abd1dedb9e39053d1ff6b4be47ebfdcf"}, &(0x7f0000000480)=0x79) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0xe40, @loopback, 0x7, 0x4}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000000024b07067", @ANYRES32=r6, @ANYBLOB="17010000000000001c0012000c000100626f6e64000000000c000200080001f5030000008626ed91be4e14e30f8eb30686d38760ca9003461d65ffecf7b8e666376cbd8a8c7524f30194f458b03837c412eba5d1e889db1e111238bed62b2b3d2b0b7692d2281c"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', r6}) [ 709.566536][T15098] device bond2 entered promiscuous mode [ 709.573158][T15098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.616722][T15096] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 709.632302][T15096] bond2: (slave ip6tnl1): Error -95 calling set_mac_address 12:30:53 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 12:30:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @ipv4={[], [], @multicast1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={r2}) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x5, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r7, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb98}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48041) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:30:53 executing program 4: getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000240), 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a2809302060000fd000001020b00000a0004003500281014000000190005407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 12:30:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2, 0x2, 0x5}, 0x14}}, 0x0) [ 710.445601][T15133] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 710.457008][T15146] IPVS: ftp: loaded support on port[0] = 21 [ 710.461944][T15133] bond2: (slave ip6tnl1): Error -95 calling set_mac_address 12:30:54 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="0500000023002c0000068908ac14140dffffffff", 0x14}], 0x1, 0x0, 0x0, 0x50}, 0x0) 12:30:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8}, @TCA_PIE_ALPHA={0x8}, @TCA_PIE_TARGET={0x8}]}}]}, 0x48}}, 0x0) 12:30:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:30:55 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001900050200000000000000001d01090050001000df030064cdea487338370500000000000000664fb1bfb814c3634f397901f683f28fec07980f1a7ec92cd4045b1fc1a8ac63fdf0460f65b2cce146db1e441f604424038c5bcdafa9aa3e6d8b9a66276888de640da6e9ab4004009cdb735cc83382f766008e0beb01f0644ed99101806ed799d17a729d93a85d80050000000000000090c74e2f2418792179a0a2be14e1b096d56512be4dca390ab6a008000000d6bdf2d6e3aa1b2e11b047b99fecf49a75c7f544e1b7431ce35194096af403b7feb9741c89b1815f11cfe3babfaff17b81e16c1b0cfb98bd74f2db5deacea62f5e6993541afbaf09c51e7edcb981129a15b4484f2d204db4413aa4965a1807cc5a2b63e7fe4ac61f5f1ca5ae3adeac9a69e8239d81767f8866e3e56022b36d71f1d4198d68946926c8be88f52bd47279bd470d93bb3d9fc0669c7e57bdca9a3de08850014af4dc50fd403ad1e1fc0af2672ea2334e16aee7729d96c676d999de529ee5fc67e13e4f9728e532439603be1161d920265e30ed7b87a1cd1fa0420b919504ba6d4a9296d525db12764b154ac92ad4b8551ed37abee5f0b67e16dfc56a982097668f3cae1f2479c5ad5fec26ce74311e09b45f2c9e6fdc8d3bca8b1b6ed88c000e74da7e249a073cb9b5402ee0d7e1dd4944b54c782cf55acda39977846bab1fdc084a6a6f794a9cbb901a38cd9678a6d1a12e09c6265e1edfa7b31be2d5c6ccc5bc1178aff97af0d558e9e5b3bb46b8c99e797f60dcbea0017e5a7a30e43576f7bc2b59acee9f3b1a685276438aca0ad30fed"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 12:30:55 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x400080000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) 12:30:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 12:30:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 712.633346][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 712.810290][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 712.880664][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:30:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x0, 0x3, &(0x7f0000000080)) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) [ 713.429774][T15150] IPVS: ftp: loaded support on port[0] = 21 [ 713.602501][T15204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.620426][T15204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.628478][T15204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.701369][T15146] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 713.709770][T15146] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 713.718712][T15146] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. 12:30:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 12:30:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000b80)=""/4096, &(0x7f0000000040)=0x1000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x2, 0x290, 0x0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$FITHAW(r1, 0xc0045878) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'geneve1\x00', {}, 0xb5b}) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0xe303, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendto$packet(r2, &(0x7f0000000080)="14fd652323d2de62ee2987f958ea244b2b90f16d7c", 0x15, 0x8040, &(0x7f0000000140)={0x11, 0x9, r3, 0x1, 0x6, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0xe303, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm-aes-ce)\x00'}, 0x58) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0xe303, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 714.428465][T14841] tipc: TX() has been purged, node left! 12:30:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c6c", 0x7d}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6", 0x88}, {&(0x7f0000000700)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b", 0x59}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12:30:58 executing program 4: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 12:30:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1d, 0x0, &(0x7f00000003c0)) 12:30:58 executing program 2: unshare(0x40000000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) 12:30:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x0, 0x3, &(0x7f0000000080)) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) [ 715.515128][T15252] IPVS: ftp: loaded support on port[0] = 21 [ 715.572717][ T28] audit: type=1804 audit(1599568258.698:106): pid=15255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/156/memory.events" dev="sda1" ino=16382 res=1 [ 715.599037][ T28] audit: type=1800 audit(1599568258.698:107): pid=15255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16382 res=0 12:30:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) [ 716.004419][ T28] audit: type=1804 audit(1599568258.788:108): pid=15256 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/156/memory.events" dev="sda1" ino=16382 res=1 [ 716.030053][ T28] audit: type=1804 audit(1599568258.858:109): pid=15255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/156/memory.events" dev="sda1" ino=16382 res=1 12:30:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100a000000ffffffff00000001ffe7ee00000000000000000200000000", 0x58}], 0x1) [ 716.303266][T15254] IPVS: ftp: loaded support on port[0] = 21 12:30:59 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@private0}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) [ 716.453653][ T28] audit: type=1804 audit(1599568259.279:110): pid=15251 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/156/memory.events" dev="sda1" ino=16382 res=1 [ 716.480550][ T28] audit: type=1800 audit(1599568259.279:111): pid=15251 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16382 res=0 12:30:59 executing program 0: pipe(&(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ffa30a00000023000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 12:31:00 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x11}, 0x10) 12:31:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x0, 0x3, &(0x7f0000000080)) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) [ 717.226079][ T28] audit: type=1804 audit(1599568260.359:112): pid=15324 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/157/cgroup.controllers" dev="sda1" ino=16210 res=1 12:31:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2, 0x5, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 12:31:00 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x40004) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x20040850) 12:31:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 12:31:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) 12:31:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20054}, 0xc080) close(0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 718.007897][T15340] IPVS: ftp: loaded support on port[0] = 21 12:31:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20, 0x0, 0x8000007}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000001980)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x17c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9d3f773ded71a025935d407b4eb58bfd0aa844df"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "df3f313cc633be322a94bf744fe52892b31327efea"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "a0dbf68932a313eaccebc64d9b707c5b283957d784661b9f42f468ca59bdc314753093b2eb2003e4121ecfad5aa6e51302278822e4b596bef3e8963eb9a1fa9f02959fad825ba9db303892e4b777a51dd96802e0bc2e0c3d65342733b24efc168fb4dbc9bcad81c5436c428fdce181ed35ab7e6d7bf9e81fca8668044eb6d51a7119e1b8e17719eadf8afd0819994a7da6d71cc9ac2403252962b8"}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdb4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x200400d1}, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x14) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001340)='~', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 12:31:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/239, 0xef}], 0x3, &(0x7f0000000500)=""/30, 0x1e}, 0x10001) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000003a00)={0xbc, 0xa, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8a3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fff}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004c880}, 0x2404c8dd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r4, &(0x7f0000004dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) pipe(&(0x7f0000003980)) close(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000010000505d23080648c63940d0324fc60100002400a000000053582c137153e370907018048f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f00000038c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002440)=[{0x0}, {&(0x7f0000001200)=""/251, 0xfb}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/168, 0xa8}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x5}, 0x2}, {{&(0x7f00000024c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003800)=[{&(0x7f0000002540)=""/55, 0x37}, {&(0x7f0000002580)=""/197, 0xc5}, {&(0x7f0000002680)=""/62, 0x3e}, {&(0x7f00000026c0)=""/41, 0x29}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/204, 0xcc}], 0x6, &(0x7f0000003880)=""/36, 0x24}, 0x80000000}], 0x2, 0x40, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000004d80)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004d40)={&(0x7f0000004e40)=ANY=[@ANYBLOB="b01300001300000825db7000fcdbdf25070000004e214e2101040000ff0700003fd982e44bb144542795000000c7745ecb19b22ed11d03f082db08000000050000000900004e88c448ca039c47f05847dadc63ddc11fcc78c712a24646ae30579700c1785fe259917eabd77004268842cd", @ANYRES32=0x0, @ANYBLOB="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"], 0x13b0}, 0x1, 0x0, 0x0, 0x1}, 0x41) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 12:31:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000640)={0x6, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000780)={0x2, {{0x2, 0x0, @multicast1=0xe0000002}}, 0x1}, 0x90) [ 719.547541][ T28] audit: type=1800 audit(1599568262.679:113): pid=15377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16372 res=0 12:31:02 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000780)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0xf9c, 0x33, 0x0, @private2, @mcast2, {[@hopopts={0x0, 0x1ef, [], [@jumbo, @generic={0x0, 0xf71, "0d243ca648293ffa91f76fc1c6b6c8005a855df4c4473f1d682c33fb6b18bb9a90099aeba83e49bdb284f5328aad0ccebb1ea2dc91bc28fb075fe715bc82e0ec8259a5946f60c20d81931963ce941fe45353d9bde806a2234ac9adad659c6d81bea12758b89965bd9a13c8de89c2cf29d123669be73eb0dc8ce3652dbc919964bcd6a21276b243a53e1a65e65f5d1af3cfec4885b7a77560bc72a27d98918aee18a1fd613257d8bbbd9eee3a3866d22013e68a41d6e0fe5858eb6f1ca7a57eb30caa862d37eef219bb030b5f782e5af066fd8418e92ff8fdc40f43c50883c48a9950bd78ee77f42a91e1dd99b7bea80022d93b4ed4c24b28b25d5a73ff728fa27f7f4786ecfcfa81210e0e5d4253e04dabb08a6cc6cc4d6dd8a7ba37b26942294410f767e1cb65966fc9c1998607d1153c4b62fa6b41b0b4d9462c23a1d8ee3c44371044a97bfc7281beca352d9ca3381b34c2effbeaf94ecce61011c56aa28d7e6b1a75e2264b296cf55584c0f63a6583b538acad0ea3ac97dc9bd8283f0bc5da25d4028a1728591715166cd36f1f5afd2d20a8b44698aecc495fbf0d066d1d3b3fd73e3db7dd0ca78b967e266a5a2da327d26658b610aea9a1e1ecf7b6766aa02dac1cc53334b9716249d90cf243928fff7afa2bbe227f87d71ce2b9b4cfe031fd461e4eba3a1d7a2cdb8c0bcacca704960a59002ddb38a38d17d2805a3c9bbb96a56ef9c85ad88783ce50bbbcae18d6e08ba16f6a8aa55445f44f4a19f98f9962cde80913ca904f5847e86621bea488e387c9287072f590bc759424c2e4a8c6a8098d995a0f0445ad3325a18e1c10c6f80b3dcbb3d4449c02ef3b9bf8c2b15d58da0b183be48a453ca8d6c78e6afd13db5fdfbc2243b355a0f1c09c7c90cb6e1ea1e0eaf6cc55318c0f2686340dc6e37d0166beb31330b8ff2bd2eeb45ca2b3a2c2900877531941e5ad2d532deac17015fcbf44dfda28d65539fc1a93ec18ceca808a00bd73abc1717f6aaec6df478d07c8935a760fc09cd790056aa556ff683212f1ad6e63609aecbd7b40d4a89fcc7a83fec5c31bf6901ca9741d96b9e54801f83db0d9e899d792c85039527a4f8145d77b4ef821b3c3f79f76f63a6fbbc25c0dc38f628446a85fa56d7da40a5f8c1e7ab61702108f9f921d4f6b2bab58f4455c76401c9a04d66e552c53ccc3068101f7de4fe582c261a021339831309c8f0d7ff83ac634f652aa5f328e7b456e61e7c5a0d865a8bc3100745a400ab7af0e0b4340ab21b8b37d163a78c86e91cc16d1190c219aaaa59c5db0b0ff747151fef4c1abe1bb2594ee8335596e92ec78d67691be7a01c5200052f67297f6ba682c8b8bdfe59008471d2cd9f9f255f870ce07772d99a46a0b885d4aa8a9b98bba6c620953aa83cf27d6b24463758a00542d89dac738451d30aaf9accb81aef1e3dea3b8c1b5a3d0c281269acfdf77c35c0d1b6851f3c188913bb87ebf06afbd1b7c2e619daf82b193160cd0ac6839ccffbb3d573881b2e20b1dc4425e224d843b5dd23cc871511f8abb7b1f291a38d2b0eeff9f5da31c553e91ed41d6878f687e9d2770f1a6aabd0a4530f1ddf04749077c1bafee62c46b893b47f9aa4b870adfd02fd0cfb4a2f5f81579e9db7cfeae409395d46bb11e17496ff3ab5e3aac175775205eb366309ff053cf83523e1c85384a09318d5fb6ffc197debed05131444ad1b081aaf95f8c0b5da829be0102f3ce448c6a470129445de70eec76768320678f6fe7612465fa9c989784d0ddb7806f386ec8c806beb3872701843217d12cb3f6ef1ae23e8b5f5f155726fff86c7062f9db63fda090cba717bb22b563cc8f92278da6680f676c4903bb222c85e6f74a2245c1bc13bf434d6aa6113b52be383531cd2f05a7e5137cf8db408332caed50b5e1d1018c8c48b0a765ef3cc0d31d1bb2e73c4f378cb52cd15a3e7a2902dfe9c475a3bee9c85e8101e5a6e71760020c6489de3f51e60a14e9e1b5774e56e796fd4be6e7d1c532958b33c854072856a286f00c15884c22edb7c520ff2afeb398596dfead98e9f2019074031b836fb81446c9026c5493ac526cf7104c4b979fa63196515a10a21cbe0bd10369c8b8b201d987cd1669b9ddc2742186b4e407503738a87c08fcce0b96fa484783454e097e63f91aaa832b52a20a5c5af3c5044a022a88ae95e403ac60b20ccabef6b3d59ced84ba498ea9d7e8d3f1b4150a5c3c5d999ebb3f0c7972f4a64d63cce611a064ad2c996c40e2e61a00ae0987c5521366bf0b94674bc515bd76a4a6c23224aecbf46ea287a45d4ecad64135ceb383302a371a382f10bf1df1e54f194429e61d5c17261252419b5b748ed1910e20e45fbd49bcc260f233f228d92c3fd7c4d39144693a145739f150ee10aa5de28ddad945a2254daf31dd8bb4dbf99ba78f927c51c0c95ea55856f438318251f362cc773530f5b86431c01ce89965a15cd3567770d6026606fc069a3137f4ad806877f94597aef37f3480034cb5207fc161fb5fc557975be3399bbf5f657d9a86a0ca8653889587796083edea80c92dac250a4e1bb3ac33a7f4710e0908dbcbcbc1e981192958ccbb72d207bff7c0672b982bc4cccd8000dfa506160a8c2a1e40846680d8d275f49f2af36a0e1b85e12158f2060a56d9eed3f3aa242b149ca49e2ea286a7a7576c431770056685f9f6989a431558b8dd8347967d0821ac087c9f2b21313fa2d9e2261185e9c61aa00de3cd5919908b78c26a4505b0eb0319af72a1b12447263a3ba1e381a1f753ffe61db6abf68b2dde74853be70a5c0e1973c5a96f7c41c66388486eb6d8f51dd769695365d8dbbf0e35094b3bd405c94eddefb2bbec74bbbde937cb2f9b26650049b4a9bf1a7f36a3c37bcb566eba12d520aabf1594b9325644f4cd2c9d50d469991ef559dfcc1d8a01dc0d0cd559e191157943c5b080b205064349112f1adb0c45948373eb5ba1f66e367550947ce07e744c32e862fd744989fdaeb09d1053d3ae638e8de4e3d2ed1f78cb7d95756a7678a726a3f43093046ed2d79f0bd637de5b9a51033e732c62a0faedef59d957390e01f5d7a0aef6741d90c10972af6f10d462b0cb85de6c3b452209f89fe9752427d236e0bfd89c20df0d305ac22690a9dbe1964f7d18b6c8c1e0ff324b783888ce9aa0e7d62da6660e854459d8efac275d9dabc7cc9367d9b6cae3c92a66c7afe5894db2222298826f273d3d64ad320826a2c3440055afcf1423291b1dabd0c2e2d68e8205bca48353f558570a49b4ae7daf3d3c66558391fb9d4bc164ced2265cfcea6c8e0fc1d5ee329c2af46fbf82eee9cfbb358683180b0349e342670f888dad0b7db9820a9475a2b7789d499d6040d64892aeb994d02cc3996e10028eee594f2d14e16c795a6780fbb867163e98229eb175bfa8ddc6ab6243e5a914b203a91c84d21d67cbf81e13cdf4ae5099bf64a72cb9a36d2ff754c296d713feda8d5058c931a4585460db70167306bb6e574680c43cea15b18af3d2b85586d7c334470a831cf72570230bd9500498d0712f2169ddb53f8f0b29ada4034d7a85f728c689bedd076e6d4affc750cd904406d492b2e26743ad9a5aecb42ced2968c7e17bc754e78c2690ea70f8a4ca1271abb7df9982840e329b19098edc62b318622773271eb97d2db80bd96a5323b682a53b8faf61c3484d1ef6df3a6e7130bebe9c72a1a4bb30f0446c50d632e40aa867583d366c25fcef26cd0f41f92533af1fbd0bffebdd4be10fd9c4f9ef36bee46c270c4fa80de1fef67a36748cd11149a85411666362f671ade309f47373008420f7972d8f6f2ebe5e3a2e936461718fcf0e0c978f8fb718b7b8f4027334e767d289f1dfe6ad15774674d9a6eeace97131e7fe6c23b96c7d19205dca72c32cbeb61ecf990ec2902387111df8c8a9ddef0a803017407e64360328b96fae75fce995cc8b775444bb73aab26d08bff0b605682da7c892a23fdfce7a681c0fef14b911a3c31117d1ff43ee52cb702bf0434bf97952808158b2b498a99f4de8b5526040c0c41eeeeb4de5066ed6bd337d897e318ac5dd6284e6e0cf8d1e1c78d21f62c7e43e35e6a511dfc0599079f25090da6a4a2fccb971e2a17379c36898046ee75d9c6d483c5232ce720b760fba5404910ac824f7bc371ca3d4e5acd29f8140d1cc963de02198e9798ab9e753d8b6da0f0daea4a2aa48f23853d4dde60c01ab0eef0fe455293e494be8e37b8d71833675552cd81ff4c81a8ed1adf4d45e56c327095486b0e2e2614944c583a1b01cd7dec15f3a536c2b2a5c1ba525ebed76fa77af6f275dd1e4eb932d57eb5047c174d777e62454a8f99c0fd48523837cc5ab255caead6c057db8f16ac14d207296c6d7ee59ae462e0ff76f66f92b1c74c3c1b57a1be22f35c0e7bdde464ea29b633b4989064983fbf659ba2f0636268ac4c19052c43ca844a532803bbc424a0aa13ae64342ac921c72cba2c93151354404c13b924ae3b150c7a47dba7c089fcb4c1cd10ed0c38c01ba7febda4c75c93271d6a9cc9a7885bb04853b9ab31f1b44cf40fe6d3f38e29c51892de6da901938e25f42674ae411c8a73818066215d70b3fb0caccfb0fd032741f5925acdd6ac32f68a39d617b812cd5c61108082281a6709f6b7c1abae912d9540f2d4ebaf715b0a1f8d6588dc9c39aea88964a39894c5e05ca85bb07b7ed88fca34c225a5f842e29466068c60b02be71e283ae2b11306537dd0d5b1bd12571fad211c88cbfe39e547cf5bdf2bc09be327e8084f2f4c552b3cb35ab3223ad9af7eae697b5fc18984dd115147e9ec7b769046d9c0ff61641ca2abdfa8dcf4a848500fba3d952391f5a4c8a0753c4641cb5b9f595a17c258750bbb4e4ca6409037b3c2659caf0551dac5c92d3efb1774f9f865ab00aa947bcef07339177da0aa1e555c8b8cf97ee633107e2ac741e87ae304a867654826ac8bdc98c97169d83ab48ab92c9cbaedb7a270e6639434b22654392649bbc98bfc7c1726bc25837b949789af6b5dac103e6416b02b9fadb82fc52dec814a193adf0c0aea67afb3712b6d33d5d7431458af76df5d96a1030f636d3e586c7afcbe3bba47e733988bad31d4c439078828a67f38d4031930bfeb387bb3e97946a3ddbbb7c15dc30115fe7331a4e24a56fdf6ac0c9623b5d090307992d2442d2e8fcbe8c6fc4b73a69279864c73e8a90208cbbc26727d96b66924c0275f0c248c34be800f649a6384e82d35b8c1cb320b11640e63dcbd697140025f1c05a8375fb655391663563dc56eba7d109cf8d91d7956e094c42cc703abb803c2220110b02da39284a75498f3f91905350fa7bd8ab98872c04501470486764282802289a6996faf84c35df29c54506a1511ddfda65ef0995718d0ce348133c3e84124d16d01f9143e4afaa3b9c972d0b2939b8582ed9760c3228f98a8cc4df4acfd9a0724b3c843bc239f0e93a43a5168ff891643273fb4b5e42e0eebbb4909a2e554bb2f929fb075f095aeb7d1ed70897e88d528b7fee7db3526e69f9d5f9d2bcb1995d2fbb3d708a4f1e4215f68b043c7947"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0xfce) [ 719.747802][T14841] tipc: TX() has been purged, node left! 12:31:02 executing program 4: socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x40) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a08000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000003) [ 719.803362][T14841] tipc: TX() has been purged, node left! [ 719.901975][T14841] tipc: TX() has been purged, node left! [ 720.042967][T15383] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 720.051249][T15383] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. [ 720.312776][T15386] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 720.321114][T15386] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. 12:31:03 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000080)="1b00000020002551070d0165ff00fc020200000000280f000ee0ac", 0x1b) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000180)=""/105, 0x3}) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x0, 'bond0\x00', {}, 0x1}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1}}, 0x0) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) [ 720.419247][T15391] IPVS: ftp: loaded support on port[0] = 21 [ 720.692804][ T28] audit: type=1804 audit(1599568263.819:114): pid=15395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/95/cgroup.controllers" dev="sda1" ino=16378 res=1 12:31:04 executing program 0: socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001600)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}, @IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0xa, 'wg2\x00'}}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) sendto$inet6(r0, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) 12:31:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x56, [@typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x0, 0x0, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x5}]}}, &(0x7f0000001300)=""/4067, 0x3e, 0xfe3, 0x1}, 0x20) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x221) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "a6d142dc40d208830e493f7f2e2d7f49fac608b362938039f867c261e2e4843032ea2ff5d58bd6e2ea289f7ddc21761ed9663902603879e6c6e0386d5e6e23d244a1fab18abaa869e6d0ca91ea09bc75"}, 0xd8) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) poll(&(0x7f00000001c0)=[{r0}, {r1, 0x24}], 0x2, 0x0) [ 721.260618][T15419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15419 comm=syz-executor.1 [ 721.432373][T15419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15419 comm=syz-executor.1 [ 721.533758][T15424] tipc: Enabling of bearer rejected, illegal name [ 721.703124][T15424] tipc: Enabling of bearer rejected, illegal name 12:31:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 12:31:04 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) 12:31:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 722.078198][T15362] not chained 180000 origins [ 722.082858][T15362] CPU: 1 PID: 15362 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 722.091542][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.101628][T15362] Call Trace: [ 722.104948][T15362] dump_stack+0x21c/0x280 [ 722.109394][T15362] kmsan_internal_chain_origin+0x6f/0x130 [ 722.115588][T15362] ? kmsan_internal_chain_origin+0xad/0x130 [ 722.121522][T15362] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 722.127704][T15362] ? kmsan_memcpy_metadata+0xb/0x10 [ 722.132916][T15362] ? __msan_memcpy+0x43/0x50 [ 722.137536][T15362] ? ____sys_sendmsg+0xe58/0x1240 [ 722.142594][T15362] ? __sys_sendmmsg+0x808/0xf70 [ 722.147466][T15362] ? __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.153049][T15362] ? __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.158802][T15362] ? __do_fast_syscall_32+0x2af/0x480 [ 722.164200][T15362] ? do_fast_syscall_32+0x6b/0xd0 [ 722.169240][T15362] ? do_SYSENTER_32+0x73/0x90 [ 722.173936][T15362] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.180480][T15362] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 722.186313][T15362] ? kmsan_get_metadata+0x116/0x180 [ 722.191536][T15362] ? kmsan_set_origin_checked+0x95/0xf0 [ 722.197104][T15362] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 722.203287][T15362] ? _copy_from_user+0x201/0x310 [ 722.208261][T15362] ? kmsan_get_metadata+0x116/0x180 [ 722.213485][T15362] __msan_chain_origin+0x50/0x90 [ 722.218913][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.224081][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.229058][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.233788][T15362] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 722.239709][T15362] ? __msan_poison_alloca+0xf0/0x120 [ 722.245032][T15362] ? kmsan_copy_to_user+0x81/0x90 [ 722.250072][T15362] ? _copy_to_user+0x1bf/0x260 [ 722.254871][T15362] ? put_old_timespec32+0x231/0x2d0 [ 722.260088][T15362] ? kmsan_get_metadata+0x116/0x180 [ 722.265334][T15362] ? kmsan_get_metadata+0x116/0x180 [ 722.270565][T15362] ? kmsan_get_metadata+0x116/0x180 [ 722.275815][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.281220][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.286789][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.292016][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.296889][T15362] do_SYSENTER_32+0x73/0x90 [ 722.301510][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.307849][T15362] RIP: 0023:0xf7f14549 [ 722.312090][T15362] Code: Bad RIP value. [ 722.316168][T15362] RSP: 002b:00000000f54ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 722.324597][T15362] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200092c0 [ 722.332600][T15362] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 722.340602][T15362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 722.348597][T15362] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 722.356621][T15362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.364644][T15362] Uninit was stored to memory at: [ 722.369694][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.375444][T15362] __msan_chain_origin+0x50/0x90 [ 722.380402][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.385537][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.390492][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.395215][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.400698][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.406282][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.411635][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.416510][T15362] do_SYSENTER_32+0x73/0x90 [ 722.421026][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.427374][T15362] [ 722.429706][T15362] Uninit was stored to memory at: [ 722.434746][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.440479][T15362] __msan_chain_origin+0x50/0x90 [ 722.445434][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.450659][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.455623][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.461269][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.466652][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.472210][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.477430][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.482294][T15362] do_SYSENTER_32+0x73/0x90 [ 722.486820][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.493160][T15362] [ 722.495516][T15362] Uninit was stored to memory at: [ 722.500563][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.506306][T15362] __msan_chain_origin+0x50/0x90 [ 722.511284][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.516427][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.521392][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.526112][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.531951][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.537542][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.542779][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.547668][T15362] do_SYSENTER_32+0x73/0x90 [ 722.552399][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.558736][T15362] [ 722.561189][T15362] Uninit was stored to memory at: [ 722.566242][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.571993][T15362] __msan_chain_origin+0x50/0x90 [ 722.576959][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.582095][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.587072][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.591774][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.597194][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.603304][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.608625][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.613504][T15362] do_SYSENTER_32+0x73/0x90 [ 722.618047][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.624372][T15362] [ 722.626718][T15362] Uninit was stored to memory at: [ 722.631777][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.639012][T15362] __msan_chain_origin+0x50/0x90 [ 722.643976][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.649112][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.654096][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.658801][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.664193][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.669767][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.674991][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.679889][T15362] do_SYSENTER_32+0x73/0x90 [ 722.684417][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.690767][T15362] [ 722.693101][T15362] Uninit was stored to memory at: [ 722.698676][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.704451][T15362] __msan_chain_origin+0x50/0x90 [ 722.709432][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.714568][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.719525][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.724226][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.729637][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.735202][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.740428][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.745302][T15362] do_SYSENTER_32+0x73/0x90 [ 722.750353][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.756677][T15362] [ 722.759024][T15362] Uninit was stored to memory at: [ 722.764177][T15362] kmsan_internal_chain_origin+0xad/0x130 [ 722.770529][T15362] __msan_chain_origin+0x50/0x90 [ 722.776363][T15362] __get_compat_msghdr+0x6db/0x9d0 [ 722.781668][T15362] get_compat_msghdr+0x108/0x2b0 [ 722.788013][T15362] __sys_sendmmsg+0x755/0xf70 [ 722.792730][T15362] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 722.798466][T15362] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 722.804204][T15362] __do_fast_syscall_32+0x2af/0x480 [ 722.809684][T15362] do_fast_syscall_32+0x6b/0xd0 [ 722.814646][T15362] do_SYSENTER_32+0x73/0x90 [ 722.819190][T15362] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 722.825516][T15362] [ 722.827872][T15362] Local variable ----msg_sys@__sys_sendmmsg created at: [ 722.834915][T15362] __sys_sendmmsg+0xbb/0xf70 [ 722.839613][T15362] __sys_sendmmsg+0xbb/0xf70 12:31:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20054}, 0xc080) close(0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12:31:08 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c}}) 12:31:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) shutdown(r2, 0x1) sendfile(r1, r2, 0x0, 0x3) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060103418e940b9c1b2bb48400e91c0500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 12:31:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4d180930a06000000a843089100fe803900080008000a0000dc13382d0010009b7a136ef75afbc9bff7de5cf25fa8e183f5448daa72540d8102d2c55327c43ab82286ef1fdd206523", 0x55}], 0x1}, 0x0) 12:31:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000480), 0x4) 12:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0) [ 725.208033][T14841] tipc: TX() has been purged, node left! [ 725.238616][T14841] tipc: TX() has been purged, node left! 12:31:08 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee56c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038000000120a3b00"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002577) 12:31:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) [ 725.400620][ T28] audit: type=1804 audit(1599568268.529:115): pid=15465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/162/cgroup.controllers" dev="sda1" ino=16371 res=1 12:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 12:31:09 executing program 0: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x500, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 12:31:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6", 0x88}, {&(0x7f0000000700)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d5", 0x43}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 726.064201][ T28] audit: type=1804 audit(1599568269.189:116): pid=15475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/82/cgroup.controllers" dev="sda1" ino=16383 res=1 12:31:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) [ 726.732476][ T28] audit: type=1804 audit(1599568269.859:117): pid=15487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/149/memory.events" dev="sda1" ino=16374 res=1 [ 726.758866][ T28] audit: type=1800 audit(1599568269.859:118): pid=15487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16374 res=0 [ 727.065797][ T28] audit: type=1804 audit(1599568269.919:119): pid=15485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/149/memory.events" dev="sda1" ino=16374 res=1 [ 727.091638][ T28] audit: type=1804 audit(1599568269.969:120): pid=15487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/149/memory.events" dev="sda1" ino=16374 res=1 [ 727.409145][ T28] audit: type=1804 audit(1599568270.289:121): pid=15485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/149/memory.events" dev="sda1" ino=16374 res=1 [ 727.435265][ T28] audit: type=1800 audit(1599568270.289:122): pid=15485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16374 res=0 12:31:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x3a) 12:31:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20) 12:31:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000074dfaf1c175540cb1296a0c9777f50b430a7a383387ca489e7784792b4092d57951b3c435734b5410ec59d84ba511894d4d9ed2f0947446240dd16fda8829373629c638f59a001cde2b075459be9048fcdee789578596cc1e300fd1b2c403a061c8c5c6ea3a3caf1ced4dacc17546ed6e9a7c830b5077d34155c031e8ac28393af68cc16d4f72908fb8f50de1b1ef3e22c689fb0d4201f2ae72a03b65de0e64ae7012242620774b50188fc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="b95b03b700030000009e40f086dd1fff0600000000000b0177fbac141412ec000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 12:31:11 executing program 0: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$FICLONERANGE(r0, 0x5460, &(0x7f0000000080)) 12:31:11 executing program 1: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 12:31:11 executing program 5: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0xa0a}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000001740)="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", 0x1000) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) 12:31:11 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f0000000440)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x13e8c980}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) poll(&(0x7f0000000040)=[{r2, 0x210}, {r3, 0x9000}, {0xffffffffffffffff, 0x2080}, {r0, 0x100}], 0x4, 0x1) 12:31:11 executing program 1: unshare(0x40000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c20000000000000000000000e8000000e80000001801000069703600000000000000000009000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e0000000000000000000000004000000000000000000000000000000000000000000000063e0049040000005f608b540000001d00000000000000000000000000000000000000000000000800000000000400"/424]}, 0x1f8) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000040)="b6ab503b6d3240bf32b71b7d7e054e27589111a9122137b6f63ce238c1d0fe17436b6ca1bde9c9f9aa4c278316bd215cc28e9b21931ecb868e1780540d9253fb3837bc09f3a0bb6c7a4171fa2d4683bf83af") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'sh\x00'}, 0x2c) 12:31:11 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0xfffffe8c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff, 0x0, [0x8000000]}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xd8}, 0x10) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @multicast1, 0x0, 0x0, 'none\x00'}, 0x2c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000800), &(0x7f0000000840)=0x14) 12:31:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x4, 0xa, 0x801}, 0x14}}, 0x0) 12:31:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x7401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000511d25a80648c63940d0400fc60100012400c0002000200000237153e370a0001802e256400d1bd", 0x2e}], 0x1}, 0x0) [ 729.217722][T15525] IPVS: ftp: loaded support on port[0] = 21 [ 729.267635][T15526] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 12:31:12 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='0', 0x1}, {&(0x7f0000000340)='j', 0x20000081}], 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x8) read$alg(r2, &(0x7f0000000200)=""/4096, 0x1000) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @remote, 0xc4b8}, 0x1c) r3 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0x9) [ 729.779959][T15552] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 729.788769][T15552] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:31:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r4, 0x0, 0x1, 0x0, 0x0}, 0x20) 12:31:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 12:31:13 executing program 0: pipe(&(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x120, 0x120, 0x0, 0x120, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={[], [], @local}, [], [], 'veth0_to_hsr\x00', 'geneve1\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x7}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r4 = socket(0x11, 0x0, 0x0) accept4$rose(r4, &(0x7f0000000380)=@short={0xb, @dev, @rose}, &(0x7f00000003c0)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 12:31:13 executing program 2: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000800)={'geneve1\x00'}) 12:31:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000002039fd30000000000000000000000000800010001000000feddcd1dda"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x60805ec670aad39f, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 12:31:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) read(r1, &(0x7f0000002200)=""/4104, 0x1008) 12:31:14 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a001600ac14142603000e1208001e000000812f0300040008000300ed58f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x1, 'vlan0\x00', {}, 0x67ec}) recvfrom$inet(r1, &(0x7f0000000000)=""/180, 0xb4, 0x40000000, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x4, &(0x7f00000000c0)={@empty, @local}, 0x8) [ 731.734749][T15590] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 731.958115][T15525] IPVS: ftp: loaded support on port[0] = 21 [ 732.189732][T15590] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.334114][T14841] tipc: TX() has been purged, node left! 12:31:15 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001a9, 0x0) 12:31:15 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000034000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001491d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 12:31:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x6, 0x1, 0x3, 0x8001, 0x91, 0x3ff, 0x6}, 0x9c) shutdown(r0, 0x2) 12:31:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) read(r1, &(0x7f0000002200)=""/4104, 0x1008) 12:31:15 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1}}], 0x2, 0x0, 0x0) 12:31:15 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x10, r1}]}, 0x58}}, 0x0) [ 732.734050][T15624] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 732.757637][T15626] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 732.766096][T15626] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 12:31:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0xc000400) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x1, @local}}}}}}, 0x26) r7 = gettid() syz_open_procfs$namespace(r7, 0xfffffffffffffffe) syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(r7, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:31:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="8a24", 0x2}], 0x1}, 0x20000810) 12:31:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x7f, 0x8, 0x75, @mcast1, @empty, 0x8000, 0x8000, 0x8, 0x602}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x6, 0x9b, 0x1, 0x0, @private1, @mcast1, 0x1, 0x7800, 0x800, 0x20}}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3400b2d49aa25908000000b41db50cbaf22117228816bc95eecdf7005dde94e10bc73b3054ff344d58386af3a676c1dc932bcb44c3cf8a85e3078b9fce32ae7b2ab846a8e886bb3adab459fd7fcc49e5b20ea47481e6980c10dafc513bfc9a02e254388174524fcdb86e89f227f92ff60a64d87e18cf6299a22ae9b39b0a0e8b5e6af5341d21b5597b47b6c9f39167003e849f273eed7495395965bb68b9c3a58d5b40f90080aed6c390a90ac8035195ac85ad73266291b372270fb8330f9662545b35e5e64e417e7c52ca99020500000000000000df7e1a0f057b72056833395e1fb9747d4da6693766a0b1e29553ca14c9f05b495ba1ea179ef1a36bc9f293715aae25d7f542ffd0eba87c8d3ea500e9d860d8e38811", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25010000000000000002410000001800136574683a626f6e645f736c6176655f3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unshare(0x6c060000) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="0033700676206d5f1483e976a1010100000077df06bd7000fedbdf25000075b1fc83cb21ea4a42489e0833d39d20cc96879ce607433afc50a056432912b70f476bcdb1a1d3cc223d98df88e7414a2a8f5beb1ec8130ba924530e31321e87a55fd4a35bee1e9f4b2e4430b57836e306dbad0b40c47900efa71b2cd9570f195812dcea91ed4381050ca3fa126695572680ae1950221a1f2d2aab706ed7adb441e0dcd2db5b418f0220f261bb3467f1f8972c16d8fb1d09b0cb79e5a34fc968278b6f3e1e2c2bc0bd6f", @ANYRES32=0x0, @ANYBLOB="090005000600effff3ff0900"], 0x7e}}, 0x0) 12:31:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00000082b700020000000f10000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 733.964624][T15648] IPVS: ftp: loaded support on port[0] = 21 12:31:17 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{0x0, 0x256, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0xf, 0x29, 0x4, {0x0, 0x2d}}}], 0xc}}], 0x55f, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xfffd, 0x7ff, @local}, 0x1c) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x0, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x8ae, 0x200, 0x0, 0xfffffffa, 0x2, 0x7fff, 0xffff, r5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r5, 0x1000, "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"}, &(0x7f0000000000)=0x1008) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2a0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x4000010}], 0x4924924924924f1, 0x4048018) socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) [ 734.234503][ T28] audit: type=1804 audit(1599568277.370:123): pid=15653 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/89/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 734.683717][T15649] IPVS: ftp: loaded support on port[0] = 21 12:31:18 executing program 0: getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000280)={0x9, 0x1000, 0x2a7}, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0), 0x4) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@llc={0x1a, 0x325, 0x7f, 0x2, 0x1, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x3f000000}}], 0xffffff1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x2}, 0x10) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000e}}], 0x300, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00'}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000340)={@rand_addr, @remote, @empty}, &(0x7f0000000380)=0xc) 12:31:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000400)=""/189, 0xbd}, {0x0}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000240)=""/61, 0x3d}], 0x6, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x8, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x36a3a31c, 0x9}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7ff, 0x8}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0xd8, 0x6, 0x7fffffff}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r3, &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000800)={r4, 0x2b0, 0x800, 0x4, 0x3, 0x1}, &(0x7f0000000840)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 12:31:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0x2a000400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:31:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=';o', 0x2}, {&(0x7f0000000200)="60e09777423b7bbb42b354740e530357e172ef6e3ba637effbf98ba31b5d9b1f7c2081ea6adf4e3c10090b98fdfaf8d647374bc13a97ae60655fee7748debd741136ea1359ec44", 0x47}, {&(0x7f00000002c0)="bc6d6faa75f64046ece7edd620e3e57b6692bdcee7ab49ef5af320fbd0baf7092e98a313971675ced01271c28c8ec899ecc54a0855406c19bddc40a9e4e0d7ae61774509467b22042e45cacf10544b524e84db760934571c7b8d995a23f8efd94409b3425f27aab2670b08c012f7ca824224ccb1717325157b7ec56afb36dad40e9ad5e76637bf486f1693dd7c6d040a91b353072af7300ad35e701c90639408fabbd3fa69248ad1b63727d010272191599bbd620ffb42", 0xb7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="2fd086eacdc6322ac9128bca8d2755d37fa25984933bde4672a31b257fb11cde5be09d280700fcda5daade0bea02a715638fdf92bc5be740f49966430be214743609a09128a2d1c952f3b15b5a8808", 0x4f}, {&(0x7f0000000680)="4efb4c9c38aad56511d7dd2d78cdff8266cf11f1a7bc59575f934fc7d3a0831a847732af6051950ea8799d577af7d254", 0x30}, {&(0x7f00000006c0)="742a97d1f7aed6124056fa01c1d5df681681430ab94e2dce3d8649ce7a3fc59534e12a97b959b138a2d08c0f1bd6a32520958c819cd6291b64c5e97ca5cbf45700a2cfae98a54841174957d0c25fcdb6d140feae92b4191363452098e19a", 0x5e}, {&(0x7f0000000740)="ce70f9d9dd6ebc03a05fb09738d2367d39f7a4956590527ca55799f8bf12612a2fd3f555f8c13239c8fb0360b35f0f03e4733283b4469a8252ea03092f8315db25d1ce00642ad51c507bf34019a526e67bdf279f1e1cf48b62c4f1c7c44a3d9a33c0ed69aa9612dac6c36818aebc026f", 0x200007b0}, {&(0x7f0000000800)="bd4fa136dc313b7ef538b335aee555743074a6ba2ccab86f49ea15c9082809cddae70eac07fe2a488f98eda2d5d5260f506e5b7dc7766d3951900e36850a9e52fdf04f9aa8004c2aca3d252a40845b284b48da0f8d73dd9599080997992a8905836c5479cf12d446480590", 0x6b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001140)="afdd0f9e8dac8f6bd216c4ec6d51df1a16d7280e46e4a053258308c98eeb7c290d27c16e10016190b851961a376a1136f6ea8eb3816a44bf7967430e6505f9a3", 0x40}], 0x1}}], 0x3, 0x0) 12:31:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 12:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 12:31:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e22, 0x7, @loopback, 0x4}}, 0x0, 0x0, 0x36, 0x0, "cdea5bf76403f0cecb2410161bdba2c29c87f37e58e6d74ce3dd82abb52ceedfa63b96319f0edabad22378ec9985edabf8063395bc78bcacdec3cef1f43936904055a768cf575f68ea9818871131679c"}, 0xd8) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000005000000180001801400020073797a5f74756e0000000000000000000c13170003800800038004004561b6337560b4369f3e358dde857a"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) sendmsg(r3, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x1, @mcast2, 0x4}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)="fe57fed6ee6ab78dc2e0cf4bdc2182a354f72bc5acc93552535ee9b693985aeb554a7de97dbc08814b1e7a25f81df7c30d7dec7330747f69bde1b23e746adfe109ae74f4c8fe4d36504ddb5958d517032c856cb2a5abb66b91922ed50879661a3176d7c65ad976dbd84592c4dab282f39c80fd3054d242b1fae96323eecd0719cbe91e36f7794fd775537cb3dc3bd5f7cd1b88032a988e4e5498b51b845fd8f216930dc27d7dfb55ce9e9b125481f0b5c5c3fb62bdc9587efafd", 0xba}, {&(0x7f0000000340)="81c4cb0c94223a63adb6ea132b942c3adaaca9ef2e7b44645dbd8e3c26e2cb1f1d5e10948eacd5f8ab045553851ab3a83ac73217b48832e234e6e8ec0154378fd045dc75025889450d0154328794bd92f9cf1305d5d40fba4a4dd847d86793d6d92c05d2d873eab88244fa6182ea1dd6da24c892e5198ab1", 0x78}], 0x2}, 0xc000850) 12:31:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9aebc12b", @ANYRES32=r4, @ANYBLOB="00000002000000001c0012000c0001"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) 12:31:20 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 12:31:20 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x304}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000140)=0xfffffffa, 0x4) sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) 12:31:20 executing program 0: getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000280)={0x9, 0x1000, 0x2a7}, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0), 0x4) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@llc={0x1a, 0x325, 0x7f, 0x2, 0x1, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x3f000000}}], 0xffffff1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x2}, 0x10) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000e}}], 0x300, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00'}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000340)={@rand_addr, @remote, @empty}, &(0x7f0000000380)=0xc) [ 737.119849][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 737.140755][T15734] device bridge6 entered promiscuous mode [ 737.186275][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 737.666466][T15735] device bridge6 left promiscuous mode 12:31:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='+'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 737.972314][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 737.982869][T15745] device bridge6 entered promiscuous mode [ 737.995223][T15746] device bridge_slave_0 left promiscuous mode [ 738.003427][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.148082][T15746] bridge6: port 1(bridge_slave_0) entered blocking state [ 738.156265][T15746] bridge6: port 1(bridge_slave_0) entered disabled state [ 738.166403][T15746] device bridge_slave_0 entered promiscuous mode [ 738.176247][T15746] bridge6: port 1(bridge_slave_0) entered blocking state [ 738.183685][T15746] bridge6: port 1(bridge_slave_0) entered forwarding state 12:31:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x205, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 738.376503][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 738.447116][T15746] bridge6: port 1(bridge_slave_0) entered disabled state [ 738.456308][T15746] device bridge6 left promiscuous mode 12:31:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x4, 0x4, 0x4, 0x10101}, 0x40) close(r0) socket$inet6(0xa, 0x0, 0x0) 12:31:22 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1a61295bd76e", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2c4d18", 0x30, 0x3a, 0x0, @mcast1, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0847a9", 0x0, 0x0, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) [ 739.207507][T14841] tipc: TX() has been purged, node left! [ 739.238329][T14841] tipc: TX() has been purged, node left! [ 739.309539][T14841] tipc: TX() has been purged, node left! 12:31:22 executing program 5: pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f610500070000001f00000000000400080009", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 12:31:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 12:31:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x4d}, {0x6}]}, 0x10) 12:31:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c74697100"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0xfffffdef, 0x0) 12:31:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 12:31:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 740.027472][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 12:31:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000010003b0e0000000000dfff0000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00080010500170000030000060003003f000000060011004e24690005001600020000000500170000000000050008000000000008000600ac141419"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000026e, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:31:23 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 12:31:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x8}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 12:31:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) close(r1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r0, 0x0, 0x0) [ 740.831030][T15794] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. 