SYNC(r0, 0x8907, 0x0) 17:42:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) 17:42:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:42:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:42:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x18) 17:42:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0x80031, 0xffffffffffffffff, 0x8000000) [ 890.546149][T21293] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 890.589913][T21295] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 890.632947][T21293] device geneve2 entered promiscuous mode 17:42:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001240)={0x19, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40) 17:42:53 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 17:42:53 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x127400, 0x0) 17:42:53 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') fork() 17:42:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0x7}]}, {0x0, [0x61]}}, &(0x7f0000000240)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 17:42:54 executing program 4: setuid(0xee00) r0 = geteuid() ioprio_set$uid(0x3, r0, 0x0) 17:42:54 executing program 5: bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 891.815335][T21295] device geneve2 entered promiscuous mode 17:42:54 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map, 0xffffffffffffffff, 0x15}, 0x10) 17:42:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:42:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x894a, &(0x7f0000000a40)) 17:42:55 executing program 4: setuid(0xee00) r0 = geteuid() ioprio_set$uid(0x3, r0, 0x0) 17:42:55 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x4) 17:42:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x33}, @void, @val={0x4}}}}, 0x20}}, 0x0) 17:42:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 893.043682][T21334] netlink: 'syz-executor.3': attribute type 153 has an invalid length. [ 893.128532][T21339] netlink: 'syz-executor.3': attribute type 153 has an invalid length. 17:42:55 executing program 4: setuid(0xee00) r0 = geteuid() ioprio_set$uid(0x3, r0, 0x0) 17:42:55 executing program 5: clone(0x66902400, 0x0, 0x0, 0x0, 0x0) [ 893.447515][T21343] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001240)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 17:42:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x200000) [ 893.559227][T21343] device geneve2 entered promiscuous mode [ 893.576354][T21346] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:42:56 executing program 4: setuid(0xee00) r0 = geteuid() ioprio_set$uid(0x3, r0, 0x0) [ 894.201452][T21355] IPVS: ftp: loaded support on port[0] = 21 17:42:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30140, 0x0) [ 894.603699][T21346] device geneve2 entered promiscuous mode [ 894.972001][T21368] IPVS: ftp: loaded support on port[0] = 21 17:42:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:42:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8902, &(0x7f0000000a40)) 17:42:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0xb8, 0x0, 0x198, 0x280, 0xb8, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'wg0\x00', 'veth1\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'macsec0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a130"}}]}, @ECN={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ipvlan1\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 17:42:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000000100000000000004000000000061"], &(0x7f0000000240)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 17:42:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 896.047104][T21421] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x2, &(0x7f0000000a40)) [ 896.170031][T21424] device geneve2 entered promiscuous mode 17:42:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fgetxattr(r0, &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) [ 896.308394][T21427] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:42:59 executing program 5: clone3(&(0x7f0000003c80)={0x0, &(0x7f00000039c0), &(0x7f0000003a00), &(0x7f0000003a40), {}, &(0x7f0000003a80)=""/136, 0x88, &(0x7f0000003b40)=""/229, &(0x7f0000003c40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0xfffffffffffffe7e) 17:42:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map, @btf_id, @generic]}, &(0x7f0000000080)='syzkaller\x00', 0xffffffe1, 0xf8, &(0x7f00000000c0)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:59 executing program 3: clone(0x40000000, 0x0, 0x0, &(0x7f0000000180), 0x0) 17:42:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x702, 0x3d8, 0x160, 0x0, 0x258, 0x258, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@inet=@ipcomp={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast1, @private2, [], [], 'veth1_macvtap\x00', 'dummy0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @private0, [], [], 'veth1_macvtap\x00', 'veth0_vlan\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, @remote}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@ipv6={@empty, @dev, [], [], 'veth0_virt_wifi\x00', 'vxcan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) 17:42:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, 0x0, 0x0) [ 897.385488][T21427] device geneve2 entered promiscuous mode [ 897.922318][T21448] IPVS: ftp: loaded support on port[0] = 21 17:43:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 17:43:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/key-users\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x40087602, 0xffffffffffffffff) 17:43:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000001280)={0x10}) 17:43:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 