12:31:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0100000000000000140012800b000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x95}}, 0x0) 12:31:24 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000061120000000000009500000000000000d7f988984c2a01ffb5185dc11369a1d1e0e6164098e7ec30538f4c9843eb24411d0f010dbd2dfcffa33ebd41ad0910356d40a0c27b86aae866ddb7e9e0b4433fe42deaed81758cab3d073c7d4fb6439affb6efdb208dc2191d178660fcd706703bc052445958bb7bdd561bd5d95db3504ea0a347ee2311df07ebf8f049f2469164e0a123a93e2154a13dfb8a05d729833daf2bba235ebce0b2a2c31d6f3c8e3ac8d86f74e0db84204c7cdd1aabd8c4043ada3e9c4429da4a2063635986d74c8be7dea53b3c75a8e433510000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) unshare(0x400) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r2}, 0x8) 12:31:24 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7f, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 12:31:24 executing program 0: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$FITHAW(r4, 0xc0045878) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) 12:31:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf, 0x1, 'bond_slave\x00'}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6}}}}]}, 0x40}}, 0x0) [ 741.975788][T15798] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.112647][T15827] IPVS: ftp: loaded support on port[0] = 21 [ 742.188070][ T28] audit: type=1804 audit(1599568285.321:124): pid=15830 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/175/memory.events" dev="sda1" ino=16379 res=1 [ 742.214673][ T28] audit: type=1800 audit(1599568285.321:125): pid=15830 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16379 res=0 [ 742.237028][ T28] audit: type=1804 audit(1599568285.351:126): pid=15830 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/175/memory.events" dev="sda1" ino=16379 res=1 12:31:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 742.672597][ T28] audit: type=1800 audit(1599568285.451:127): pid=15831 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16379 res=0 [ 742.694987][ T28] audit: type=1804 audit(1599568285.471:128): pid=15830 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/175/memory.events" dev="sda1" ino=16379 res=1 [ 742.900236][T15815] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 743.120559][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 743.336987][T15835] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:31:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) 12:31:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x17e, 0x4) listen(r0, 0x100000000008) listen(r0, 0x0) listen(r0, 0x8001) [ 743.646023][T15836] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 12:31:27 executing program 2: socket(0x2, 0x805, 0x0) r0 = socket(0x2, 0x805, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @remote}}) 12:31:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf0, 0x0, {0xdd03}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 12:31:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0xc000400) getsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0x10) 12:31:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0xe, &(0x7f00000005c0)=[{&(0x7f0000000140)="e1", 0x1a000}], 0x1}, 0x0) 12:31:27 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000560, 0x44000102, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x3a, &(0x7f0000000000)}, 0x0) 12:31:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x0) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 12:31:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") clock_gettime(0xfffffff3, 0x0) 12:31:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0xfffff801}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x403, 0x201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) r8 = accept4(r0, &(0x7f0000000240)=@llc, &(0x7f00000002c0)=0x80, 0x1800) connect$x25(r8, &(0x7f0000000300)={0x9, @null=' \x00'}, 0x12) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 12:31:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e8, 0x0) 12:31:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3f0000008100000002000000828e00001ea62c2f3980b2c6f9f32ae7108986c0775f07efe967a9c8eb7310d5907c646fe6289391e5715839b4698002ae2f7032eadb719fc34b763d2511f23054e7ca2e092120fbf47f03c204ad8a65c07df5a64b56cdfc14a05e64c87812ab7e78e99412aa86093d221f6efbf115"]}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRESDEC], 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 12:31:28 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x1, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000040, 0x0) [ 745.994481][T15931] IPVS: ftp: loaded support on port[0] = 21 12:31:29 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xd0, 0xd0, 0x1d0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x6}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x307) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) 12:31:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x33, 0x0, "35f555488ad82ce72ff2d4015ef4c9871b52087e453bf238e21667f94f4bf9d83b12bb8600e70481b7e8f6d158f506e79705503a6056697974485c8820b411da5223dfd6ae02f7097d2c16dcfac53942"}, 0xd8) socket$inet6_sctp(0xa, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0), 0x0) 12:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x923, 0x0, 0x0, {0x0}}, 0x14}, 0x1, 0x400000000000000}, 0x0) 12:31:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010109080000000000000000000000030006001000000002000000e00000090000100000000000030005007217440502000000e0000001"], 0x40}}, 0x404c810) syz_genetlink_get_family_id$netlbl_unlabel(0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000740)={0x0, @private, @loopback}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', r2, 0x20, 0x7800, 0x6, 0x1, {{0x27, 0x4, 0x0, 0x9, 0x9c, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x22, [@rand_addr=0x64010101, @empty, @remote, @empty]}, @timestamp_addr={0x44, 0x3c, 0x23, 0x1, 0x4, [{@loopback, 0x2}, {@empty, 0x8}, {@local, 0xffffff1e}, {@multicast2, 0x1939}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast1, 0xd35b}, {@private=0xa010101, 0x80000001}]}, @cipso={0x86, 0x34, 0x0, [{0x4, 0xe, "0637f348be1694137656c452"}, {0x7, 0x2}, {0x6, 0x8, "9ff1e736a30e"}, {0x7, 0x10, "415e10d0291eb2210d4122683634"}, {0x2, 0x6, "cce9832c"}]}]}}}}}) bind(r1, &(0x7f0000000080)=@rc={0x1f, @any, 0x54}, 0xfffffe6f) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x140f, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x854}, 0x840) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000180)={0x7}, 0x4) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x1, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}}]}, 0x50}}, 0x42000) [ 746.706631][T15965] IPVS: ftp: loaded support on port[0] = 21 12:31:30 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 12:31:30 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair(0x28, 0x1, 0x0, &(0x7f0000000040)) 12:31:30 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'veth1\x00'}, 0xc0, 0x111}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 12:31:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000e530e9)=""/16, &(0x7f00000000c0)=0x10) 12:31:31 executing program 2: syz_emit_ethernet(0x300506, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaab4aaaa00200019000086dd6040b7e1cc"], 0x0) [ 748.190200][T14841] tipc: TX() has been purged, node left! [ 748.267452][T14841] tipc: TX() has been purged, node left! [ 748.337257][T14841] tipc: TX() has been purged, node left! 12:31:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x528}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12:31:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xe) 12:31:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x6800) 12:31:32 executing program 1: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008090) 12:31:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:31:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0xa31302253ab6fa7d, r4, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) 12:31:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002680)={@multicast1=0xe0000300, @local}, 0x10) 12:31:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r2, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000280)={'veth0_macvtap\x00', 0xffff}) sendmmsg$alg(r1, &(0x7f0000003240), 0x492492492492619, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x0, 'netdevsim0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_to_team\x00', @ifru_mtu=0xffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r6, &(0x7f0000003240), 0x492492492492619, 0x0) sendto$llc(r6, &(0x7f0000000380)="501b18a6b08177dd8ad51a5abfce8becf5f18ac53b0b48fa83540227dff03f668e03f4fd3990d36aae80810ae8a99be800f223ad9392bb9d5d33defe4b345fa6eccdc5fbf47421079faa5530328f5747bd9d93bb8f886f76a1c2c4d2ab84", 0x5e, 0x8000, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80055c917413dc8f113aeb754f160c80000240000000000000000000000000000001fabd61ac49fecd501fe39bf93a048e9f7195fc1a0d329e604bd8b4a57a1089379328dee55a3df47839b524e0c2c47698bf902b47d305be3777bce80da7d1837d9", @ANYRES32=r5, @ANYBLOB="ffff090009000900f3ff05007c0008801c0001003f0902002fb6ffff020000000700000007000000030000000a00020006000180000000001c000100002005005c4b00000000000000020000060000000600000010000200feff000002000400080000801c0001000806020003000000010000000200000005e6000001000000060002002000000008000d000300000008000e00f8ffffff08000d0003000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 12:31:32 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {}, 0x100002}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7006000, 0x0}}], 0x400000000000085, 0x0) 12:31:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 12:31:33 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:31:33 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x3a7}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000000000000000006000800", 0x20) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 12:31:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x0, 0x2}, 0x8) 12:31:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x7, 0x0, 0x10001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) 12:31:35 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfd447a071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:31:35 executing program 4: unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000140), &(0x7f0000000300)=0x4) 12:31:35 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000000c0)={{0x2, @netrom}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x25dfdbfc}, @bcast, @remote, @rose, @netrom, @default, @default]}, 0x3b) 12:31:35 executing program 4: unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000140), &(0x7f0000000300)=0x4) [ 752.944601][ T28] audit: type=1804 audit(1599568296.081:129): pid=16127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/184/memory.events" dev="sda1" ino=16384 res=1 [ 752.970606][ T28] audit: type=1800 audit(1599568296.081:130): pid=16127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16384 res=0 12:31:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x80, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0xffffffff}}, 0x1, 0x8, [{{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x4e23, 0x8, @mcast1, 0x6}}, {{0xa, 0x4e24, 0x8001, @empty, 0x10001}}, {{0xa, 0x4e20, 0x8000, @empty, 0x7fc}}, {{0xa, 0x4e20, 0x200, @mcast2, 0x20}}, {{0xa, 0x4e20, 0x1f, @remote, 0x3}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={[], [], @private=0xa010100}, 0xcf}}, {{0xa, 0x4e21, 0x8ff, @mcast1}}]}, 0x490) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f00000001c0)={r4}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="fe0f0000a95a36178dea4d35b811e08fde224a26125f282687d3ebccddffdfc444fa8293e9e73aad6fcaf779cfb445eee66e2bbfc003a9666e6c5df9ff6a190aa3d5b2b9c20ae1f09c17ce2558b570df1736afa95c8b0a27fd48ab73dcd0ba338b8ea020373e9925aad2503896d56f9c63532475bb8a080b3d15f569509e99ba944ef66818ed673c6c815b2ce6173a94a6c6db94e7213b042bd69d02811d6316880d379578b10ef75a6d79e834ecf4053358b89a42017b73827d313afb8d51bf6fbf2367cb2b3496fd04c42b0b38ae0ed67f8a5656643570a07c0dc44569b36e669f8f8953dee82eb7dfc3d3c9d498b3231f79d71a9a0a0b72466050fd3752e1918b9b9de983d0615278550ce10dacd725074a54e0135dc626f7d93716921415ace91ea1473f455f8de6e819a782b44b7532eba47ca799b36dac6dacb0f719f92ae4e40a1bd36e6950aa0f5d24ce55b85add7ee3531c053f2120c769add5240bfcddc2ef620171393ba866f4892ac68f9f4e0a2d86c558de37d713b580c177ca4aeec6ca2808414e5a1c6916cbd05b30a41264e418926cb2f38de2303bb58809ab54146423ee554c291a1e2846c41b2d09e1ee53d48a6dc0817baa91360921879f98efc6ed1567a6a2db36f1f5de4235640d62f9e4c5bc3d00bddde399fbeb7601b74a8a3d695f592c3d05b94f0be7d8136ebbd796e9a1ae56a2d6cbbd4bcae7de3bc0626948944f3f25bbd004b6f0941bebec7ef516823a8dc0d2a243a73219ac80fec91016acc8b809182b459f23b58f49de24c24b2a96630ee13da189b1cce84de7a3cbb5b0e5240cc7868440c3e708ee2f94687c245e648cac6398792c54e1c9a4283e8933922a6e56807a8d65022e4704d54f8b27f80c277544f468ee0a8a22e1f415c172c8a92e51e26ac6b05d3876ad86ced16fafbbb7156881e4dbff0657cc27eefa8309c9c2b33be6ab949f405bfe70ef2d165294d58dfaf901f8a7bbaa0225916eaf1793d1b34166a5a584dbc30eab50f520a5bc974587908e99d7845b757ae74c0228be5ceac3fad390913ddc4b31ab796e8a30c93f86d7b32270e54a033388a5e0fb1bcf8b0ab8b150fe3f97d60363e4bc17cc7060b65d557560533f52b7aa29ac7f3e52ebdedaf1b5099936d7552e46874c45c5ce5e95f80e89541fd23103aa79e27626e2aa113a3dd5ec6224013ed6c1222b855cc4bdd6225473a38c181838dd77d7b9988d704451525c2c1e843b9b505a8a04a66c128fa311ec4de94c1495eab5dff4401dc6a8b4643c75c65d9bae75e07416db01da83c0db421c80c85a3c3bc059ca143a37d69d36dc853b1f43f439a42a912c60100ab7917d024a6072606751fbfbc91724bf9198f5c6d788eaea4ce7efa6873403dd70f072a28e37b491447ac126ad1058ecbe3eeae93f8e0c54fef6b6a18c257982dc3be651416f2001c697a54ef2864bf2e02c51d39ed8bdf6666176c660c214d939ef962f5dc318cb8a5ef3036255949f8bda6eb538367d6667ad3d1c3584dac668b7c1e3c015be8d9fb38a4a7f1e697cd021f70ff7691aa459d0854cf19ff5dc211b10adc48d4ad2260048e655617aae6a3d3f5f22812e9a726b37aa5cdc34a35dfdd35af62f9be7640963a330eb0c3544325aca72ab973e2c4dc4c032e2a678759cb1231892134b9399ed3b9c5f429d6bc8c971b1e8447f9b9f4c052eacb3632a7fff80ad79a9778764128011a7ed760de6d881d79aeb9a597378703fbd7f13c91bbad6baed495db2f6164189f1fab43ba86620285c0923410032d68f2ef533ebc595b6102d888f5dc7b969dc73d10d221c96e4c2309d36545b6d3349eb8743999cd653f830466d0dfa332a08c768b95d15b3a5daaeb9387046f6388bf2e32d761035e43020837f8e260927e030586a58a5940d156c8e2d18cf7dcad156d18cecb56cfb43800efba0759f1057a95146da60b2e6b0277206eaf370a99db2b7f00ebe7d9217ccabdb1ab0be238836cde9adf733aaaf24762234a9ce3101c5e41abf99512dfb75561021a274a66a441ce34d62fed6255669d46ebf1e4a005a3664f2de6c5689c92022f67259e5939ff104b587ac1e05e914f9d11168b8ec24369187f933c2ceeb2fd64f3868b98d0566337706918134569bbe3d270cf2426374ba907dc5e6e8839844e49bca4611c6059369c84ad0d55321c2338759e5c9ed7e899ea01ee144349104884f56364a6eab19db8f62aedbe31a9355fda1ba5e0ba4d8aad0b741dc8f3ffdb3326da349e3dea26b61f974723c74817545c7964d59b334a63ef7d57c356e55c5be1e70501c49b2b83e890ad40176745d163b00d36b828b3671900faac9f3fc65ddf7d2fe325243ca7d74b6c99532128857cdf4a863fd36a16edaf4bf6eb215d6bef44e506b42b43cb7a94997161aafe0a6ef654660203dfe5d0fc2646f298fd5b7a674ab7b08a0a2323e8ed7b764938e2e1cb5c1c7424f0189e1a24da0d1780335b598a3f9597bc3e2c3a56d652a5c2413f99b9b337ddcd0292aaa1348a12f582b63a8518501df8359ee76cf2d0234e431a1f8f3c42930136949f8497fcba82646076b8cb7638b6f7722f67b30cfeb7801bf95f4ca82743496661c9b2541cd896b3e2aac59c0e08010f0e09ee5b280fde509fcd23f17c968011709a2fbccd2492faea3091f66d5513c22ba051a6cc2b032f2685cd860e34e8e92823b1a6e846f904143c83b25e0a0e9166bbd630264435b1682c5e260c9530061a4d64c14c138917fad2400cd55dc357bf0614e9bcbe55488c5a421f72e6aa8b3edc9a511ba2480b7460f97a6fb9eb044c0ead676138346604326626b175f1fc5555b83937e434c52a5ec8fb1ef46353390c7c3c30522d167b65d88131915150fbf1bc4764bfe98ba64dfb817cb3ecfff4f007d1d10ef7675630288e9f4be02007740ef50f9a63d163498e5c9dfb7bf874ee15e799cba8efef48fc348ea84a33af0e1ab071e24e1ba4d9b5bfefa7bc6189a7337e37ff4955e818e21134c5d46f7d9633729971bc82c1ac2d8d28192b2d2ed5dc3be0059a214789187a90575701d67ef971ef51106683cd707f13c72b03c6e6555aec381104b9f4f6c13cfb1572bf3fafd61b697b0ff5f66a384cc2a4c74d3e14ace8a060027cd06d7357493d30af826cfa3608904c5d9e2edd3af6df3b387ee3f1a6fd160818ab19223dc6d2fc0ee8a0700dbf17a195e7578a63694d3d58eeb8d951bd51140fa08e9c5525e2129f3ff79d99ac4171fb7219f3c50d0be5ea7d6357457f1eefe00c400f616284e9263bf2a0df2c795ea20de0b298c26fc7f872fa582de28c2f3d8fbda34ca689862d5eeb2d77cd26f27a2ede93e0ccd4849a7550c072b321d7d56801937ce23a5702be214663baa583eb006900197aa4cbdc607666b0dc8bdc120dfec08e6eadbab1c6c296be446610ea130f412197d97669998be8297f6d19c5d06597c26d2d8cdd893a623372fbf3bf7f8104c94dfa238c9d8ad7e5f9ca0add19e7e6deccd415616cfae1d17b9b5a331ec6dac86b0b68e1012929154927b6d21b142d0223eff75eea25cc389ff12a449c5d673c3c6849a7e518c42163707fdde40d541f936f678abdbff4fcead55be64fbd63ea287d9118b429a45bfee4dddc4d918cea7f883ab284de8ef98d8a8340e986bfb94c66d0e7d39353e903828d811834a2388abeb52da0ac223c62b7a68e068adca7a009c292998b2b8fa4e3926842a01025422dc08646ccb5705c4ed815c0f98e4759e23f471a9ff2555b21fbb4138ef84bf885ac4fdb65760114bdff15905a8cbbfa572298c7ae6c5267344569d6479df97bcb78848449fdda679b11e37b80554f7ecea73400f762518cd8d40c9190c60aadad77b9b0001449a27c8bb6fa971ffff9fa02eb4da8dae76bace2d35b9957222f7ce1e7da73188a35afbb84429a37e43d37b6edb445020459a4bb2f3b6d8a5241bf277957bb242d9c736666382c5a26c46abc95af6a98a55cfd522c53c304ad27592d2375ae6fbcec3b426bfb2adc83b9aac0b9a676857c0f85932e6a1bb4868c4875b985b0c112f0a52874e8a2a80b75c817a3d68a0def9d86b7470ca2eff289c2a9028a3714c7c116ef047246751d2128184de99e02249f4c2ed465c05ae0dc33086b49bb6f2edea9d409a4c617cabbb08e2f3a2393688d43fb7ed343a7334580847183f526298959ae74486a385ace0055fdd544bcb10c3f6089f50efd3779c5d16565575b2d0700b3d475a1aa40bf6979d83026c0f0c57e9e99a5bb257eada4abc9bdd4672f4d8c8705d2accaef0ba5e68b63b29c97e74f658bf9ea5c9511ca153018267874f04d543ab03036c85c753bc4f43fa12de7a740805e1efb26fad9cc2990813c1440a72060f32e8b7fb8804a2e4caec3a8e4a30d5d80282cf063b109badf62bf257d39da3f7bd147f0fec5f05ad259d2349370730c824cc23b7aed42d553db76f8c4e97d06f4709d08707adb5d3c3e8303ac9ef32ca60f20e4a56bea9d1c78979faf129d186b2589a757ad2adc0eada462b15c3aec4e56fe927970ee3edb6c60061023c1f209afeb473d18131e0caf74cb0d1bb1f114688f8a889e969cba9ac518ffd455317373565729a91cec0567bcb64ef2b4d7536ded92d65ba9454da627d5beb4842ef432771fd5c04d73781a36ce5392f66d5d609636ba742a6ac5618cf4230922e10c4f29cb63c8fe26278a88055dd459e5cb764ad465c43efbd51879439a735e4b176e0ef5110dc519c27b68a7b1338a8bfa4a50baec9a6814a15528f95890375fe7b81c6a281a9ebe0fd17708ca285905ad063399a0163f481606777eb7f9e6bb28dc6386963782e23ffc80d3e61705c0ca091db461ad4e510b9bfb7f4eef0afe477292ea9f7615811391e497254240f7241fac05efcd66b08ccfb0a517d9d1239ee652745a8114b4b8e95bfd8cc77adea4e9a26519d62aad55116745e1ec2034378975b0a2a0dc803abccf54552eb8caf1ce54229a2214569764868b6022fc699d7b28a953548ae378d11eb529aa3367629b75bca05a41c168ae43b02802073ec795cb644700620fbf82228933838317e00986a391353e537d82b78f0611b8cf9765c6fa4ddfac6f2296094ec2291d03f63cdcaca9ccc772ee399ab63448396d28b5395c60d315dbc73ded1048be2c313a445d2e243d4ab6e4784677561e530945d3de800eebdb3377c7246f26087a34ca23f36e60625113737c00d17b168808ff5578c644abcb8affcf44d0225c4c8b167462f6ab9920e4f3c2b751d0ff81ccd86c109adbd028390a6f0454159ae653705111dd51ad5678803fe210d6f9de6f4f31e2229fe53356ebd82513e4e518c643687e2b1c9d3df8f8c24c6e76e23713e08b65bbdfb50e12f44bd737e7ab1f4ab09c0da21a3183565fd8e72ed8fbac3d174de2b2d4c3684e60ed6940dbe9f31b9757105402ddad1c9a849b226d98b4f69b4650a05cae1133cb3a38f671bae91c3d75089d55e724fa154a7bb803565801466d5cb27ce7304f9d14f7fe492aa586ddbefbe3d08b4deb4d543210296b9f3870540fb0e7126372316c8d944ba0042e8f90b834543dd7a04bf10aced2844391a2d929146c257c238eec23c2050592824350106560bcb06ce028c89d7059ac343322de9b114a5720b66adb717a29f52ec30c05b0b11b184e4f71edcc4dfc461f2fe3e7b804d49f96651103d837ecca98786ce653cfde463ee2e7477402efd35038d6430d91322e418add6961b0b7e95b338c81458936659ae"], &(0x7f0000000000)=0x1006) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) [ 753.439177][ T28] audit: type=1800 audit(1599568296.571:131): pid=16128 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16384 res=0 [ 753.986389][T16098] not chained 190000 origins [ 753.991037][T16098] CPU: 0 PID: 16098 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 753.999716][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.009787][T16098] Call Trace: [ 754.013113][T16098] dump_stack+0x21c/0x280 [ 754.017482][T16098] kmsan_internal_chain_origin+0x6f/0x130 [ 754.023226][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.028557][T16098] ? __tipc_sendmsg+0x3cc7/0x4410 [ 754.033632][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.038848][T16098] ? kmsan_set_origin_checked+0x95/0xf0 [ 754.044413][T16098] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 754.050503][T16098] ? _copy_from_user+0x201/0x310 [ 754.055460][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.060696][T16098] __msan_chain_origin+0x50/0x90 [ 754.065653][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.070803][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.075781][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.080509][T16098] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 754.086419][T16098] ? __msan_poison_alloca+0xf0/0x120 [ 754.091735][T16098] ? kmsan_copy_to_user+0x81/0x90 [ 754.096782][T16098] ? _copy_to_user+0x1bf/0x260 [ 754.101596][T16098] ? put_old_timespec32+0x231/0x2d0 [ 754.106814][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.112057][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.117285][T16098] ? kmsan_get_metadata+0x116/0x180 [ 754.122509][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.127915][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.133486][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.138712][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.143583][T16098] do_SYSENTER_32+0x73/0x90 [ 754.148102][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.154445][T16098] RIP: 0023:0xf7f14549 [ 754.158511][T16098] Code: Bad RIP value. [ 754.162584][T16098] RSP: 002b:00000000f54ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 754.171021][T16098] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020003240 [ 754.179020][T16098] RDX: 0000000092492619 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.187009][T16098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.195003][T16098] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 754.203002][T16098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.211096][T16098] Uninit was stored to memory at: [ 754.216163][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.221901][T16098] __msan_chain_origin+0x50/0x90 [ 754.226857][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.232177][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.237126][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.241836][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.247239][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.252821][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.258039][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.262909][T16098] do_SYSENTER_32+0x73/0x90 [ 754.267432][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.273868][T16098] [ 754.276202][T16098] Uninit was stored to memory at: [ 754.281240][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.286986][T16098] __msan_chain_origin+0x50/0x90 [ 754.291939][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.297062][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.302025][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.306720][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.312105][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.317672][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.322883][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.327740][T16098] do_SYSENTER_32+0x73/0x90 [ 754.332262][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.338588][T16098] [ 754.340921][T16098] Uninit was stored to memory at: [ 754.345963][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.351695][T16098] __msan_chain_origin+0x50/0x90 [ 754.356644][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.361773][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.366721][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.371409][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.376799][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.382365][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.387580][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.392455][T16098] do_SYSENTER_32+0x73/0x90 [ 754.396973][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.403307][T16098] [ 754.405638][T16098] Uninit was stored to memory at: [ 754.411113][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.416852][T16098] __msan_chain_origin+0x50/0x90 [ 754.422118][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.427248][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.432199][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.436913][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.442390][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.447949][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.453175][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.458573][T16098] do_SYSENTER_32+0x73/0x90 [ 754.463094][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.469432][T16098] [ 754.471778][T16098] Uninit was stored to memory at: [ 754.476830][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.482578][T16098] __msan_chain_origin+0x50/0x90 [ 754.487533][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.495620][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.500572][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.505267][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.510661][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.516240][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.521468][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.526349][T16098] do_SYSENTER_32+0x73/0x90 [ 754.532279][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.538605][T16098] [ 754.540957][T16098] Uninit was stored to memory at: [ 754.546021][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.551756][T16098] __msan_chain_origin+0x50/0x90 [ 754.556705][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.561856][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.566815][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.571508][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.576893][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.582470][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.587685][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.592552][T16098] do_SYSENTER_32+0x73/0x90 [ 754.597089][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.603427][T16098] [ 754.605757][T16098] Uninit was stored to memory at: [ 754.610800][T16098] kmsan_internal_chain_origin+0xad/0x130 [ 754.616557][T16098] __msan_chain_origin+0x50/0x90 [ 754.621518][T16098] __get_compat_msghdr+0x6db/0x9d0 [ 754.626646][T16098] get_compat_msghdr+0x108/0x2b0 [ 754.631595][T16098] __sys_sendmmsg+0x755/0xf70 [ 754.636283][T16098] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 754.641670][T16098] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 754.647231][T16098] __do_fast_syscall_32+0x2af/0x480 [ 754.652839][T16098] do_fast_syscall_32+0x6b/0xd0 [ 754.657712][T16098] do_SYSENTER_32+0x73/0x90 [ 754.662234][T16098] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 754.668560][T16098] [ 754.670913][T16098] Local variable ----msg_sys@__sys_sendmmsg created at: [ 754.677858][T16098] __sys_sendmmsg+0xbb/0xf70 [ 754.682469][T16098] __sys_sendmmsg+0xbb/0xf70 12:31:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000005c00)={0x0, 0x0, 0x0}, 0x0) 12:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 12:31:40 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfd447a071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:31:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x3, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0) 12:31:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) 12:31:40 executing program 1: socket$packet(0x11, 0xa, 0x300) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2a0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604e96e100202b00fe880000000000000000000000008501fe8000000000000000000000000000aa000202010000080000000000ffffac1414388100907800"/86], 0x0) [ 757.375617][T16159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 757.404675][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 757.538140][T16161] device bond1 entered promiscuous mode [ 757.562472][T16166] device bridge6 entered promiscuous mode [ 757.578927][T16166] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 757.588194][T16167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 757.678566][T16182] bond1 (unregistering): (slave bridge6): Releasing backup interface 12:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000c00150000000000000000001763672802b1dd7648381490c9f252669c4f064ac4e86bab8baa86fdb9ecceb7d8eb8328f9abd055125bbaf91436b25962defc5bae2c2af5cecc1d3ce59ac9339dafdb9274b4c95548ff4e5314b872e944c528c54420ff02a358f1555836064fae1fc8e50be3ff782d103ea967912fb0eb4f"], 0xcc}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 12:31:41 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000a80)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc}}]}, 0x54}}, 0x0) [ 758.140627][T16182] bond1 (unregistering): Released all slaves 12:31:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0xc01, 0x3, 0x478, 0x300, 0x1602, 0x0, 0x0, 0x0, 0x3e0, 0x3c8, 0x3c8, 0x3e0, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'syzkaller1\x00', 'geneve0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd={0x2, 0x0, r1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d8) [ 758.484651][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 758.507805][T16166] device bridge7 entered promiscuous mode 12:31:42 executing program 4: r0 = socket$kcm(0x10, 0x804000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2e0000001a008100a00080ecdb4cb904024865160b000000d4126efb12001b4006000020e2000000180000000000", 0x2e}], 0x1}, 0x0) 12:31:42 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x32, 0x0}, 0x0) 12:31:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x10, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 759.389014][T16262] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 759.545801][T16267] sctp: [Deprecated]: syz-executor.2 (pid 16267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.545801][T16267] Use struct sctp_sack_info instead [ 759.608252][T16268] sctp: [Deprecated]: syz-executor.2 (pid 16268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.608252][T16268] Use struct sctp_sack_info instead [ 759.785362][T16268] sctp: [Deprecated]: syz-executor.2 (pid 16268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.785362][T16268] Use struct sctp_sack_info instead [ 759.803909][T16267] sctp: [Deprecated]: syz-executor.2 (pid 16267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.803909][T16267] Use struct sctp_sack_info instead 12:31:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9f8220000000000a0000140000000c000780080002"], 0x20}}, 0x0) sendfile(r2, r1, 0x0, 0x100000a13) 12:31:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r0}}) 12:31:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000101010200000000000000000a0000000c00198008000200f30f0000040002"], 0x24}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@loopback}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4000400fffe, 0x4) unshare(0x4040600) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) 12:31:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e3e905dd249b00b20022000000aa2c729eb38a2ce3f0082da5db22634a28cde90773c011bdb18f6877e283f240f762b06efb4caca83ace35af4c0ac35793f41ed440d790548e4dc5b0c0fdae99523396a23e3986a381b8002a9a3dfd9045af25244756966f1bfa508966bcde40aed36ea2def9e9469762af50358b4e014b9700aba6323b690b58"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508850400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x2}}, 0x20}}, 0x0) [ 760.427198][ T28] audit: type=1804 audit(1599568303.562:132): pid=16277 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/120/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 760.532626][T16279] device veth4 entered promiscuous mode [ 760.702449][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 760.772589][T16295] team0: Port device veth17 added 12:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='{+$\xb0[\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 12:31:44 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x48, 0x0, 0x0) 12:31:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) 12:31:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 12:31:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x35, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) 12:31:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80300000100000000122e25d386dd", 0x0, 0x403, 0xe00, 0x22d}, 0x28) 12:31:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000000), 0x3) 12:31:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000280)) 12:31:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:31:45 executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) tee(r0, r1, 0x1d1cfc24, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x3, 0x0, "00000000000000000000000000000000000000000000000000008000000000000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x685}, @window, @timestamp, @window={0x3, 0xd0, 0x19}, @window={0x3, 0x7fff}, @sack_perm, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 12:31:45 executing program 5: unshare(0x40000000) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) [ 762.115200][T16314] IPVS: ftp: loaded support on port[0] = 21 12:31:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 762.457061][ T28] audit: type=1804 audit(1599568305.592:133): pid=16319 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/135/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 762.739733][T16346] IPVS: ftp: loaded support on port[0] = 21 12:31:46 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 12:31:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x4c, 0x2a, "c8462a84e44ade957243b69aee3332f50b2f21282f3e82cbdeaaf4c12609ab086159dad022ccde19f019786dc550e016be27740f82cf533a3654e27bd4a2bd3d0d1803aa8229a5a7"}]}, 0x60}}, 0x0) 12:31:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c080c0d418e00000004fcff", 0x58}], 0x1) 12:31:46 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="5e8d945f3f865de98ad47f86c01ce24f8079281122e5b6497b4a0565f492f63de0fcb28f82f5893b8daf90d612c055b3677b9748b849311e5312376887cf7ce41b8c4f12d009dd1828f3a933576a14b4327128eba774"], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={0x0}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x44, 0x0, 0x400, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4c000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 763.481399][ T28] audit: type=1804 audit(1599568306.612:134): pid=16377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/166/memory.events" dev="sda1" ino=16370 res=1 [ 763.507534][ T28] audit: type=1800 audit(1599568306.622:135): pid=16377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16370 res=0 12:31:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000204740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) [ 763.802114][ T28] audit: type=1804 audit(1599568306.682:136): pid=16381 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/166/memory.events" dev="sda1" ino=16370 res=1 12:31:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r1, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0e00100001000000140001800800050000000000060001000a000000040000402000"], 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfa00}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8db}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf7c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffc27}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x5b, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000003e6d46040000280012000c000100"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffdf6, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="8c62204381080000000800"], 0x20}}, 0x0) [ 763.827823][ T28] audit: type=1804 audit(1599568306.752:137): pid=16377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/166/memory.events" dev="sda1" ino=16370 res=1 [ 763.853775][ T28] audit: type=1800 audit(1599568306.752:138): pid=16377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16370 res=0 [ 763.876560][ T28] audit: type=1804 audit(1599568306.752:139): pid=16381 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/166/memory.events" dev="sda1" ino=16370 res=1 [ 764.360648][T16392] sctp: [Deprecated]: syz-executor.1 (pid 16392) Use of int in max_burst socket option deprecated. [ 764.360648][T16392] Use struct sctp_assoc_value instead [ 764.420458][T16391] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 764.504537][T16346] IPVS: ftp: loaded support on port[0] = 21 [ 764.597455][ T28] audit: type=1804 audit(1599568307.202:140): pid=16385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/124/memory.events" dev="sda1" ino=15844 res=1 [ 764.623845][ T28] audit: type=1800 audit(1599568307.202:141): pid=16385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15844 res=0 [ 764.626389][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.763781][ T1163] tipc: TX() has been purged, node left! [ 765.116627][T16400] sctp: [Deprecated]: syz-executor.1 (pid 16400) Use of int in max_burst socket option deprecated. [ 765.116627][T16400] Use struct sctp_assoc_value instead [ 765.295229][T16425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:31:48 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:31:48 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000013c0)={0xffffffffffffffff, 0x4, 0x4d9, 0x10000}) sendmsg$nl_route(r1, 0x0, 0x804) 12:31:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b40)="f518377a1d70479d6a10101fab97cb3b3a2cdfe6f8b88cc29f4755440000000000000000000000006ee8fefd0c5600802400000000009f6a558f6453e3e7ddd364500fc8f5794c4a10e908d7283d19546e5659070803010b509a2f39f3e9376a9cf56835f4ef5bc8c0c84b4966716367e5c28d03cb851be973e341e736047d9e491eb3f4474bdac7fa46e4672e4f8b568b4bdd5ac2fe8832b73e27545de34e090062adc3c8e32aead20935bcc81936b2c451cb70a47c10f35eef4c446b9753c06ad6eebe03b27d25be", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="55a63ca73d52b3f955f5250cf8e6f342d3ed59380ccace432b540b986ed7e7ce21271459842f0afec93a59a4ab6660874735b2432bb7fe14014ee6d1ab994cb87b6ecfb4d3d4c424cfbfd9a1d1fbdc98aabb8d4e23cbba6a5b1bbf2cc2f28ea2bb64ee1301dec8a325a1c55291636fabbc94c3585de3fd5371aa09b1e3df61092ad3cf89b85f", 0x86}, {&(0x7f0000001240)="b1f0d096818125e3be2eb1e50001000076e4e9712eb1556a0458812c31e058d7fed68074a1d37ea07ea46f73b15ec6a21cabb57e529f403b89639ce9b3fb661ca7a297749f71f21af2da14b25fb201ddb80e269fd2185a2d3f1dd6ebc04be0861c1bc0f9e923c33134d6d9419d512e04c1ecfb1ac4a29383fd2a0d83e0e641c75b4d9da1c1968b51df426ace85d5260a14a486f8e499aa96b37687f8b1cbd473be8c0dcb47df1aed0602edaaf46a4a2321f0576cc3e2ba1219e7a5f690d68ca017f96a30436167c066da00eae4db2d404e7adf0bf966", 0xd6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="1179c8bfd4cd9f76dca3196a84497a8312f243acd5897f232f8a3efad897b17bde88980c4582e35ec3d7e64973f3886b3e40b302f09fe9935985d60fb36e1521d688da815a0574373bc15bae7908008d9ea5ebbb9f8d72950553dd63f7bf3ef85e1c34e8e90c69cffb3f50c1884ab7ab8a8daebf53e627e2f63dd9f42887d0c729880daf554294e3ac402a1cc070", 0x8e}, {&(0x7f00000004c0)="95ddd95bc0bdf4262b0325efb9f852597b3afc76cf3231a0650e8499f69c10485cc21b2ea259901640a913355c836553392b175aab6046a0f0cd6196c4a9cc4be6209864e9750e6e2cb9e17a", 0x4c}, {&(0x7f0000000900)="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", 0xff}, {&(0x7f0000000d40)="ff2c01230f6e68028ff1dfff80827d753d6c2ae64817986f06c538c41effdb5807f2122e4e4de161eb8010a3b66cfd019eab4fb8c7c8d8b49a3c2b3779f05ef3adb31e13c20a1613ab22875252e5f6abde189d20017f0f6dc8bd6719ab154dcd55b2355c5a355ca03b3e265e3d552679b15b3138c78dca9b92b279b86dbe2717ecd6787a71a9921a53043421d0c3ada3608c115a2032a4858abb33abdce34d3f2d155e01e7f262dc0f018d54ca654a1c4fc346c7e8ab247e8f5f847db8f7b9cbf754385780150df175d352f6e2b6e7fef7e7a37761142896a7c98ca8d44c31c20df2bf257d", 0xe5}], 0x4}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000002c0)="ebb22d6b83b15660007575a6b10000000000000000000000000000dbc3747ee4a986e01f4b4c8c5fb5aabc18e496fb6dee9afc991a53bacaa32c1c950d577851933ce03fb37d93a52f92a88c7e749493e6bd083e0392160374e06591ab7410daa74a459786bf6bcac96aa9ce6c1ec971c917e5a129534fd34c822f134cb6f2994acc7a1d9024bd5159b534f19b48ee5714fa3198d938130e1bcfbd39c6462a01b4bdf9c1c2f8259d568a411cc09aec38cbe2f12ace7c7ea19ae947adb3a90aa05087d311b7e702", 0xc7}, {&(0x7f0000000fc0)="1569b33bb070f83600a121c7669187398da69d8b7f7d297f94ab0da950d524d6891a60", 0x23}, {&(0x7f0000001380)="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", 0x32c}], 0x3}}], 0x4, 0x0) shutdown(r0, 0x1) 12:31:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x40030000000000}]}], {0x14}}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c000100140006"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x21, 0x1f}, @mss, @mss], 0x3) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:31:48 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x3c1, 0x1, 0x1f8, [0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x248) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 12:31:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000002a80)) [ 765.829785][T16433] IPVS: ftp: loaded support on port[0] = 21 [ 765.836967][T16435] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 765.845356][T16435] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 12:31:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x20983, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 12:31:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) [ 766.498033][T16433] IPVS: ftp: loaded support on port[0] = 21 12:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 12:31:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x50402, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f1d22704000000dbdf250900000008003a0008000000080093f32c009603000005000f35ea6200fdcd87abac2200843c26cc08b9231300000000ff7fffff00010000000800320000040000748b357f000000000500380001005947e926d023aa767f14962719df32cd10a2ea000065000000007fff72dde5e55cbe731c6483f32ea7042caea94144415950f697d48d034d6e0eefab2d72fa5299d9a8e5352e848af27e53de6cd6bae355042b94abad9e3f6cc3a37a2e770473cbfe9cc5fdadb48082c6d7662c771c70268fed5adb9177f4d4"], 0x64}}, 0x800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x46}, 0x1) accept4$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev, @remote, 0x0, [@null, @default, @rose, @bcast, @null, @rose]}, &(0x7f0000000180)=0xfffffffffffffc26, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000200)=0x4000) getsockopt(0xffffffffffffffff, 0x3, 0x6fb, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xfffffffe, 0x7bbe, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) 12:31:49 executing program 5: unshare(0x20000600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 12:31:50 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r4, 0x0, 0x400000000019604, 0x0) 12:31:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x9, 0xfdc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x7fffffff, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x6, 0xfdc}}, 0xe8) 12:31:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 12:31:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) 12:31:50 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x73) shutdown(r0, 0x0) pipe(&(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="1100000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6(0xa, 0x80003, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 12:31:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff00010069000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0xffffffffffffff72, 0x0}}], 0x400000000000061, 0x0, 0x0) 12:31:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r2, 0xd9b5f1a1c3ebb627}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="080028bd7000fddbdf2503000000080004000b00000008000200ff0100001400040006000000f7ffffff2c0600000900000014000100fe8000000000000000000000000000bb0500060002000000080003000500000014000100ff0100000000000000000000000000011400010000000000000000000000ffffac1414bb05000500030000000500050001000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x4}, 0x2c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) accept4$unix(r7, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x1000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_eee={0x44}}) accept4$phonet_pipe(r8, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) [ 768.196850][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.260403][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 768.260467][ T28] audit: type=1804 audit(1599568311.393:147): pid=16523 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir555149838/syzkaller.6GrJyu/180/cgroup.controllers" dev="sda1" ino=16383 res=1 12:31:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0xc2ea, 0x0, 0xffffffffffffffff, 0x0, [0x11]}, 0x40) write$binfmt_script(0xffffffffffffffff, 0x0, 0x8) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) [ 768.623380][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:31:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}]}, 0x58}}, 0x0) [ 769.052224][ T28] audit: type=1804 audit(1599568312.193:148): pid=16545 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir555149838/syzkaller.6GrJyu/180/cgroup.controllers" dev="sda1" ino=16383 res=1 12:31:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88122, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write$tun(r1, &(0x7f0000000280)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00\x00\b', 0x18, 0x3a, 0x0, @local, @mcast2={0xff, 0x5}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @remote}}}}}, 0x4a) 12:31:52 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) 12:31:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x21, 0x0, 0x0) 12:31:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 769.870384][ T1163] tipc: TX() has been purged, node left! [ 769.906346][ T1163] tipc: TX() has been purged, node left! [ 769.979888][ T1163] tipc: TX() has been purged, node left! [ 770.036591][ T1163] tipc: TX() has been purged, node left! 12:31:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000480)=0x3f000000, 0x4) 12:31:53 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000013000300686173683a6e65742c6966616365000005000400000d00000900020073797a30000000000c000780080006400000000405000500020000000500010006"], 0x58}}, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:31:53 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10, 0x110, 0xd}], 0x10}}], 0x2, 0x0) 12:31:53 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001700)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1}}, @rdma_dest={0x18}], 0x60}, 0x0) 12:31:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x896d9}]}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x705, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x440}}, 0x20}, 0x1, 0x0, 0x0, 0x200048d1}, 0x4040001) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)={0x64, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xffffffffffffff50) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)={0x2, 0xc4, "dcce7dcb42270bc6560ab863d3d627cf40da7e34f9978195578017189ac11cfeb64f18e29afb5ab2bb6872ebc391081fabef7e8ca715078bad7c5ad71ad3db23a47935be351e6e1b68bb02a39e81f2b31aa620773e22a5b3b38d7aed8525d53551e633bd05dad3b7b84c4253600f5563e71f9237366d2e6b3131dc4880f4acddec09391ff115c1daeb2cbe03df9b726b3380c204c6c9db6418fc597d0302e7107297a6d6dc5825bd8c0f708c24616ad4b75b7715efe7cfa103370cbfb3cdd602686bc41d"}) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x4000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23151}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 12:31:54 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, 0x0, @local}, 0x47) r0 = accept4(0xffffffffffffffff, &(0x7f000001e280)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f000001e340)=0x80, 0x80000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f000001f4c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}, 'dummy0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) recvmmsg(r1, &(0x7f000001e380)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f000001e580)=""/163, 0xa3}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000180)=""/11, 0xb}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f000001d080)=[{&(0x7f0000000e80)=""/109, 0x6d}, {&(0x7f000001f540)=""/186, 0xba}, {&(0x7f000001a000)=""/4096, 0x1000}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f0000020b00)=""/231, 0xe7}], 0x5, &(0x7f000001c000)=""/4096, 0x1000}, 0x101}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/124, 0x7c}, 0x5d}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/186, 0xba}, {&(0x7f0000000d40)=""/67, 0x43}, {&(0x7f0000000dc0)=""/33, 0x21}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f00000008c0)=""/120, 0x78}], 0x6, &(0x7f0000000f80)=""/43, 0x2b}, 0x80000000}, {{&(0x7f000001d000)=@hci, 0x80, &(0x7f000001e300)=[{&(0x7f0000000940)=""/180, 0xb4}, {&(0x7f000001d140)=""/4096, 0x1000}, {&(0x7f000001e140)=""/185, 0xb9}, {&(0x7f000001e200)=""/101, 0x65}], 0x4, &(0x7f0000000fc0)}, 0x3}], 0x5, 0x0, &(0x7f000001e500)={0x0, 0x989680}) bind$bt_rfcomm(r5, &(0x7f0000000840)={0x1f, @fixed={[], 0x12}, 0xdb}, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r3, &(0x7f0000022680)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000020980)=[{&(0x7f000001e640)="6338e6fbb7fa1d4acae80d062ef04c1bca4522844e3ba253a623496300acb79f32918bfc385897ad57fe8e57d4932d9244d871fe83becea3d67a7ec9e1d66c41dc4637e99e86a82e", 0x48}, {&(0x7f000001e6c0)="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", 0xe00}, {&(0x7f000001f6c0)="a8498b246a8db16b25e44021b48a1de59406566faa6d7ee7ee8e005fa229c86739e7b8118b4bdc07cbe0ce7522967d0c76e54a2dfe42ae1030b72f06e3b86af2a261fb818ab7978b9dc473315ab5d6c08b99f32cc8b76b33bed588e52aab2c67ec1b52ce4b1b13113fa665d5a88d0177ba645e6e68dad98a55978be9efa71d09a8bac4ca618e498a27f4e7ed2f3dd78a9e7e61c2bd024392a42c97327b46f73fe2793db9b759bbb013e2f372ef86ce6c79890b6064", 0xb5}, {0x0}, {&(0x7f000001f840)="f5b517243a7d2f7180610917c66ca89e2f36890d0ef267c5484a8bc28c71bae6c28e8f709c5f39ead16e76ffab3987c051fdb06363eef6d1bee57b85c84799ff53142742e8bb661a29e35a9bd2792a317e3d3468edc0e9401efdc4dc99a74b1a2c313756be4b93dc0a7a7c61b26523505205d0c33d2aa927338574e8b41600dfff8ca3289da42416a0d06055f49d94ba4626af4d7a01cfb1860acb2ded0ae661b0820d8370cef0b43e559e1c96bff03ae62232b7c9c4ffb81d", 0xb9}, {&(0x7f000001f900)="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", 0xf80}, {&(0x7f0000020900)="edc995a4f29c07db97e8abd7c9a34adfb658d261e2790e71cfccc2a21539bae6724521c80e82db24658ac42767e071e4ada6c692ce50b957c3f254e6a4fbaed9335883691de9d671d8798395f2658b07fb89c07ca02ab6235a7160d6effb5fddbf4bfb05f8d14e18b9373984bae2c928bc8811cf", 0x74}], 0x7}}, {{&(0x7f0000020a00)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, &(0x7f0000020f00)=[{&(0x7f0000020a80)="9311d83293e5b8cf6fee1aacd3b0d5eeea36668b3f36511acd4c1dbc7b8584cfc7085e42459b1c5bb4958cd6385da6fca13e9571c105655b2661c0341390fad57d623063fa72a4c3dc3ce9bae5d2b53f1cca65089356142d7152630e", 0x5c}, {0x0}, {&(0x7f0000020c00)="114fa25bc3aa698872786f823ef22acda91e26ab51d9c6775ed58356e7f6bd36ad7cc8e9e46f3ae1d2954675dbfc9947ad11850d6bdde08bc8ecdb55c57dab925f2fa9eb9f7152df839cb823d96ba278cbe951ef7e28b605fca2e22ad3665f5a03", 0x61}, {&(0x7f0000020c80)}, {&(0x7f0000020d80)="9deb70ac2d2c67e39bd8b2e2fff4396ef2b018c4f34ae98f89ec3241f966e2ec02348d64402d420aaa676b00f382b2c0202c816820eb09b37586aa1834bdec05926f9dc4ce3affc6e0b91f2d2a06d94fdd285b3dacb9d5a9581109f9551d71daccf89595d55b258ee3fdb05f1f4d54f42f60ef1645ae94f73ec49df2c6fcbefb9423434f0fe308ff819607b23c937ca17e1cb804a1d0a832b777101478f00fceefdf3b83598b770d3aa30d7a97cb7544a2f50f61e0dc47c22fc3604182b4009db20aa7f7d19f08674dd2b7d3377a35", 0xcf}, {&(0x7f0000020e80)="5abb3fa999f6185984882a5f181dad0bf4a0e356de1a893faf0da7b7f5a49bd2e55a48ef018743100bcd2e715ebc00bb39204e7bb7e819ddde00b027b0d679bc121bfe07f2df41715c09c9f6b26f1b6f7902a96285cb611f33a71df5ff2a9913ba9ad01d0dcdd29643c0c5702d", 0x6d}], 0x6, &(0x7f0000022740)=ANY=[@ANYBLOB="b00000000000000009010000010000806064d17cc08c42f7f005c3839b49009065345374a953c32dc6d2f92ddb069315b85d53e92772af5499f7c984067c7a786c9a6e91644a2cdbdd2abf1b1e14006bb72e278d2882a5e61e7639ad919e8c8105abc47c0e65469cbc7ee88684d142a1b4712317fe84797dd68cb9e2081f86d10bbea2394980fd171948d2bfbd6b319d30d5f97fa4320aa66773a2e86bef5a6fe0d1580fdc4d1097b56acfc3d1181615f0000000000000008400000008000000074b83df343b9bca9ae5e5a28ad1ffa357170d385ef95fc962a534b2e730504bdac6b2e194c74c6f89dba9a8b66a8d8d077635ca961878b0dd1a071038ab8f3a32b88441245734dd0d6380f43dc8d125b6417fc0531f5f9adce3daa6ba6838a258b5847353fb6ffe504128eeb9aada8bde75659a3e39ff58e46c399c9eadbc4fbe2c6fd56c7602bb91e14d67a0f15e435e3484f9fe2d388cc7effa8535368e53b0693353d1ec704a9ec452f7bda5acfe2f58dbbba466d1e2d31fbabb1f1b451590f180d9efb37b806ab9add3df9f0cb9896a41276cdac63a1e92108f2f920f58c00000000000000027010000000000009ba783d6115eed10147e1eb9c96ce2dfd7490925e3f966f2852e8dca0c7a8314c51baaa97f3dbfaa47c67fd1932f66b75890ed5e9712d40a9c0652ef979e1d9199e95bc9ce77dce396e9524f60a5e68cfe5f29af3526bbd1baeb6616c61879e1c52bf81afbcfb0f2bdc9e33f501435c20fad31b2db6056160328217251528037b5349b04d2e8ba635d26f5ab891cfc3a7e2f90f1a91ac75e6ee2ff23781e6ff1d38cca6ba09bcf4c7c1d000000000000400000000000000009010000080000007157dc9d5d0217731fc565ef3725f3325142c65f5194eeadaa6f82cba1dc4c099a25577d727de8e6ed3f436c00000000e80000000000000003010000288400003d90e6bba0d97534cc83dc7c6a0cbdce732b84b2ee1f1ec05221c0739a348adf979a4827298882d5dafc765a1bdb38b2f367b019ebbe9607116476ffab6456c55c8c344cecb6682277082a44de981965ef2323892d1d339191783da7acb9623a878880f3593c9b2687b930a78108b93069b7a414753436ec2890d40eeaa7f6cd64fdc1fa6794e496b59695479ae3e2a72c43fa6da7907c3e058ac8eb5972bd2b1833194afbe77359c3640b1390823991933205154709a28735ce6ea68d8e5daad6f333f8e3fe49aeff4f41b9e556d3757259624868ca00006000000000000000000000000100000016787ae9638b216331a184ef4d0a3ec93988e5e766e0164b617f919019102aa536ac6bb341648af163a2b0b7f9cc4e86bcf50ac18ae5e9d8653c24c70812b2f95f6d38a77e569e5f6abc84a4187e184610100000000000001301000005000000f595b7967661f0c8a473419fcd663f00c0be37569eb71de0309eb4a127b3f186b4c79859d7edf126d6a1a78b79c6e22dcf602d53ba53a36ce4222f03ca6a9a88379c384f614a749c0f4001ae3a582d9cdeadbe62d8f7227ae22a186ba3e6d1a441fc5c14192d12495f84d3e7cb3ea35049a2901bdaf011dabdb11d7514ca5f503f5a4e5e63f1281f1d92922ec47d2f5e58f0b9d5bd54a7d78c9c1e2c13dfcefaa1bc1824f8366b0938810794fb442a1c643fdf668abda296af301dfe8ff34ceb05e11542b6c8e635c36316f7d2c06629de00731934a3c3a59e3f3f0bd02b8d32ef2cd57f7a0db79697000bf5115a3041da81c92085d2bfc55d6fcd7289efa1301bd539072bc3b6b585da4fa2f62820c2d468139f7c64a034359c883048de36a992ec1b5fcf358d5a71165a547a9ce8bd0a9144026694bc64515b5396aa9886354f8fd4c78844333a062c4a598c4d407585adf7532a99fd6803c05aec6cd0603f00540a3e3bcb56e6d8ad69c62fbd7f06167605210b0948ac6b413aad3393016d830e0105ffd034c9864a3dd53d2b98633ea576b1aff0e70a6f02cf661d2191d6c2a70762fa6958ee2dfea47db3210bd54d9685c0f876b208dadd974d33eeaf25788230a72d2a39d847e9bacac97b19e6024f104f10f5a6c4ef5a7968c8785e0074479bf84ca700a7914e9a98d237230a1ad98c8130e6bbd64e8329f0fa4873bfd8a96cf81e9935709b4a39aec0faeed5ba91252069e078d1644c9b9cebba65ed58a8b252ee793e45b3100ce776011222ab81e6608cb869e68b2a981cfbfb432ddfd90c8513a3f7fcc602f40bcfb1f2f515550ad9680dec0ebbfe6cad5c19d854f7a3350a3c446db51a62a1dc44602753abd120fe38aa4b21e30fed1dbab79eb81392bd1044c518289e596aa3140e88c7e72c9f94f6da049178a90fba93416fe04c38278342bf631adbb931d2d770e16090974706ac8fd79b9f2e0435edb93a6c929cb780ed4b1de01b243d1c201bbaedc8c8ccd237480529e922a66ce73e8fe346538e6a9d6e5898ed0e770bfaf73ddb30d2a08bb22264554e69db36b7fe4a03d9157a499a55def14158bbabf78e44b8e9f50eabd88523f31332f96accbe8ae221a5960736ab9641b79a0fffb3e38c25538186b2c507ade10858af4b2682d23dafde7013360b33779d22c29827f10c9e5d21b48e4f3328c9bb8b5f63d8423ae2974571e0136f39b0c4708446fcfe100174b9779d1ddcc1d1554e973d6475a8068954630d1a977a81af3e8003770f323aa0d19d4e55472cade403aac5f6abb9204e1c7b2e68be6349c5b2b03c05eccebc21c1bdd57a96e9fc1743bcf12cc4dcb1c0d0979cb3155506581f351aacf2db4675db4823c228f950741d91c02a2220b9bdfc92531c751e43558285e4115df03ed42d5dfe6c6dd576ba7fe539b2025a384588c0cd8a56a018765a3e29cd3dbf427a5da5b14d4c5eb9cfd9a5ef9aa7b3bc3b1a9c3bd6115d6bdccefcc3e5e5a58c3232f5a7fddd70859b3003d87812e3016cef7ad359c6ae3f2fa2f181824a8dec173c5fa1f9f1e281fbc713bde19bb0e547ca19d32784a4c413f5391f5ec717f473bd66dac08b419efc600d700161ec68a9270b65175b2174e262360e3f769753876fb5f0c5837d06ab475b7cfeba3c1214ad56b0f24c43f3afd80f7a77e9a1ce7559f6e43c55cc1e48315f0d56de40c56056ccfa19e84c045fb91f015254178783e1ced047ff373916453cf0d24aabeed833ec8de9db5098aadec0a6ceb2ea08e65d91882d210796ec643d1826813e3c76fbb1a0bdd087b02feb51bda99362ebcf8c8e6c5d62f240467b8f2ce208a951de31de93fc6b2d79dd0cf5c60a54947c8507ecd484dc3b478d833ae30174c9ebe0c19c931655755d94123bfdd0b6ed14d3a3fa2cf6bd1bfda80ad9a980cd4d67019285faf6d7e223d9b7720b4b26539ada5576f2584b77b7f60d5f06dee8a9399a0ac49c8557ccf8380c60c1538e873fea2fd9d16dc43d2acd92ad5c9111b44631f883ebfbf9fb1b286ee0836e0b589a33c83ba5e41b15ff7e0e3ce7bcb1cb3814e63a09547605918fcd775c0b66dfb57ed8f4ead7dab9a253f7f78376fa5aa0dce6eee867c180e6789748b4ff05854bbf758241d51688349b55a3b75187d33825618bf947916bcc499ca14205f43e35909287915e93b09ff4ecdd7e81864523bb67294182b2694a5f7c953c1ebe4e1f2d2755a0bbf6bca1976fcd20e82a0d5278175a094ab41f90ca13674c41f1b39d193dbf0900ebcc2fdd794cedff2aee329c93da068396d69257e733a7e63f10c7c4a743d3465591b1fd7ea60cb2ffe28fb476914c03b6b65486f3d045ec8475dc6b8fb1c179f5dd67283be5d8d3378ff42f640233981b036ccdbf1330a71efdcb8391997cdcdd7af6e23c2bc21e1ef0a0644d9c622a88df29f4b82e9aafd4a63ff57ac0fb95951402f19d3d78bdf7ce89dc8a3d0b45f84f9c04890536fa0d4ee11092d7b46ce5c72c2ed314476e3c179af91626748d1909370daacf1aa0f25648911b46c84e13afb3fda9a9f72045ba9eb6ca2eeb1483ab2c5814ed2fd2980ec8058a377140b9ec7f909b6c6886caad265319b53e7b0b8e667f57159cd3d232f3af09a0882b51390cf4072c8ece7f2e2999cbdd7dda889cfb1b2e36f5816216bebf2b00376875d61d0de71316af9091eef9a33a403e74ce6ebef344b060477b6796a14b15293ffe44d7c0d6d1b9b56f559d0822c817ee53717a6439b58fc14b6201aa91f8f1b419ac77a66893fdf485ff5e098b9054bf0154ad544777e872b8cbf5da40f4aea240d63653be0d83590e4049ba164552628d4c0f525e91064437b9b8b65baad083231c2eb1e69647af5480d9937dd2ad6800f09a0e568253c7d64b6234bb0a90a318884649928ccc6c2a6a2ecc259a3e54a43f817505b55d00fb3876abb405c6ce25fe234f98632a2c38eaaff3739f32c19f6517d8506c6d0b166d9cd65a8b5503402abb230f6623a60a57553b03e719961d82a8964931830cdf2c5e6af71525a72790e7f9acb87cc686d125e96d82ead1bf3599a32332d5fdb0be164e44f636fa1565dd8b132dda6e99f47ff0aa95b848cfc8573f0d18c36c5289935d1223b3e31e30ebc65239e07df3e8f6dbb0148fc7467093ab4d4ed30dbc4aa7a1dcd2e6e571ffd35360f976cb016d42862743aa65f6c6c90698ab91f9357acffb7b8f3b2fc9b688f52b32c89638661ebbe9f4c6d3eff0db42e18db5457bd712730f5ab0285ee32cc6d175a144673a98ff97e6936fcc0c4075e4416172ab20e4efc7ba2f525796dcbeedc3ad2c89d7c2b4b7fafe156b298829859270780d497c86a7df84faedcd392c20bea885a50f83c24be8a45e3b4ed58b3eaf5979ee9c739b0452fac94a1a2b528d69773dab96f68d560c98d0d380a5d4287e508a8e8b5c5c5aae3cd7514fd1060ca9fc822403d8cc8dbf01c56095bdf327e6ff0d6249fe1f79d5e6f154c4cf84cedb98f196eb5570dbecab50df3a5f22bcd39cf63cb313f713188a65e45458a7c2fddf64fcb6eee2e21a46b45330f21803c140f233980e8d9c5082a8a9ce87a0d85260014ed283f2c3937e8fa0441bc2abbaf313f93a11afb4dba8e07f679643d6df823b44d9e09d046319a485ee12d41386a0eb9583b5ea79b27d0c37733dbae85a0f5d15d8f34588d4460360ff82689b70b3f5dafa35191cbd9f67e93b4ff407e5e6428e1e5f877d223299db6ec0cd41c4f9e7dcfa58554885eb87dc90ae73867fd008433fcddb8bbde6829768180a1c83e31d68993543a79f08cb8f3008ea6a72762142aa931cdbbecff7d03d3753ab89753d7ecffc8c6fdb3c682821727ab512efc0d93257e2c342f01cb8cc594b8c0a65b8850206926c0373fd5a18b551e7771ef4564c850094d3e1c6330bda389a22c8619c8079feea4a9b7df87bda97fa8f23130432d819145c1a31bb0545de30dae7b289b92254995270010e95b89cbeb38ae230961577779dbf8c0a6dfb8c38e7fbef16c1c444a2ef501212e492a9ed3f85ec7abc70ea488bb15060986db486e9c751e33c1c9eaa7f9b0f09f8aa1361d0ea83f0568a7048e673285d146d178b404b04fe7812265a6d120ddbbdfb7512bc9c0b5bec54097ea669174eae054fb7edb96807da25614b58c927f77ca97a7dc7a4c80c2f536596fe36e4897df3b517f34a39d6f9a5913146e7572155cfa8cbb9d2f2c426ae81875ca9759549e01bff5b217283251bfc41ff90c6a7f67cb2c57aa7d9538954015bb61e9e50e7822c8f920e1481ac591ed16853869b5c8a2ac329ad24bef62eb6d63b9a6c840524d7191e93fbdf92f2dadf75f1d825e3ec45ec9224e6d2028e0945ee164085dc70508e559edf520b82c1c856d71eaec7419883749a0fe629d94ea98743a8bad5e1720eeaf574ce5cd7b79f9cbba369645aada6b982d6df808d9f47544e23afe24b0b14b0a36e75b4e909ffe92a8eeb08ce612b847b5cb3b353bb06dad4a951b29c7db057957ca8604f6ebbfbb3a08b8b68eda9c74bcf41fb20ae35915b2a2679e444ea30bc7ec24149702235661f20d972fb9afd35d857368122b463dfc3c5e122116cc5a1aeed1d7cf60772e4860543bd679acf6465b15000a7b92781282ec0019836a998107289ccfba16381aecf58d2ec9f05b450bf15c834dca05f23c3d2af36b439672cf4bb839d9212a4c28ef67fdae908de6d2e3775b61ccf91a9a47e2f784f514aa9e8d894fa0db8ec70583b2d58c8ac4af52cd80b1694a91c0a2a8900dcba4bd637906028c49844053c24946cdc0232fefaa6a676ec13bace77a9ae428a888e6b0b8f02d426f1b8565cb8677f0abe9f92d3048b2c60a6bf7635fce69507482773911e78f7f6aa57ede78ee45b8abc36431039194a98f96c4c1339f93fefd771192e0b5d9aca2ed1a06522d18d4615d5b3add54db29257955ec4338df1fd3ce60133506a5ddc90c671bb80c15735ce08d0fc9a4226fb9d708a32340b93755554386c3fd7b14bff834e79a5d73a7e60db71a440c6ef62fad7480b2cc30ee9dfe93e8b4a64a7fa7ac4f88179937a7bef862c2b53a23c0bfa3b88390c6f127e350b7b61924a33b6b5ad9539a02131f5f3f72a9e333cdaefb12c573c57db68bcead6c1cca186f7dc7ee82fb867b5b4c3056870952ebe16feff32b18941496b85fa952dde8c988055610592f35a96f32e1cac743d0d1e0b1a1507f8dc3828b70d5f5d7fe5de874df4b77ede24fd3e7e187ce3375abbf8c6a07ded00a7bc70566a74b2aa116d11d0ea35b410b67793a7e6a85a47f9af98fde11f7cf44f486edca2f7b8432962be56b27b822449cc02ee1d81b743b5e6a42563b66570c36d1c3e088c6485795deab0e2f6511116bd9df93c3ca02379675f85e7dc5bad75f28a1c24ae1d5934e58936119861f668e49ebfa9e715c296c2cb875b5e5a87bd639ca4e74090351948d099437ddec28e7cc9d6ac4e99712cb293f1eddd37d5c3faa1ba689f8b079d2800377b5332da27952ac708c19f2680e16abad37cde0bf28a16ec68fd6c956450b15ca811a3f54080c023558dd9035c15014e9d24f3ae37728a0f438067555c16a11919d20177501866817fbaaa52acbee99ee19ed48809aefd1a3964521bc7bbe3bc5fe5832a243c284c589c72ac50b7e3fde4a4042bba64ba1e2f741465d6fb83bfee9976d8adb7c7789a418a8b48b58f1ffc71f1b7213061093744f549612ddd9bcfbba34cfea7c9a7fb3ecf75bf92a883aa4f43644a0ffd8cd100000000"], 0x13f8}}, {{&(0x7f0000022380)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000022400)="8fe84913011fa81721cf15077fbad173f0108dd05b6fcb37b30810f699103e2b008605b00464def1712cb07b9b341f1a4311304863176332539b3e07eba413a7f1002b71e588653597756084850592dbee2998e8078cbc56e49add01b0923f5961083b96a649b8044aba2c4f58a480033bab058998f191ca452a3ecf2b80236c567b76f432b5c61dc9cd8cf0bf62c120a1d5e74985d2e2bb92970c6b6da8ae47eeca5038e937395ee937f8865058e83bdbe95272f4079ed4f6915211d66fd5d7f7c16f6acf0284d77a5016b560af7a851b7c500459f47e18bdbb4b096efe331bade9e0e3d06392b95f5ff9dbdeb6e3352bf54f7ec7d4e24a30aecd08", 0xfc}, {&(0x7f00000005c0)="c8ea3d8b2dedd74a970fcc41f22ce5f31eb4d29e2fb726825f7d91928324bec25dd7", 0x22}, {&(0x7f0000022500)="ba0c51c288c41fce94924d7acc24006d108a4cbb4c1ea2a305b859ce379d4515d19929fc93490422a6ab4dfbbcb496ed3d6de3c38f1f32c3202aedd26c2443e0b8a1cf3a35a6285acb863e8ef3d235ed299737963b207e27f0120d1f8e42482e89d06de5fd2052d3f9f388e40b7dfc575eec8943fcd5bf1706abcabe8c363a38fbe27af35f88d88c2c91fe3c20f126663a38d45e51986e6b11609c69a2314569140d2070d66de26a7757ef8f814a6d2e546de422ab035ac4b27ae9ded836430be81554649ce7e08832ba57d08e5a3a97c6cd4837bd8b1a5e95fce5584990cb4a0287c37cc0085b84cfb6be", 0xeb}, {&(0x7f0000022600)="8540bd0dd4bb89c7ed7154361d3814fe33cc0d52f63e02ca903a4dcbb9012c4c361c933eb7a005ed0f2ecb2164fad19b53d86f3b3e05380cefe923d5ea533002ccc7aded27d0f3b873fbf942a8dce405c7970ce5850592a526b27ef29ddee3faf49f4f83d9834346", 0x68}], 0x4}}], 0x3, 0x8000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 12:31:54 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) [ 771.743349][T16582] device macvtap1 entered promiscuous mode [ 771.749255][T16582] device virt_wifi0 entered promiscuous mode 12:31:54 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000000000000) [ 771.884583][T16582] device virt_wifi0 left promiscuous mode [ 772.417045][ T28] audit: type=1804 audit(1599568315.552:149): pid=16591 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383065681/syzkaller.WLwKnx/173/cgroup.controllers" dev="sda1" ino=16378 res=1 12:31:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast}, @nl=@proc, @tipc=@name}) 12:31:56 executing program 5: unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket(0x1d, 0x3, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x154, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {0x0, 0x0, 0x4ffc}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x2}, &(0x7f0000000040)=0x8) r5 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000002800)={@ipv4={[], [], @remote}, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'virt_wifi0\x00', {0x1}, 0xfff}) 12:31:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000011) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x1b, 0x0, "9abcf1f032ea2ce343e18d3b2dc5321b835a3ff209983578127530e8c876a96b5e6a049e6c3e04a225333ac530018324d0439d50a6c6a2211b9b7c70d1c5c036fc83c2c5cf7d73775fe47e7a088fe43f"}, 0xd8) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r2, 0x1, {0x0, 0xf1}, 0xfd}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x2, 0x7, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff5f87}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) 12:31:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000001d80)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) 12:31:56 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000588, 0xa, &(0x7f00000001c0)={0x77359400}) 12:31:56 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) syz_genetlink_get_family_id$tipc2(0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x15d4b87) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @local}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x58}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 773.868222][T16604] IPVS: ftp: loaded support on port[0] = 21 [ 774.054906][T16613] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 774.073915][T16613] device gretap0 entered promiscuous mode 12:31:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x120, 0x125, 0x120, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'bridge_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x6, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [], [], 'veth0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) [ 774.690539][T16613] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 12:31:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:31:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) 12:31:58 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000000484367f769f49f08", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={r0}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001440)={r0, 0xf3, 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000023c0)={0x1, 'vlan1\x00', 0x2}, 0x18) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket(0x1f, 0x800, 0x8) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000100)={0x100008003, 0x40000000, 0x2be20000}) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000180)=""/106) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="0800000006cbf9aa0f0500"/20], &(0x7f0000001400)=0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000014c0)=0xffffffffffffffff, 0x4) 12:31:58 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/201, 0xc9}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 12:31:58 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 776.369806][T16676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:31:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote}, &(0x7f00000000c0)=0x20) [ 776.609620][T16676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.689617][T16676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.862569][T16685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 778.158787][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:32:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x2000025e) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x200001c4) 12:32:02 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010fb010000000000000000000000000a680000000d0a01"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={{0x14, 0x606}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x14}, @NFT_MSG_NEWRULE={0x3f8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}]}, {0xc4, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x4}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}]}, {0x68, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8}]}}]}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x238, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x1b4, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}, @range={{0xa, 0x1, 'range\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x44, 0x1, 0x0, 0x1, [@meta={{0xffffffffffffff6d, 0x1, 'meta\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x7c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x54c}}, 0x0) 12:32:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:32:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x2, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000001500)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={0x0, 0xa000a0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 12:32:02 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 780.036664][ T28] audit: type=1804 audit(1599568323.172:150): pid=16724 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/131/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 780.096047][T16722] not chained 200000 origins [ 780.100710][T16722] CPU: 0 PID: 16722 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 780.109400][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.119482][T16722] Call Trace: [ 780.122815][T16722] dump_stack+0x21c/0x280 [ 780.127207][T16722] kmsan_internal_chain_origin+0x6f/0x130 [ 780.132963][T16722] ? ip_do_fragment+0x3b50/0x3b50 [ 780.138066][T16722] ? kmsan_get_metadata+0x116/0x180 [ 780.143332][T16722] ? kmsan_set_origin_checked+0x95/0xf0 [ 780.148920][T16722] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 780.155138][T16722] ? _copy_from_user+0x201/0x310 [ 780.160138][T16722] ? kmsan_get_metadata+0x116/0x180 [ 780.165390][T16722] __msan_chain_origin+0x50/0x90 [ 780.170371][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.175547][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.180542][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.185303][T16722] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 780.191263][T16722] ? __msan_poison_alloca+0xf0/0x120 [ 780.196631][T16722] ? kmsan_copy_to_user+0x81/0x90 [ 780.201705][T16722] ? _copy_to_user+0x1bf/0x260 [ 780.206522][T16722] ? put_old_timespec32+0x231/0x2d0 [ 780.211780][T16722] ? kmsan_get_metadata+0x116/0x180 [ 780.217051][T16722] ? kmsan_get_metadata+0x116/0x180 [ 780.222289][T16722] ? kmsan_get_metadata+0x116/0x180 [ 780.227538][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.233047][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.238662][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.243913][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.248980][T16722] do_SYSENTER_32+0x73/0x90 [ 780.253542][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.259924][T16722] RIP: 0023:0xf7f14549 [ 780.264105][T16722] Code: Bad RIP value. [ 780.268208][T16722] RSP: 002b:00000000f550e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 780.276650][T16722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007fc0 [ 780.284670][T16722] RDX: 00000000000001a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.293470][T16722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.301471][T16722] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 780.309480][T16722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.313374][T16726] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 780.317524][T16722] Uninit was stored to memory at: [ 780.332027][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.337894][T16722] __msan_chain_origin+0x50/0x90 [ 780.342873][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.348011][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.352973][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.357681][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.363341][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.369336][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.374575][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.379471][T16722] do_SYSENTER_32+0x73/0x90 [ 780.384090][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.390430][T16722] [ 780.392769][T16722] Uninit was stored to memory at: [ 780.397816][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.403550][T16722] __msan_chain_origin+0x50/0x90 [ 780.408507][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.413632][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.418579][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.423270][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.428656][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.434218][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.439451][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.444322][T16722] do_SYSENTER_32+0x73/0x90 [ 780.448847][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.455178][T16722] [ 780.457517][T16722] Uninit was stored to memory at: [ 780.462571][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.468304][T16722] __msan_chain_origin+0x50/0x90 [ 780.473259][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.478820][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.483777][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.488476][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.493868][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.499524][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.504750][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.509626][T16722] do_SYSENTER_32+0x73/0x90 [ 780.514153][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.520475][T16722] [ 780.522807][T16722] Uninit was stored to memory at: [ 780.527857][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.533629][T16722] __msan_chain_origin+0x50/0x90 [ 780.538695][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.543836][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.548797][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.553513][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.558919][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.564519][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.569746][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.574621][T16722] do_SYSENTER_32+0x73/0x90 [ 780.579170][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.585499][T16722] [ 780.587834][T16722] Uninit was stored to memory at: [ 780.592880][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.598625][T16722] __msan_chain_origin+0x50/0x90 [ 780.603590][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.608724][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.613858][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.618568][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.623968][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.629558][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.634812][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.639686][T16722] do_SYSENTER_32+0x73/0x90 [ 780.644236][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.650583][T16722] [ 780.653006][T16722] Uninit was stored to memory at: [ 780.658086][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.663875][T16722] __msan_chain_origin+0x50/0x90 [ 780.668935][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.674074][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.679042][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.683766][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.689176][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.694749][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.699967][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.704844][T16722] do_SYSENTER_32+0x73/0x90 [ 780.709367][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.715717][T16722] [ 780.718058][T16722] Uninit was stored to memory at: [ 780.723111][T16722] kmsan_internal_chain_origin+0xad/0x130 [ 780.728951][T16722] __msan_chain_origin+0x50/0x90 [ 780.733949][T16722] __get_compat_msghdr+0x6db/0x9d0 [ 780.739087][T16722] get_compat_msghdr+0x108/0x2b0 [ 780.744059][T16722] __sys_sendmmsg+0x755/0xf70 [ 780.748777][T16722] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 780.754175][T16722] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 780.759757][T16722] __do_fast_syscall_32+0x2af/0x480 [ 780.764979][T16722] do_fast_syscall_32+0x6b/0xd0 [ 780.770913][T16722] do_SYSENTER_32+0x73/0x90 [ 780.775454][T16722] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 780.781968][T16722] [ 780.784307][T16722] Local variable ----msg_sys@__sys_sendmmsg created at: [ 780.791361][T16722] __sys_sendmmsg+0xbb/0xf70 [ 780.796072][T16722] __sys_sendmmsg+0xbb/0xf70 12:32:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x891e, &(0x7f00000000c0)={'veth1_to_batadv\x00', @ifru_flags}) 12:32:04 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800000}, [@netrom, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom, @bcast]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000540)={0x0, 0x9, 0x1, [0x0, 0x7fffffff, 0x9, 0x8, 0x81], [0xfff, 0x20, 0x6, 0x9, 0x9, 0x3f, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x6, 0x1, 0x7, 0x200, 0xfffffffffffffff9, 0x0, 0xffffffff00000001, 0xb8fb, 0x4, 0x7, 0x1f, 0x3398e7f1, 0x9, 0x1000, 0x2, 0x2, 0xf3, 0xf5b, 0x2, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x2, 0x0, 0xae, 0xd93, 0xffffffffffff9661, 0x0, 0x7ff, 0x3ff, 0xe102, 0x3, 0x9, 0x80000001, 0x47, 0x9, 0x8, 0x101, 0x2, 0x100000001, 0x7fff, 0x3, 0x8, 0x108, 0xfff, 0x4, 0x4, 0xffff, 0xffffffffffffffff, 0xffffffff, 0x9ee, 0x400, 0x8b13, 0x2, 0xf48, 0x1, 0x0, 0x4, 0x0, 0x4, 0x7, 0x3, 0x5, 0x2, 0x6, 0x7fffffff, 0x8, 0x7ff, 0x4, 0x0, 0x0, 0x55a, 0xba11, 0xf2f, 0x4, 0x2, 0x7fff, 0x7, 0x2, 0x65a, 0x7, 0x1, 0x9, 0xfffffffffffffffb, 0xffffffff, 0x5, 0xfffffffffffffffa, 0x5, 0x59, 0x7cee10fa, 0x4a62, 0x1f, 0x4, 0x0, 0x1, 0x7, 0x7b, 0x0, 0x92, 0x101, 0x10001, 0x3, 0x20, 0x0, 0x633, 0x7f, 0x2, 0xdd5, 0x6]}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x58, 0x0, 0x100, 0x70bd29, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x3a, &(0x7f0000000000)}, 0x0) [ 780.824760][ T28] audit: type=1804 audit(1599568323.962:151): pid=16727 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/131/memory.events" dev="sda1" ino=16372 res=1 [ 780.851023][ T28] audit: type=1800 audit(1599568323.962:152): pid=16727 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16372 res=0 12:32:04 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 12:32:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 12:32:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x14}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 12:32:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="4177f292251855b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x201, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) [ 783.583311][T16768] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 783.662989][T16768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 783.733760][T16773] bond3: (slave bridge8): making interface the new active one [ 783.745323][T16773] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 783.763522][ T9054] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready 12:32:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 12:32:07 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00') [ 784.099320][T16768] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 784.140145][T16773] bond3: (slave bridge9): Enslaving as a backup interface with an up link 12:32:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7b, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x6, 0x0, 0x20203ffc}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34003f99f13268a138b70000000000f900000000", @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x5, @any, 0x785b, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in6=@private0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) 12:32:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 12:32:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x9) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x0, 0x20}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000001280)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001300)="cbd03c578176c857e3fef65b780859d2bca4493850b59d9b0a477d464cbba97c9ef1aef72d347c96c53c8310a0803eb7b6f8523dd62b03c8f2d444046b77c57e047ad4e51ffd58c3bfc83e47c73e1fc85fef5b234c8310fb47b8db0081519746dba867e2a0824ccc4e5aae50c9b1ee9b185c103fa4de5d7ab74e21c9b648e4e5df23d6b3fc3417eadd6c4b9ae95f98d6ccd6d9b6a28cd221e66dd288aef456b352e13c4f39e46af34dd9e88c4423dd49a124ebbec177d45cc73a146c174b49a8b43273066937c40e2960a84350dae9af19bf3dcf7393e8cf9dd6b503b19c2fe1685b98ebb9907c602fe265edec810b035caef0e8e93f7dae4677a5252cbd90b11a19507185d8e5732afbd5427fded8b8afd21355a41dd2b0ca852102cec89e3ae67e30a3aa27f9c85d2f3c980ff130a11dbfbc6fdc105e24c610fa1706b58f2e6944c8b09273a387842b955a871318190fbdfe1f09fb47c75cb36ec0afa4ddf2032c9d144801d8600ffc23f50ca7e2f85ca0643ed40146dd2fcf8f1d52d5663102ffd06a3b41f71b76441c2c6562fd57329d06e45eb51957836ae06527c00a65b3f90d6a85f485232c8f56a73e61d050775b7fdeb0c263df5796e2db31d33785e602862f49da9e30e6343181a9afda8a3fa89163448795320827f1bca4f980f5b3ace37f448a63101f033e66a1edd5ee80981aff00d86467d382af5489e61e4b6fd67a830ccd437cf847b58fe612382a9c1d4d3ae93594fde5cca709deac12f73487a5b862f67efbda7ca497c532a1959f30f058881ecd025790e5b799f6d61c8f836c2d45538e1086032aa65314c4c555ee805385bf7f019ef48f69eaf7e1e3e94c157f96d2532ac6530ee7c9087799964c65edc9e69de2a78c426fb0b52481e90a98917350980c19b2e0309e918c1c2a553da7953e09e9f0bb4988a32be102d2078225e2b779d81fc2b2a8a4468969550f1c59ed96f0cddc088fd7f8d6a8abf8de3d1f60fc8fb13906e6ac8c206f4fe2f7412a0da655557e07fde8c98d94baae155b8d985c72739e53c1db1b3dcf4dcb8d62860c16ac4a7ef18bec5bf7a128d0bde854e36bcbb241bb0ef378662fc06f5b953cfbe02a0bb70cb4ccdb2fbbed5c1023b671ae44be5d8d10f8e4c75c2bb77157194b4bc51bd28f805633f5130af0381ca9e9057efde5bd7ed138a4f933ca806b556dc201d5882c285764e3c5dfdfa560052b6a33aafc73360e47c2af91b6fda1ba9d69831db0e855ddb067435d17c6ef1014c2aefb12e4255261e0564141a67a75a2d1745e1c14cae7e52dbff661f206cf1a39c68e158615d19bbb44f1c0d1278c21297ed68c8e83614c81398d96f223645bc5f6ffc900fd9b7edbce044c5d1d1220a7d9be81c9243982f251714fb2617d6c05c2cb9a9a34634bc7e5c757b4faba43b1b3f5de7fb9e89c25a38346d9f7e87b923ad9d9d498ca4e2b4819834f9b9816474b2248239640c7afec16c2f68ade169a10113fe98e5d7bb6bafa95ee74683e07e04ce54f4ab5f164bd0fd89af19ba4af5be41e10f6214309e394a30b371d824d6d5280941108b856f0690945037823b13ffa1c3dbc0e699d0e62fc2ce04a3ac0671877a47d14bb5abae3195cb504b01b655d9a547f1b0f52fce38e081e782ee2c5068bf79bbe4837fde6c4add4bfc930e2fb6147ba1dfbaaf315e5e1458b8f9a3a6482a5ef00c87d9f2e3dd551be5e745444299a764c6ac31acfdafce0ed4bf9a89e8c0c70ad51a35db80ee5ef9062b8b3f37161fac2cb0f0f7cc78d59f6bc76efb387e422d78e2ccab7cedadadc71bd89d3b890275d2f258ff9926233e47e6b5f17e169ab91a1f6d740f8c06efc94a6f885292fd0236036fece0d042198856bf08e193dd158ea10706910f17b0cc4b07b7f9fa72a65f3c1b1899c3a21feb251fad9d5aafd5219e531b4518b5f1b894dffae0e8f88896fe71660c49f81ff594dbcf606d10a973e258a6b7220e352f87e7fc5a6879c62db178571557076014f753637ed1aaab310225ced1babb2087dace0abc30ac9d463426bc76630024281cb056a27899e1f01c189d2bb45e771f6c24437d8b8b337c3780e562cde8fee27e292042d7f7827b3ad213296ca0cf5b0f9f4ba82b15ed18ea8e49e5f885a9162d717cf073b48dff08b05716ecd5d7330820505399cb6be93d31d8a89f666fb06ef9315623bf173de68b326ecb5c78eaa756a2917df042a6c70fb239e15d38fa36e657a4e4d695216b2a84e816f818e9d48378b294da01c1fcfd7c81e0aabbfbd77a659fe588fc68a9644f86294239c91ec2ad4ae6e754c7d61feb403ed247662d47048d2a5cf4f385bfed9564f7e9899695efbdf942e854ef81f2059e688215ad9cb6514f03c8dc799275e0c470b1ab0aa595548e43beebcf4b600f853c93455eaff603fd413812a53ab750c69a925f3c0c522a8e39808bc0f2386ff9b8f21325edabbdb56cd6f927e5c28b2e1e23f098c3f2c59ac9b8779b090b03ab4423ad875ff80b11e70a6098b8ea94b334824c244d37916c2594489e4a0ea53b459ec0d6ae788aa299d7f3b33015a5fdab4c5705a34bdb0d8875b37f8378d22cca212875313f735878d55cdc92809088da636485662d6dc490f3461252e6fdbda663d048dfbbe6f4c252f49ea87a6a2f8e71c7c474b5fea26b5beec1a90d65a9679a207f0030c3d5aff174354a2f77572e9b91c5b599978a2c83086372a0cdd78e7040489f87839b1ec1896bf622f12d4f34cd2d5586b0c3f552f4e7922c4992e45bd6cab842f00463654d3eda8088c586e528155980df0c85e826941b370148e680273b0b7cbf3b27bd62d477a96a6e2ee88a0b123814377b8a88717f0b29828e331b540c32c47045facaad69eac5cedbcbfe7b821c38a7af2d3e97453f4da4d75c9efc8affb03b5e25a0513b65b2f3a264faf52a2c0415e6161f74a892d38efc8dba7035f613d28ff3b09592acd572ec2520b7b0d96a893581bfdb2678792631e090d60266a12252800bf66969d3d384e96c00992345b260ab8026674109c09f4ed0c105dad9adc9a94279f407c8c21242317721a1aeb42856c873e78400d48028c2781d5a8e6e1f5dee32e85ab7b5e06854c3b1422c5d9ce0ce86d87803abd94b0c4792f57c49b05e0c693718559bccad7aa977f329e7693b4b5d2a2acf5b0ced126f29e6ab2bf1896de671b0abf9226026cd2ac96602237cacf4c68d37d2e0448616b1737717f047f42af76fcfaa44393dc0f960c1182f21ca061d696ff252112aae61961979efc1d2794e95f5e83736989b4eb57df9bbd9e6a2899b6f6bf5b58ae8a0e7d170ecdf3df54723b0f1b2fd267e730b80ed9b079ec9a0a65829a699ac80bfbbfb4193a62a78c5bb3bbda87e04ee1d93d2c6c69b2e45f51e95296255c01a7923c5ef9a546eb04c1d4eb51ce654840ce0d862237d28c5f2d63492e34ac762b694fa278975235af4881cdb47e4ae38a58b1f1f6155604119e6185e19b0a1248fa846eea0917f670142a7822da11f810d8197d7a5af2fa566acb1bd25fd2c7ada4bc8d9d8dd60957c9171ede69eb2d808b160d7af09ecd0974f883a6962a8c644ae5484d3bce89317c7aa8707bd61ebad72377c6af53f865730f2a3f62af3e613e975347d7c60a496962ef6e77a36842f30929f520655fdb04feeec785e6194080df095b72eae6e5be4098e547fc0ad10b51f4cfb7540bcf060b64f24ce4132b1477bc6e855a4f8a4666523f595152e9ce8639a6ec23d6fa80350031a477a9fdddddf20fc76ec59bbb812378e6d5aea368d39abf5a9d907531fac3b32c7668a7a20c36865e412bb62d84920b81402884c112e3fa9495059d37dbe5ebbd8caa09f46bd61af6d5bd9bafdb99d4785b14a57d56aa79a30b7e6b81b0336d10e62155bd73f5180e81923bd3f6ed40f57744e2c890fe120a14158198d760206b916d032871f70259d3cd53b4ef56892ce366a1870fbe165a233b11b1b7383d213f504d119bbf7ca676e769ebccccf5160c47be93dd0de6fb8d99acf55f13be409e9506ada6c9418cffcc7ae6c49014c9f1b8c5d7e101412541374eb93b6e9d2da86821097cd1f94ff90381cc00afa88629f3aa3825faaf8a25bc2621468b745203376c4a662436c313b7c05adfb9749a2e2c9455bc79afae31975f51b1407fd09460bc207fe167b239f103b04115f286935d9960b0e5e6ff4adb351baf1efba5494b2443752b1d5c3c216150f2b66dcc0b6e844621d740ccdb350e840172bf307903a7e1db4f50bf8e0f3f3f6c0101d25827f06344962dea9ae1bf9e1c2521ec6ca2ae316a0996653fc45e03658bde6b4e1cc6b51a670d595de56bb43ad1f2943f2c6025f5f9c72d51944f3b2ad9124e194f29668f15196fa1cd5135069e2bc7debaeb7a207a9abd05e563c4133e7ca96d1e211cba20b9e05a084172696b273f555602ab1f2f3c0fae72b3c961acea744b623f448143804d485f7790f7401158c58a32418b6cd275946e268810b40317ba462b76745c459b23efbcbe48a63f5ab46fac735f17eb9a9417559fea97887cdb666b0e154f98bcbd09f80e153362d69abf71101c1e6a414fd5229c6eef784cf8331aaa7d1c18403336a29651245be475094b6138309eae9177f090a8795994df1c6b7a7c9aa9ed5003413903202e773b00cafc99cbf46e16510e443127a66115f164c014659d2b6addfc3ae850486a165710318c345ee216f894474e0f494da9e4a9b6d06f9dd3abbc15006e97e9f9706e0d9c5ba7239b01dda048224794a30cc0837b783385afd2877d3a2434a90e1770469214bc7a8dadadbd30c9f3970ba5f6de12693689604bc0246b019fcd29c49874da03fdeaf735b24a445ced571e9f831e0f4e71685f0e4164859ccef4a1adc1f4d13fb5e945689dd5804f5c6f31127a478e74a13c2dd1e3d0910e87c430e4fc70e8df0f9e92c03ed6f9bebdb98cca44f7960bcca990fe75f76828e2427c84647d81cfb3e02cf8f3918150c5bf89100a5e07dbe8ded045f1c8a2d0284aeef49c3deb5be44de3df53b4824ff5a7c2d4d5607be280ca3f4a4b6dbe632cccf0ac3934daec32c2d94dcb2eeff0551d54d89a9e3209cc003a17257d96ba0e3fc25150c58505212e2be3eafb8202706a422160d252338892be7cc17cbc6d43340145baf2ee840e98c473318ae2c502a0f72ade2660fa2116d8721962f802bb87d637051cd40c3163daf49bfb4e4414ede679edff04f01d6d8cc486e751e387b436d98afd3f8ae92e6e44720578c3197861bfceddaef2f995434ea90f3eeb769bc588152566bdb0b1eb9f85ac323df8fb10932341f12c605de6f137cece3ad0157f16fc868203dd413eff24fe071c2bfafdc3b0daf1de154e031bb4b2d9278f2073f8bd7dbe1ec68373e89b90b33958a4255560aa533af3a00aedd762c9b6b2cc418146e67d994dc21a156ce8dbaddc79c523c7e4b1f60572f610f06280134b39935d24fcd763a87b92b108b5261013a21fdfbcca411faf0e7f2f2524fea230e7a642eb5d6b1d27f7a80f8a06ade313a449f2aa7b0753223a02a26f6b72330e6db64f3b0fb29459042cd10761b1074c0931bbe0bced43a9050e960a9b69e62d0e5d55878a5aab13b96f6964ce0998782ac1f75c0676720f9801f5c2ac29ac6d2790d20661f26b6d8743f10bdad931838141bc66278f9d4611fcabc3f0add10a22c0a808fe45ef165792983b7c2abb91eeb402350bd5f36c3d507f63aa9ad611cda7beb7821aa7c75bb6a0f0350136", 0x1000}, {&(0x7f0000002300)="ee3f4bf25f5bf35456b82c9e3bfd898822c5498962d8866148", 0x19}, {&(0x7f00000024c0)}], 0x3}}], 0x1, 0x24004008) 12:32:09 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000005c80)={0x0, 0xff83, &(0x7f0000005c40)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESHEX], 0x5}}, 0x0) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0xdd}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 12:32:09 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:32:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x4}, 0x20) 12:32:10 executing program 2: socket(0x6, 0x2, 0xfffffdff) epoll_create1(0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2f6e0eca39a85bf42faaa1f5904af05f380b627deba35766d4c595f187e9bb52810a52496073e230a267e133e2d85d46b346f8fe66e925736cb2f383fd42ed59b01e99b7cfbc8856c314720e2dd0f172027515115463cc163ee3ec1325182"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000400)=""/186, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10}, 0x78) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="f46cbd20fd4b1cbce1a13485b90f59ea6f6ff7d1d49d49638713fdb1f9948a1c0b6f3fe3d61a2acf22d1366859278aeff3d7877b013f83663b0b10f2a41ede88514b50e870f171bf281675932c38887237a754b1bd142f633071c6621340274ad26fec3bca58a92c7a867327e91084834ea6e49a916be86a997789b25ceec3a9ff834cf36c1ffc120777c2f6d1216b5b23985b4d7df305bf6cdf43cc3b319f76429b45aa7ce56ebeb46a5d2968b8abe4ec5436fdd6b685ce3c63ca248d995177ac0d4bdc074e70f32c4e750b11fb6a240e770da692e8015ee679bc9a3bf1a852b280f5f673ac8f9fe986ee48fb7aeb7062de7224aad9966d454cc69a96", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x4004045) splice(r4, 0x0, r3, 0x0, 0x60000, 0x0) 12:32:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x1400}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000003a0, 0x0) 12:32:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:32:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x480, 0x358, 0x0, 0x148, 0x358, 0x148, 0x3e8, 0x240, 0x240, 0x3e8, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'caif0\x00'}, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @bytecode={0x3}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) [ 787.455006][T16844] IPVS: ftp: loaded support on port[0] = 21 [ 788.245034][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 788.267027][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.277052][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:32:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x1) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 12:32:11 executing program 1: syz_emit_ethernet(0x300506, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000086dd"], 0x0) [ 790.237727][T14843] tipc: TX() has been purged, node left! 12:32:13 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x78, {0x2, 0x0, @multicast1}, 'gretap0\x00'}) 12:32:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r5 = socket(0x18, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r4}, 0x18) getpeername$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x808c) socket$inet6(0xa, 0x800, 0x6) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044885}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000072000162010000000000000007"], 0x1}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)="18", 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:32:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2e00000010008108040f80ecdb4cb92e1e480e000d000000e8bd6efb250309000e000100240248ff052005001201325e8726963c87aa487b", 0x38}], 0x1}, 0x4040080) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000080), 0x20a15ab6) r2 = socket(0x11, 0x800000003, 0x0) sendmmsg(r2, &(0x7f0000008000)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "c9d411450f8db03d72ee80a11bf00d71170b8f636c1f0dd618d3b91d434cc01b2fae087cbc9b58315d54f2798e8c2ad22c349372804a72e0c2cebe366ee6b9"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="b5acfe2efdd2480955cb584f75bf", 0xe}], 0x1}}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="1d201a4d6250f48496947449de31ae41dee2ef79f60000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff"], 0x14}}, 0x4010050) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) recvfrom$llc(r5, &(0x7f0000000300)=""/243, 0xf3, 0x40010000, &(0x7f0000000400)={0x1a, 0x338, 0x1, 0x3, 0x7f, 0x3f, @local}, 0x10) 12:32:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f00)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:32:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0xb}]}]}, 0x3c}}, 0x0) [ 791.078100][T16896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=16896 comm=syz-executor.5 12:32:14 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, 0xffffffffffffffff, 0x20000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="e2b8db72ebf0167ec073bec272a4cf03da5514a4eb5262869ba45dfc618e52ea7c1d5c3bcacb5c5ef0b7571ce7e1d9f8221cfca038a30c9d55fcf9c0fec79bb5f47a93b363572619784e9b601e6b412fe34591308b257aee17df8c0a62", 0x5d}, {&(0x7f0000000100)="6147473755df490a37014b627ca3c3e41dda4d7276f7d907eab10729d9", 0x1d}, {&(0x7f00000001c0)="9fbd47fe28a9ac6934761dd322b7d09a3c280f59e764a646e6abb99aa6aa7eface5304cfacf57ce4066a2d1317c1aab080", 0x31}, {&(0x7f00000002c0)="ff777385ecb2b3873d94a8030b593c0d66b03bb1e95f6396c75888c1cfdd910c7f753c2492a2e6f5b559a49bfbedd6c4bbc68775d71e52e2ca3cbd772b44e68ed469349e8f4fb8137e7a8f57dc0337b4d0afb64173b15cad5776a92f8e14e5a1b4e2a9420d3dccf7bdba178e3d9f33c91ff3d3be87b17971f908e091071c3c1eda06af5628007604", 0x88}], 0x4, &(0x7f0000000440)=[{0xf8, 0x108, 0x2, "8a661ebf332f97c5d6af971ad295a23b34ef051e122eadc0f482cd606e992e5dab2fc709ef6848a3db23fe8e97763bf995ea5b09e6f1a957283d237342a23bf19b0560ebb53b77e3f5cfebbc9eaee86341b3437bb74edab14075a2fe3e85ac26aca34a732cfe9eda54b2069970107ceb896bb4c6899995362d64acad6d4117f3fbaacf3223eff3e528f86040656231f86aecba373befa6efbc882cb5625aa0ca34f3deaa1a887c628fceb687a35fcd64cf091255f9d6b4e07517d6dd5df919feded8671e548da5e1c55c7dfec20ef2f7c20f3be5d41923383f7da303d2e2b057ebb3"}, {0xe0, 0x88, 0x3, "0adac1b618cabab015aace203cd600b4bf7f9c6e1ea4bce886b4438042053a58db2d54d8cd2f1c4f7f901150a1499b8730505616faf661aaee160902d5996e1fc2f534d2bba890555bdae565ff17edcaebf666f351b1d23ce3de14c554c975c77fe0f737ea5b0428866a30f176a93243e3b82637fea1d1aebde63220437101c8782c9c8cb3b7052b914960e5228b08e5e27b487d37ebe757896eb77083a0daa386742cc8fb24837e9f548fb02d26210aecce96a8153e0e7107d62ccefe156f905ba9404c84ce9a892814"}], 0x1d8}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)="525a59d7946d95e801c94cfd1940f675533ee168608878e6acdbe38d62517fb2df09fb94f66e8cd61207cbaa6ae95e0fec2732223677dd9047b8f7d5e90e1da005347a8793f8af1e263542fd7d30735d94e2f2b31bc27c53a9369fb862f3817ce54b2ca19836ece201a21ef2f479421e676955556e4ef7553c8b78121b3620c2829e091b37571e3006a10dc304d885f45b2704c0e4dd6aa727a310d16f62a68a47bb7ac0f494d9ed3c09201aa05c1d75dd6793f5ce4932c6dfaea7131d45c266c7cd5b0f39ba1638858018e3c0b8d531d85b58bac5c0e2886c44a114ad1508cfedefce41c687c6efaa826df8ecbd7f73efa246a9aa6c95e0", 0xf8}, {&(0x7f00000007c0)="aa849068d6e276809839ecba3ec0f87e13288f6a6c623e159112841384a589f6015f73e1c0a9471c8c82e804db757a926a31c11fe381e91b508ecd226d4b29dea80764035cedc58e5076c41dbe55a435f597f801146315705f5bac1ce75da4d946cf", 0x62}, {&(0x7f0000000840)="4947ead591068182727bd269c23db43895b006ddb643040d1ed7a2d3b27416b03c0b253ddc2292779841c5d0ee498bf990b1bb589ac8696fd1503c95f4552e9cee5188afaefae76d7dc011309364967946f04ccf1bcf793eed53f7eb0596c311c68e3acfd9ac5df81aa8246e93fd3dfa5123d28396a3ea07ae2eb25bc678df0d307a2d0777acf202cbde456a8cdab19482a4f4fad210e8ac12368b53da6705fcaadb8a9e3218240663247a0631f9bc30d106faff378e7b6b6be61a8900f7261382a04c8699e9b1e283bb", 0xca}, {&(0x7f0000000940)="08b42d4577e1a5b4973fd542d4f63f6db82756766409ef5037245e2349402cf9ea4bcf0e53db8b18cf5c1cdc2867622f0bf1536fbcec05cdf1951db1a9a1f387c6d534082baf4b5d0aec2e5e550934ba42ef94429045fc4c43191714", 0x5c}, {&(0x7f00000003c0)="bd108302d86f2e5cb5b9b2da30", 0xd}], 0x5, &(0x7f0000000a40)=[{0x60, 0x101, 0x3, "e790a4144db9c667b2c37fe005a4722b4d90a31c78732315e07cc57391e40608b17ae10b46ec6447b42a7a1be4a81ed002998393bb3fa5b4c0bf985a3e09dbb5d4f1a9bcf2b7344c6c"}, {0xb8, 0x104, 0x6, "dcafb4cc3365f950fc64e98eabfd24b632502bb0f8dde2643dd158e765df03b40b38974cf35f84fe2d1633ba4ec600eb84cada41d529ff6edb5a12477b711e2625cfa69c64d8a11c13b9a82d7b87e957b0cce3fced2c17f9bc0eb35ce617a9fe86f3c4bd62c02d458fec1477d20d1d145b3b90f29a785491844eff8ae1753aa7a7ab006668877f7b25b7323462e562a9f1c03af6da26717d5ee1d3c96fb16541f3938972c06d"}, {0x90, 0x10e, 0x2, "6585afa8e01f4ca69f6a95fa6e3045347e5b1d1aa732fc0a69b696abf4adc00b75853bb1d84d752ccb5048270b15d05284dff8607af8f136a059c0cbb1489adb4964aa8830ad507153b3d9d24524a541e552e60c63e85b8cbde4e90ccc4ed1dab70d431963acabe99ccc80b807eaea78ad1e56c17309a3719e0daa05445df9"}, {0xe8, 0x115, 0x1, "b1add7a556742f9de0905321e359799be2d2bf3a7e3dfc6b8f5b804ef95a46110d8bb916289920e303a74a01ead6f2835b40cc80ec7bce798d25bd7a939233408e24a2f33d79042ee43b8719adfaf5de0be7e83bc3f9f69f2e07091a96ccf75dcb6cca733728369f302ef31e309cd6874d310bedced5ae81208d74bd8f7bc5a2f2d8747dee5531e6c8b4bb9a338f0993a537868f8ce2eed571e3e4f0dc3b28b9b413a097220c1615aa407ea06d900671c79d8c41222abad4919c09e47cd06064fd0e7a7d8c792af3f943b572c1dc5aaba2"}, {0x60, 0x10d, 0x8, "bf26673c91625715595cf2ee532b3058f9df711e7b81d3886982cbf6bf99829e769e84be56472c7b08dee18d68181e7f554a860be6db8d62ac96ff31215515ddc05c178fb4adc8b413542419ab20"}, {0x48, 0x103, 0x8, "b63bdecc710eb3a028e44f14c3dc42a6ab83a1860611d9181dfe92c04a74497269f428fece092611b1181cd550f052635a59e91ec545cb"}, {0x68, 0x10a, 0x3, "5d8fd803822c1b1f352959e43ba9182397cc5ba146ddef34ead50bb1b76aaa829a03b06c77bb4f33eec51358933019fcca338a9ad6d84c6b705761dfece87686f9cbfdd64fa01aa412eaeee745910c3da6"}], 0x3a0}}, {{&(0x7f0000000e00)=@in={0x2, 0x4e24, @private=0xa010101}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000e80)="7cc5409c7353fe094816adb9c081bb30d0f2270d4bc21a6868738edc09a66f0c3c6fc4a8de9e39d54fd6b7fafc9668d425181612dec3a2ba2af112a14f2da6bbdabebfadd28752d8e483086178c51be8d5739eb99403e52edc27ef39be3b9131e7242bb3a422a1b4", 0x68}, {&(0x7f0000000f00)="d027aacb55ee216de28704a5307a00d1a66406cea66371f74ceec8dd23c6de5f5c47f40b92b8b822b08ce2975555ad21c619663c02c4ee3cbe0f10ea7d72dbabcd2e06f628adb4250829059e6546e9c6045782c71e1699d55a5de8fb9e3194a8ffd5fd2ee3a31f407b6bdcf5c1d2b9a1e0f3e23767b52c4cb65badae306a2d0443bf4b41e8723b19507eda1254e53ddbd2c1ecf21be72af97d9ccf48b7f2a7645d3c5764c9fb21fcc62cff35eddfbaf991aa9cbce3ea8506c8a56dcf307d12b40d7d7636757e04", 0xc7}, {&(0x7f0000001000)="00c9f4a9e173c1de7967c939232691906a3ccdae2435c813110901677cc3e166a7500c68849c56209f2d587938cab313f1f5d381085847339eadb0ac68f7b41d26ee9873256c6547c52e8aab354ee9ea66e53298931f51fcae8cd98c3eff5af885c80f441bf33c1da30c9a466580d6c3e007b1017509b0ac61b093aebf8a74754aeeb6ee818f4bf512550aeb8af7ccb3ada7256b58c3df21561487688ae348c35110f96d3bbabab0ed1903339471a3d6c5c6138618840ec2af951818ba253407b93d8634ed5a2062f4759acdade5317316a76ef62b1bca07acc1fdcc9f95a30036d2f9246963b4902a1d", 0xea}, {&(0x7f0000001100)="5115c2f732c087b69245fc1af41dc3d66d7c4e9f38cc07cdb3cfb18f61245dc395198e9064e74207e6d03834bea0ea4242078416761b7d50c6599dd37985c6a718363564b19822153e5cd8dccffe4aa14616762d5a5e4710e461eea3abe9207111d65357fb3e6e2a1f69fcb09a54a2c2472cad8d211024aa346e7ea26a66974cebd1e14a5dac934c7d6c01398be2", 0x8e}, {&(0x7f00000011c0)="15d9a90fe3d8f0aec8ec3e9297b8d9722e9716ff7aa0b652b6f5c168432c59", 0x1f}, {&(0x7f0000001200)="59dd21263dfe27e6f0fc77f960d7d111a174d7d8cc9702afbb7fd1bc5544fe866d1b1bc1a8df9d74feb25a0655783544f236b062dfbb8927581c224ef3b50e37127bed57bd30734dcecbd797a2f9f28bfbd5048dcc6838b1bf0ec097610abdf2b7b80579299685273482a94a0f8dc92afdd0a3fa0b10721af278d360761414f4a1e449251ddaa8bc2b4fa5cae3c0ded6cdce68c3e1ae02b1029c75a7c26e45356b5291521ba6e8f894c0ba835069eb83455ed770fb1d62d8251929ee2dc2fbd71c4ba520e1ebfde36479d378c854d797", 0xd0}, {&(0x7f0000001300)="355973488088a3d1e35a2e52793157c5302fa39d0b2f91051ad8983207cf7c90ec3038e26799ef3f00b08e8f5586af729f0d1b997c244b14797a4256e5b68c76b4458efad573c989b6f8bad056d9b1b9f2cc08b5a6bc55c6373d2c08df8d1f1d90cb588cff2492601991c9ee8032a82531f22ab19c7c6308ac46bf69bbde38e7451a9c52c9615634627aebbd439cf5433f48861926cac341550905e083b8cb3f1efd375935bd4c9a636f44948367840491552c73678f8d468045a8872a9b10da7540e8e1547e291c445f87c015a9c6", 0xcf}, {&(0x7f0000001400)="963f2dce7bbe04f8d8303d682bd947e561a303ecb28390f1cdb88bbc1265a524cacff23a4976ed", 0x27}], 0x8, &(0x7f00000014c0)=[{0x78, 0x3a, 0x10000, "16bacfd9ee0d05d720fbb2101bf90e6978fb9063b62aca7adb6e8b7b7adb2ddba661ef0e60612dc4a1d0922685128310b01186e1e651c41d9dbe76184a1679edd6c0a7efe307c6b021e9b40d9d3fda60d6a1ca9b1bb48644066f380aee329e63ab565305"}], 0x78}}, {{&(0x7f0000001540)=@caif=@dbg={0x25, 0xfa, 0x7}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)="ad49db83a9207204c08f6219c590c299ff5e2444428342c6d94f94394cfc5fb873ce0fd74b35d4a69c7f9799088c4e9ed48de7fd9bab57e71753efdca58886ba18e7e44dde53cb83b2dc393654df9aa5896897a5b435b02056c0bf3e5213bcebae54bf3a5f47fe3b8f13200eb6cbe8f56ea402de6b89d88595fd931ebbf7b6", 0x7f}], 0x1, &(0x7f0000001680)=[{0x18, 0x10b, 0x0, "97"}], 0x18}}], 0x4, 0x1100000000000000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000004d80), 0x237, 0x1100000000000000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80), 0x237, 0x1100000000000000) poll(&(0x7f0000000200)=[{}, {r0, 0x1}, {0xffffffffffffffff, 0x4200}, {r1, 0x2000}, {r2, 0x8120}], 0x5, 0x9) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "db3afdb35ba8f86f1e8b81369a9a4d7771b872641de141b0fcd3f2a8fde5815f21a41cbab00654f1827ba9f4a3df170791ad78c126b88e8073c62074781d48cd"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x1}) 12:32:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000300)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r3 = accept4(r0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) socketpair(0x2b, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x3c, 0x0, 0x800, 0x0, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!.