898.596580][T21448] IPVS: ftp: loaded support on port[0] = 21 [ 898.884643][T21503] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:01 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00') [ 898.976329][T21503] device geneve2 entered promiscuous mode 17:43:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x405, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x30}}, 0x0) [ 899.108358][T21507] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 17:43:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80108906, 0x0) 17:43:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0xd9646caaf331710c, 0x3, &(0x7f0000002980)=@framed, &(0x7f00000029c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:02 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)='$', 0x0}, 0x48) [ 900.284212][T21507] device geneve2 entered promiscuous mode 17:43:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000006c0)={0x0, 0x0}) 17:43:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/130, 0x2f, 0x82, 0x1}, 0x20) 17:43:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x3fb}, 0x10}}, 0x0) 17:43:04 executing program 5: r0 = getpid() waitid(0x3, r0, 0x0, 0x8, 0x0) 17:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:04 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 17:43:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x44, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 17:43:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0) [ 902.275437][T21546] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 902.293461][T21547] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8993, &(0x7f0000000a40)) [ 902.427858][T21547] device geneve2 entered promiscuous mode 17:43:05 executing program 0: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) 17:43:05 executing program 4: clone(0x12040000, 0x0, 0x0, 0x0, 0x0) 17:43:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000680)=[{}, {0x800}]}) [ 903.590633][T21546] device geneve2 entered promiscuous mode 17:43:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)=ANY=[]}) 17:43:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 17:43:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f000000a300)={0x0, 0x0, &(0x7f000000a2c0)={&(0x7f000000a280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:43:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 17:43:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x4b49, 0x0) 17:43:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:07 executing program 3: select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0xe1c7}, &(0x7f0000000300)) 17:43:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x40045564, 0x0) [ 905.233801][T21589] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 905.333478][T21593] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 905.337810][T21589] device geneve2 entered promiscuous mode 17:43:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x0, 0x3, &(0x7f0000002980)=@framed, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) 17:43:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x89a1, 0x0) 17:43:08 executing program 4: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) 17:43:09 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x3f7}, 0x10}}, 0x0) 17:43:09 executing program 0: pselect6(0x3, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080), 0x0, 0x0) [ 906.547505][T21593] device geneve2 entered promiscuous mode 17:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940), 0x8) pipe(&(0x7f0000004b00)) connect(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:43:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x3f3, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000080)=""/176, 0x2e, 0xb0, 0x1}, 0x20) 17:43:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x43, 0x0, &(0x7f00000000c0)) 17:43:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000306010200000000000000000a0000090900020073797a30000000000500010007"], 0x44}}, 0x0) 17:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 907.578113][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 907.822144][T21633] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0xf, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x0) [ 907.963022][T21633] device geneve2 entered promiscuous mode 17:43:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x4) 17:43:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4004556d, 0x0) 17:43:10 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000140)={0x54, 0x12, 0x20ab47c3f2d122f1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "093004d0"}]}, 0x54}}, 0x0) [ 908.088961][T21638] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:11 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 17:43:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000000)={@remote}, 0x14) [ 909.154334][T21638] device geneve2 entered promiscuous mode 17:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:12 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/103, 0x135000, 0x800, 0x0, 0x1}, 0x20) 17:43:12 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)={0x50, 0x12, 0x20ab47c3f2d122f1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x300}]}, 0x50}}, 0x0) 17:43:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x3, {@mcast1}}}], 0x28}}], 0x1, 0x0) 17:43:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x31, 0x0, 0x0) 17:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 910.107092][T21671] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 910.207602][T21671] device geneve2 entered promiscuous mode 17:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) 17:43:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc020660b, 0x0) [ 