\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x3c}}, 0x4c005) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002abd7000fcdbdf2507000000080700000700000014000600fc020000000000000000000000000000080002000500000008000800ac1e00010b8243a4f5322d"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x20002154}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0x43, &(0x7f0000000100), 0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") 12:32:14 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_settings={0x10000, 0x0, @sync=0x0}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_settings={0x10000, 0x0, @sync=0x0}}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000400)=0x8001, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'vlan0\x00', {0x1}, 0x845}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6}, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1, 0x20, 0x101}, &(0x7f0000000200)=0x101, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x7}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x3, r5}, 0x8) ioctl$sock_ifreq(r4, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_settings={0x10000, 0x0, @sync=0x0}}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7526de8d63f21cd518", @ANYRESOCT=r4, @ANYBLOB="cfe7e306056c0c9896abc6cc728e4b46e1330b38280bb2b116663c5a279aece94a49ac04a4550e97d7e457e3542060219c1f231206887d343da7542637564ed53bf2c7eccb968269ac85c80c76753a596ac36e980b97bc9835de4dea9d0aa839de6d058720eaa678f015"], 0x54}}, 0x0) [ 791.649119][T16900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=16900 comm=syz-executor.5 [ 791.724185][T16905] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 791.792421][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.801259][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.810774][T16907] device bridge0 entered promiscuous mode 12:32:15 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:32:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) [ 792.320409][T16926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:32:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xfefffffe) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00uemory '], 0xda00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000001) getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 12:32:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x209, [{0x0, 0x2, 0x9}]}, @enum]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x20) [ 794.507482][ T28] audit: type=1804 audit(1599568337.641:153): pid=16955 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/150/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 794.535609][ T28] audit: type=1804 audit(1599568337.641:154): pid=16955 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/150/memory.events" dev="sda1" ino=16382 res=1 [ 794.562741][ T28] audit: type=1800 audit(1599568337.641:155): pid=16955 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16382 res=0 12:32:17 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c000100080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 794.584394][ T28] audit: type=1804 audit(1599568337.671:156): pid=16955 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/150/memory.events" dev="sda1" ino=16382 res=1 12:32:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'cgroup\x00'}]}, 0x30}}, 0x0) 12:32:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r0, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0x4, 0x2) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x0, 0x8}) [ 795.646005][ T28] audit: type=1804 audit(1599568337.751:157): pid=16957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/150/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 795.672483][ T28] audit: type=1804 audit(1599568337.751:158): pid=16957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/150/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 795.723522][T16966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16966 comm=syz-executor.0 [ 795.832481][T16966] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.843916][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 12:32:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x301, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 12:32:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 797.225545][T16988] BPF: (anon) type_id=1 bitfield_size=0 bits_offset=0 [ 797.233791][T16988] BPF: [ 797.237033][T16988] BPF:Member exceeds struct_size [ 797.242870][T16988] BPF: [ 797.242870][T16988] [ 797.367738][T16988] BPF: (anon) type_id=1 bitfield_size=0 bits_offset=0 [ 797.375638][T16988] BPF: [ 797.378477][T16988] BPF:Member exceeds struct_size [ 797.383945][T16988] BPF: [ 797.383945][T16988] 12:32:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa457}}}, 0x32) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000002d80)=[{&(0x7f0000001c00)="b55381cca459b6cd48487ded6bf0b7d9731bb898342ae3489191c65a0d14dd9144a10907cd98ec3f42b0f2f8a3929b0edaece8f67e73c7ea3e65c640dd43f3f06d3c722356050ec28b442de61e2b5de7e46370222cfc185db4f92d039aeb060e83b4b735cca6549f1ba601b97dac1221a2c03eba943b2011244ad58b34d54c05ba00cb5a17e6ebefcbdad3cd7cf95144283519a1cbe200592a", 0x99}, {&(0x7f0000001cc0)="af46950c95861316e989e97f56a50bb7f9c56145e6ac9bc76d374da8651266f0c8df64d7b00142a5fc405c1d223f99350b1beb52739d33c4ea2bda07f9bb3675bac20c381fed788c5a3897889bd1bc3ce921ca576e2fda30be424d7a08378c0c525a684e327fa2f76ac403aca5061f462cd6e11413f66a40e2b3c1a3069fe5476eafcd78173d55e51153af96ea8ca7dbf4540353256002ef1a6a7eb934f66b584a828128b1d34ad9c5fcb4c22e33facf", 0xffb4}, {&(0x7f0000001d80)="1234334bf706876563897914a67c0249dfcda7e3c313589de04ba94f4d45c41caf87715c88a1ac0b401423cc1602b981a7f9785c28d41904c8165adee1823703e1a4b68a11116d1600f3c78b17fd204cf7405074bf416ce17497236f226ea2bb09a58be4dcce2aa7d188336b200338e53274ac929be4b42d646e47e642acaced356a0e694790414e2bff35c71ed3b42b0ca0bf123645c04f09306ed503a7074bd718fca07c4d5e9484a9db6cdebb60f9056106e389b2d9a03a01ba5c922cd05e71542575e6ebf9227f51302b2599084ee832de3076fb3fca90c9531f6672df70b6abb4f61fb5739ddc65c0d2a04ef44d477508f55138346a2c57534eeff102bc125d80034fd8e9d47f4cf3ae1cb9165e9f66b6ffef51bc55adac06667f9634dbbcfa853f18eef7a02e7211045d6123566151917929218eec4df0061c70a89dc85b93e26eda9c9c04432ddc9abb247628701d16dae1161f2fa24521ada9425a08305bb172a0bf59ca966dc5240a0e74b13ebd5cc1b08222c9c3778aede8cc165988f2b26627d604c551ae43d21a17f8b2a8353569802d7c301a05d303441824f95441ba60dd1945197a1bcf1e84493d13e05d2c13890536ddea29b59365a31ca6dfb2fcce51c0ff82054d67aa257191a70e7396cb7126471644beeb653641855bc18565a21ba1d547c34bffc9d9297e1890a3244151574cfb38ad21fdbcc2184cbb774f38b49485ae7363e35fa04a5a50ef9200776e14dc9679856c39daf39a2b7296d0f6e2a212605b4d914dd52f64acf3fa4f6b506b9d8d8abb19edf9b165767cc1538093939f4720445c5f66f329c5792fdebb34d7505e327628ab43800e895da3690ee0687b83b81b59c82aac8c39d5d73e7486f85c391540bd126ace2a2438af1ae4635d8e63dee743a0efa24ebd53004fdb3b40dbcddcac8c2454521ada565fbf477aee437c24e191ea0065641c39a4b679a14afab9b19d8af28c270546b86c4109e2b4ad07661e95d5969d894f1a8b4498b205ee63f14c34aa57d15fc7121ddcdd5cb27472167a850a38eb6c91fb80979ce8dbf1df7732200271e07456318d44a08eafebd0a5141a00b81cbb1eadc15ad9ea8e35c0b02dc0758c71a9cca41507e66268365ce8a9b191d3e341835d50c647f1216da329ae6cf8c0b4a01b58a8f16e20c4097af34b8eba3bedfeadec84b7a5b9c7fecc9e74924c5068af3c23fa332d941dabd0aa252444655adfaeef13a258609dbd2930bf82d95f5e8849345b1756637e998bac26441a748e258c75c9284405f14adc53e403b3498d6ba951356f2977d7451efab9474849cb7a8bf86d39a05d9a1de6c2458f3a2d5b6d9477ea175739fb14902776c2950001d84304152ef28b057e717ff00b7ea2acf71142cdf26b6fb7cb4012341e4ec1508407fc48865d0bd8e38f78e97dca225de4c1d3b5e175b52df56bfa4650a54caef454b35da1cda6c58cd6fa5aa77fa4d4c39bd0aa90ab9aea103a0e18d8e5e71e19b73f3be0780daa7f7b1ad30fe7d2593e0308c3f3e1e9c7", 0x446}], 0x3}}], 0x300, 0x1) 12:32:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 12:32:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x4240a54f) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000380)="16", 0x1}], 0x1, 0x0) 12:32:22 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x6, @rose}, [@default, @default, @rose, @default, @bcast, @bcast, @netrom, @bcast]}, 0x48) 12:32:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000002f80)=[{{&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001540)="f0", 0x1}], 0x1}}], 0x1, 0x0) 12:32:22 executing program 4: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @multicast1}, &(0x7f0000000300)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe57c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x44084}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}}, 0x0) 12:32:23 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001e40)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x140, 0x140, 0x0, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6gre0\x00', {}, 'veth0_vlan\x00', {}, 0xa6cc0ba819a51316, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e23, 0x0, @empty}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 12:32:23 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="ff838e29ef1eaa"], 0x4}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 12:32:23 executing program 0: unshare(0x40000000) socket(0x27, 0x80000, 0x6) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x98, 0x29, 0x36, {0x0, 0x10, [], [@generic={0x0, 0x30, "6d18a06f484496839e7442c21c3063b621adce925eb51c893f1a69160f08306a756481bfefc5c083a6b2dd09e64f97ef"}, @jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo]}}}], 0x98}}], 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:32:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 12:32:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, @TCA_TBF_RTAB={0x404}]}}]}, 0x45c}}, 0x0) 12:32:23 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6cb4772061b9f8ff0000000000000027a59f0f9fe0bf010ad7fa7e5542c692928161cdc3f436e331d788077b50e6af67b86f1c20c8cc92ff2fca0656473757ba19ccd87cb6b41107851c71c78d988e883bb8a162982b6aa1ec782d17fe0e690de342b1b604d7cad37a8d87160359ed1ac99e0d13789909953644fe3b3706ecfb24dbf3b7350c0a322602ce6f59d84e1023fc968c12b59f950c06c68e3358ca85991ad4b43cdef9", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028024000180060002000c00000008000b0073697000070006006e71000008000b00736970000800041b020000000400028004000180080004000000000088a7d0e8eeb6cdcf63fa41f5b41b1bf4c8f81e941501165f3b52869ef8c158e1402c72d6af6b8a30f66c63e006132d4af7d5acb926d130f762778832cbc4a75eed6e"], 0x54}, 0x1, 0x0, 0x0, 0x24000084}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f7ffff48e30000000021b880d26dc26b97bafff1bb373bdd000000000000000303fe1c09863121f9c4569e41e8a4dfeb17fde4aa6d6b08bea4907f", @ANYRESDEC=0x0, @ANYRESHEX=r6], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 800.648719][T17021] IPVS: ftp: loaded support on port[0] = 21 [ 800.892855][T17025] IPVS: ftp: loaded support on port[0] = 21 [ 800.977409][T17030] [ 800.980467][T17030] ********************************************************** [ 800.990359][T17030] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 800.998251][T17030] ** ** [ 801.006206][T17030] ** trace_printk() being used. Allocating extra memory. ** [ 801.014500][T17030] ** ** [ 801.022826][T17030] ** This means that this is a DEBUG kernel and it is ** [ 801.030851][T17030] ** unsafe for production use. ** [ 801.039209][T17030] ** ** [ 801.047284][T17030] ** If you see this message and you are not debugging ** [ 801.055946][T17030] ** the kernel, report this immediately to your vendor! ** [ 801.064376][T17030] ** ** [ 801.073483][T17030] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 801.081602][T17030] ********************************************************** [ 801.086347][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 801.106461][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 801.125106][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 801.143239][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 801.159630][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 801.177194][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 801.686022][T17043] sch_tbf: peakrate 8 is lower than or equals to rate 32 ! [ 801.740525][T17059] [ 801.743609][T17059] ********************************************************** [ 801.752677][T17059] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 801.760634][T17059] ** ** [ 801.770201][T17059] ** trace_printk() being used. Allocating extra memory. ** [ 801.780517][T17059] ** ** [ 801.788986][T17059] ** This means that this is a DEBUG kernel and it is ** [ 801.797286][T17059] ** unsafe for production use. ** [ 801.805659][T17059] ** ** [ 801.814314][T17059] ** If you see this message and you are not debugging ** [ 801.824510][T17059] ** the kernel, report this immediately to your vendor! ** [ 801.832842][T17059] ** ** [ 801.841467][T17059] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 801.850306][T17059] ********************************************************** [ 801.892062][ T28] audit: type=1804 audit(1599568345.020:159): pid=17044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 [ 801.920814][ T28] audit: type=1800 audit(1599568345.020:160): pid=17044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16259 res=0 [ 802.375216][ T28] audit: type=1804 audit(1599568345.080:161): pid=17044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 [ 802.413457][ T28] audit: type=1804 audit(1599568345.250:162): pid=17061 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 [ 803.142178][ T28] audit: type=1804 audit(1599568345.610:163): pid=17044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 [ 803.175501][ T28] audit: type=1800 audit(1599568345.620:164): pid=17044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16259 res=0 [ 803.203803][ T28] audit: type=1804 audit(1599568345.620:165): pid=17061 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 [ 803.234245][ T28] audit: type=1804 audit(1599568345.640:166): pid=17061 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/140/memory.events" dev="sda1" ino=16259 res=1 12:32:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0x37c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@lastused={0xc}, @algo_auth={0x7a, 0x1, {{'blake2b-384\x00'}, 0x190, "10e7bae9f079260a352334a79aca89a21eeef91545fc760f6f99f08a7ae28660175b3d130cf2682a891ed131f352eb285b5a"}}, @algo_comp={0x10c, 0x3, {{'lzs\x00'}, 0x620, "1fb6dfdecfb28740ae782edf9619f71f4745729171558a5558ce9a126bb5559367f5b51484c109086e65356d7149bc3b28ee0d1bef201b613f0baddc1e208db0dee1114af5964ddca3e95a4cd75d3f3616178109be7dd276fe71048e009434cf0180b194ee83b5780e919b8295ac55c3a615c44ae762f21a09582ed5a4bbf3aa07c6f289c32a702d4300b3e77febcab3732e5a0de6141ed6246218c0842ffe54f24b61ff73387d4e92a924bb789a88c9d7c031fff7769780adfc42c2e9e152205e0a78d6"}}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@loopback}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@empty}}, @sec_ctx={0xd1, 0x8, {0x104, 0x8, 0x0, 0x0, 0xc5, "a6cf252a0f0388e99cbd04c1f893d4b940e2e9984732a87e5ff48ddfd3804b7af50af8153269908880b8b4d590d21c9fd56a7fc1d9e26e79fa89f823ed0c3997e6227c20d3f29b9bc2e45874ba1fe4b829751d031150834c5a7e0c9341c300f081674a63a60c7472c5885cb55e0deb2d456aadb647d6f07f072c5644b6cbe2df161ae91149d7efdab9f36fea61608e3eaa0743745091716f213a92d88230ac7d1147bafb4b0abcda728f426e7ec6b6ec305314bf7e1bf3b14810346de56b0939e9a148076e"}}, @policy_type={0xa}]}, 0x37c}}, 0x0) 12:32:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x2, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:32:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x6) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800008000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0xd4, 0x1, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @local}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, 0x0, 0x1, 0x0, 0x0, {0x27}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xac, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004080}, 0x8884) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 12:32:28 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x180, 0xf, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x210, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 805.263445][ T28] audit: type=1804 audit(1599568348.390:167): pid=17076 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/141/cgroup.controllers" dev="sda1" ino=16381 res=1 12:32:28 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x2c}}, 0x0) [ 805.463462][ T28] audit: type=1804 audit(1599568348.500:168): pid=17076 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/141/memory.events" dev="sda1" ino=16383 res=1 12:32:28 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x9f) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="84", 0x1}], 0x1) [ 805.953670][ T9383] tipc: TX() has been purged, node left! 12:32:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pipe(0x0) socket$unix(0x1, 0x5, 0x0) pipe(0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) 12:32:29 executing program 1: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="53e60000000000000000260000000e0001006e6574646576730002000000000000006e657464657673696d30000008000300020000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0xec, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e23, 0x5, @empty, 0x5}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @private=0xa010100}, 0x9}, 0x3ff, [0x81, 0x6, 0x58, 0x7f, 0x7, 0xfff, 0x9, 0xab]}, 0x5c) r4 = socket$pptp(0x18, 0x1, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xda2aa09588148f0}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4802}, 0xc0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f80)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) 12:32:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 12:32:29 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x34, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1000}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x3f}]}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc32afaf580f22372}, 0x4000011) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'batadv0\x00'}, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x998) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0xa, 0x1ff) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @remote}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="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", 0x78d}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) 12:32:29 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) [ 807.705909][ C0] not chained 210000 origins [ 807.710569][ C0] CPU: 0 PID: 1163 Comm: kworker/u4:15 Not tainted 5.8.0-rc5-syzkaller #0 [ 807.719198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.730118][ C0] Workqueue: krdsd rds_connect_worker [ 807.735903][ C0] Call Trace: [ 807.739393][ C0] [ 807.742501][ C0] dump_stack+0x21c/0x280 [ 807.747333][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 807.753689][ C0] ? stack_trace_save+0x1a0/0x1a0 [ 807.759362][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.765292][ C0] ? __should_failslab+0x1f6/0x290 [ 807.771603][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.777510][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 807.784796][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 807.791460][ C0] ? tcp_parse_options+0x206d/0x2100 [ 807.797058][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.802372][ C0] __msan_chain_origin+0x50/0x90 [ 807.807937][ C0] tcp_conn_request+0x19a0/0x4c30 [ 807.813355][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 807.819824][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 807.826922][ C0] ? selinux_socket_sock_rcv_skb+0x941/0x17f0 [ 807.833248][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.838769][ C0] tcp_v6_conn_request+0x27f/0x330 [ 807.844108][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 807.849519][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 807.855284][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.860673][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.867101][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.872769][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 807.878295][ C0] ? tcp_v6_fill_cb+0x4a1/0x5f0 [ 807.883929][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 807.889651][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 807.895303][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 807.901635][ C0] ip6_input+0x2dd/0x370 [ 807.906804][ C0] ? ip6_input+0x370/0x370 [ 807.913418][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 807.919853][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 807.924950][ C0] ipv6_rcv+0x3bb/0x460 [ 807.929693][ C0] ? local_bh_enable+0x40/0x40 [ 807.935698][ C0] __netif_receive_skb+0x265/0x670 [ 807.942142][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 807.949119][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 807.957005][ C0] process_backlog+0x50d/0xba0 [ 807.963859][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 807.969991][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 807.976056][ C0] napi_poll+0x43b/0xfd0 [ 807.981150][ C0] ? kmsan_get_metadata+0x116/0x180 [ 807.986954][ C0] net_rx_action+0x35c/0xd40 [ 807.992470][ C0] ? net_tx_action+0xdc0/0xdc0 [ 807.997999][ C0] __do_softirq+0x2ea/0x7f5 [ 808.003060][ C0] asm_call_on_stack+0xf/0x20 [ 808.008151][ C0] [ 808.011472][ C0] do_softirq_own_stack+0x7c/0xa0 [ 808.016925][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 808.022649][ C0] local_bh_enable+0x36/0x40 [ 808.027545][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 808.033053][ C0] ? kmsan_get_metadata+0x116/0x180 [ 808.038875][ C0] __ip6_finish_output+0x9c0/0xa90 [ 808.045936][ C0] ip6_finish_output+0x14b/0x4b0 [ 808.052039][ C0] ip6_output+0x68d/0x7f0 [ 808.056591][ C0] ? ip6_output+0x7f0/0x7f0 [ 808.061488][ C0] ? ac6_seq_show+0x200/0x200 [ 808.066603][ C0] ip6_xmit+0x2475/0x2b40 [ 808.071019][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 808.076198][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 808.082222][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 808.089550][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 808.096514][ C0] ? __do_softirq+0x7f5/0x7f5 [ 808.101834][ C0] tcp_connect+0x153f/0x3bb0 [ 808.107045][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 808.113829][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 808.120833][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 808.127496][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 808.133315][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 808.139104][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 808.147207][ C0] ? kmsan_get_metadata+0x116/0x180 [ 808.154349][ C0] inet_stream_connect+0x101/0x180 [ 808.161062][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 808.167718][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 808.175943][ C0] ? kmsan_get_metadata+0x116/0x180 [ 808.182425][ C0] ? rds_tcp_state_change+0x400/0x400 [ 808.192664][ C0] rds_connect_worker+0x36b/0x550 [ 808.198886][ C0] ? rds_addr_cmp+0x290/0x290 [ 808.204787][ C0] process_one_work+0x1688/0x2140 [ 808.210567][ C0] worker_thread+0x10bc/0x2730 [ 808.216317][ C0] ? kmsan_get_metadata+0x116/0x180 [ 808.222177][ C0] kthread+0x551/0x590 [ 808.226294][ C0] ? process_one_work+0x2140/0x2140 [ 808.231939][ C0] ? kthread_blkcg+0x110/0x110 [ 808.236951][ C0] ret_from_fork+0x1f/0x30 [ 808.241836][ C0] Uninit was stored to memory at: [ 808.247171][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.253215][ C0] __msan_chain_origin+0x50/0x90 [ 808.258327][ C0] tcp_conn_request+0x19d6/0x4c30 [ 808.263828][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.270274][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.276552][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.281362][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.286533][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.293706][ C0] ip6_input+0x2dd/0x370 [ 808.298620][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.303784][ C0] ipv6_rcv+0x3bb/0x460 [ 808.308072][ C0] __netif_receive_skb+0x265/0x670 [ 808.313736][ C0] process_backlog+0x50d/0xba0 [ 808.319284][ C0] napi_poll+0x43b/0xfd0 [ 808.324276][ C0] net_rx_action+0x35c/0xd40 [ 808.329396][ C0] __do_softirq+0x2ea/0x7f5 [ 808.334553][ C0] [ 808.336994][ C0] Uninit was stored to memory at: [ 808.342928][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.350438][ C0] __msan_chain_origin+0x50/0x90 [ 808.356015][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 808.362288][ C0] tcp_conn_request+0x3046/0x4c30 [ 808.367924][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.375365][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.382324][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.389149][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.394280][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.401484][ C0] ip6_input+0x2dd/0x370 [ 808.406139][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.411176][ C0] ipv6_rcv+0x3bb/0x460 [ 808.416356][ C0] __netif_receive_skb+0x265/0x670 [ 808.422036][ C0] process_backlog+0x50d/0xba0 [ 808.427543][ C0] napi_poll+0x43b/0xfd0 [ 808.432155][ C0] net_rx_action+0x35c/0xd40 [ 808.437402][ C0] __do_softirq+0x2ea/0x7f5 [ 808.442216][ C0] [ 808.444963][ C0] Uninit was stored to memory at: [ 808.451126][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.457407][ C0] __msan_chain_origin+0x50/0x90 [ 808.462740][ C0] tcp_conn_request+0x19d6/0x4c30 [ 808.468561][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.474350][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.480115][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.485054][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.489695][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.495657][ C0] ip6_input+0x2dd/0x370 [ 808.500194][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.504971][ C0] ipv6_rcv+0x3bb/0x460 [ 808.509380][ C0] __netif_receive_skb+0x265/0x670 [ 808.515110][ C0] process_backlog+0x50d/0xba0 [ 808.519958][ C0] napi_poll+0x43b/0xfd0 [ 808.524423][ C0] net_rx_action+0x35c/0xd40 [ 808.529418][ C0] __do_softirq+0x2ea/0x7f5 [ 808.534567][ C0] [ 808.537157][ C0] Uninit was stored to memory at: [ 808.543423][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.550049][ C0] __msan_chain_origin+0x50/0x90 [ 808.555510][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 808.561096][ C0] tcp_conn_request+0x3046/0x4c30 [ 808.566583][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.572127][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.579467][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.584641][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.589182][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.595113][ C0] ip6_input+0x2dd/0x370 [ 808.600084][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.605243][ C0] ipv6_rcv+0x3bb/0x460 [ 808.609744][ C0] __netif_receive_skb+0x265/0x670 [ 808.616873][ C0] process_backlog+0x50d/0xba0 [ 808.622275][ C0] napi_poll+0x43b/0xfd0 [ 808.627623][ C0] net_rx_action+0x35c/0xd40 [ 808.633433][ C0] __do_softirq+0x2ea/0x7f5 [ 808.638196][ C0] [ 808.640702][ C0] Uninit was stored to memory at: [ 808.647008][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.653546][ C0] __msan_chain_origin+0x50/0x90 [ 808.661150][ C0] tcp_conn_request+0x19d6/0x4c30 [ 808.668189][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.673907][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.679972][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.685189][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.689957][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.696189][ C0] ip6_input+0x2dd/0x370 [ 808.700749][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.706234][ C0] ipv6_rcv+0x3bb/0x460 [ 808.710648][ C0] __netif_receive_skb+0x265/0x670 [ 808.715804][ C0] process_backlog+0x50d/0xba0 [ 808.720980][ C0] napi_poll+0x43b/0xfd0 [ 808.725622][ C0] net_rx_action+0x35c/0xd40 [ 808.730814][ C0] __do_softirq+0x2ea/0x7f5 [ 808.736031][ C0] [ 808.738679][ C0] Uninit was stored to memory at: [ 808.744315][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.750683][ C0] __msan_chain_origin+0x50/0x90 [ 808.756741][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 808.762716][ C0] tcp_conn_request+0x3046/0x4c30 [ 808.768231][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.773719][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.779465][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.784959][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.789691][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.796045][ C0] ip6_input+0x2dd/0x370 [ 808.801253][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.806420][ C0] ipv6_rcv+0x3bb/0x460 [ 808.810700][ C0] __netif_receive_skb+0x265/0x670 [ 808.815850][ C0] process_backlog+0x50d/0xba0 [ 808.821248][ C0] napi_poll+0x43b/0xfd0 [ 808.825882][ C0] net_rx_action+0x35c/0xd40 [ 808.830590][ C0] __do_softirq+0x2ea/0x7f5 [ 808.835318][ C0] [ 808.837976][ C0] Uninit was stored to memory at: [ 808.843040][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 808.848893][ C0] __msan_chain_origin+0x50/0x90 [ 808.854253][ C0] tcp_conn_request+0x19d6/0x4c30 [ 808.859673][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.865043][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 808.871029][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 808.876747][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 808.881307][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 808.887061][ C0] ip6_input+0x2dd/0x370 [ 808.891797][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 808.896595][ C0] ipv6_rcv+0x3bb/0x460 [ 808.900896][ C0] __netif_receive_skb+0x265/0x670 [ 808.906204][ C0] process_backlog+0x50d/0xba0 [ 808.911097][ C0] napi_poll+0x43b/0xfd0 [ 808.915991][ C0] net_rx_action+0x35c/0xd40 [ 808.920696][ C0] __do_softirq+0x2ea/0x7f5 [ 808.926065][ C0] [ 808.928644][ C0] Uninit was created at: [ 808.933022][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 808.938991][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 808.944587][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 808.950386][ C0] alloc_pages_current+0x685/0xb50 [ 808.955753][ C0] alloc_slab_page+0x11c/0x1240 [ 808.961395][ C0] new_slab+0x2bf/0x10c0 [ 808.966417][ C0] ___slab_alloc+0xcd3/0x18a0 [ 808.971812][ C0] kmem_cache_alloc+0xb70/0xc50 [ 808.977350][ C0] inet_reqsk_alloc+0xaf/0x910 [ 808.982698][ C0] tcp_conn_request+0x8dc/0x4c30 [ 808.988390][ C0] tcp_v6_conn_request+0x27f/0x330 [ 808.993907][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 809.000502][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 809.005798][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 809.010879][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 809.018832][ C0] ip6_input+0x2dd/0x370 [ 809.024259][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 809.029643][ C0] ipv6_rcv+0x3bb/0x460 [ 809.034512][ C0] __netif_receive_skb+0x265/0x670 [ 809.040271][ C0] process_backlog+0x50d/0xba0 [ 809.045609][ C0] napi_poll+0x43b/0xfd0 [ 809.050261][ C0] net_rx_action+0x35c/0xd40 [ 809.055494][ C0] __do_softirq+0x2ea/0x7f5 12:32:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000026000125"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x80000000000001a, 0x0, 0x0) 12:32:32 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40047451, &(0x7f0000000080)={0x11, 0x0}) [ 810.228724][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.338128][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.387776][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.488175][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.571175][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.995367][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.033328][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.102523][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.171732][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.291864][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.907963][ T9383] tipc: TX() has been purged, node left! 12:32:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, '*#-'}, {0x20, ']#)%[$%'}], 0xa, "c4e133358def343faa996e09e76d29ad7e53d8ee4f50127e8c0df51b80b0225398469eb899959402a941565c8f0c292b77937e42755aa0ce00a3f810eaa5b03cd42f97e76653b6603a41c4a1b024a41c72fe076524bc8176a10fc15d0950b5765770552b4780d0b37af8589cc586632f5e3da5f8a13d1e30502df5d8cb62efd38418efa770172fc167d02b46ef7c"}, 0xb9) listen(r2, 0x0) listen(r2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000008) 12:32:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x2000, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x2000, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="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"], 0x0) 12:32:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f00000000c0)=[{}], 0x1, 0x72) sendfile(r2, r1, 0x0, 0x100000001) 12:32:36 executing program 3: sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x2000c044) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @rose, @remote, @default, @null, @bcast, @netrom, @null]}, &(0x7f0000000140)=0x48) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) 12:32:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e157750ea4fa7c57c003c1e0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}}}]}}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff832a000000160d57b3", @ANYRES32], 0x4}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:32:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}, @map], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0}, 0x70) [ 813.811427][T17167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 813.887856][T17174] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 12:32:37 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 12:32:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB='&'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) 12:32:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 12:32:38 executing program 4: r0 = socket(0x2, 0x80805, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x6}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)='\f', 0x33c00}], 0x1}, 0x0) 12:32:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x62}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}}, 0x0) 12:32:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) [ 816.450493][T17204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:32:40 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250a14000008000600ffffffff0400800800090076000000080006108000000008000600"/62], 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x4c000) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 818.211905][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 818.211968][ T28] audit: type=1804 audit(1599568361.339:175): pid=17219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/144/memory.events" dev="sda1" ino=16382 res=1 [ 818.246563][ T28] audit: type=1800 audit(1599568361.339:176): pid=17219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16382 res=0 [ 818.826360][ T28] audit: type=1804 audit(1599568361.479:177): pid=17221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/144/memory.events" dev="sda1" ino=16382 res=1 [ 818.851882][ T28] audit: type=1804 audit(1599568361.819:178): pid=17219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/144/memory.events" dev="sda1" ino=16382 res=1 [ 818.877860][ T28] audit: type=1800 audit(1599568361.819:179): pid=17219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16382 res=0 12:32:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) pipe(&(0x7f0000008f40)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r6, 0xb03, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x2c, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c6c08", 0x7e}, {&(0x7f0000000340)="ce74df4ce753e3a3903067a7d94349b6b1347bf3272cd435ac842c69508589138f6023a115f1f5511e098e09abf6254ed4b45bc315de14", 0x37}, {&(0x7f0000000580)="e1df12a6ff5af568298ef90aad4247fb955895afbdd97be32463f9bc6583f4b420c83ea8cf6fb2879eb731d0e78d04a5f71a6056e158b01cdbff2bf6ba985f2f14c862ceb34a6a39493181636dab3099b834347d27fe16e93bb3c1c219af8d96568411255bb5d6462902ec4139c021fedf9196ca75bf8eecb7757731f273429c1ba2adbf6c34cd", 0x87}, {0x0}, {&(0x7f0000000700)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b04059a40e3df721109469c238556c9fce8898f421aac66397da6a3bae34e0095b740d7870f94921dbe1bb5674a856624e73cdf1710ebc643bcdcdc6089790846ddfa2483766d17a3b4a1db2342365dbd4c8c78e0a68a9b9a81bd576db6de52d667dfaeae220cbbb5a0e6aeec6809524b7080", 0xcb}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x8) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12:32:42 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0x87f1a7) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x0, 0x10000ffffffff001, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x6, 0x1, 0x80}], 0x0, 0x458c1915, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x0, 0x190e}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 12:32:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xffffff33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601809cf4c0a4e59ba2700100e90005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000061, 0x0, 0x0) 12:32:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x40, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local}]}}]}, 0x40}}, 0x0) 12:32:42 executing program 4: r0 = socket$nl_generic(0xa, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89e1, &(0x7f0000000f40)={'vcan0\x00'}) [ 820.074749][T17200] not chained 220000 origins [ 820.079403][T17200] CPU: 0 PID: 17200 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 820.088089][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.098169][T17200] Call Trace: [ 820.101527][T17200] dump_stack+0x21c/0x280 [ 820.105880][T17200] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 820.111733][T17200] kmsan_internal_chain_origin+0x6f/0x130 [ 820.117483][T17200] ? rawv6_sendmsg+0x452d/0x4740 [ 820.122455][T17200] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 820.128304][T17200] ? kmsan_get_metadata+0x116/0x180 [ 820.134253][T17200] ? kmsan_internal_set_origin+0x75/0xb0 [ 820.139952][T17200] ? kmsan_get_metadata+0x116/0x180 [ 820.145187][T17200] ? kmsan_set_origin_checked+0x95/0xf0 [ 820.150763][T17200] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 820.156904][T17200] ? _copy_from_user+0x201/0x310 [ 820.161877][T17200] ? kmsan_get_metadata+0x116/0x180 [ 820.167144][T17200] __msan_chain_origin+0x50/0x90 [ 820.172120][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.177287][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.182281][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.187026][T17200] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 820.192949][T17200] ? __msan_poison_alloca+0xf0/0x120 [ 820.198284][T17200] ? kmsan_copy_to_user+0x81/0x90 [ 820.203370][T17200] ? _copy_to_user+0x1bf/0x260 [ 820.208201][T17200] ? put_old_timespec32+0x231/0x2d0 [ 820.213427][T17200] ? kmsan_get_metadata+0x116/0x180 [ 820.218649][T17200] ? kmsan_get_metadata+0x116/0x180 12:32:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x3, 0x7}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xa19f}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 820.223874][T17200] ? kmsan_get_metadata+0x116/0x180 [ 820.229112][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.234521][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.240098][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.245344][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.250225][T17200] do_SYSENTER_32+0x73/0x90 [ 820.254756][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.261099][T17200] RIP: 0023:0xf7fd8549 [ 820.265170][T17200] Code: Bad RIP value. [ 820.269249][T17200] RSP: 002b:00000000f554e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 820.277687][T17200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200092c0 [ 820.285680][T17200] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 820.293673][T17200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 820.301680][T17200] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 820.309692][T17200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.317698][T17200] Uninit was stored to memory at: [ 820.322761][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.328507][T17200] __msan_chain_origin+0x50/0x90 [ 820.333471][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.338611][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.343572][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.348279][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.353681][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.359287][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.364520][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.369393][T17200] do_SYSENTER_32+0x73/0x90 [ 820.373924][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.380945][T17200] [ 820.383373][T17200] Uninit was stored to memory at: [ 820.388424][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.394165][T17200] __msan_chain_origin+0x50/0x90 [ 820.399127][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.404255][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.409202][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.413917][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.419305][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.424873][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.430080][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.434944][T17200] do_SYSENTER_32+0x73/0x90 [ 820.439471][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.445802][T17200] [ 820.448153][T17200] Uninit was stored to memory at: [ 820.453231][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.459851][T17200] __msan_chain_origin+0x50/0x90 [ 820.464822][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.469961][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.474922][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.479620][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.485016][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.490582][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.495808][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.500685][T17200] do_SYSENTER_32+0x73/0x90 [ 820.505207][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.512229][T17200] [ 820.514561][T17200] Uninit was stored to memory at: [ 820.519611][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.525355][T17200] __msan_chain_origin+0x50/0x90 [ 820.530308][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.535454][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.540403][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.545098][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.550500][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.556333][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.561567][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.566448][T17200] do_SYSENTER_32+0x73/0x90 [ 820.570972][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.577294][T17200] [ 820.579627][T17200] Uninit was stored to memory at: [ 820.584672][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.590420][T17200] __msan_chain_origin+0x50/0x90 [ 820.595380][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.600512][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.605470][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.610203][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.615602][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.621168][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.626390][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.631265][T17200] do_SYSENTER_32+0x73/0x90 [ 820.635789][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.642115][T17200] [ 820.644447][T17200] Uninit was stored to memory at: [ 820.649506][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.655331][T17200] __msan_chain_origin+0x50/0x90 [ 820.660302][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.665612][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.670567][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.675268][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.680658][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.686243][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.691455][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.696322][T17200] do_SYSENTER_32+0x73/0x90 [ 820.700833][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.707523][T17200] [ 820.709851][T17200] Uninit was stored to memory at: [ 820.714900][T17200] kmsan_internal_chain_origin+0xad/0x130 [ 820.720762][T17200] __msan_chain_origin+0x50/0x90 [ 820.725732][T17200] __get_compat_msghdr+0x6db/0x9d0 [ 820.730852][T17200] get_compat_msghdr+0x108/0x2b0 [ 820.735828][T17200] __sys_sendmmsg+0x755/0xf70 [ 820.740518][T17200] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 820.745915][T17200] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 820.751483][T17200] __do_fast_syscall_32+0x2af/0x480 [ 820.756733][T17200] do_fast_syscall_32+0x6b/0xd0 [ 820.761605][T17200] do_SYSENTER_32+0x73/0x90 [ 820.766128][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 820.772446][T17200] [ 820.774778][T17200] Local variable ----msg_sys@__sys_sendmmsg created at: [ 820.781728][T17200] __sys_sendmmsg+0xbb/0xf70 [ 820.786342][T17200] __sys_sendmmsg+0xbb/0xf70 12:32:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000400)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) [ 820.968726][ T28] audit: type=1804 audit(1599568364.099:180): pid=17247 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/209/memory.events" dev="sda1" ino=16374 res=1 [ 820.994752][ T28] audit: type=1800 audit(1599568364.099:181): pid=17247 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16374 res=0 [ 821.016617][ T28] audit: type=1804 audit(1599568364.099:182): pid=17247 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/209/memory.events" dev="sda1" ino=16374 res=1 [ 821.458610][ T28] audit: type=1804 audit(1599568364.219:183): pid=17249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/209/memory.events" dev="sda1" ino=16374 res=1 [ 821.484100][ T28] audit: type=1804 audit(1599568364.289:184): pid=17247 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788926920/syzkaller.zkPkPm/209/memory.events" dev="sda1" ino=16374 res=1 [ 821.701411][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 821.911986][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:32:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280)=0xffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12080}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0xffffff4a}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@private2}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b500faea", @ANYRES16=0x0, @ANYBLOB="02002affdbdf2512000000080031000000000005002d00000000000000000008000300"/46, @ANYRES32=r2, @ANYBLOB="a66cbb994d68574c264d992b82d58f3a59b7193796cad92123c25ca52018f6a017bb43969e5954433f5906ac460000000000000000a1ad0d93f8bf181de6fa97222a37de00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4040000) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000002040)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) shutdown(r0, 0x2) 12:32:45 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendfile(r0, r1, 0x0, 0xf03b0000) 12:32:45 executing program 5: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000010201000000000000000000000000000600120003000000700002001400010008000100ac1414bb08000200ac1e0001060003170002000025000200050001000600ff03060002"], 0x1}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x1000, @local}}, 0x0, 0x9, 0x2c}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0xffb}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:32:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @loopback}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x60}}}, 0xb8}}, 0x0) 12:32:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40046629, &(0x7f00000000c0)) 12:32:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x178, 0x10e8, 0x10e8, 0x0, 0x0, 0x208, 0x11a0, 0x11a0, 0x208, 0x11a0, 0x3, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'syzkaller0\x00', 'vlan0\x00'}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv4=@broadcast, [], @ipv6=@ipv4={[], [], @private}, [], @ipv4=@remote, [], @ipv4=@local}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) bind(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) connect(0xffffffffffffffff, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10402800}, 0xc, &(0x7f0000000140)=[{&(0x7f0000002600)={0x10e4, 0x3d, 0x20, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10d4, 0x21, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0xa5, 0x6d, 0x0, 0x0, @binary="8ee32780ff4de3d080b328ce2da24a7c13ecdab28f43ba19acf89f583bdd53c8bf1b1aa19bb4de772f7e0e4d216f71a1aae50370041f9169b172bd557dca6877f0e5ee4aeb56b58388b6135917d37526749ad593b9b86800d703c4d22784aabfeb737d7ee2d65af199130174fc81bed3eeb9701399b047244ab9e79c094016470d9b62061aa6733a90242ea9faed35bdceef73452dddeecf9236aaa5de58ce9653"}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x20}, @typed={0x8, 0x7b, 0x0, 0x0, @fd=r2}, @typed={0x1004, 0x71, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}]}, 0x10e4}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x20004844}, 0x24004084) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000080)="9c5963ce9528017c2751bbb55e04", 0xe}, {&(0x7f0000000240)="f0650ae0ae7df841a6954d3368b3415664637bf3d1c85fddf4431524634f665345bf772e8bc320c5b1d6b7b8c968750ca45084d4496d172b193084cc86fd91166cc2e84179c9aff3f732924c1a3ca3ecfaae20a5963eddadd0ecb27faf51dd7ec2b09bee4bb489ea425d3983789e84f15a680000c7a5cc612335093ce082f7c04d3199b8a75a3c2144e3ed143cf66025756069da0b35c4a90f880f442f24ae37dd5ccb2ffc2f0b66bfaf642a9fc12470f9e7601990bb8c6b3e6236", 0xbb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002240)="f4c07ffb69b43db58c192ae931fd09e08b0a17a167c9b3416365b25b28196b77d38224f18bc08bb671e7ca417ada124f4ddcfcf686947966db558edbed2d3358485b1862a1134ae2210957feba5265f1f737690f35ccf8ac21fb91421b0aedf685061e50161bd2ee6b84c4d6759a5f15454b377879a01eb7880a7f8a1bc1f0976315a2ef48287332b31e0f35200e530979e127fa8908b4303ac92648ba88b362398bec0211505a9ad5cfe87f64a3e3a05f3156ba190237ec35b6cbf0662caa7dcd2337373af96fbec01bbd708d6a74f52ac099345311609b275d7883d49b0d66913c47860676976a04f4f9acde2ea86586eb4abb8ca5b4eebc25881803a8a50c3fd7c1470d812d6b2b05c658dfe0e2fea1808d33cdbce8633ebd032c92879e3dc844e8516923fb4e69e5bf350ad697dc0511886666b1d642991216acae4c687cb9070eaf6dac60aac2d4032dc5d24b3c1f7a5d5693b24fdf94c9f5858e5a4792fae39d2174629561a3c5690bb75e4424258ddff24aee5a761bfc30888901fa5aeb62bc5e693af019869bdb4c6b6d5b73cf74f2ecb2a2bd45d08f53a72e7df706ca6aca7a77d2ab90531a356546fb9261bac7cb32fcc3875e8edfd0b940797c753c5e23117cc8371d743a7927b048b31febd76fb04a64e6da09430d8642a513b98923f92d26535bef40848e0f08a8bdde222f6f4dd785b8953e448f47a29bc5030e5f5a69810793382fd4b7173b16a3e4920d03d7f29abb04cb48b1a71307d36d07ef5d4ec1513c106c5e4f870323463acef58e9f6d4f7f1235cf836d37111020a39497cf3b696654bb83072eeef91239fa482490ca3617eb524d5974ec756940fc9f75c60bd067dbf9bfb32683973bd39d118505ea27a3f8c75521922522d517a74a7f6bb3d6a4cc5de63eab639c504737e75942f2e3a1cb6e1577c97a9ec5a3cee7d793fffc85de4f278d0dfa946fef3e337900466f7ecd8ce45d516f33f21867d917e14eceb1f3e352b545539f8fc1c074d69db29b80c028f3c595e8a0df16358dc7b7d9bd9799f818792d9595af8d9bb01e8336db8395b867cc4998bc0af6690f31819d321f8d6426c4f3eb853c24356519736bb9f3c9eefac51e44e6947007ca453dd062587b1f89b83e1187fdfe2da123b05f22ec646ee5e124231189d876157c951604b983062f7c629cdf76960cee502474f057237a439c0ad693055110bc8f3212f8a142f019a63855ce740ac189d24283f333a699fdeb45ae21d504188563ee", 0x384}], 0x1}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x3, 0x4) 12:32:46 executing program 3: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@loopback}, {}, {0x0, 0xfffffffffffffeff}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@loopback}}, 0xe8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x83, &(0x7f0000000100), 0x8) 12:32:46 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:32:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x260) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200ed01000000080a77038f80c57b0000"], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 823.491583][T17290] sctp: [Deprecated]: syz-executor.2 (pid 17290) Use of int in max_burst socket option deprecated. [ 823.491583][T17290] Use struct sctp_assoc_value instead 12:32:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x75, 0x1, 0x190}, 0x3c) [ 824.269863][T17292] sctp: [Deprecated]: syz-executor.2 (pid 17292) Use of int in max_burst socket option deprecated. [ 824.269863][T17292] Use struct sctp_assoc_value instead 12:32:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x1f8) 12:32:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x0) pipe(&(0x7f0000008f40)) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c6c", 0x7d}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3", 0x87}, {&(0x7f0000000700)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b", 0x59}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12:32:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x9, 0x0, 0x0, @str='\n\x00\x00\x00-*\x9e{+$&[\x00'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) [ 825.674962][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 825.675027][ T28] audit: type=1804 audit(1599568368.799:187): pid=17322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/130/memory.events" dev="sda1" ino=16365 res=1 [ 825.707472][ T28] audit: type=1800 audit(1599568368.809:188): pid=17322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16365 res=0 12:32:48 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000300)=[{&(0x7f0000000800)={0x14, 0x1e, 0x8b73102c764253c5, 0x0, 0x0, "", [@generic="01"]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') 12:32:49 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000040)=ANY=[], 0xfffffe99}], 0x1}, 0x0) splice(r0, 0x0, r3, 0x0, 0x20800000003, 0x0) close(r1) [ 826.102477][T17303] not chained 230000 origins [ 826.107138][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 826.115833][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.125905][T17303] Call Trace: [ 826.129246][T17303] dump_stack+0x21c/0x280 [ 826.133628][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 826.139395][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.144640][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 826.150231][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 826.156370][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.161631][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 826.167478][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 826.173583][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.178825][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 826.184408][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 826.190520][T17303] ? _copy_from_user+0x201/0x310 [ 826.195495][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.200734][T17303] __msan_chain_origin+0x50/0x90 [ 826.205717][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.210915][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.215899][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.220462][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.225807][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.231045][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 826.236984][T17303] ? kmsan_get_metadata+0x116/0x180 [ 826.242229][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 826.247902][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 826.253236][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 826.258057][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 826.262864][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.267626][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.273775][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.279981][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.285230][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.290142][T17303] do_SYSENTER_32+0x73/0x90 [ 826.294686][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.301041][T17303] RIP: 0023:0xf7fbc549 [ 826.305113][T17303] Code: Bad RIP value. [ 826.309194][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 826.317661][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 826.325667][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 826.333999][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 826.342296][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 826.350298][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.358306][T17303] Uninit was stored to memory at: [ 826.363375][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.369161][T17303] __msan_chain_origin+0x50/0x90 [ 826.374133][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.379271][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.384236][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.388794][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.393509][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.399609][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.405807][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.411057][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.415940][T17303] do_SYSENTER_32+0x73/0x90 [ 826.420467][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.426812][T17303] [ 826.429153][T17303] Uninit was stored to memory at: [ 826.434211][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.439963][T17303] __msan_chain_origin+0x50/0x90 [ 826.444935][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.450079][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.455038][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.459577][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.464364][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.470465][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.476735][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.481961][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.486866][T17303] do_SYSENTER_32+0x73/0x90 [ 826.491393][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.497730][T17303] [ 826.500069][T17303] Uninit was stored to memory at: [ 826.505120][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.510864][T17303] __msan_chain_origin+0x50/0x90 [ 826.515834][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.521061][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.526041][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.530570][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.535276][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.542591][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.548834][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.554058][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.559386][T17303] do_SYSENTER_32+0x73/0x90 [ 826.564855][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.571360][T17303] [ 826.573710][T17303] Uninit was stored to memory at: [ 826.579112][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.584944][T17303] __msan_chain_origin+0x50/0x90 [ 826.590711][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.596924][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.602234][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.606787][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.611508][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.617614][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.623796][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.629075][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.634228][T17303] do_SYSENTER_32+0x73/0x90 [ 826.638772][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.645649][T17303] [ 826.648773][T17303] Uninit was stored to memory at: [ 826.653824][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.659714][T17303] __msan_chain_origin+0x50/0x90 [ 826.664676][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.669813][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.674808][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.679335][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.684100][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.690206][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.696418][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.701647][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.706563][T17303] do_SYSENTER_32+0x73/0x90 [ 826.711107][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.718134][T17303] [ 826.720475][T17303] Uninit was stored to memory at: [ 826.725710][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.731650][T17303] __msan_chain_origin+0x50/0x90 [ 826.737312][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.742453][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.747420][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.751952][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.756659][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.763535][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.769720][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.775409][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.780291][T17303] do_SYSENTER_32+0x73/0x90 [ 826.784828][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.791285][T17303] [ 826.793649][T17303] Uninit was stored to memory at: [ 826.798707][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 826.804457][T17303] __msan_chain_origin+0x50/0x90 [ 826.810120][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 826.815265][T17303] get_compat_msghdr+0x108/0x2b0 [ 826.820226][T17303] do_recvmmsg+0xdbb/0x22c0 [ 826.824747][T17303] __sys_recvmmsg+0x5dd/0x610 [ 826.829453][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 826.835642][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 826.841823][T17303] __do_fast_syscall_32+0x2af/0x480 [ 826.847056][T17303] do_fast_syscall_32+0x6b/0xd0 [ 826.851934][T17303] do_SYSENTER_32+0x73/0x90 [ 826.856474][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 826.862803][T17303] [ 826.865172][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 826.871889][T17303] do_recvmmsg+0xbf/0x22c0 [ 826.876334][T17303] do_recvmmsg+0xbf/0x22c0 [ 826.981263][ T28] audit: type=1804 audit(1599568368.939:189): pid=17322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/130/memory.events" dev="sda1" ino=16365 res=1 12:32:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") clock_gettime(0xfffffffffffffffd, &(0x7f0000000300)) 12:32:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:32:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}}, 0x841) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x46bf, 0x400}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0xa, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) [ 827.946679][T17350] IPVS: ftp: loaded support on port[0] = 21 12:32:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d26000/0x3000)=nil, 0x3000, 0x0, 0x2011, r0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) mmap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 828.715717][T17345] IPVS: ftp: loaded support on port[0] = 21 [ 829.027910][T14843] tipc: TX() has been purged, node left! [ 829.861760][ T28] audit: type=1400 audit(1599568372.989:190): avc: denied { read } for pid=17378 comm="syz-executor.0" path="socket:[58764]" dev="sockfs" ino=58764 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 830.826656][T17303] not chained 240000 origins [ 830.831315][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 830.840177][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.850271][T17303] Call Trace: [ 830.853774][T17303] dump_stack+0x21c/0x280 [ 830.858165][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 830.865513][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.870772][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 830.876630][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.881865][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 830.887706][T17303] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 830.893889][T17303] ? sched_clock_cpu+0x65/0x8e0 [ 830.898817][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.904390][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.909624][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 830.915207][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 830.921332][T17303] ? _copy_from_user+0x201/0x310 [ 830.926300][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.933610][T17303] __msan_chain_origin+0x50/0x90 [ 830.938624][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 830.943796][T17303] get_compat_msghdr+0x108/0x2b0 [ 830.948775][T17303] do_recvmmsg+0xdbb/0x22c0 [ 830.953344][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.958579][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.963838][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 830.969764][T17303] ? kmsan_get_metadata+0x116/0x180 [ 830.974990][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 830.980669][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 830.985986][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 830.990772][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 830.995584][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.000307][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.006765][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.012948][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.018189][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.023099][T17303] do_SYSENTER_32+0x73/0x90 [ 831.027657][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.034003][T17303] RIP: 0023:0xf7fbc549 [ 831.038075][T17303] Code: Bad RIP value. [ 831.042174][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 831.050637][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 831.058719][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 831.066756][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.074771][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 831.082764][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.090773][T17303] Uninit was stored to memory at: [ 831.095835][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.101589][T17303] __msan_chain_origin+0x50/0x90 [ 831.106579][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.111711][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.116671][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.121197][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.125903][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.132039][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.138225][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.143465][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.148366][T17303] do_SYSENTER_32+0x73/0x90 [ 831.153597][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.159961][T17303] [ 831.162327][T17303] Uninit was stored to memory at: [ 831.167385][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.173158][T17303] __msan_chain_origin+0x50/0x90 [ 831.178155][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.183312][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.188283][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.192840][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.197553][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.204291][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.210504][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.215740][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.220628][T17303] do_SYSENTER_32+0x73/0x90 [ 831.225168][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.231513][T17303] [ 831.233858][T17303] Uninit was stored to memory at: [ 831.238934][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.244711][T17303] __msan_chain_origin+0x50/0x90 [ 831.249682][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.254855][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.261137][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.265671][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.270383][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.276516][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.284184][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.289442][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.294355][T17303] do_SYSENTER_32+0x73/0x90 [ 831.298895][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.305235][T17303] [ 831.307576][T17303] Uninit was stored to memory at: [ 831.312665][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.318593][T17303] __msan_chain_origin+0x50/0x90 [ 831.323566][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.328806][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.333945][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.338830][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.343631][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.349827][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.356119][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.361358][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.366242][T17303] do_SYSENTER_32+0x73/0x90 [ 831.370813][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.377443][T17303] [ 831.379792][T17303] Uninit was stored to memory at: [ 831.384853][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.391302][T17303] __msan_chain_origin+0x50/0x90 [ 831.396276][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.401425][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.406399][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.411024][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.415741][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.421853][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.428040][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.433363][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.438246][T17303] do_SYSENTER_32+0x73/0x90 [ 831.442804][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.449145][T17303] [ 831.451485][T17303] Uninit was stored to memory at: [ 831.456544][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.462299][T17303] __msan_chain_origin+0x50/0x90 [ 831.467274][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.472415][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.477383][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.481921][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.486630][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.492845][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.499317][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.504552][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.509440][T17303] do_SYSENTER_32+0x73/0x90 [ 831.513989][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.520332][T17303] [ 831.522674][T17303] Uninit was stored to memory at: [ 831.527731][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 831.533490][T17303] __msan_chain_origin+0x50/0x90 [ 831.538463][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 831.543638][T17303] get_compat_msghdr+0x108/0x2b0 [ 831.548607][T17303] do_recvmmsg+0xdbb/0x22c0 [ 831.553152][T17303] __sys_recvmmsg+0x5dd/0x610 [ 831.557953][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 831.564067][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 831.570267][T17303] __do_fast_syscall_32+0x2af/0x480 [ 831.575522][T17303] do_fast_syscall_32+0x6b/0xd0 [ 831.580411][T17303] do_SYSENTER_32+0x73/0x90 [ 831.584948][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 831.591290][T17303] [ 831.593643][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 831.600351][T17303] do_recvmmsg+0xbf/0x22c0 [ 831.604798][T17303] do_recvmmsg+0xbf/0x22c0 [ 832.224993][T17303] not chained 250000 origins [ 832.229645][T17303] CPU: 0 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 832.238347][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.248430][T17303] Call Trace: [ 832.251763][T17303] dump_stack+0x21c/0x280 [ 832.256155][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 832.261914][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.267141][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 832.272708][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 832.278811][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.284233][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 832.290071][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 832.296187][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.301437][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 832.307010][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 832.313139][T17303] ? _copy_from_user+0x201/0x310 [ 832.323108][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.328446][T17303] __msan_chain_origin+0x50/0x90 [ 832.335880][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.341061][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.346061][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.350614][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.355845][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.361101][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 832.367034][T17303] ? kmsan_get_metadata+0x116/0x180 [ 832.372263][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 832.377946][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 832.383263][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 832.388050][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 832.392851][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.397597][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.403708][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.409903][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.415140][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.420056][T17303] do_SYSENTER_32+0x73/0x90 [ 832.424624][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.430984][T17303] RIP: 0023:0xf7fbc549 [ 832.435062][T17303] Code: Bad RIP value. [ 832.439138][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 832.447593][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 832.455961][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 832.464570][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.472585][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 832.480582][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.488595][T17303] Uninit was stored to memory at: [ 832.493651][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.499414][T17303] __msan_chain_origin+0x50/0x90 [ 832.504382][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.509570][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.514538][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.519068][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.523796][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.529896][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.536085][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.541317][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.546198][T17303] do_SYSENTER_32+0x73/0x90 [ 832.551551][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.557880][T17303] [ 832.560232][T17303] Uninit was stored to memory at: [ 832.565303][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.571044][T17303] __msan_chain_origin+0x50/0x90 [ 832.576003][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.581159][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.586117][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.590646][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.595378][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.601486][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.607697][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.612920][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.617786][T17303] do_SYSENTER_32+0x73/0x90 [ 832.622309][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.628647][T17303] [ 832.630985][T17303] Uninit was stored to memory at: [ 832.636039][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.641947][T17303] __msan_chain_origin+0x50/0x90 [ 832.646993][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.652127][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.657108][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.661649][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.666347][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.672442][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.678619][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.683871][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.688746][T17303] do_SYSENTER_32+0x73/0x90 [ 832.693302][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.699663][T17303] [ 832.702018][T17303] Uninit was stored to memory at: [ 832.707068][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.712823][T17303] __msan_chain_origin+0x50/0x90 [ 832.717823][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.722969][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.727947][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.732470][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.737171][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.743258][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.749433][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.754682][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.759692][T17303] do_SYSENTER_32+0x73/0x90 [ 832.764218][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.770548][T17303] [ 832.772892][T17303] Uninit was stored to memory at: [ 832.778208][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.784296][T17303] __msan_chain_origin+0x50/0x90 [ 832.789527][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.794682][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.799899][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.804685][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.809790][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.815886][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.822244][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.827606][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.832481][T17303] do_SYSENTER_32+0x73/0x90 [ 832.837009][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.843345][T17303] [ 832.845793][T17303] Uninit was stored to memory at: [ 832.850876][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.856626][T17303] __msan_chain_origin+0x50/0x90 [ 832.861765][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.866897][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.871860][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.876383][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.881094][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.887278][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.893483][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.898735][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.903625][T17303] do_SYSENTER_32+0x73/0x90 [ 832.908158][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.914578][T17303] [ 832.916928][T17303] Uninit was stored to memory at: [ 832.921984][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 832.928377][T17303] __msan_chain_origin+0x50/0x90 [ 832.934339][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 832.939580][T17303] get_compat_msghdr+0x108/0x2b0 [ 832.945505][T17303] do_recvmmsg+0xdbb/0x22c0 [ 832.950729][T17303] __sys_recvmmsg+0x5dd/0x610 [ 832.955520][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 832.962049][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 832.968236][T17303] __do_fast_syscall_32+0x2af/0x480 [ 832.973473][T17303] do_fast_syscall_32+0x6b/0xd0 [ 832.978361][T17303] do_SYSENTER_32+0x73/0x90 [ 832.982888][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 832.989425][T17303] [ 832.991895][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 832.998634][T17303] do_recvmmsg+0xbf/0x22c0 [ 833.003090][T17303] do_recvmmsg+0xbf/0x22c0 [ 833.587516][T14843] tipc: TX() has been purged, node left! [ 833.728504][T17303] not chained 260000 origins [ 833.733194][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 833.741882][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.752045][T17303] Call Trace: [ 833.755375][T17303] dump_stack+0x21c/0x280 [ 833.759945][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 833.765785][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.771292][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 833.777146][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 833.783415][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.788650][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 833.794528][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 833.800629][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.805859][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 833.811437][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 833.817546][T17303] ? _copy_from_user+0x201/0x310 [ 833.822780][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.828009][T17303] __msan_chain_origin+0x50/0x90 [ 833.833207][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 833.838387][T17303] get_compat_msghdr+0x108/0x2b0 [ 833.844669][T17303] do_recvmmsg+0xdbb/0x22c0 [ 833.849320][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.854580][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.859813][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 833.866500][T17303] ? kmsan_get_metadata+0x116/0x180 [ 833.872821][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 833.878500][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 833.883827][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 833.888620][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 833.893425][T17303] __sys_recvmmsg+0x5dd/0x610 [ 833.898295][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 833.904439][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 833.910842][T17303] __do_fast_syscall_32+0x2af/0x480 [ 833.916102][T17303] do_fast_syscall_32+0x6b/0xd0 [ 833.920998][T17303] do_SYSENTER_32+0x73/0x90 [ 833.925547][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 833.931898][T17303] RIP: 0023:0xf7fbc549 [ 833.935971][T17303] Code: Bad RIP value. [ 833.940054][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 833.948495][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 833.956497][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 833.964499][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 833.972495][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 833.980496][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 833.988940][T17303] Uninit was stored to memory at: [ 833.994000][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 833.999745][T17303] __msan_chain_origin+0x50/0x90 [ 834.004709][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.009851][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.014820][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.019459][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.024165][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.030261][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.036454][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.041683][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.046568][T17303] do_SYSENTER_32+0x73/0x90 [ 834.051119][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.057454][T17303] [ 834.059915][T17303] Uninit was stored to memory at: [ 834.064965][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.070720][T17303] __msan_chain_origin+0x50/0x90 [ 834.075690][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.080834][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.085892][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.090429][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.095176][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.101302][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.107491][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.112810][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.117686][T17303] do_SYSENTER_32+0x73/0x90 [ 834.122220][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.128549][T17303] [ 834.130892][T17303] Uninit was stored to memory at: [ 834.135946][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.141689][T17303] __msan_chain_origin+0x50/0x90 [ 834.146658][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.151802][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.156761][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.161309][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.166036][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.172123][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.178301][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.183533][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.188442][T17303] do_SYSENTER_32+0x73/0x90 [ 834.192974][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.199306][T17303] [ 834.201733][T17303] Uninit was stored to memory at: [ 834.206790][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.212661][T17303] __msan_chain_origin+0x50/0x90 [ 834.217662][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.222841][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.228067][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.232602][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.237311][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.243434][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.249619][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.254848][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.259724][T17303] do_SYSENTER_32+0x73/0x90 [ 834.264365][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.270894][T17303] [ 834.273257][T17303] Uninit was stored to memory at: [ 834.278588][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.284359][T17303] __msan_chain_origin+0x50/0x90 [ 834.289330][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.294549][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.299513][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.304043][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.308747][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.316476][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.323120][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.329333][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.334223][T17303] do_SYSENTER_32+0x73/0x90 [ 834.338787][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.345128][T17303] [ 834.347468][T17303] Uninit was stored to memory at: [ 834.352534][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.358283][T17303] __msan_chain_origin+0x50/0x90 [ 834.363251][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.368387][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.373370][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.377990][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.383256][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.392586][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.398868][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.404520][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.410599][T17303] do_SYSENTER_32+0x73/0x90 [ 834.415162][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.422342][T17303] [ 834.424686][T17303] Uninit was stored to memory at: [ 834.429748][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 834.435498][T17303] __msan_chain_origin+0x50/0x90 [ 834.440468][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.445613][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.450581][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.455114][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.459850][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.465948][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.472150][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.477377][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.482266][T17303] do_SYSENTER_32+0x73/0x90 [ 834.486802][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.493175][T17303] [ 834.495516][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 834.502226][T17303] do_recvmmsg+0xbf/0x22c0 [ 834.506698][T17303] do_recvmmsg+0xbf/0x22c0 [ 834.782440][T17303] not chained 270000 origins [ 834.787104][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 834.795789][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.805895][T17303] Call Trace: [ 834.809221][T17303] dump_stack+0x21c/0x280 [ 834.813591][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 834.819345][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.824577][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 834.830161][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 834.836274][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.841551][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 834.847391][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 834.853489][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.858753][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 834.864332][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 834.870614][T17303] ? _copy_from_user+0x201/0x310 [ 834.875592][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.880854][T17303] __msan_chain_origin+0x50/0x90 [ 834.885836][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 834.891017][T17303] get_compat_msghdr+0x108/0x2b0 [ 834.896005][T17303] do_recvmmsg+0xdbb/0x22c0 [ 834.900591][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.905854][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.911277][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 834.917207][T17303] ? kmsan_get_metadata+0x116/0x180 [ 834.922461][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 834.928139][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 834.933474][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 834.938300][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 834.943319][T17303] __sys_recvmmsg+0x5dd/0x610 [ 834.948079][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 834.954208][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 834.961271][T17303] __do_fast_syscall_32+0x2af/0x480 [ 834.966519][T17303] do_fast_syscall_32+0x6b/0xd0 [ 834.971405][T17303] do_SYSENTER_32+0x73/0x90 [ 834.975943][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 834.982292][T17303] RIP: 0023:0xf7fbc549 [ 834.986373][T17303] Code: Bad RIP value. [ 834.990459][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 834.998906][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 835.006930][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 835.014925][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 835.022939][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 835.030966][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.038979][T17303] Uninit was stored to memory at: [ 835.044044][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.049790][T17303] __msan_chain_origin+0x50/0x90 [ 835.054756][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.059982][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.064939][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.069464][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.074172][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.080271][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.086460][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.091687][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.096559][T17303] do_SYSENTER_32+0x73/0x90 [ 835.101085][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.107416][T17303] [ 835.109753][T17303] Uninit was stored to memory at: [ 835.114802][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.120552][T17303] __msan_chain_origin+0x50/0x90 [ 835.125518][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.130661][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.135630][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.140163][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.144958][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.151536][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.157726][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.162956][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.167922][T17303] do_SYSENTER_32+0x73/0x90 [ 835.172479][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.178935][T17303] [ 835.181274][T17303] Uninit was stored to memory at: [ 835.186512][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.192261][T17303] __msan_chain_origin+0x50/0x90 [ 835.197229][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.203068][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.208136][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.212666][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.217371][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.223468][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.229655][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.234881][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.239755][T17303] do_SYSENTER_32+0x73/0x90 [ 835.244312][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.250905][T17303] [ 835.253243][T17303] Uninit was stored to memory at: [ 835.258293][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.264040][T17303] __msan_chain_origin+0x50/0x90 [ 835.269033][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.274171][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.279218][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.283746][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.288448][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.294557][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.300746][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.306055][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.310932][T17303] do_SYSENTER_32+0x73/0x90 [ 835.315467][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.322787][T17303] [ 835.325152][T17303] Uninit was stored to memory at: [ 835.330733][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.336485][T17303] __msan_chain_origin+0x50/0x90 [ 835.341466][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.346644][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.351618][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.356151][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.360902][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.367032][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.373221][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.378488][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.383377][T17303] do_SYSENTER_32+0x73/0x90 [ 835.387913][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.394337][T17303] [ 835.396682][T17303] Uninit was stored to memory at: [ 835.401743][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.407528][T17303] __msan_chain_origin+0x50/0x90 [ 835.412515][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.417678][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.422651][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.427201][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.431913][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.438016][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.444230][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.449469][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.454354][T17303] do_SYSENTER_32+0x73/0x90 [ 835.458883][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.465213][T17303] [ 835.467550][T17303] Uninit was stored to memory at: [ 835.472609][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 835.478355][T17303] __msan_chain_origin+0x50/0x90 [ 835.483322][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 835.488465][T17303] get_compat_msghdr+0x108/0x2b0 [ 835.493462][T17303] do_recvmmsg+0xdbb/0x22c0 [ 835.497987][T17303] __sys_recvmmsg+0x5dd/0x610 [ 835.502688][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 835.508786][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 835.514976][T17303] __do_fast_syscall_32+0x2af/0x480 [ 835.520209][T17303] do_fast_syscall_32+0x6b/0xd0 [ 835.525092][T17303] do_SYSENTER_32+0x73/0x90 [ 835.529627][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 835.535970][T17303] [ 835.538316][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 835.545012][T17303] do_recvmmsg+0xbf/0x22c0 [ 835.549445][T17303] do_recvmmsg+0xbf/0x22c0 [ 835.979244][T17303] not chained 280000 origins [ 835.983902][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 835.992584][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.002657][T17303] Call Trace: [ 836.005982][T17303] dump_stack+0x21c/0x280 [ 836.010358][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 836.016112][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.021347][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 836.026928][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 836.033038][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.038275][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 836.044152][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 836.050247][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.055479][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 836.061067][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 836.067178][T17303] ? _copy_from_user+0x201/0x310 [ 836.072153][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.077386][T17303] __msan_chain_origin+0x50/0x90 [ 836.082389][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.087599][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.092581][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.097131][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.102370][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.107604][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 836.113527][T17303] ? kmsan_get_metadata+0x116/0x180 [ 836.118757][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 836.124447][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 836.129776][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 836.134586][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 836.139379][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.144117][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.150224][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.156426][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.161683][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.166567][T17303] do_SYSENTER_32+0x73/0x90 [ 836.171107][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.177458][T17303] RIP: 0023:0xf7fbc549 [ 836.181542][T17303] Code: Bad RIP value. [ 836.185643][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 836.194082][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 836.202078][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 836.210530][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.218553][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 836.226544][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.234569][T17303] Uninit was stored to memory at: [ 836.239639][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.245397][T17303] __msan_chain_origin+0x50/0x90 [ 836.250369][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.255510][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.260480][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.265039][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.269745][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.275845][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.282047][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.287280][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.292170][T17303] do_SYSENTER_32+0x73/0x90 [ 836.296705][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.303043][T17303] [ 836.305395][T17303] Uninit was stored to memory at: [ 836.310447][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.316625][T17303] __msan_chain_origin+0x50/0x90 [ 836.321586][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.326727][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.332762][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.337301][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.342062][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.348166][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.354383][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.359622][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.364502][T17303] do_SYSENTER_32+0x73/0x90 [ 836.369038][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.375397][T17303] [ 836.377732][T17303] Uninit was stored to memory at: [ 836.382875][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.388744][T17303] __msan_chain_origin+0x50/0x90 [ 836.393713][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.398848][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.403816][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.408344][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.413071][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.420371][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.426646][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.431866][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.436750][T17303] do_SYSENTER_32+0x73/0x90 [ 836.441296][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.447628][T17303] [ 836.449959][T17303] Uninit was stored to memory at: [ 836.455006][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.460743][T17303] __msan_chain_origin+0x50/0x90 [ 836.465700][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.470922][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.475880][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.480416][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.485145][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.491237][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.497418][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.502639][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.507514][T17303] do_SYSENTER_32+0x73/0x90 [ 836.512052][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.518382][T17303] [ 836.520720][T17303] Uninit was stored to memory at: [ 836.525769][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.531503][T17303] __msan_chain_origin+0x50/0x90 [ 836.536485][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.541627][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.546584][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.551106][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.555834][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.561930][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.568119][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.573338][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.578211][T17303] do_SYSENTER_32+0x73/0x90 [ 836.582739][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.589087][T17303] [ 836.591446][T17303] Uninit was stored to memory at: [ 836.596499][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.602243][T17303] __msan_chain_origin+0x50/0x90 [ 836.607206][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.612361][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.617320][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.621840][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.626542][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.632639][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.638817][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.644033][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.648901][T17303] do_SYSENTER_32+0x73/0x90 [ 836.653431][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.659801][T17303] [ 836.662140][T17303] Uninit was stored to memory at: [ 836.667194][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 836.672940][T17303] __msan_chain_origin+0x50/0x90 [ 836.677907][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 836.683043][T17303] get_compat_msghdr+0x108/0x2b0 [ 836.688036][T17303] do_recvmmsg+0xdbb/0x22c0 [ 836.692558][T17303] __sys_recvmmsg+0x5dd/0x610 [ 836.697256][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 836.703348][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 836.709531][T17303] __do_fast_syscall_32+0x2af/0x480 [ 836.714839][T17303] do_fast_syscall_32+0x6b/0xd0 [ 836.719715][T17303] do_SYSENTER_32+0x73/0x90 [ 836.724248][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 836.730574][T17303] [ 836.732914][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 836.739616][T17303] do_recvmmsg+0xbf/0x22c0 [ 836.744105][T17303] do_recvmmsg+0xbf/0x22c0 [ 837.632893][T17303] not chained 290000 origins [ 837.637552][T17303] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 837.646240][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.657119][T17303] Call Trace: [ 837.660454][T17303] dump_stack+0x21c/0x280 [ 837.664854][T17303] kmsan_internal_chain_origin+0x6f/0x130 [ 837.670611][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.675867][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 837.681457][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 837.687564][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.692800][T17303] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 837.698667][T17303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 837.704791][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.710815][T17303] ? kmsan_set_origin_checked+0x95/0xf0 [ 837.716405][T17303] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 837.722701][T17303] ? _copy_from_user+0x201/0x310 [ 837.727676][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.732907][T17303] __msan_chain_origin+0x50/0x90 [ 837.737886][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 837.743063][T17303] get_compat_msghdr+0x108/0x2b0 [ 837.748057][T17303] do_recvmmsg+0xdbb/0x22c0 [ 837.752616][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.758835][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.764078][T17303] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 837.770009][T17303] ? kmsan_get_metadata+0x116/0x180 [ 837.775241][T17303] ? kmsan_internal_set_origin+0x75/0xb0 [ 837.780920][T17303] ? __msan_poison_alloca+0xf0/0x120 [ 837.786244][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 837.791042][T17303] ? __sys_recvmmsg+0xbb/0x610 [ 837.796220][T17303] __sys_recvmmsg+0x5dd/0x610 [ 837.801420][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 837.807565][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 837.813767][T17303] __do_fast_syscall_32+0x2af/0x480 [ 837.819190][T17303] do_fast_syscall_32+0x6b/0xd0 [ 837.824085][T17303] do_SYSENTER_32+0x73/0x90 [ 837.828658][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 837.835014][T17303] RIP: 0023:0xf7fbc549 [ 837.839093][T17303] Code: Bad RIP value. [ 837.843279][T17303] RSP: 002b:00000000f55950cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 837.851819][T17303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 837.859828][T17303] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 837.868523][T17303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.876524][T17303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 837.884525][T17303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.892547][T17303] Uninit was stored to memory at: [ 837.897623][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 837.903379][T17303] __msan_chain_origin+0x50/0x90 [ 837.908351][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 837.913505][T17303] get_compat_msghdr+0x108/0x2b0 [ 837.918467][T17303] do_recvmmsg+0xdbb/0x22c0 [ 837.923003][T17303] __sys_recvmmsg+0x5dd/0x610 [ 837.927711][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 837.933832][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 