910.440141][T21677] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x24, 0x0, 0x0) 17:43:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) 17:43:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4e, &(0x7f00000005c0)="26ede05b", 0x4) 17:43:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x49, 0x0, 0x0) [ 911.426143][T21677] device geneve2 entered promiscuous mode 17:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 17:43:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 17:43:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r1, @ANYRES16], 0x1fc}}, 0x0) 17:43:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:14 executing program 3: socketpair(0x2, 0x2, 0x7, &(0x7f0000000180)) 17:43:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x1c) [ 912.480452][T21709] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5421, &(0x7f0000000000)={"179eff80befa8f687ba53a7d3488659f"}) [ 912.595202][T21709] device geneve2 entered promiscuous mode [ 912.622698][T21713] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x4}]}]}, {0x0, [0x5f, 0x5f, 0x61]}}, &(0x7f0000000180)=""/171, 0x35, 0xab, 0x1}, 0x20) 17:43:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x10) 17:43:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x39, 0x0, &(0x7f00000000c0)) 17:43:16 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) [ 913.723923][T21713] device geneve2 entered promiscuous mode 17:43:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x1, 0x0) 17:43:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0xa) sendto$inet(r0, 0x0, 0x0, 0xe00, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 17:43:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x206, 0x4) 17:43:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xab0, 0x4) [ 915.111603][T21749] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 915.185069][T21749] device geneve2 entered promiscuous mode [ 915.280506][T21754] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x2b, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x194, 0x0) 17:43:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x201}, 0x14}}, 0x0) 17:43:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x42, &(0x7f0000000080), 0x4) 17:43:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x4e23, 0xe8030000, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 17:43:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) 17:43:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8901, &(0x7f00000000c0)) [ 916.311598][T21754] device geneve2 entered promiscuous mode 17:43:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, &(0x7f0000000000)={"179eff80befa8f687ba53a7d3488659f"}) 17:43:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000041) 17:43:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x890b, &(0x7f0000000000)={"179eff80befa8f687ba53a7d3488659f"}) 17:43:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/2, &(0x7f0000000100)=0x2) 17:43:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}}], 0x1, 0x20004000) 17:43:20 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0xfffffffe, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 917.737390][T21788] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x48, 0x0, &(0x7f00000000c0)) [ 917.805457][T21789] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 917.840896][T21788] device geneve2 entered promiscuous mode 17:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000040)) 17:43:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) 17:43:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000004c0)=""/142, 0x2d, 0x8e, 0x1}, 0x20) 17:43:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 918.839720][T21789] device geneve2 entered promiscuous mode 17:43:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5452, 0x0) 17:43:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xff, 0x4) 17:43:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000180)="1888589ba945fbc8fde50712f9a517ac486e3421d554c8dc6618576b6dbd1e0fe5e42c622de8c9603cba916a748b871ba1d93c9393123005d9ddc931872dfddaeaf22e8a852283782628700a5162fca18f5dd28e63a3d9e4e04f04e4768eba950a9ccb90aa5b111671b525beb22a5df671b0e66cf11a09236be27f74dabfc7da1fbfe3a4770c198a", 0x88) 17:43:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 17:43:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xb, 0x0, 0x0, 0x8}, 0x40) 17:43:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x14, &(0x7f0000000080), 0x4) [ 920.111611][T21827] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008c40)={&(0x7f0000007bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0xf}}, &(0x7f0000007c40)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 17:43:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4, 0x7}]}, 0x18}}, 0x0) [ 920.229707][T21829] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.265306][T21827] device geneve2 entered promiscuous mode [ 920.753948][T21840] netlink: 'syz-executor.3': attribute type 7 has an invalid length. 