837.940049][T17303] __do_fast_syscall_32+0x2af/0x480 [ 837.945283][T17303] do_fast_syscall_32+0x6b/0xd0 [ 837.950168][T17303] do_SYSENTER_32+0x73/0x90 [ 837.954730][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 837.961083][T17303] [ 837.963425][T17303] Uninit was stored to memory at: [ 837.968494][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 837.974246][T17303] __msan_chain_origin+0x50/0x90 [ 837.979220][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 837.984384][T17303] get_compat_msghdr+0x108/0x2b0 [ 837.989528][T17303] do_recvmmsg+0xdbb/0x22c0 [ 837.994060][T17303] __sys_recvmmsg+0x5dd/0x610 [ 837.998767][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.004871][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.011065][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.016296][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.021176][T17303] do_SYSENTER_32+0x73/0x90 [ 838.025739][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.032077][T17303] [ 838.034457][T17303] Uninit was stored to memory at: [ 838.039539][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 838.045288][T17303] __msan_chain_origin+0x50/0x90 [ 838.050259][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 838.055403][T17303] get_compat_msghdr+0x108/0x2b0 [ 838.060364][T17303] do_recvmmsg+0xdbb/0x22c0 [ 838.064892][T17303] __sys_recvmmsg+0x5dd/0x610 [ 838.069597][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.075703][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.081891][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.087122][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.092007][T17303] do_SYSENTER_32+0x73/0x90 [ 838.096552][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.102886][T17303] [ 838.105227][T17303] Uninit was stored to memory at: [ 838.110279][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 838.116052][T17303] __msan_chain_origin+0x50/0x90 [ 838.121017][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 838.126157][T17303] get_compat_msghdr+0x108/0x2b0 [ 838.131126][T17303] do_recvmmsg+0xdbb/0x22c0 [ 838.135683][T17303] __sys_recvmmsg+0x5dd/0x610 [ 838.140390][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.146499][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.152728][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.158049][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.162947][T17303] do_SYSENTER_32+0x73/0x90 [ 838.167494][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.173841][T17303] [ 838.176183][T17303] Uninit was stored to memory at: [ 838.181330][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 838.187082][T17303] __msan_chain_origin+0x50/0x90 [ 838.192053][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 838.197197][T17303] get_compat_msghdr+0x108/0x2b0 [ 838.202254][T17303] do_recvmmsg+0xdbb/0x22c0 [ 838.206991][T17303] __sys_recvmmsg+0x5dd/0x610 [ 838.211990][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.218101][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.224297][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.229533][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.234558][T17303] do_SYSENTER_32+0x73/0x90 [ 838.239178][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.246295][T17303] [ 838.248666][T17303] Uninit was stored to memory at: [ 838.253728][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 838.259487][T17303] __msan_chain_origin+0x50/0x90 [ 838.264488][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 838.269661][T17303] get_compat_msghdr+0x108/0x2b0 [ 838.274633][T17303] do_recvmmsg+0xdbb/0x22c0 [ 838.279166][T17303] __sys_recvmmsg+0x5dd/0x610 [ 838.283878][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.289989][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.296182][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.301433][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.306344][T17303] do_SYSENTER_32+0x73/0x90 [ 838.310974][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.317314][T17303] [ 838.319745][T17303] Uninit was stored to memory at: [ 838.324828][T17303] kmsan_internal_chain_origin+0xad/0x130 [ 838.330958][T17303] __msan_chain_origin+0x50/0x90 [ 838.335940][T17303] __get_compat_msghdr+0x6db/0x9d0 [ 838.341121][T17303] get_compat_msghdr+0x108/0x2b0 [ 838.346126][T17303] do_recvmmsg+0xdbb/0x22c0 [ 838.350668][T17303] __sys_recvmmsg+0x5dd/0x610 [ 838.356342][T17303] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 838.362450][T17303] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 838.368640][T17303] __do_fast_syscall_32+0x2af/0x480 [ 838.374358][T17303] do_fast_syscall_32+0x6b/0xd0 [ 838.379280][T17303] do_SYSENTER_32+0x73/0x90 [ 838.383827][T17303] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 838.390257][T17303] [ 838.392643][T17303] Local variable ----msg_sys@do_recvmmsg created at: [ 838.399463][T17303] do_recvmmsg+0xbf/0x22c0 [ 838.403916][T17303] do_recvmmsg+0xbf/0x22c0 12:33:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000500), &(0x7f0000000580)=0x68) 12:33:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 12:33:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0xb3550aa4ba878254}, 0x9c) 12:33:01 executing program 2: unshare(0x40000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000000180)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4309(rfc7539(xts(twofish),rmd320-generic)))\x00'}}}]}, 0x144}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800000021000101000900000000000081"], 0x28}}, 0x0) 12:33:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 12:33:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x260) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000012000102000000000a77038f80"], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 838.762587][T17423] IPVS: ftp: loaded support on port[0] = 21 [ 839.111696][T17431] IPVS: ftp: loaded support on port[0] = 21 [ 839.170303][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 12:33:02 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500000000fffffffe0000000000"}, 0x28) 12:33:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x65, 0x0, 0x0) 12:33:02 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 839.813716][T17440] IPVS: ftp: loaded support on port[0] = 21 12:33:03 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8010020", @ANYRES16, @ANYRESDEC=r2], 0x1d8}, 0x1, 0x0, 0x0, 0x404c014}, 0x2400c850) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000004980)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004940)={&(0x7f00000006c0)={0x354, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x597ab26e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x497b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd51a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d3d1f4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9175}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb8b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c041114}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d57c06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf974}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f7ff75b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc02d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x788a928b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e9e7f11}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b121e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20071e10}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed6ff52}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5c8ba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4196d94d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e6fd48f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e47c46e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d700c23}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76501dd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d37807b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79dd5008}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x5}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c808559}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d2427f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ecceca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49c58496}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26482731}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e023107}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x645bb3e5}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14547746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x817058}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f166a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63c5d3bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21972af2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b66e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26d19be5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28b5f950}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd4567f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31734e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dacce71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22c0b83e}]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="251ddd5d14cb06000000690f6e9c354649bd1d58b8ccbddd79905bf20358a9770dfa15a89a419fefee757ffbed9d094b99d696a90e2c181cbbe4afdd92a37414cfa9980908f49cfed890d1e80f8ace38ca08391bf0253e929f76213975011c438051e0037ccff8795d58091519b907766a4f0d73ce06b8a2f10d3a22f6e738dc7f27b12e9580594eaec4"], 0x9240db9) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020331fbc5b500"/32], 0x20}}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r5}, 0xc) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r5, 0x0, 0x8}, 0xc) close(r6) r7 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) recvfrom(r1, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 12:33:03 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "eeb18b014090761e", "c8ebee46a56c142fe83b9a1848055d8b5606000000e5a4b85d00", '\x00', "48b60516c7ad6c19"}, 0x38) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x258) 12:33:03 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 12:33:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r3, 0x4daeab3cbf8e182b, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r7, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) [ 841.727191][ T1748] tipc: TX() has been purged, node left! 12:33:04 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 12:33:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffff61}}, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x2}}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x600000000000000}, 0x0) [ 842.682592][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:33:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f00000000c0)=""/4107, &(0x7f0000000040)=0x100b) 12:33:06 executing program 0: r0 = socket$netlink(0x11, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@qipcrtr={0x11, 0x6}, 0x80) write(r0, &(0x7f0000000000)="4ab4830085fd7e0600000000008da53a5ee40000", 0x14) 12:33:06 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 842.880936][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:33:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}}, 0x0) 12:33:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001100)) [ 843.583136][T17549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:33:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 843.831841][T17554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 844.225580][ T28] audit: type=1804 audit(1599568387.358:191): pid=17560 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/136/cgroup.controllers" dev="sda1" ino=15784 res=1 12:33:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0) 12:33:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 12:33:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x98, 0x98, 0x0, 0x98, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0x98, 0xf4, 0x0, {}, [@common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) 12:33:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000400), 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x100002, 0x20040006}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x53000, 0x40000002}) 12:33:08 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$inet6(0x10, 0x3, 0x6) sendto$inet6(r0, &(0x7f0000000000)="1ba000001b001d0d89fdc5cbdd045798707bed4dca14a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x147) 12:33:08 executing program 0: accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYBLOB="8a8b70927a39d8738f9d49601eb7e7139019d30312d611dfe2becb38e86c9a269a3f6f9d631f92bbef5800572645776c78401bf3082de9022019ac9680e80b3f3612bdeb52b598d438b623b7f9202b4c696aefd3fd157b5d08f95ff72c103eda6a5205ef51288369c270d783c21a80f8276ad9b10bf4339c31328d454de112bd8efbb39f1f82c619059381adfb962139ebe76d7b1c3b90964e41fc62000888b837acacea8304db1b958e2134fbbee6a84c676b2c470a961af915", @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xb4, r1, 0x200, 0x200, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0x4, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001001}, 0x4048800) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=r4) unshare(0x40000000) write$tun(0xffffffffffffffff, 0x0, 0xfce) r6 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}], 0x1c) 12:33:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x8ec3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) [ 845.564226][T17581] IPVS: ftp: loaded support on port[0] = 21 12:33:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000080)=""/4100, &(0x7f00000010c0)=0x1004) 12:33:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 846.257231][T17582] IPVS: ftp: loaded support on port[0] = 21 [ 846.469306][ T28] audit: type=1804 audit(1599568389.598:192): pid=17599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/170/cgroup.controllers" dev="sda1" ino=16365 res=1 12:33:09 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x2}]}}, &(0x7f0000000300)=""/238, 0x26, 0xee, 0x8}, 0x20) [ 847.334624][T17613] BPF:[1] TYPEDEF (anon) [ 847.339363][T17613] BPF:type_id=0 [ 847.342877][T17613] BPF: [ 847.346053][T17613] BPF:vlen != 0 [ 847.349592][T17613] BPF: [ 847.349592][T17613] [ 847.442655][T17613] BPF:[1] TYPEDEF (anon) [ 847.447507][T17613] BPF:type_id=0 [ 847.451025][T17613] BPF: [ 847.453835][T17613] BPF:vlen != 0 [ 847.457686][T17613] BPF: [ 847.457686][T17613] [ 848.657740][ T1748] tipc: TX() has been purged, node left! [ 848.698218][ T1748] tipc: TX() has been purged, node left! 12:33:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaa0086dd60"], 0x57) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:33:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x12, 0x3e, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000002c0)=""/255}, 0x20) 12:33:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x50000}}, 0x20}}, 0x0) 12:33:11 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:11 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000180), 0x4) 12:33:14 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff2e}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5761, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0xe40, @loopback, 0x7, 0x4}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010008506000000000000000024b07067", @ANYRES32=r8, @ANYBLOB="17010000000000001c0012000c000100626f6e64000000000c200200080001084c1c203b1ebc3795f27b59bcf5030000008626ed00000000000000000686d38760ca9003461d65ffecf7b8e666376cbd8a8c7524f30194f458b03837c412eba5d1e889db1e11ffe1f212388d9596430d45c9e192d2281c"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x90}}, 0x0) 12:33:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x49, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 12:33:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000240)) 12:33:14 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:14 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000e0) 12:33:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x6, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @private, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0xa, '\x00\x00?'}, "ccbfc12abc282c27820fd911"}}}}, 0x3a) [ 851.902794][ T28] audit: type=1804 audit(1599568395.028:193): pid=17662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/172/cgroup.controllers" dev="sda1" ino=16388 res=1 12:33:15 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:15 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040480) 12:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x2, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000001500)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmmsg$sock(r1, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001200)="31a7609434be58d7b68c1ab7a1f37dff01bc472c1bccc0552c5f187300d9b4be01c00e8e4e9f095a37f4f6633793f48367e7a39274cf49e6022f8516df085d16664cf5e28c979768264acae28b4f0d4cfdafeac869fcf317f5c0f85c59e7ece7772efb5b67ca4d85cbbc60a945189aa455101f1f20c43a1fdac2d3b7e76cd0fdd91dac4676b0773a71beb9f664c41677d5d4bc1ba26d567932257fcfcf030621ff95124001b713df01395b063f1232f86afc79efd77fdaf1a9bebf2751a8ea164a23c6b721", 0xc5}, {&(0x7f0000001a80)="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", 0x194}, {&(0x7f0000000100)="88a791dd24f6990de2f9618d1c18a7965325e123af601e830c8f25415ff514c27187102e8eeba988432a3f77aca2459c0cf492993bef701a18f2c8fe3b5052d33bb9ef16e794caa7319dbfd9c6652930059ba79b5c3da4ca935fec571237d385", 0x60}, {&(0x7f0000001440)="8ddabd1571a5ba4e4597c55291ff5603b52ef45a771db89c80b36ff9ac94158725091ea85852da", 0x27}, {&(0x7f0000001340)="186c6bf2742516a2c03ff6d2bda9905e45b72fc4ef2e2f631611e96d727bb120e47035307aaea264cf3600e38fc81a7ec8f00df34f989be4f0a4379b7b0c6e313688431ad848f807fb0b119da720cc46414a4441", 0x54}], 0x5, &(0x7f00000015c0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xf4}}], 0x48}}, {{&(0x7f0000001640)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001480)="5fe33f9c49b685b98e9ae06749c37a425d7cbe879d1c52f3f4cfe1d8bc17740f60a0abade0100a649ca7337a527f143586aba6ebf161a391f51428189559e8bb4c83", 0x42}, {&(0x7f0000001740)="f4e6d4de2f699dd3f76cf4ff01000000000000ab37bebf6ed9a52be7197ba9d4b743e4dcc55757538c26aa041546d14c9ae5671a8fd099685e7c7378fa2f8a1fa36e82a52d79c9392ef9979554a4f2dfc3064d7da838c0", 0x57}, {&(0x7f0000001c40)="d560cd089664fb1b951c267264a90b064f7f35b14e6ff310a6a1f3b77254af7ebc7f180caaf4de357f58f433e5d3dcc0f6830f84004ac2cf20bdab93cf98b5d11a59744be1627339729f7d9ae80aae489bd13ac65479961ab60c1218eb50ff451f4b5373aaa0a8278cde451db0e449cbb67718885c6debdde00286e594454094610dfd63e65ee28482b0f755409c144c1ceaaf2a6965e0959d5f12fa37105f682d2cf9abdf761d3425", 0xa9}, {&(0x7f00000018c0)="289259077d3baefa89680a936a7990be87756d2bb41a8c013550846a8c87a96b38eb", 0x22}, {0xffffffffffffffff}], 0x5}}], 0x2, 0x4800) close(0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0xff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000013c0)=@assoc_value={r6, 0x9}, &(0x7f0000001a40)=0x8) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:33:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r1, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0e00100001000000140001800800050000000000060001000a000000040000402000"], 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfa00}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8db}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf7c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffc27}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x5b, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000003e6d46040000280012000c000100"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="8c62204381080000000800"], 0x20}}, 0x0) [ 853.035755][ T28] audit: type=1804 audit(1599568396.158:194): pid=17678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/142/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 853.147613][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 853.237508][T17669] device bond5 entered promiscuous mode [ 853.244087][T17669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 853.266091][T17670] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 853.282267][T17670] bond5: (slave ip6tnl1): Error -95 calling set_mac_address 12:33:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) [ 853.390158][ T28] audit: type=1804 audit(1599568396.248:195): pid=17680 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/142/memory.events" dev="sda1" ino=16384 res=1 [ 853.417821][ T28] audit: type=1800 audit(1599568396.248:196): pid=17680 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16384 res=0 12:33:16 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) [ 854.032821][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 854.052841][T17685] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 854.068441][T17685] bond5: (slave ip6tnl1): Error -95 calling set_mac_address [ 854.392564][T17731] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 12:33:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x8000000002, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001200ff09", 0x8}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x42) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x60, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2a7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8004099100000000500150007008178a8001600050001c006fc000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="020037d20adf874b51cf21a4ca44a83f3daaa5a0c6d8ec437511cd9cb23ae9b19f7835085cf8f39739d24cdbc70698f168d61a8100"/66]) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:33:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r1 = socket$kcm(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 12:33:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) [ 855.422158][T17731] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 855.581985][T17765] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.590232][T17765] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:33:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b7050000000000006110200000000000d40500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808838da5847c95ffc926c2e182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd02584a54ee68c70db4d8ae5df76"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 12:33:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket(0x20000000000000a, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000840)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 12:33:19 executing program 1: socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x24f, [@typedef, @typedef, @func, @volatile, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/187, 0xffffffffffffffc3, 0xbb}, 0x20) 12:33:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000011c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'nhpoly1305-avx2\x00'}}}]}, 0x13c}}, 0x0) 12:33:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) 12:33:20 executing program 1: socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0xf4c, 0x13, 0x0, 0x70bd2b, 0x25dfdbff, {0xb, 0x1, 0x4, 0x2, {0x0, 0x4e21, [0x0, 0xffff, 0x8, 0x10001], [0xe6, 0x7, 0x5, 0xfffffffa], 0x0, [0x0, 0x764]}, 0xfffffff8, 0xfc2}, [@INET_DIAG_REQ_BYTECODE={0xec8, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "ffe4f0c18e8361af32e2112dc6583f92bc4ae6424a52b1b6802dba8dc99fcb7a41917cf4b5f199a8554f1bd944f8a996f7d5dc51"}]}, 0xf4c}, 0x1, 0x0, 0x0, 0x14}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x50000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', r1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009006900000000000000ab0080001f0000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0x6000000}, 0x10000}, 0x1c) [ 857.103528][ T28] audit: type=1804 audit(1599568400.228:197): pid=17784 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir499996272/syzkaller.r2MG5V/176/cgroup.controllers" dev="sda1" ino=15788 res=1 12:33:20 executing program 2: r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffffffffffffffc, @local, 'ip_vti0\x00'}}, 0x1e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="c9", 0x1}], 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfdffff00000000, {0x1, @dev={[], 0x23}, 'vcan0\x00'}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @local}) socket$kcm(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x3c}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote, r7}, 0xc) 12:33:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in6=@loopback, @in6=@remote}, {@in6=@dev, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 12:33:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x2, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000480)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40060) 12:33:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307010056b0140ea90b0600006c04000180"], 0x18}}, 0x0) sendfile(r2, r1, 0x0, 0x100100000000) [ 857.722522][T17796] device veth1_macvtap left promiscuous mode 12:33:21 executing program 1: socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12:33:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x18000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x4c, 0x100, 0x3f000e11, 0x11, 0x100, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x48], 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6tnl0\x00', {}, '\x00', {}, 0x0, 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, '\x00', 'rose0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) [ 858.425736][ T28] audit: type=1804 audit(1599568401.558:198): pid=17807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115368822/syzkaller.bkm2lv/144/cgroup.controllers" dev="sda1" ino=15815 res=1 12:33:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x0, 0x84) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000080)={0x2f2b044a72e41878, 0x1, 0x18}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x141800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x844) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 12:33:21 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 12:33:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x17, 0x4}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffffff3b, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x3, 0x4, 0x100000001, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 12:33:22 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x5411, &(0x7f0000000180)) 12:33:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) [ 859.317134][T17818] IPVS: ftp: loaded support on port[0] = 21 12:33:22 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) socketpair(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0x88f, @mcast1, 0x3}}, 0x9, 0xffc8}, &(0x7f0000000240)=0x90) socket$netlink(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x400125bc, 0x0, 0xfffffe53) 12:33:23 executing program 0: pipe(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400007e280000005e00ff03c81f8374b4c125a4ffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0)=0x9, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x400000e, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x300, 0x42, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x41, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x28) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x128ca214, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002335}], 0x1, 0x0, 0x24fa, 0x1f4}, 0x3}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x180, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) 12:33:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 12:33:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"/345], &(0x7f0000000100)='GPL\x00'}, 0x48) 12:33:23 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) [ 860.003243][T17846] IPVS: ftp: loaded support on port[0] = 21 [ 860.482150][T17873] IPVS: ftp: loaded support on port[0] = 21 [ 860.568335][T14843] tipc: TX() has been purged, node left! [ 860.665676][T17870] not chained 300000 origins [ 860.670333][T17870] CPU: 0 PID: 17870 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 860.679019][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.689089][T17870] Call Trace: [ 860.692424][T17870] dump_stack+0x21c/0x280 [ 860.696901][T17870] kmsan_internal_chain_origin+0x6f/0x130 [ 860.702679][T17870] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 860.708517][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.713745][T17870] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 860.719603][T17870] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 860.725694][T17870] ? __wake_up+0x1ff/0x250 [ 860.730142][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.735371][T17870] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 860.741215][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.746444][T17870] ? kmsan_set_origin_checked+0x95/0xf0 [ 860.752125][T17870] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 860.758230][T17870] ? _copy_from_user+0x201/0x310 [ 860.763286][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.768507][T17870] __msan_chain_origin+0x50/0x90 [ 860.773497][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 860.778927][T17870] get_compat_msghdr+0x108/0x2b0 [ 860.783903][T17870] do_recvmmsg+0xdbb/0x22c0 [ 860.788448][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.793674][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.798902][T17870] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 860.804819][T17870] ? kmsan_get_metadata+0x116/0x180 [ 860.810040][T17870] ? kmsan_internal_set_origin+0x75/0xb0 [ 860.815705][T17870] ? __msan_poison_alloca+0xf0/0x120 [ 860.821023][T17870] ? __sys_recvmmsg+0xbb/0x610 [ 860.825831][T17870] ? __sys_recvmmsg+0xbb/0x610 [ 860.830654][T17870] __sys_recvmmsg+0x5dd/0x610 [ 860.835395][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 860.841505][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 860.847718][T17870] __do_fast_syscall_32+0x2af/0x480 [ 860.852947][T17870] do_fast_syscall_32+0x6b/0xd0 [ 860.857823][T17870] do_SYSENTER_32+0x73/0x90 [ 860.862347][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.868710][T17870] RIP: 0023:0xf7f3e549 [ 860.872795][T17870] Code: Bad RIP value. [ 860.876868][T17870] RSP: 002b:00000000f55380cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 860.885300][T17870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002540 [ 860.893312][T17870] RDX: 0000000000000300 RSI: 0000000000000042 RDI: 0000000000000000 [ 860.901318][T17870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.909362][T17870] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 860.917346][T17870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.925348][T17870] Uninit was stored to memory at: [ 860.930395][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 860.936131][T17870] __msan_chain_origin+0x50/0x90 [ 860.941107][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 860.946240][T17870] get_compat_msghdr+0x108/0x2b0 [ 860.951279][T17870] do_recvmmsg+0xdbb/0x22c0 [ 860.955799][T17870] __sys_recvmmsg+0x5dd/0x610 [ 860.960488][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 860.966576][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 860.972742][T17870] __do_fast_syscall_32+0x2af/0x480 [ 860.977969][T17870] do_fast_syscall_32+0x6b/0xd0 [ 860.982849][T17870] do_SYSENTER_32+0x73/0x90 [ 860.987368][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 860.993688][T17870] [ 860.996035][T17870] Uninit was stored to memory at: [ 861.001077][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.006811][T17870] __msan_chain_origin+0x50/0x90 [ 861.011768][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.017002][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.021955][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.026477][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.031176][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.037293][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.043488][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.048710][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.053582][T17870] do_SYSENTER_32+0x73/0x90 [ 861.058109][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.064439][T17870] [ 861.066773][T17870] Uninit was stored to memory at: [ 861.071821][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.077581][T17870] __msan_chain_origin+0x50/0x90 [ 861.082564][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.087712][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.092813][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.097340][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.102033][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.108123][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.114300][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.119514][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.124379][T17870] do_SYSENTER_32+0x73/0x90 [ 861.128899][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.135218][T17870] [ 861.137867][T17870] Uninit was stored to memory at: [ 861.142911][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.148731][T17870] __msan_chain_origin+0x50/0x90 [ 861.153686][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.158811][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.163766][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.168279][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.172973][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.179068][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.185239][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.190464][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.195335][T17870] do_SYSENTER_32+0x73/0x90 [ 861.199852][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.206178][T17870] [ 861.208508][T17870] Uninit was stored to memory at: [ 861.213565][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.219298][T17870] __msan_chain_origin+0x50/0x90 [ 861.224252][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.229375][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.234322][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.238853][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.243546][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.249630][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.255807][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.261106][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.266494][T17870] do_SYSENTER_32+0x73/0x90 [ 861.271012][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.277350][T17870] [ 861.279677][T17870] Uninit was stored to memory at: [ 861.284717][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.290458][T17870] __msan_chain_origin+0x50/0x90 [ 861.295586][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.300723][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.305683][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.310217][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.314953][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.321044][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.327216][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.332434][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.337402][T17870] do_SYSENTER_32+0x73/0x90 [ 861.341928][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.348265][T17870] [ 861.350611][T17870] Uninit was stored to memory at: [ 861.355658][T17870] kmsan_internal_chain_origin+0xad/0x130 [ 861.361394][T17870] __msan_chain_origin+0x50/0x90 [ 861.366369][T17870] __get_compat_msghdr+0x6db/0x9d0 [ 861.371494][T17870] get_compat_msghdr+0x108/0x2b0 [ 861.376440][T17870] do_recvmmsg+0xdbb/0x22c0 [ 861.380961][T17870] __sys_recvmmsg+0x5dd/0x610 [ 861.385656][T17870] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.391741][T17870] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.397920][T17870] __do_fast_syscall_32+0x2af/0x480 [ 861.403139][T17870] do_fast_syscall_32+0x6b/0xd0 [ 861.408016][T17870] do_SYSENTER_32+0x73/0x90 [ 861.412539][T17870] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.418869][T17870] [ 861.421207][T17870] Local variable ----msg_sys@do_recvmmsg created at: [ 861.427905][T17870] do_recvmmsg+0xbf/0x22c0 [ 861.432351][T17870] do_recvmmsg+0xbf/0x22c0 12:33:24 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) 12:33:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") getsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000937fed)=""/2, &(0x7f0000000040)=0x2) 12:33:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x3ff800) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x4000}], 0x1, 0x3ff800, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r2, 0x0) 12:33:25 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 12:33:26 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x82051, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r1, 0x0) 12:33:26 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 12:33:27 executing program 5: socketpair(0x11, 0x0, 0xffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r3}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0) 12:33:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="8500000061000000540000000000000095000000000000007012bf359db2fb6e098edc0e1641bd014cf379966dbe9054d6c3dd6b6ba84061f16f531168afc06a6998321013bded3a615e80ec2b988fbc9377a8dcc9678ef087053d87b80940b5c14140175a7b4cd7b9cd622c811d35a300"/122], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x22, 0x0, &(0x7f0000000500)="5cdd30000000006633c9bbac080026a9b1c012fd362ea2209d7559b996fab8cd4996", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:33:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "e5ded357"}}]}, 0x140}}, 0x0) 12:33:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00'}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 12:33:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a0001"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000514"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r1, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) 12:33:29 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 866.202682][T17939] not chained 310000 origins [ 866.208314][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 866.217001][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.227072][T17939] Call Trace: [ 866.230414][T17939] dump_stack+0x21c/0x280 [ 866.234790][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 866.240549][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.245783][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 866.251368][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 866.257500][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.262827][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 866.268670][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 866.274766][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.280021][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 866.286563][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 866.292697][T17939] ? _copy_from_user+0x201/0x310 [ 866.297673][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.302908][T17939] __msan_chain_origin+0x50/0x90 [ 866.307907][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.313109][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.318106][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.322691][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.328174][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 866.334132][T17939] ? kmsan_get_metadata+0x116/0x180 [ 866.339372][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 866.345055][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 866.350373][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 866.355194][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 866.360015][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.364747][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.371218][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.377412][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.382666][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.387559][T17939] do_SYSENTER_32+0x73/0x90 [ 866.392190][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.398629][T17939] RIP: 0023:0xf7f10549 [ 866.402718][T17939] Code: Bad RIP value. [ 866.406804][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 866.415237][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 866.423234][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 866.431314][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 866.439313][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 866.447343][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 866.455351][T17939] Uninit was stored to memory at: [ 866.460413][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.466164][T17939] __msan_chain_origin+0x50/0x90 [ 866.471128][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.476281][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.481272][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.485802][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.490526][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.496630][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.502814][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.508044][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.512932][T17939] do_SYSENTER_32+0x73/0x90 [ 866.517478][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.523814][T17939] [ 866.526178][T17939] Uninit was stored to memory at: [ 866.531252][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.537047][T17939] __msan_chain_origin+0x50/0x90 [ 866.542017][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.547193][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.552148][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.556686][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.561382][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.567834][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.574365][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.579620][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.584511][T17939] do_SYSENTER_32+0x73/0x90 [ 866.589032][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.595355][T17939] [ 866.597701][T17939] Uninit was stored to memory at: [ 866.602747][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.608566][T17939] __msan_chain_origin+0x50/0x90 [ 866.613696][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.618830][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.623788][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.628303][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.633003][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.639096][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.645295][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.650547][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.655419][T17939] do_SYSENTER_32+0x73/0x90 [ 866.659936][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.666258][T17939] [ 866.668589][T17939] Uninit was stored to memory at: [ 866.673652][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.679391][T17939] __msan_chain_origin+0x50/0x90 [ 866.684362][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.689504][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.694482][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.699011][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.703706][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.709819][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.716098][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.721326][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.726390][T17939] do_SYSENTER_32+0x73/0x90 [ 866.730919][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.737239][T17939] [ 866.739574][T17939] Uninit was stored to memory at: [ 866.744622][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.750360][T17939] __msan_chain_origin+0x50/0x90 [ 866.755318][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.760449][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.765401][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.769918][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.774618][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.780722][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.786991][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.792386][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.797375][T17939] do_SYSENTER_32+0x73/0x90 [ 866.801919][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.808246][T17939] [ 866.810597][T17939] Uninit was stored to memory at: [ 866.815644][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.821383][T17939] __msan_chain_origin+0x50/0x90 [ 866.826346][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.831476][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.836436][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.840954][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.845658][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.851754][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.857946][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.863167][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.868050][T17939] do_SYSENTER_32+0x73/0x90 [ 866.872583][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.878995][T17939] [ 866.881337][T17939] Uninit was stored to memory at: [ 866.886410][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 866.892158][T17939] __msan_chain_origin+0x50/0x90 [ 866.897134][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 866.902288][T17939] get_compat_msghdr+0x108/0x2b0 [ 866.908137][T17939] do_recvmmsg+0xdbb/0x22c0 [ 866.912751][T17939] __sys_recvmmsg+0x5dd/0x610 [ 866.917464][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.923748][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.930286][T17939] __do_fast_syscall_32+0x2af/0x480 [ 866.935516][T17939] do_fast_syscall_32+0x6b/0xd0 [ 866.940397][T17939] do_SYSENTER_32+0x73/0x90 [ 866.945081][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.951415][T17939] [ 866.953754][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 866.960459][T17939] do_recvmmsg+0xbf/0x22c0 [ 866.964906][T17939] do_recvmmsg+0xbf/0x22c0 [ 867.201439][T17955] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.4'. 12:33:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b9847721a6e7bab8f8247af4b246dac236e9608973942b1791206c0dc98b7e886cc7e957243a6c52f53634f61e2fcde04c24c0587ae98af98d2b8f53ee4bec"}, 0x60) 12:33:30 executing program 2: syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0xff]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) 12:33:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)={0x64, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "950f141cedc1f489ac880dbf1842337222ff3f66e688dd0483de238ef9c1"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c4}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 12:33:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket(0x2b, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x800) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x6}}], {0x14}}, 0xa4}}, 0x0) [ 868.155693][T17967] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 868.219077][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 868.239222][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 868.253002][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 868.268882][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 868.284726][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 868.298820][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 868.314349][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 868.352502][ T28] audit: type=1804 audit(1599568411.478:199): pid=17969 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/159/cgroup.controllers" dev="sda1" ino=16378 res=1 12:33:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2e03}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 868.610726][T17940] not chained 320000 origins [ 868.615404][T17940] CPU: 1 PID: 17940 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 868.624091][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.634172][T17940] Call Trace: [ 868.637502][T17940] dump_stack+0x21c/0x280 [ 868.641869][T17940] kmsan_internal_chain_origin+0x6f/0x130 [ 868.647651][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.652885][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 868.658466][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 868.664952][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.670211][T17940] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 868.676160][T17940] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 868.682257][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.687494][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 868.693100][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 868.699213][T17940] ? _copy_from_user+0x201/0x310 [ 868.704211][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.709450][T17940] __msan_chain_origin+0x50/0x90 [ 868.714423][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 868.719592][T17940] get_compat_msghdr+0x108/0x2b0 [ 868.724584][T17940] do_recvmmsg+0xdbb/0x22c0 [ 868.729135][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.734367][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.739601][T17940] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 868.746674][T17940] ? kmsan_get_metadata+0x116/0x180 [ 868.751916][T17940] ? kmsan_internal_set_origin+0x75/0xb0 [ 868.757582][T17940] ? __msan_poison_alloca+0xf0/0x120 [ 868.762896][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 868.767677][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 868.772474][T17940] __sys_recvmmsg+0x5dd/0x610 [ 868.777203][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.783319][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.789511][T17940] __do_fast_syscall_32+0x2af/0x480 [ 868.794760][T17940] do_fast_syscall_32+0x6b/0xd0 [ 868.799642][T17940] do_SYSENTER_32+0x73/0x90 [ 868.804184][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.810532][T17940] RIP: 0023:0xf7f10549 [ 868.814604][T17940] Code: Bad RIP value. [ 868.818677][T17940] RSP: 002b:00000000f54c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 868.827109][T17940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 868.835102][T17940] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 868.843103][T17940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.851102][T17940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 868.859097][T17940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.867104][T17940] Uninit was stored to memory at: [ 868.872170][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 868.877939][T17940] __msan_chain_origin+0x50/0x90 [ 868.882908][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 868.888055][T17940] get_compat_msghdr+0x108/0x2b0 [ 868.893016][T17940] do_recvmmsg+0xdbb/0x22c0 [ 868.897533][T17940] __sys_recvmmsg+0x5dd/0x610 [ 868.902229][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.908321][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.914495][T17940] __do_fast_syscall_32+0x2af/0x480 [ 868.919713][T17940] do_fast_syscall_32+0x6b/0xd0 [ 868.924577][T17940] do_SYSENTER_32+0x73/0x90 [ 868.929087][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.935411][T17940] [ 868.937740][T17940] Uninit was stored to memory at: [ 868.942786][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 868.948516][T17940] __msan_chain_origin+0x50/0x90 [ 868.953480][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 868.958642][T17940] get_compat_msghdr+0x108/0x2b0 [ 868.963598][T17940] do_recvmmsg+0xdbb/0x22c0 [ 868.968136][T17940] __sys_recvmmsg+0x5dd/0x610 [ 868.972846][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.978935][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.985121][T17940] __do_fast_syscall_32+0x2af/0x480 [ 868.990344][T17940] do_fast_syscall_32+0x6b/0xd0 [ 868.995267][T17940] do_SYSENTER_32+0x73/0x90 [ 868.999813][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.006136][T17940] [ 869.008466][T17940] Uninit was stored to memory at: [ 869.013517][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 869.019355][T17940] __msan_chain_origin+0x50/0x90 [ 869.024790][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 869.030033][T17940] get_compat_msghdr+0x108/0x2b0 [ 869.035158][T17940] do_recvmmsg+0xdbb/0x22c0 [ 869.039682][T17940] __sys_recvmmsg+0x5dd/0x610 [ 869.044755][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.050845][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.057024][T17940] __do_fast_syscall_32+0x2af/0x480 [ 869.062244][T17940] do_fast_syscall_32+0x6b/0xd0 [ 869.067144][T17940] do_SYSENTER_32+0x73/0x90 [ 869.071954][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.078386][T17940] [ 869.080719][T17940] Uninit was stored to memory at: [ 869.085769][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 869.091523][T17940] __msan_chain_origin+0x50/0x90 [ 869.096493][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 869.101624][T17940] get_compat_msghdr+0x108/0x2b0 [ 869.106595][T17940] do_recvmmsg+0xdbb/0x22c0 [ 869.111109][T17940] __sys_recvmmsg+0x5dd/0x610 [ 869.115802][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.121888][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.128061][T17940] __do_fast_syscall_32+0x2af/0x480 [ 869.133282][T17940] do_fast_syscall_32+0x6b/0xd0 [ 869.138155][T17940] do_SYSENTER_32+0x73/0x90 [ 869.142683][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.149024][T17940] [ 869.151369][T17940] Uninit was stored to memory at: [ 869.156429][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 869.162381][T17940] __msan_chain_origin+0x50/0x90 [ 869.167445][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 869.172582][T17940] get_compat_msghdr+0x108/0x2b0 [ 869.178585][T17940] do_recvmmsg+0xdbb/0x22c0 [ 869.183176][T17940] __sys_recvmmsg+0x5dd/0x610 [ 869.187881][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.194409][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.200583][T17940] __do_fast_syscall_32+0x2af/0x480 [ 869.205817][T17940] do_fast_syscall_32+0x6b/0xd0 [ 869.210682][T17940] do_SYSENTER_32+0x73/0x90 [ 869.215212][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.221536][T17940] [ 869.224072][T17940] Uninit was stored to memory at: [ 869.229134][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 869.234877][T17940] __msan_chain_origin+0x50/0x90 [ 869.239864][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 869.245283][T17940] get_compat_msghdr+0x108/0x2b0 [ 869.250248][T17940] do_recvmmsg+0xdbb/0x22c0 [ 869.254860][T17940] __sys_recvmmsg+0x5dd/0x610 [ 869.259556][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.265859][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.272382][T17940] __do_fast_syscall_32+0x2af/0x480 [ 869.277782][T17940] do_fast_syscall_32+0x6b/0xd0 [ 869.282648][T17940] do_SYSENTER_32+0x73/0x90 [ 869.287175][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.293503][T17940] [ 869.295842][T17940] Uninit was stored to memory at: [ 869.300893][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 869.306753][T17940] __msan_chain_origin+0x50/0x90 [ 869.311711][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 869.316839][T17940] get_compat_msghdr+0x108/0x2b0 [ 869.321790][T17940] do_recvmmsg+0xdbb/0x22c0 [ 869.326307][T17940] __sys_recvmmsg+0x5dd/0x610 [ 869.331004][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.337205][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.343473][T17940] __do_fast_syscall_32+0x2af/0x480 [ 869.348693][T17940] do_fast_syscall_32+0x6b/0xd0 [ 869.353567][T17940] do_SYSENTER_32+0x73/0x90 [ 869.358127][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.364456][T17940] [ 869.366804][T17940] Local variable ----msg_sys@do_recvmmsg created at: [ 869.373504][T17940] do_recvmmsg+0xbf/0x22c0 [ 869.377973][T17940] do_recvmmsg+0xbf/0x22c0 [ 869.386383][ C0] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 869.417694][T17967] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 870.292290][ T28] audit: type=1800 audit(1599568413.418:200): pid=17969 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16377 res=0 [ 870.385394][ T28] audit: type=1804 audit(1599568413.448:201): pid=17972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/159/memory.events" dev="sda1" ino=16377 res=1 [ 870.521108][ T28] audit: type=1804 audit(1599568413.638:202): pid=17981 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527617188/syzkaller.ZwqD7n/159/memory.events" dev="sda1" ino=16377 res=1 [ 870.901651][T17939] not chained 330000 origins [ 870.906305][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 870.914984][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.925058][T17939] Call Trace: [ 870.928381][T17939] dump_stack+0x21c/0x280 [ 870.932748][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 870.938505][T17939] ? kmsan_get_metadata+0x116/0x180 [ 870.943737][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 870.949318][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 870.955429][T17939] ? kmsan_get_metadata+0x116/0x180 [ 870.960663][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.966497][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 870.972613][T17939] ? kmsan_get_metadata+0x116/0x180 [ 870.977845][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 870.983426][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 870.989529][T17939] ? _copy_from_user+0x201/0x310 [ 870.994515][T17939] ? kmsan_get_metadata+0x116/0x180 [ 871.000451][T17939] __msan_chain_origin+0x50/0x90 [ 871.005422][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.010584][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.015561][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.020111][T17939] ? kmsan_get_metadata+0x116/0x180 [ 871.025333][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 871.031256][T17939] ? kmsan_get_metadata+0x116/0x180 [ 871.036473][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 871.042130][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 871.047465][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 871.052252][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 871.057048][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.061775][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.067884][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.074067][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.079312][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.084194][T17939] do_SYSENTER_32+0x73/0x90 [ 871.088725][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.095080][T17939] RIP: 0023:0xf7f10549 [ 871.099146][T17939] Code: Bad RIP value. [ 871.103219][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 871.111646][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 871.119725][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 871.127735][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.135732][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 871.143723][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.151729][T17939] Uninit was stored to memory at: [ 871.156787][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.162539][T17939] __msan_chain_origin+0x50/0x90 [ 871.167504][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.172655][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.177633][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.182180][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.186888][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.192996][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.199176][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.204400][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.209279][T17939] do_SYSENTER_32+0x73/0x90 [ 871.213833][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.220168][T17939] [ 871.222510][T17939] Uninit was stored to memory at: [ 871.227835][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.233676][T17939] __msan_chain_origin+0x50/0x90 [ 871.238651][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.243812][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.248776][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.253326][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.258050][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.264152][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.271915][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.277178][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.282052][T17939] do_SYSENTER_32+0x73/0x90 [ 871.286580][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.292908][T17939] [ 871.295248][T17939] Uninit was stored to memory at: [ 871.300315][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.306064][T17939] __msan_chain_origin+0x50/0x90 [ 871.311044][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.316181][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.321146][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.325751][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.330669][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.336861][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.343850][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.349087][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.354666][T17939] do_SYSENTER_32+0x73/0x90 [ 871.359201][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.365535][T17939] [ 871.367925][T17939] Uninit was stored to memory at: [ 871.372972][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.378751][T17939] __msan_chain_origin+0x50/0x90 [ 871.384081][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.389247][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.394231][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.398759][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.403489][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.409632][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.415818][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.421046][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.426363][T17939] do_SYSENTER_32+0x73/0x90 [ 871.430898][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.437227][T17939] [ 871.439563][T17939] Uninit was stored to memory at: [ 871.444618][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.450360][T17939] __msan_chain_origin+0x50/0x90 [ 871.455334][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.460466][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.465433][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.469956][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.474666][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.480762][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.486947][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.492164][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.497053][T17939] do_SYSENTER_32+0x73/0x90 [ 871.501587][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.507920][T17939] [ 871.510253][T17939] Uninit was stored to memory at: [ 871.515418][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.521348][T17939] __msan_chain_origin+0x50/0x90 [ 871.526315][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.531460][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.536455][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.542071][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.546799][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.552896][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.559080][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.564314][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.569202][T17939] do_SYSENTER_32+0x73/0x90 [ 871.573739][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.580077][T17939] [ 871.582405][T17939] Uninit was stored to memory at: [ 871.587476][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 871.593217][T17939] __msan_chain_origin+0x50/0x90 [ 871.598180][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 871.603326][T17939] get_compat_msghdr+0x108/0x2b0 [ 871.608306][T17939] do_recvmmsg+0xdbb/0x22c0 [ 871.612845][T17939] __sys_recvmmsg+0x5dd/0x610 [ 871.617547][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 871.623643][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 871.629831][T17939] __do_fast_syscall_32+0x2af/0x480 [ 871.635077][T17939] do_fast_syscall_32+0x6b/0xd0 [ 871.639953][T17939] do_SYSENTER_32+0x73/0x90 [ 871.644479][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 871.650811][T17939] [ 871.653165][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 871.659865][T17939] do_recvmmsg+0xbf/0x22c0 [ 871.664298][T17939] do_recvmmsg+0xbf/0x22c0 [ 872.255995][T17940] not chained 340000 origins [ 872.260725][T17940] CPU: 0 PID: 17940 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 872.269575][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.280420][T17940] Call Trace: [ 872.283740][T17940] dump_stack+0x21c/0x280 [ 872.288112][T17940] kmsan_internal_chain_origin+0x6f/0x130 [ 872.293890][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.299114][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 872.304820][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 872.311097][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.316355][T17940] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 872.322234][T17940] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 872.328345][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.333578][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 872.339160][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 872.346568][T17940] ? _copy_from_user+0x201/0x310 [ 872.351548][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.356777][T17940] __msan_chain_origin+0x50/0x90 [ 872.361748][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.366918][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.371947][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.376493][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.381797][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.387029][T17940] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 872.393073][T17940] ? kmsan_get_metadata+0x116/0x180 [ 872.398325][T17940] ? kmsan_internal_set_origin+0x75/0xb0 [ 872.403986][T17940] ? __msan_poison_alloca+0xf0/0x120 [ 872.410252][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 872.415028][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 872.419934][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.425005][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.431111][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.438172][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.443405][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.448279][T17940] do_SYSENTER_32+0x73/0x90 [ 872.452817][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.459164][T17940] RIP: 0023:0xf7f10549 [ 872.463232][T17940] Code: Bad RIP value. [ 872.467331][T17940] RSP: 002b:00000000f54c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 872.475757][T17940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 872.483749][T17940] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 872.491738][T17940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 872.499723][T17940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 872.507715][T17940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.515714][T17940] Uninit was stored to memory at: [ 872.520790][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.526530][T17940] __msan_chain_origin+0x50/0x90 [ 872.531489][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.536622][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.541610][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.546131][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.550856][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.556970][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.563172][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.568398][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.573271][T17940] do_SYSENTER_32+0x73/0x90 [ 872.577881][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.584209][T17940] [ 872.586887][T17940] Uninit was stored to memory at: [ 872.591934][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.597673][T17940] __msan_chain_origin+0x50/0x90 [ 872.602634][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.607767][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.612849][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.622431][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.627567][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.633678][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.639853][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.645075][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.649943][T17940] do_SYSENTER_32+0x73/0x90 [ 872.654494][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.661520][T17940] [ 872.663868][T17940] Uninit was stored to memory at: [ 872.668915][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.674653][T17940] __msan_chain_origin+0x50/0x90 [ 872.679615][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.684749][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.689715][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.694236][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.698966][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.705056][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.711265][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.716496][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.721370][T17940] do_SYSENTER_32+0x73/0x90 [ 872.725892][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.732236][T17940] [ 872.734579][T17940] Uninit was stored to memory at: [ 872.739627][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.745382][T17940] __msan_chain_origin+0x50/0x90 [ 872.750347][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.755490][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.760451][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.764982][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.769683][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.775769][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.781942][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.787161][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.792038][T17940] do_SYSENTER_32+0x73/0x90 [ 872.796563][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.802914][T17940] [ 872.805340][T17940] Uninit was stored to memory at: [ 872.810387][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.816296][T17940] __msan_chain_origin+0x50/0x90 [ 872.821288][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.827610][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.832571][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.837119][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.841845][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.847940][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.854120][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.859336][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.864280][T17940] do_SYSENTER_32+0x73/0x90 [ 872.868855][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.875190][T17940] [ 872.877543][T17940] Uninit was stored to memory at: [ 872.882596][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.888333][T17940] __msan_chain_origin+0x50/0x90 [ 872.893289][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.898418][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.903566][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.908442][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.913171][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.919879][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.926050][T17940] __do_fast_syscall_32+0x2af/0x480 [ 872.931787][T17940] do_fast_syscall_32+0x6b/0xd0 [ 872.936652][T17940] do_SYSENTER_32+0x73/0x90 [ 872.941859][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.949090][T17940] [ 872.951421][T17940] Uninit was stored to memory at: [ 872.956665][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 872.964696][T17940] __msan_chain_origin+0x50/0x90 [ 872.970267][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 872.975521][T17940] get_compat_msghdr+0x108/0x2b0 [ 872.980477][T17940] do_recvmmsg+0xdbb/0x22c0 [ 872.985001][T17940] __sys_recvmmsg+0x5dd/0x610 [ 872.991122][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.997416][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 873.004907][T17940] __do_fast_syscall_32+0x2af/0x480 [ 873.010482][T17940] do_fast_syscall_32+0x6b/0xd0 [ 873.015356][T17940] do_SYSENTER_32+0x73/0x90 [ 873.020145][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 873.026834][T17940] [ 873.029544][T17940] Local variable ----msg_sys@do_recvmmsg created at: [ 873.037068][T17940] do_recvmmsg+0xbf/0x22c0 [ 873.041497][T17940] do_recvmmsg+0xbf/0x22c0 [ 873.564675][T17988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 873.588332][T17988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 873.596466][T17988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 873.724241][T17989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 873.743762][T17989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 873.751917][T17989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 873.856754][T17990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 873.875863][T17990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 873.884965][T17990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 873.991839][T17991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 874.011387][T17991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.019557][T17991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.020789][T17939] not chained 350000 origins [ 874.031583][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 874.040464][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.050651][T17939] Call Trace: [ 874.054000][T17939] dump_stack+0x21c/0x280 [ 874.058387][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 874.064247][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.069490][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 874.075085][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 874.081195][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.086445][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 874.092286][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 874.098472][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.103702][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 874.109284][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 874.115396][T17939] ? _copy_from_user+0x201/0x310 [ 874.120369][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.125608][T17939] __msan_chain_origin+0x50/0x90 [ 874.130586][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.135782][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.140794][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.145355][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.150600][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 874.156656][T17939] ? kmsan_get_metadata+0x116/0x180 [ 874.161906][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 874.167600][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 874.172918][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 874.177712][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 874.182534][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.187276][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.193402][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.199616][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.204903][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.209887][T17939] do_SYSENTER_32+0x73/0x90 [ 874.215122][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.221817][T17939] RIP: 0023:0xf7f10549 [ 874.226157][T17939] Code: Bad RIP value. [ 874.230239][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 874.238702][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 874.246698][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 874.254700][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.262707][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 874.270707][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.278885][T17939] Uninit was stored to memory at: [ 874.283997][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.289890][T17939] __msan_chain_origin+0x50/0x90 [ 874.294850][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.299979][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.304938][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.309451][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.314139][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.320222][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.326400][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.331617][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.336483][T17939] do_SYSENTER_32+0x73/0x90 [ 874.341023][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.347355][T17939] [ 874.349686][T17939] Uninit was stored to memory at: [ 874.354726][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.360458][T17939] __msan_chain_origin+0x50/0x90 [ 874.365671][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.370796][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.375753][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.380281][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.384978][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.391091][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.397258][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.402471][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.407337][T17939] do_SYSENTER_32+0x73/0x90 [ 874.411871][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.418192][T17939] [ 874.420517][T17939] Uninit was stored to memory at: [ 874.425561][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.431319][T17939] __msan_chain_origin+0x50/0x90 [ 874.436305][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.441533][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.446499][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.451029][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.455742][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.461822][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.467998][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.473216][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.478102][T17939] do_SYSENTER_32+0x73/0x90 [ 874.482624][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.488967][T17939] [ 874.491301][T17939] Uninit was stored to memory at: [ 874.496356][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.502097][T17939] __msan_chain_origin+0x50/0x90 [ 874.507059][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.512196][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.517206][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.521749][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.526577][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.532667][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.538843][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.544060][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.548949][T17939] do_SYSENTER_32+0x73/0x90 [ 874.553561][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.559884][T17939] [ 874.562220][T17939] Uninit was stored to memory at: [ 874.567270][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.573006][T17939] __msan_chain_origin+0x50/0x90 [ 874.577975][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.583111][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.588069][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.592593][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.597289][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.603393][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.609577][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.614804][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.619673][T17939] do_SYSENTER_32+0x73/0x90 [ 874.624202][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.630529][T17939] [ 874.632885][T17939] Uninit was stored to memory at: [ 874.637936][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.643680][T17939] __msan_chain_origin+0x50/0x90 [ 874.648643][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.653780][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.658752][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.663283][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.667983][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.674075][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.680258][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.685488][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.690357][T17939] do_SYSENTER_32+0x73/0x90 [ 874.694882][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.701218][T17939] [ 874.703553][T17939] Uninit was stored to memory at: [ 874.708602][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 874.714333][T17939] __msan_chain_origin+0x50/0x90 [ 874.719302][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 874.724427][T17939] get_compat_msghdr+0x108/0x2b0 [ 874.729399][T17939] do_recvmmsg+0xdbb/0x22c0 [ 874.733916][T17939] __sys_recvmmsg+0x5dd/0x610 [ 874.738643][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.744756][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.750945][T17939] __do_fast_syscall_32+0x2af/0x480 [ 874.756168][T17939] do_fast_syscall_32+0x6b/0xd0 [ 874.761066][T17939] do_SYSENTER_32+0x73/0x90 [ 874.765618][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.771952][T17939] [ 874.774289][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 874.781001][T17939] do_recvmmsg+0xbf/0x22c0 [ 874.785432][T17939] do_recvmmsg+0xbf/0x22c0 [ 875.074148][T17940] not chained 360000 origins [ 875.078803][T17940] CPU: 1 PID: 17940 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 875.087479][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.097549][T17940] Call Trace: [ 875.100872][T17940] dump_stack+0x21c/0x280 [ 875.105237][T17940] kmsan_internal_chain_origin+0x6f/0x130 [ 875.110984][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.116231][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 875.121829][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 875.127956][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.133180][T17940] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 875.139016][T17940] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 875.145196][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.150428][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 875.156098][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 875.162209][T17940] ? _copy_from_user+0x201/0x310 [ 875.167185][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.172412][T17940] __msan_chain_origin+0x50/0x90 [ 875.177482][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.182666][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.187657][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.192215][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.197477][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.202718][T17940] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 875.208655][T17940] ? kmsan_get_metadata+0x116/0x180 [ 875.213895][T17940] ? kmsan_internal_set_origin+0x75/0xb0 [ 875.219563][T17940] ? __msan_poison_alloca+0xf0/0x120 [ 875.224876][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 875.229662][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 875.234460][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.239207][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.245325][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.251509][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.256751][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.262090][T17940] do_SYSENTER_32+0x73/0x90 [ 875.266626][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.272970][T17940] RIP: 0023:0xf7f10549 [ 875.277066][T17940] Code: Bad RIP value. [ 875.281142][T17940] RSP: 002b:00000000f54c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 875.289577][T17940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 875.297569][T17940] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 875.305558][T17940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 875.313548][T17940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 875.321539][T17940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 875.329559][T17940] Uninit was stored to memory at: [ 875.334620][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.340362][T17940] __msan_chain_origin+0x50/0x90 [ 875.345317][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.350447][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.355406][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.359919][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.364611][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.370691][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.376865][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.382078][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.386962][T17940] do_SYSENTER_32+0x73/0x90 [ 875.391484][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.397809][T17940] [ 875.400158][T17940] Uninit was stored to memory at: [ 875.405206][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.410951][T17940] __msan_chain_origin+0x50/0x90 [ 875.415919][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.421138][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.426092][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.430610][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.435305][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.441417][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.447617][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.453037][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.457958][T17940] do_SYSENTER_32+0x73/0x90 [ 875.462484][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.469347][T17940] [ 875.471678][T17940] Uninit was stored to memory at: [ 875.476728][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.482467][T17940] __msan_chain_origin+0x50/0x90 [ 875.487423][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.492563][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.497518][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.502045][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.506767][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.512859][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.519052][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.524282][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.529247][T17940] do_SYSENTER_32+0x73/0x90 [ 875.533776][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.540122][T17940] [ 875.542456][T17940] Uninit was stored to memory at: [ 875.547515][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.553259][T17940] __msan_chain_origin+0x50/0x90 [ 875.558223][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.563358][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.568321][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.572846][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.577568][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.583665][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.589847][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.595075][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.599945][T17940] do_SYSENTER_32+0x73/0x90 [ 875.604464][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.611745][T17940] [ 875.614078][T17940] Uninit was stored to memory at: [ 875.619135][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.624875][T17940] __msan_chain_origin+0x50/0x90 [ 875.629835][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.635058][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.640026][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.644539][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.649232][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.655330][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.661511][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.666748][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.671624][T17940] do_SYSENTER_32+0x73/0x90 [ 875.676157][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.682497][T17940] [ 875.684836][T17940] Uninit was stored to memory at: [ 875.689892][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.695637][T17940] __msan_chain_origin+0x50/0x90 [ 875.700601][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.705734][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.710693][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.715217][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.719911][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.726006][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.732185][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.737401][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.742284][T17940] do_SYSENTER_32+0x73/0x90 [ 875.746822][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.753147][T17940] [ 875.755477][T17940] Uninit was stored to memory at: [ 875.760529][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 875.766284][T17940] __msan_chain_origin+0x50/0x90 [ 875.771261][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 875.776395][T17940] get_compat_msghdr+0x108/0x2b0 [ 875.781366][T17940] do_recvmmsg+0xdbb/0x22c0 [ 875.785882][T17940] __sys_recvmmsg+0x5dd/0x610 [ 875.791191][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.797280][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.803467][T17940] __do_fast_syscall_32+0x2af/0x480 [ 875.808688][T17940] do_fast_syscall_32+0x6b/0xd0 [ 875.813840][T17940] do_SYSENTER_32+0x73/0x90 [ 875.818373][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.824703][T17940] [ 875.827043][T17940] Local variable ----msg_sys@do_recvmmsg created at: [ 875.833735][T17940] do_recvmmsg+0xbf/0x22c0 [ 875.838167][T17940] do_recvmmsg+0xbf/0x22c0 [ 876.331866][T17939] not chained 370000 origins [ 876.336543][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 876.345221][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.355287][T17939] Call Trace: [ 876.358604][T17939] dump_stack+0x21c/0x280 [ 876.362986][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 876.368740][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.373968][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 876.379544][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 876.385640][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.390866][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 876.396704][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 876.402815][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.408049][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 876.413644][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 876.419750][T17939] ? _copy_from_user+0x201/0x310 [ 876.424714][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.429934][T17939] __msan_chain_origin+0x50/0x90 [ 876.434899][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.440051][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.445021][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.449573][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.454807][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 876.460739][T17939] ? kmsan_get_metadata+0x116/0x180 [ 876.465968][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 876.471630][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 876.476945][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 876.481730][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 876.486539][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.491266][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.497373][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.503567][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.508813][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.513702][T17939] do_SYSENTER_32+0x73/0x90 [ 876.518247][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.524617][T17939] RIP: 0023:0xf7f10549 [ 876.528684][T17939] Code: Bad RIP value. [ 876.532770][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 876.541209][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 876.549202][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 876.557189][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 876.565193][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 876.573190][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 876.581201][T17939] Uninit was stored to memory at: [ 876.586279][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.592017][T17939] __msan_chain_origin+0x50/0x90 [ 876.596971][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.602106][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.607063][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.611618][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.616758][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.622853][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.629053][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.634272][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.639149][T17939] do_SYSENTER_32+0x73/0x90 [ 876.643762][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.650106][T17939] [ 876.652445][T17939] Uninit was stored to memory at: [ 876.657671][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.663443][T17939] __msan_chain_origin+0x50/0x90 [ 876.668410][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.673546][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.678511][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.683045][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.687755][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.695004][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.701232][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.706985][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.711952][T17939] do_SYSENTER_32+0x73/0x90 [ 876.716482][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.722831][T17939] [ 876.725170][T17939] Uninit was stored to memory at: [ 876.730227][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.735984][T17939] __msan_chain_origin+0x50/0x90 [ 876.740950][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.746100][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.751165][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.755692][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.760412][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.766608][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.772815][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.778048][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.783120][T17939] do_SYSENTER_32+0x73/0x90 [ 876.787659][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.793994][T17939] [ 876.796337][T17939] Uninit was stored to memory at: [ 876.801413][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.807160][T17939] __msan_chain_origin+0x50/0x90 [ 876.812653][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.817804][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.822772][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.827413][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.832121][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.838220][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.844430][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.849661][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.854537][T17939] do_SYSENTER_32+0x73/0x90 [ 876.859063][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.865386][T17939] [ 876.867717][T17939] Uninit was stored to memory at: [ 876.872766][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.878509][T17939] __msan_chain_origin+0x50/0x90 [ 876.883472][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.888610][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.893568][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.898107][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.902802][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.908903][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.915099][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.920315][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.925186][T17939] do_SYSENTER_32+0x73/0x90 [ 876.929721][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.936045][T17939] [ 876.938376][T17939] Uninit was stored to memory at: [ 876.943422][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 876.949161][T17939] __msan_chain_origin+0x50/0x90 [ 876.954125][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 876.959260][T17939] get_compat_msghdr+0x108/0x2b0 [ 876.964214][T17939] do_recvmmsg+0xdbb/0x22c0 [ 876.968733][T17939] __sys_recvmmsg+0x5dd/0x610 [ 876.973445][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.979537][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.985710][T17939] __do_fast_syscall_32+0x2af/0x480 [ 876.990933][T17939] do_fast_syscall_32+0x6b/0xd0 [ 876.995804][T17939] do_SYSENTER_32+0x73/0x90 [ 877.000328][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.006653][T17939] [ 877.008988][T17939] Uninit was stored to memory at: [ 877.014032][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 877.019773][T17939] __msan_chain_origin+0x50/0x90 [ 877.024989][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.030148][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.035123][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.039657][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.044366][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.050995][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.057185][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.062902][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.067781][T17939] do_SYSENTER_32+0x73/0x90 [ 877.072321][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.078655][T17939] [ 877.080998][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 877.087699][T17939] do_recvmmsg+0xbf/0x22c0 [ 877.092145][T17939] do_recvmmsg+0xbf/0x22c0 [ 877.455937][T17939] not chained 380000 origins [ 877.460591][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 877.469891][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.479962][T17939] Call Trace: [ 877.483286][T17939] dump_stack+0x21c/0x280 [ 877.487658][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 877.493412][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.498641][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 877.504222][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 877.510323][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.515556][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 877.521396][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 877.528626][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.533859][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 877.539449][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 877.545555][T17939] ? _copy_from_user+0x201/0x310 [ 877.550538][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.555798][T17939] __msan_chain_origin+0x50/0x90 [ 877.560798][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.565996][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.570982][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.575556][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.581608][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 877.587566][T17939] ? kmsan_get_metadata+0x116/0x180 [ 877.596018][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 877.601706][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 877.607027][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 877.612520][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 877.617319][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.622072][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.628198][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.634656][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.639895][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.644782][T17939] do_SYSENTER_32+0x73/0x90 [ 877.649319][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.655667][T17939] RIP: 0023:0xf7f10549 [ 877.659739][T17939] Code: Bad RIP value. [ 877.663818][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 877.672256][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 877.680247][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 877.688245][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.696317][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 877.704308][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.712315][T17939] Uninit was stored to memory at: [ 877.717378][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 877.723132][T17939] __msan_chain_origin+0x50/0x90 [ 877.728098][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.733241][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.738203][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.742728][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.747461][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.753557][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.759738][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.764962][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.769839][T17939] do_SYSENTER_32+0x73/0x90 [ 877.774364][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.780699][T17939] [ 877.783034][T17939] Uninit was stored to memory at: [ 877.788098][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 877.793857][T17939] __msan_chain_origin+0x50/0x90 [ 877.799538][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.804694][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.809652][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.814173][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.818876][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.824983][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.831197][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.836424][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.841307][T17939] do_SYSENTER_32+0x73/0x90 [ 877.845931][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.852298][T17939] [ 877.854633][T17939] Uninit was stored to memory at: [ 877.859683][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 877.865430][T17939] __msan_chain_origin+0x50/0x90 [ 877.870403][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.875563][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.880520][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.885042][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.889743][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.895924][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.902105][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.907335][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.912240][T17939] do_SYSENTER_32+0x73/0x90 [ 877.916852][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.923181][T17939] [ 877.925514][T17939] Uninit was stored to memory at: [ 877.930564][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 877.936306][T17939] __msan_chain_origin+0x50/0x90 [ 877.941265][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 877.946421][T17939] get_compat_msghdr+0x108/0x2b0 [ 877.951387][T17939] do_recvmmsg+0xdbb/0x22c0 [ 877.955912][T17939] __sys_recvmmsg+0x5dd/0x610 [ 877.960611][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 877.967152][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 877.973350][T17939] __do_fast_syscall_32+0x2af/0x480 [ 877.978579][T17939] do_fast_syscall_32+0x6b/0xd0 [ 877.983472][T17939] do_SYSENTER_32+0x73/0x90 [ 877.988016][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.994345][T17939] [ 877.996691][T17939] Uninit was stored to memory at: [ 878.001742][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 878.007484][T17939] __msan_chain_origin+0x50/0x90 [ 878.012447][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 878.017579][T17939] get_compat_msghdr+0x108/0x2b0 [ 878.022567][T17939] do_recvmmsg+0xdbb/0x22c0 [ 878.027088][T17939] __sys_recvmmsg+0x5dd/0x610 [ 878.031790][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.037887][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.044092][T17939] __do_fast_syscall_32+0x2af/0x480 [ 878.049320][T17939] do_fast_syscall_32+0x6b/0xd0 [ 878.054294][T17939] do_SYSENTER_32+0x73/0x90 [ 878.058829][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.065161][T17939] [ 878.067496][T17939] Uninit was stored to memory at: [ 878.072542][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 