17:43:23 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x30, 0x0, 0x0) 17:43:23 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf}]}]}}, &(0x7f00000000c0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) [ 921.420326][T21829] device geneve2 entered promiscuous mode 17:43:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x10, &(0x7f0000000080), 0x4) 17:43:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000580)) 17:43:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x2, 0x301}, 0x14}}, 0x0) 17:43:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={&(0x7f0000000280), 0xc, &(0x7f0000001200)={&(0x7f00000003c0)=@newchain={0x23, 0x64, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) 17:43:25 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004c00), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 922.694892][T21866] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 922.816353][T21869] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 922.823198][T21866] device geneve2 entered promiscuous mode 17:43:25 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) 17:43:25 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x28, 0x24, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 17:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f0000000000)="9eb944c36558444a821357b465adad503f6127665a15eb87b29a83ab5a20345ed3fd94d2569ce35a"}) [ 923.981448][T21869] device geneve2 entered promiscuous mode 17:43:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:27 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0100000c01000004000000020000000200000f02"], &(0x7f00000008c0)=""/4096, 0x128, 0x1000, 0x1}, 0x20) 17:43:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)) 17:43:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:27 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:43:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000002480)=@in6={0xa, 0x0, 0x0, @local}, 0x80) [ 925.278399][T21907] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 925.389778][T21910] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:28 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) [ 925.438883][T21907] device geneve2 entered promiscuous mode 17:43:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x1, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) 17:43:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={0x0, @nl=@proc, @can, @isdn}) 17:43:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x1, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) [ 926.458053][T21910] device geneve2 entered promiscuous mode 17:43:29 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:43:29 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:43:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/40, 0x0, 0x28}, 0x20) 17:43:30 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000080)) 17:43:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:30 executing program 0: socket$inet(0x2, 0x3, 0x79) [ 927.943944][ T35] audit: type=1804 audit(1619372610.491:12): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir652757440/syzkaller.owYXd3/575/file0" dev="sda1" ino=15250 res=1 errno=0 17:43:30 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 928.020302][T21950] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 928.048657][T21952] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 928.140642][ T35] audit: type=1804 audit(1619372610.551:13): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir652757440/syzkaller.owYXd3/575/file0" dev="sda1" ino=15250 res=1 errno=0 [ 928.159606][T21952] device geneve2 entered promiscuous mode 17:43:30 executing program 4: socketpair(0x1, 0x0, 0x104, &(0x7f0000000080)) 17:43:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 17:43:30 executing program 3: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 17:43:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:31 executing program 4: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)) socketpair(0x5, 0x0, 0x0, &(0x7f0000000240)) 17:43:31 executing program 0: mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x83000000) [ 929.285628][T21953] device geneve2 entered promiscuous mode 17:43:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:32 executing program 3: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a40)) pipe2$9p(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000b80)={0x7}, 0x7) 17:43:32 executing program 5: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:43:32 executing program 4: pipe2(&(0x7f0000004380), 0x80000) 17:43:32 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 930.296005][T21987] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 930.403948][T21987] device geneve2 entered promiscuous mode 17:43:33 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) 17:43:33 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, &(0x7f0000001100)={@broadcast, @random="3aa2586c1481", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) [ 930.786742][T21997] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:43:33 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x88442, 0x0) [ 931.432106][T22008] encrypted_key: insufficient parameters specified [ 931.448206][T21997] device geneve2 entered promiscuous mode [ 931.603522][T22016] encrypted_key: insufficient parameters specified 17:43:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) 17:43:34 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x82001, 0x0) 17:43:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup3(r0, r1, 0x0) 17:43:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000014c0)={&(0x7f00000011c0)=@in={0x2, 0x4e24, @remote}, 0x80, &(0x7f0000001380)=[{0x0}], 0x1, &(0x7f00000013c0)=[@txtime={{0x18}}, @mark={{0x14}}], 0x30}, 0x0) 17:43:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 17:43:35 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) 17:43:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:35 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) [ 932.942947][T22038] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:35 executing program 0: socket$inet(0x2, 0xa, 0x40) [ 933.046721][T22038] device geneve2 entered promiscuous mode 17:43:35 executing program 5: syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) 17:43:35 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpriority(0x1, 0x0) [ 933.161377][T22042] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 17:43:36 