878.078456][T17939] __msan_chain_origin+0x50/0x90 [ 878.083436][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 878.088571][T17939] get_compat_msghdr+0x108/0x2b0 [ 878.093528][T17939] do_recvmmsg+0xdbb/0x22c0 [ 878.098048][T17939] __sys_recvmmsg+0x5dd/0x610 [ 878.102756][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.108852][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.115033][T17939] __do_fast_syscall_32+0x2af/0x480 [ 878.120261][T17939] do_fast_syscall_32+0x6b/0xd0 [ 878.125134][T17939] do_SYSENTER_32+0x73/0x90 [ 878.129657][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.135986][T17939] [ 878.138317][T17939] Uninit was stored to memory at: [ 878.143391][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 878.149148][T17939] __msan_chain_origin+0x50/0x90 [ 878.154113][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 878.159251][T17939] get_compat_msghdr+0x108/0x2b0 [ 878.164213][T17939] do_recvmmsg+0xdbb/0x22c0 [ 878.168739][T17939] __sys_recvmmsg+0x5dd/0x610 [ 878.173442][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.179537][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.185721][T17939] __do_fast_syscall_32+0x2af/0x480 [ 878.190947][T17939] do_fast_syscall_32+0x6b/0xd0 [ 878.195826][T17939] do_SYSENTER_32+0x73/0x90 [ 878.200356][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.206696][T17939] [ 878.209040][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 878.215737][T17939] do_recvmmsg+0xbf/0x22c0 [ 878.220361][T17939] do_recvmmsg+0xbf/0x22c0 [ 878.319369][T14843] tipc: TX() has been purged, node left! [ 878.326985][T14843] tipc: TX() has been purged, node left! [ 878.389621][T17940] not chained 390000 origins [ 878.394274][T17940] CPU: 0 PID: 17940 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 878.402956][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.413033][T17940] Call Trace: [ 878.416391][T17940] dump_stack+0x21c/0x280 [ 878.421111][T17940] kmsan_internal_chain_origin+0x6f/0x130 [ 878.426870][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.432132][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 878.437719][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 878.443826][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.449064][T17940] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 878.454906][T17940] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 878.461011][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.466277][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 878.471896][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 878.478186][T17940] ? _copy_from_user+0x201/0x310 [ 878.483162][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.488394][T17940] __msan_chain_origin+0x50/0x90 [ 878.493390][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.498566][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.503552][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.508114][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.513373][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.518631][T17940] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 878.524556][T17940] ? kmsan_get_metadata+0x116/0x180 [ 878.529792][T17940] ? kmsan_internal_set_origin+0x75/0xb0 [ 878.535486][T17940] ? __msan_poison_alloca+0xf0/0x120 [ 878.540820][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 878.545615][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 878.550415][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.555150][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.561277][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.567476][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.572730][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.577610][T17940] do_SYSENTER_32+0x73/0x90 [ 878.582150][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.588517][T17940] RIP: 0023:0xf7f10549 [ 878.592594][T17940] Code: Bad RIP value. [ 878.596672][T17940] RSP: 002b:00000000f54c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 878.605130][T17940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 878.613209][T17940] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 878.621203][T17940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.629202][T17940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 878.637198][T17940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.645233][T17940] Uninit was stored to memory at: [ 878.650310][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 878.656052][T17940] __msan_chain_origin+0x50/0x90 [ 878.661018][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.666169][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.671127][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.675660][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.680366][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.686469][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.692741][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.697964][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.702878][T17940] do_SYSENTER_32+0x73/0x90 [ 878.707406][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.713736][T17940] [ 878.716087][T17940] Uninit was stored to memory at: [ 878.721154][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 878.726907][T17940] __msan_chain_origin+0x50/0x90 [ 878.731881][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.737023][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.741993][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.746541][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.751260][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.757376][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.763560][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.768791][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.774052][T17940] do_SYSENTER_32+0x73/0x90 [ 878.778604][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.784937][T17940] [ 878.787298][T17940] Uninit was stored to memory at: [ 878.792364][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 878.798114][T17940] __msan_chain_origin+0x50/0x90 [ 878.803098][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.808252][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.813211][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.817752][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.822477][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.828594][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.834778][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.840017][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.844911][T17940] do_SYSENTER_32+0x73/0x90 [ 878.849459][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.855788][T17940] [ 878.858126][T17940] Uninit was stored to memory at: [ 878.863178][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 878.868918][T17940] __msan_chain_origin+0x50/0x90 [ 878.873887][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.879026][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.884004][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.888543][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.893246][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.899346][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.905529][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.910772][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.915651][T17940] do_SYSENTER_32+0x73/0x90 [ 878.920183][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.926514][T17940] [ 878.928852][T17940] Uninit was stored to memory at: [ 878.933906][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 878.939658][T17940] __msan_chain_origin+0x50/0x90 [ 878.944623][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 878.949764][T17940] get_compat_msghdr+0x108/0x2b0 [ 878.954732][T17940] do_recvmmsg+0xdbb/0x22c0 [ 878.959266][T17940] __sys_recvmmsg+0x5dd/0x610 [ 878.963980][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.970105][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.976290][T17940] __do_fast_syscall_32+0x2af/0x480 [ 878.981516][T17940] do_fast_syscall_32+0x6b/0xd0 [ 878.986406][T17940] do_SYSENTER_32+0x73/0x90 [ 878.990947][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.997300][T17940] [ 878.999656][T17940] Uninit was stored to memory at: [ 879.004725][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 879.010470][T17940] __msan_chain_origin+0x50/0x90 [ 879.015452][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 879.020602][T17940] get_compat_msghdr+0x108/0x2b0 [ 879.025563][T17940] do_recvmmsg+0xdbb/0x22c0 [ 879.030110][T17940] __sys_recvmmsg+0x5dd/0x610 [ 879.034841][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.040960][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.047144][T17940] __do_fast_syscall_32+0x2af/0x480 [ 879.052367][T17940] do_fast_syscall_32+0x6b/0xd0 [ 879.057240][T17940] do_SYSENTER_32+0x73/0x90 [ 879.061770][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.068125][T17940] [ 879.070464][T17940] Uninit was stored to memory at: [ 879.075515][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 879.081265][T17940] __msan_chain_origin+0x50/0x90 [ 879.086242][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 879.091382][T17940] get_compat_msghdr+0x108/0x2b0 [ 879.096345][T17940] do_recvmmsg+0xdbb/0x22c0 [ 879.100871][T17940] __sys_recvmmsg+0x5dd/0x610 [ 879.105575][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.111696][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.117874][T17940] __do_fast_syscall_32+0x2af/0x480 [ 879.123112][T17940] do_fast_syscall_32+0x6b/0xd0 [ 879.127996][T17940] do_SYSENTER_32+0x73/0x90 [ 879.132525][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.138851][T17940] [ 879.141188][T17940] Local variable ----msg_sys@do_recvmmsg created at: [ 879.147878][T17940] do_recvmmsg+0xbf/0x22c0 [ 879.152317][T17940] do_recvmmsg+0xbf/0x22c0 [ 879.363515][T17939] not chained 400000 origins [ 879.368218][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 879.377507][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.387575][T17939] Call Trace: [ 879.390908][T17939] dump_stack+0x21c/0x280 [ 879.395283][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 879.401040][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.406274][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 879.411859][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 879.418001][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.423235][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 879.429078][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 879.435176][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.440403][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 879.445987][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 879.452092][T17939] ? _copy_from_user+0x201/0x310 [ 879.457067][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.462296][T17939] __msan_chain_origin+0x50/0x90 [ 879.467288][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.472453][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.477435][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.482006][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.487240][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 879.493164][T17939] ? kmsan_get_metadata+0x116/0x180 [ 879.498389][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 879.504416][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 879.509734][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 879.514520][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 879.519330][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.524064][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.530376][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.536564][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.541807][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.546690][T17939] do_SYSENTER_32+0x73/0x90 [ 879.551226][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.557579][T17939] RIP: 0023:0xf7f10549 [ 879.561647][T17939] Code: Bad RIP value. [ 879.565717][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 879.575104][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 879.583112][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 879.591103][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 879.599113][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 879.607105][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 879.615111][T17939] Uninit was stored to memory at: [ 879.620162][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.625901][T17939] __msan_chain_origin+0x50/0x90 [ 879.630859][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.635992][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.640949][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.645482][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.650186][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.656280][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.662464][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.667713][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.672591][T17939] do_SYSENTER_32+0x73/0x90 [ 879.677124][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.683481][T17939] [ 879.685820][T17939] Uninit was stored to memory at: [ 879.690872][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.697576][T17939] __msan_chain_origin+0x50/0x90 [ 879.702546][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.707701][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.712668][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.717199][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.721919][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.728136][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.734323][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.739576][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.744471][T17939] do_SYSENTER_32+0x73/0x90 [ 879.749000][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.755327][T17939] [ 879.757664][T17939] Uninit was stored to memory at: [ 879.762713][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.768457][T17939] __msan_chain_origin+0x50/0x90 [ 879.773414][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.778551][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.783510][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.788036][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.792743][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.798834][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.805023][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.810244][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.815139][T17939] do_SYSENTER_32+0x73/0x90 [ 879.819664][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.826163][T17939] [ 879.828518][T17939] Uninit was stored to memory at: [ 879.833587][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.839324][T17939] __msan_chain_origin+0x50/0x90 [ 879.844301][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.849449][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.854404][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.858937][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.863635][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.869724][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.875906][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.881224][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.886096][T17939] do_SYSENTER_32+0x73/0x90 [ 879.890616][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.896960][T17939] [ 879.899314][T17939] Uninit was stored to memory at: [ 879.904371][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.910144][T17939] __msan_chain_origin+0x50/0x90 [ 879.915112][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.920324][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.925278][T17939] do_recvmmsg+0xdbb/0x22c0 [ 879.929792][T17939] __sys_recvmmsg+0x5dd/0x610 [ 879.934496][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.940581][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.946757][T17939] __do_fast_syscall_32+0x2af/0x480 [ 879.951991][T17939] do_fast_syscall_32+0x6b/0xd0 [ 879.956880][T17939] do_SYSENTER_32+0x73/0x90 [ 879.961402][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.967729][T17939] [ 879.970065][T17939] Uninit was stored to memory at: [ 879.975109][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 879.980843][T17939] __msan_chain_origin+0x50/0x90 [ 879.985800][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 879.990930][T17939] get_compat_msghdr+0x108/0x2b0 [ 879.995885][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.000399][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.005094][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.011187][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.017357][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.022583][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.027452][T17939] do_SYSENTER_32+0x73/0x90 [ 880.031970][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.038293][T17939] [ 880.040625][T17939] Uninit was stored to memory at: [ 880.045670][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.051415][T17939] __msan_chain_origin+0x50/0x90 [ 880.056386][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.061523][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.066483][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.071001][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.075695][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.081780][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.087965][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.093183][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.098078][T17939] do_SYSENTER_32+0x73/0x90 [ 880.102615][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.108940][T17939] [ 880.111274][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 880.117965][T17939] do_recvmmsg+0xbf/0x22c0 [ 880.122411][T17939] do_recvmmsg+0xbf/0x22c0 [ 880.326989][T17939] not chained 410000 origins [ 880.331637][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 880.340317][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.350384][T17939] Call Trace: [ 880.353719][T17939] dump_stack+0x21c/0x280 [ 880.358088][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 880.363838][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.369066][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 880.374635][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 880.380991][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.386213][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 880.392653][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 880.398740][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.403984][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 880.409558][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 880.416438][T17939] ? _copy_from_user+0x201/0x310 [ 880.421404][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.426630][T17939] __msan_chain_origin+0x50/0x90 [ 880.431595][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.436756][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.441730][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.446287][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.451532][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 880.457453][T17939] ? kmsan_get_metadata+0x116/0x180 [ 880.462695][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 880.468354][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 880.473665][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 880.478466][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 880.483254][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.487978][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.494082][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.500263][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.505519][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.510397][T17939] do_SYSENTER_32+0x73/0x90 [ 880.514969][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.521311][T17939] RIP: 0023:0xf7f10549 [ 880.525381][T17939] Code: Bad RIP value. [ 880.529455][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 880.537890][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 880.545935][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 880.553923][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.561914][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.569905][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.577905][T17939] Uninit was stored to memory at: [ 880.582958][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.588696][T17939] __msan_chain_origin+0x50/0x90 [ 880.593651][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.598782][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.603738][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.608261][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.612959][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.619044][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.625216][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.630435][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.635306][T17939] do_SYSENTER_32+0x73/0x90 [ 880.639884][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.647253][T17939] [ 880.649583][T17939] Uninit was stored to memory at: [ 880.654631][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.660374][T17939] __msan_chain_origin+0x50/0x90 [ 880.665329][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.670459][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.675414][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.679940][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.684641][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.690736][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.696952][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.702171][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.707051][T17939] do_SYSENTER_32+0x73/0x90 [ 880.711576][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.717906][T17939] [ 880.720239][T17939] Uninit was stored to memory at: [ 880.725342][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.731093][T17939] __msan_chain_origin+0x50/0x90 [ 880.736071][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.741200][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.746149][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.750670][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.755375][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.761456][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.767627][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.772868][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.777736][T17939] do_SYSENTER_32+0x73/0x90 [ 880.782275][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.788605][T17939] [ 880.790948][T17939] Uninit was stored to memory at: [ 880.795997][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.801733][T17939] __msan_chain_origin+0x50/0x90 [ 880.806685][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.811829][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.816873][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.821389][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.826083][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.832171][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.838356][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.843578][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.848453][T17939] do_SYSENTER_32+0x73/0x90 [ 880.852983][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.859308][T17939] [ 880.861666][T17939] Uninit was stored to memory at: [ 880.866710][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.872449][T17939] __msan_chain_origin+0x50/0x90 [ 880.877404][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.882539][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.887492][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.892010][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.896732][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.902828][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.909014][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.914239][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.919109][T17939] do_SYSENTER_32+0x73/0x90 [ 880.923658][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.929984][T17939] [ 880.932317][T17939] Uninit was stored to memory at: [ 880.937373][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 880.943132][T17939] __msan_chain_origin+0x50/0x90 [ 880.948096][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 880.953236][T17939] get_compat_msghdr+0x108/0x2b0 [ 880.958204][T17939] do_recvmmsg+0xdbb/0x22c0 [ 880.962725][T17939] __sys_recvmmsg+0x5dd/0x610 [ 880.967444][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.973550][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.979722][T17939] __do_fast_syscall_32+0x2af/0x480 [ 880.984942][T17939] do_fast_syscall_32+0x6b/0xd0 [ 880.989806][T17939] do_SYSENTER_32+0x73/0x90 [ 880.994328][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.000660][T17939] [ 881.002988][T17939] Uninit was stored to memory at: [ 881.008046][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 881.013782][T17939] __msan_chain_origin+0x50/0x90 [ 881.018736][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 881.023865][T17939] get_compat_msghdr+0x108/0x2b0 [ 881.028817][T17939] do_recvmmsg+0xdbb/0x22c0 [ 881.033334][T17939] __sys_recvmmsg+0x5dd/0x610 [ 881.038034][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.044138][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.050314][T17939] __do_fast_syscall_32+0x2af/0x480 [ 881.055542][T17939] do_fast_syscall_32+0x6b/0xd0 [ 881.060418][T17939] do_SYSENTER_32+0x73/0x90 [ 881.064958][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.071286][T17939] [ 881.073623][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 881.080314][T17939] do_recvmmsg+0xbf/0x22c0 [ 881.084748][T17939] do_recvmmsg+0xbf/0x22c0 [ 881.179957][T17940] not chained 420000 origins [ 881.184601][T17940] CPU: 0 PID: 17940 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 881.193276][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.203346][T17940] Call Trace: [ 881.206707][T17940] dump_stack+0x21c/0x280 [ 881.211076][T17940] kmsan_internal_chain_origin+0x6f/0x130 [ 881.217018][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.222246][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 881.227822][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 881.233922][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.239249][T17940] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 881.245106][T17940] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 881.251199][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.256440][T17940] ? kmsan_set_origin_checked+0x95/0xf0 [ 881.262018][T17940] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 881.268745][T17940] ? _copy_from_user+0x201/0x310 [ 881.273727][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.278953][T17940] __msan_chain_origin+0x50/0x90 [ 881.283923][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.289077][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.294061][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.298606][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.303853][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.309082][T17940] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 881.314996][T17940] ? kmsan_get_metadata+0x116/0x180 [ 881.320213][T17940] ? kmsan_internal_set_origin+0x75/0xb0 [ 881.325862][T17940] ? __msan_poison_alloca+0xf0/0x120 [ 881.331165][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 881.335939][T17940] ? __sys_recvmmsg+0xbb/0x610 [ 881.340729][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.345452][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.351567][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.357745][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.362974][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.367846][T17940] do_SYSENTER_32+0x73/0x90 [ 881.372372][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.378715][T17940] RIP: 0023:0xf7f10549 [ 881.382778][T17940] Code: Bad RIP value. [ 881.386845][T17940] RSP: 002b:00000000f54c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 881.395267][T17940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 881.404224][T17940] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 881.412207][T17940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.420207][T17940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 881.428189][T17940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.436186][T17940] Uninit was stored to memory at: [ 881.441253][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.446984][T17940] __msan_chain_origin+0x50/0x90 [ 881.452021][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.457146][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.462093][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.466606][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.471298][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.477389][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.483560][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.488772][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.493718][T17940] do_SYSENTER_32+0x73/0x90 [ 881.498235][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.504558][T17940] [ 881.506903][T17940] Uninit was stored to memory at: [ 881.511942][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.517672][T17940] __msan_chain_origin+0x50/0x90 [ 881.522618][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.527739][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.532681][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.537191][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.541895][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.547975][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.554150][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.559377][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.564233][T17940] do_SYSENTER_32+0x73/0x90 [ 881.568749][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.575066][T17940] [ 881.577394][T17940] Uninit was stored to memory at: [ 881.582432][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.588164][T17940] __msan_chain_origin+0x50/0x90 [ 881.593114][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.598237][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.603183][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.607696][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.612387][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.618473][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.624644][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.629856][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.634721][T17940] do_SYSENTER_32+0x73/0x90 [ 881.639246][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.645570][T17940] [ 881.647910][T17940] Uninit was stored to memory at: [ 881.652965][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.658712][T17940] __msan_chain_origin+0x50/0x90 [ 881.663677][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.668804][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.673752][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.678266][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.682957][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.689047][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.695223][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.700440][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.705307][T17940] do_SYSENTER_32+0x73/0x90 [ 881.710864][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.717183][T17940] [ 881.719510][T17940] Uninit was stored to memory at: [ 881.724549][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.730281][T17940] __msan_chain_origin+0x50/0x90 [ 881.735229][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.740350][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.745294][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.749800][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.754488][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.760566][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.766752][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.771971][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.777534][T17940] do_SYSENTER_32+0x73/0x90 [ 881.782223][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.788542][T17940] [ 881.790869][T17940] Uninit was stored to memory at: [ 881.795913][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.801647][T17940] __msan_chain_origin+0x50/0x90 [ 881.806598][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.811719][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.816666][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.821177][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.825864][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.831937][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.838104][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.843318][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.848184][T17940] do_SYSENTER_32+0x73/0x90 [ 881.852702][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.859023][T17940] [ 881.861354][T17940] Uninit was stored to memory at: [ 881.866418][T17940] kmsan_internal_chain_origin+0xad/0x130 [ 881.872155][T17940] __msan_chain_origin+0x50/0x90 [ 881.877109][T17940] __get_compat_msghdr+0x6db/0x9d0 [ 881.882238][T17940] get_compat_msghdr+0x108/0x2b0 [ 881.887195][T17940] do_recvmmsg+0xdbb/0x22c0 [ 881.891713][T17940] __sys_recvmmsg+0x5dd/0x610 [ 881.896427][T17940] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.902524][T17940] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.908705][T17940] __do_fast_syscall_32+0x2af/0x480 [ 881.913928][T17940] do_fast_syscall_32+0x6b/0xd0 [ 881.918802][T17940] do_SYSENTER_32+0x73/0x90 [ 881.923325][T17940] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.929646][T17940] [ 881.931974][T17940] Local variable ----msg_sys@do_recvmmsg created at: [ 881.938664][T17940] do_recvmmsg+0xbf/0x22c0 [ 881.943110][T17940] do_recvmmsg+0xbf/0x22c0 [ 882.268420][T17939] not chained 430000 origins [ 882.273088][T17939] CPU: 1 PID: 17939 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 882.281774][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.292801][T17939] Call Trace: [ 882.296129][T17939] dump_stack+0x21c/0x280 [ 882.300509][T17939] kmsan_internal_chain_origin+0x6f/0x130 [ 882.306274][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.311509][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 882.317233][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 882.323334][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.328566][T17939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 882.334429][T17939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 882.340529][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.345763][T17939] ? kmsan_set_origin_checked+0x95/0xf0 [ 882.351367][T17939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 882.357478][T17939] ? _copy_from_user+0x201/0x310 [ 882.362452][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.367684][T17939] __msan_chain_origin+0x50/0x90 [ 882.372681][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.377846][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.382847][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.387415][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.392648][T17939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 882.398574][T17939] ? kmsan_get_metadata+0x116/0x180 [ 882.403805][T17939] ? kmsan_internal_set_origin+0x75/0xb0 [ 882.409471][T17939] ? __msan_poison_alloca+0xf0/0x120 [ 882.414787][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 882.419575][T17939] ? __sys_recvmmsg+0xbb/0x610 [ 882.424371][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.429142][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.435255][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.441437][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.446724][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.451608][T17939] do_SYSENTER_32+0x73/0x90 [ 882.456149][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.462495][T17939] RIP: 0023:0xf7f10549 [ 882.466569][T17939] Code: Bad RIP value. [ 882.470651][T17939] RSP: 002b:00000000f54e90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 882.479180][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 882.487190][T17939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 882.495186][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 882.503152][T17939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 882.511125][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 882.519112][T17939] Uninit was stored to memory at: [ 882.524160][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.529890][T17939] __msan_chain_origin+0x50/0x90 [ 882.534835][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.539945][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.544898][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.549412][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.554102][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.560179][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.566346][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.571837][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.576692][T17939] do_SYSENTER_32+0x73/0x90 [ 882.581217][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.587630][T17939] [ 882.589965][T17939] Uninit was stored to memory at: [ 882.594999][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.600732][T17939] __msan_chain_origin+0x50/0x90 [ 882.605669][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.610793][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.615727][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.620237][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.624917][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.631074][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.637225][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.642436][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.647283][T17939] do_SYSENTER_32+0x73/0x90 [ 882.651782][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.658093][T17939] [ 882.660407][T17939] Uninit was stored to memory at: [ 882.665427][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.671140][T17939] __msan_chain_origin+0x50/0x90 [ 882.676072][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.681181][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.686118][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.690629][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.695324][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.701390][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.707633][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.712827][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.717687][T17939] do_SYSENTER_32+0x73/0x90 [ 882.722202][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.728508][T17939] [ 882.730819][T17939] Uninit was stored to memory at: [ 882.735851][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.741589][T17939] __msan_chain_origin+0x50/0x90 [ 882.746539][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.752603][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.757536][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.762039][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.766720][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.772783][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.778948][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.784141][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.789016][T17939] do_SYSENTER_32+0x73/0x90 [ 882.793526][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.799835][T17939] [ 882.802150][T17939] Uninit was stored to memory at: [ 882.807195][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.812922][T17939] __msan_chain_origin+0x50/0x90 [ 882.817864][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.823012][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.828135][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.832642][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.837401][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.843472][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.850071][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.855265][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.860118][T17939] do_SYSENTER_32+0x73/0x90 [ 882.864634][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.870950][T17939] [ 882.873261][T17939] Uninit was stored to memory at: [ 882.878280][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.883989][T17939] __msan_chain_origin+0x50/0x90 [ 882.888978][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.894092][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.899048][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.903547][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.908234][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.914310][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.920475][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.925677][T17939] do_fast_syscall_32+0x6b/0xd0 [ 882.930537][T17939] do_SYSENTER_32+0x73/0x90 [ 882.935071][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.941388][T17939] [ 882.944237][T17939] Uninit was stored to memory at: [ 882.949275][T17939] kmsan_internal_chain_origin+0xad/0x130 [ 882.955022][T17939] __msan_chain_origin+0x50/0x90 [ 882.959956][T17939] __get_compat_msghdr+0x6db/0x9d0 [ 882.965068][T17939] get_compat_msghdr+0x108/0x2b0 [ 882.970008][T17939] do_recvmmsg+0xdbb/0x22c0 [ 882.974509][T17939] __sys_recvmmsg+0x5dd/0x610 [ 882.979207][T17939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.985271][T17939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.991424][T17939] __do_fast_syscall_32+0x2af/0x480 [ 882.996621][T17939] do_fast_syscall_32+0x6b/0xd0 [ 883.001482][T17939] do_SYSENTER_32+0x73/0x90 [ 883.005983][T17939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.012289][T17939] [ 883.014614][T17939] Local variable ----msg_sys@do_recvmmsg created at: [ 883.021314][T17939] do_recvmmsg+0xbf/0x22c0 [ 883.025726][T17939] do_recvmmsg+0xbf/0x22c0 12:33:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "accf205301000102", "f3f4c9f2262c2e1532b2383c26b0c1e668113c384dd48c9904245bebf99cd757", "0a178d79", "28e694ad17ad6ba9"}, 0x38) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x1, 0x0, 0x0, 0x0) 12:33:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0xb, 0x6c}, 0x0) 12:33:46 executing program 0: unshare(0x6c060000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:33:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket(0x2b, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x800) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:33:46 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x1400000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet(r0, &(0x7f0000000140)="10", 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect(r0, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'wg2\x00'}}, 0x80) 12:33:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x24000000}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 883.327542][T18000] IPVS: ftp: loaded support on port[0] = 21 [ 883.378557][T18008] BPF: (anon) type_id=1 bitfield_size=36 bits_offset=0 [ 883.385825][T18008] BPF: [ 883.388664][T18008] BPF:Invalid member bitfield_size [ 883.393139][T18006] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 883.394983][T18008] BPF: [ 883.394983][T18008] [ 883.460703][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 883.476856][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 883.486992][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 883.497078][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 883.507355][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 883.517526][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 883.527763][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 12:33:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f0000000540)}, 0x20) 12:33:47 executing program 3: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 12:33:47 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) syz_emit_ethernet(0xe81, &(0x7f0000000080)={@broadcast, @remote, @val={@void}, {@x25={0x805, {0x0, 0x0, 0x0, "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"}}}}, 0x0) 12:33:47 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="0200000000000000", 0x8}}, 0x0) 12:33:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket(0x2b, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x800) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:33:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0xc000400) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreq(r1, 0x0, 0x22, &(0x7f0000000080)={@loopback, @initdev}, &(0x7f0000000100)=0x8) 12:33:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) [ 884.850696][T18055] vcan0: tx address claim with different name [ 884.906717][T18056] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 884.988660][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 885.004116][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 885.014285][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 885.024288][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 885.034395][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 885.044687][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 885.054831][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 12:33:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x8, &(0x7f0000001280)=""/4098, &(0x7f0000000040)=0x1002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 12:33:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000009a40)={0x0, 0x0, &(0x7f0000009a00)={&(0x7f00000099c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}}, 0x0) 12:33:48 executing program 5: write(0xffffffffffffffff, &(0x7f0000000280)="1c", 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) 12:33:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x15d4b87) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 12:33:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket(0x2b, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x800) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:33:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x4}, 0x20) 12:33:49 executing program 0: setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0xb00000000065808, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3e) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @dev}}}]}]}, 0x38}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x5, 0x1b6, 0x2, 0x7}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x53, 0x2, 0x22, @mcast1, @remote, 0x7, 0x7, 0x5, 0x1000}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x1000, 0x10, 0x7ff}, &(0x7f00000004c0)=0x18) 12:33:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd", 0x72}, {&(0x7f0000001b40)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b198e5032c69cf8ebe9d42dd43d2f19d49ebb5e33cf00ec91a7", 0x5e}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000880)="a8e43c937519fb1d89c43084d82103e2b1d6eff5098c14c3b82b95228909a2e8b090eea9c1ea5920740b20c7dc2ab807bed24fd85177cf8cef980b8941fadb3093cabba71eece5bc8a3f02da1276526b40fad694021ad694c6df1642c6cb07e2248f732499adbdf51ea1c03aff00000039656781a086b81f5241c61042ced80e655b1866cb2f2f9d599fa601a13d7ac000002100000000000000", 0x9a}, {&(0x7f0000000700)}], 0x5}}], 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860007ff65ac618ded897489549ddea98abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0xa04, 0x11, 0x0, 0x27) 12:33:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) close(r1) [ 886.391227][T18082] IPVS: lc: TCP 127.0.0.1:0 - no destination available [ 886.456160][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 886.471657][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 886.481723][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 886.491798][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 886.502000][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 886.512406][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 886.523372][T18085] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 886.580046][T18086] ===================================================== [ 886.587140][T18086] BUG: KMSAN: uninit-value in ax25_connect+0x12aa/0x21f0 [ 886.594219][T18086] CPU: 0 PID: 18086 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 886.602909][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.613012][T18086] Call Trace: [ 886.616351][T18086] dump_stack+0x21c/0x280 [ 886.620730][T18086] kmsan_report+0xf7/0x1e0 [ 886.625186][T18086] __msan_warning+0x58/0xa0 [ 886.629756][T18086] ax25_connect+0x12aa/0x21f0 [ 886.634518][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.639790][T18086] ? ax25_bind+0xba0/0xba0 [ 886.644307][T18086] __sys_connect+0x7a3/0x8a0 [ 886.648998][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.654236][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.659478][T18086] __se_sys_connect+0x8d/0xb0 [ 886.664206][T18086] __ia32_sys_connect+0x4a/0x70 [ 886.669144][T18086] __do_fast_syscall_32+0x2af/0x480 [ 886.674558][T18086] do_fast_syscall_32+0x6b/0xd0 [ 886.679458][T18086] do_SYSENTER_32+0x73/0x90 [ 886.684001][T18086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 886.690354][T18086] RIP: 0023:0xf7f3e549 [ 886.694435][T18086] Code: Bad RIP value. [ 886.698525][T18086] RSP: 002b:00000000f55380cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 886.707576][T18086] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 886.715606][T18086] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 886.723635][T18086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.731780][T18086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 886.739876][T18086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.748256][T18086] [ 886.750619][T18086] Local variable ----address@__sys_connect created at: [ 886.757503][T18086] __sys_connect+0x118/0x8a0 [ 886.762222][T18086] __sys_connect+0x118/0x8a0 [ 886.766852][T18086] ===================================================== [ 886.773977][T18086] Disabling lock debugging due to kernel taint [ 886.780159][T18086] Kernel panic - not syncing: panic_on_warn set ... [ 886.786815][T18086] CPU: 0 PID: 18086 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 886.797276][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.809214][T18086] Call Trace: [ 886.812549][T18086] dump_stack+0x21c/0x280 [ 886.817227][T18086] panic+0x4d7/0xef7 [ 886.821584][T18086] ? add_taint+0x17c/0x210 [ 886.826576][T18086] kmsan_report+0x1df/0x1e0 [ 886.831318][T18086] __msan_warning+0x58/0xa0 [ 886.835902][T18086] ax25_connect+0x12aa/0x21f0 [ 886.840673][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.845917][T18086] ? ax25_bind+0xba0/0xba0 [ 886.850378][T18086] __sys_connect+0x7a3/0x8a0 [ 886.855601][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.862102][T18086] ? kmsan_get_metadata+0x116/0x180 [ 886.867345][T18086] __se_sys_connect+0x8d/0xb0 [ 886.872104][T18086] __ia32_sys_connect+0x4a/0x70 [ 886.876995][T18086] __do_fast_syscall_32+0x2af/0x480 [ 886.882611][T18086] do_fast_syscall_32+0x6b/0xd0 [ 886.887502][T18086] do_SYSENTER_32+0x73/0x90 [ 886.892046][T18086] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 886.898404][T18086] RIP: 0023:0xf7f3e549 [ 886.902480][T18086] Code: Bad RIP value. [ 886.906588][T18086] RSP: 002b:00000000f55380cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 886.915121][T18086] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 886.923361][T18086] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 886.931962][T18086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.940075][T18086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 886.948162][T18086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.957240][T18086] Kernel Offset: disabled [ 886.961800][T18086] Rebooting in 86400 seconds..