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0x27, 0x20a202) [ 934.112050][T22042] device geneve2 entered promiscuous mode 17:43:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:37 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 17:43:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8000000000000000}}, 0x0) 17:43:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x100000001, 0x0) 17:43:37 executing program 3: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000001100)={0x0, 0x0}) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000001280)) 17:43:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:37 executing program 0: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) 17:43:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004c00), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 17:43:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0) 17:43:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 935.581113][T22077] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 935.595434][T22078] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 935.666661][T22078] device geneve2 entered promiscuous mode 17:43:38 executing program 0: syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x20800) 17:43:38 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a40)) [ 936.645376][T22079] device geneve2 entered promiscuous mode 17:43:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:39 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 17:43:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000014c0)={&(0x7f00000011c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x0) 17:43:39 executing program 0: pipe2(&(0x7f00000003c0), 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000240)) 17:43:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@private2}, 0x0, @in=@multicast2, 0x0, 0x4}}, 0xe8) 17:43:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:40 executing program 0: socketpair(0x0, 0x23b06dc2521d41ab, 0x0, 0x0) [ 937.562802][T22114] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 17:43:40 executing program 3: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x0, r0+10000000}, 0x0) [ 937.650780][T22116] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:40 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000000140)="16", 0x1}, {&(0x7f0000000180)='<', 0x1, 0x100000001}], 0x0, 0x0) [ 937.700315][T22114] device geneve2 entered promiscuous mode 17:43:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00ebff00"}) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f00007eb000/0x2000)=nil, 0x2000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000290000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f00003e2000/0x2000)=nil}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:43:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 938.908952][T22116] device geneve2 entered promiscuous mode 17:43:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:42 executing program 4: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x4002) 17:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 17:43:42 executing program 5: unshare(0x26020280) 17:43:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000006a00)) 17:43:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 939.928280][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.935069][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.011121][T22162] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:42 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x10, 0x0, 0x0) 17:43:42 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@in6={0x18, 0x3}, 0xc) 17:43:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x2000, 0x0, 0x0) [ 940.118744][T22162] device geneve2 entered promiscuous mode 17:43:42 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x10, &(0x7f0000000000), 0x10) [ 940.161889][T22166] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001ac0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:43:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) [ 941.104098][T22166] device geneve2 entered promiscuous mode 17:43:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:44 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00'}, 0x10) 17:43:44 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002e40)) 17:43:44 executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001240)={&(0x7f0000000000), &(0x7f0000000080)=""/4096, &(0x7f0000001080)='\b', &(0x7f0000001180)="2305a5805a770a1cf3956b484da052db04c36dba848be6af9e77a1cef63ae636aa99ae4cf0406518afe65153cea5e1b09efe4a", 0x6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000001280), &(0x7f0000001380)=""/161, 0x0, 0x0, 0x0, 0x1}, 0x38) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x40, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001880)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001840)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001980), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x2}, @ptr={0x7}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000001ac0)=""/136, 0x40, 0x88, 0x1}, 0x20) mkdir(&(0x7f0000001e00)='./file0\x00', 0x69) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001f00)={0x5, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, 0x4120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0xc119, 0x2, 0x0, 0x4, 0x40, 0x4, 0x9, 0x0, 0x2, 0x0, 0x401}) 17:43:44 executing program 5: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000001280), &(0x7f0000001380)=""/161, &(0x7f0000001440), &(0x7f0000001480)="2321df0f43ca986156a2974f79a3e51fc1caaa27a94007e41922379a9d3cbab86b3850e88dc74a5e02cd1d16962c692f1cc4dcd39d6220803413d3c015170b9feb47c35535c9", 0x4, 0x1}, 0x38) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@cgroup, 0xffffffffffffffff, 0x1d}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000015c0)={0x0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x40, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001880)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001840)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000019c0)='-}@@\'\x00'}, 0x30) mkdir(&(0x7f0000001e00)='./file0\x00', 0x69) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001f00)={0x5, 0x80, 0x9f, 0x8, 0xfa, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}) 17:43:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 942.221722][T22200] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:44 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1002, 0x0, 0x0) [ 942.347558][T22200] device geneve2 entered promiscuous mode 17:43:45 executing program 3: r0 = socket$inet6(0x1e, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 17:43:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="041f2e5e0450d8d0b131f3ec4014f9217f9e5be71b02317587abe62c00f8adf5b82837d337a6c303f58fd052395121a28b98bdd36d54071c8d72b9bcea5ea5cea6138304c6d2ad7a116f143b84643660ec4ebb5ae0a7ea8526bb15f17333ffa12de3d5f1da72bc3240497ae139f063ec1f02ea1097122cc7adc2779f63c6ed51894a03b08d9ab2d7aafd5707758a21cd5e057d737c76da8a4d01a81fcc3adef20534627c81298349344a273a8edefff62e33fdfba8d1455c4f66acf754a9a8665406be", 0xc3}, {&(0x7f00000003c0)="5ee11501dc41935061397b35b08d896aabc8828d003ba95967b138543a11b9589cdab54c4b5b11cc553e8f01b8880d7645b941dbe5d41b0d7c0401b1236c552c9fa7c845c4bfcd0b9786cbecf3ee18886bf2a4e4023a672311662a569bf61092baec6033bcf89ef5235046a436b71f92a4c64016d63bf65ec0e03038ac7fb21765", 0x81}, {&(0x7f0000000480)="f26eaeecf3e8b1b2e8ea495b9391ae0d6b53e558e7bbc9110738149b00b8c4151e5024b525c1d1d772dc5edbc0f6bca47d54b84010388169fc857efe7be68fe56a9fb174c974c90b4621fc6f37d7d7919b61dda9fd575db377a938c9f6c4dd9d7d52822f8cc309bb74565767beb0a9cc6f41a043e7576d97ad01b130", 0x7c}, {&(0x7f0000000500)="8f4475170595b411989a070cf0ddfb5d37ab215c2f9597e33a96b307c215ede8cb1fb5a552737997a629ca4ef4296e58af9663a2d74508f10a3cabbd6f83262637b5484b5f378554a1da745e3fc1ca9b41f4680955d9aaf1fc3e64095aff5f7dc988883ddd62e8de8761a808df70fb09d0140aa1ea1ed6dfb39864ede75b51b27ff0c318", 0x84}, {&(0x7f0000000640)="71e93d8bd0989776110c6ea734c7aff807df10ed3a222b45c2a1f9ac68de7a675a25f8233a46108863ab411e49d1abdeea09aaaa8321deb5858df7b7a6d9e29bd13e3c69da861a095848a154fe574370874d100cf4aae94846ebcd20c613", 0x5e}, {&(0x7f0000000180)}], 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x4008040) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x80, 0x3, 0x3f, 0xf8, 0x5, 0x0, 0x45d, 0x1000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, 0x0, 0x11026, 0x101, 0x40, 0x4, 0x5, 0x9, 0x1, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000ffffffff00000000ffffff7f18100000", @ANYRES32, @ANYBLOB="000000000000000020a402000000000018000000ff0000000000000007000000685350000800000018190000", @ANYRES32, @ANYBLOB="00ef790004", @ANYRES32, @ANYBLOB="0000000000000000181b0000", @ANYRES32, @ANYBLOB="000000000000000015371800fcffffff18150000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0xbd, &(0x7f0000001900)=""/189, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x7, 0xac, 0x10000}, 0x10, 0x1f65b, r3}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 17:43:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 942.505606][T22205] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:45 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000001e00)='./file0\x00', 0x0) 17:43:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x70, 0x3, 0x3f, 0xf8, 0x5, 0x0, 0x45d, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101, 0x40, 0x4, 0x5, 0x9, 0x1}, r3, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000ffffffff00000000ffffff7f18100000", @ANYRES32, @ANYBLOB="000000000000000020a402000000000018000000ff00", @ANYRES32, @ANYBLOB="00ef790004", @ANYRES32, @ANYBLOB="0000000000000000181b0000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0xbd, &(0x7f0000001900)=""/189, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f65b, r3}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 943.442082][T22205] device geneve2 entered promiscuous mode 17:43:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000003c0)) 17:43:47 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x300080c4) 17:43:47 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0xf84e7a87f1fdc195}], 0x1, 0x0) 17:43:47 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)="9b", 0x1}], 0x1) 17:43:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 944.612002][T22239] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.717541][T22239] device geneve2 entered promiscuous mode 17:43:47 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000001180)=[{0x0}], 0x1) 17:43:47 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x300080c4) 17:43:47 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000003c0)=[{0x40, 0x0, 0x0, "9b025d315a5605b7aad7094bb98467db00487de4a2ae4edd7df179fb147a588df5b544648b38e94672"}, {0x80, 0x0, 0x0, "009ec7280a6d136e04fee400b5b5cb01171a13fae16c76216cab32e8b2a37b14b19e69e2926207b910de3399b4f33029b18e9d5e2e0c04a7c1ab863232f540b3ebb9ef1877629f8865bdc41dfab4e8542bb09d96494325fafa570afeb8525980b6037f4ed77629a353"}, {0xd8, 0x0, 0x0, "ff3b4b559e97310c06bc68639d3761a29f135069eefeb5d9d833ddfe9dedbcd9222d81f5448301403dcf5d836e501c60d15f40d5088bda4618132ece3f88e94cdf91cbd4dd753f7137f46faa1cc78c2da9e614144c7ad884eb5fac1338884a51e934c185bb6c559fe56d387acc958be6c2a197c18c43ede9875486b881cb8e2041dcb3ca950199a9ac8b421258a8e95f981eea165abb5994880d933682f7e21424c27a60aedb465dc61b6662b498563c3cc16d6282ce890160fd0fb33ded09ef40"}, {0xa8, 0x0, 0x0, "e5a70c367599b62d33c677217d12e6f4ddfa914a49676750523d0c1386fbc3cfff1c1f6ea47c285915a832f6d3f4a592460b2e06bdbb96790a85b18ed143af8ec39e9b7ccc97bcce9527ffca4c2afb3382d5d5bd98aa9c827ed79aa98fb7281d032ea20ad8e8983fc1eacb31a11ccc39742c266477ad5938fb9c83b0d4d139a4c7669193a50c080ccf6e1e356e268000bf"}, {0x68, 0x0, 0x0, "feb8b3da137f7a28806de93d9610b8dba8ca3d87d6f6614e176af01bd53012bf4edcf6ab76fd672ba2b618ab5d77b0eca2f211fdb137ffa1d1f6fd9ed68bc4d18554136e7bc8310a86e592174b834262fd"}, {0x560, 0x0, 0x0, "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"}], 0x808}, 0x0) [ 945.168623][T22250] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 945.950313][T22250] device geneve2 entered promiscuous mode 17:43:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$getown(r0, 0xb) 17:43:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000140)=[{&(0x7f0000000080)='C', 0x1}], 0x1}, 0x0) 17:43:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="49195790e947bba87689080ed4e3a7c94f0d4192e6744a55659bdd", 0x1b) 17:43:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 17:43:49 executing program 4: r0 = openat$zero(0xffffff9c, &(0x7f0000000a80), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:43:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000000701020000000000000000010000080c00078008000240000000010c00034000000000800000000c00024000000001000000000c00024000000200000000030c00034000000000ffffffff1400078008000240fffff99208000240000000070c00034000000000000001010c00024000000000000000000c00034000000000000000020900010073"], 0x94}}, 0x0) 17:43:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 17:43:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 947.805298][T22284] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301}, 0x14}}, 0x0) 17:43:50 executing program 4: r0 = openat$fuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 947.958576][T22286] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.983982][T22284] device geneve2 entered promiscuous mode 17:43:50 executing program 5: add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 17:43:50 executing program 3: clock_gettime(0x80ccfef5da7a7ea3, 0x0) 17:43:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 17:43:51 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 17:43:51 executing program 4: r0 = openat$zero(0xffffff9c, &(0x7f0000000a80), 0x0, 0x0) lseek(r0, 0x0, 0x0) 17:43:51 executing program 5: mq_open(&(0x7f0000000640)='/dev/nvram\x00', 0x0, 0x0, 0x0) [ 949.236769][T22286] device geneve2 entered promiscuous mode 17:43:52 executing program 3: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000005c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000600)) 17:43:52 executing program 4: pselect6(0x6, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), 0x0) 17:43:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @local}, @hci, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 17:43:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 17:43:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:53 executing program 3: openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x2c2080, 0x0) [ 951.141930][T22325] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:53 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="900000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006000128009000100766c616e0000000050000280060001000000000004000380400004800c00010000800000060000000c00010009000000020000000c00010081000000ff7f00000c00010003000000040000000c000100400900000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) 17:43:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 951.230568][T22327] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:53 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000140)={@broadcast, @local, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "88b92e", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) [ 951.332947][T22325] device geneve2 entered promiscuous mode 17:43:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x201}, 0x14}}, 0x0) 17:43:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x100) 17:43:54 executing program 0: clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) [ 952.610011][T22327] device geneve2 entered promiscuous mode 17:43:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) 17:43:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:43:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x1, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 17:43:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:43:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 17:43:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 954.293514][T22374] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:43:56 executing program 0: r0 = openat$zero(0xffffff9c, &(0x7f0000000a80), 0x81, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) [ 954.410522][T22377] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0xb03}, 0x14}}, 0x0) [ 954.491995][T22374] device geneve2 entered promiscuous mode 17:43:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x4) 17:43:57 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/vlan/config\x00') write$apparmor_current(r0, 0x0, 0x0) 17:43:58 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000600)) 17:43:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 955.746624][T22378] device geneve2 entered promiscuous mode 17:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)) 17:43:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x4, 0x6, 0x301}, 0x14}}, 0x0) 17:43:59 executing program 0: clone(0x961b0300, 0x0, 0x0, 0x0, 0x0) 17:43:59 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) lseek(r0, 0x10000, 0x0) 17:43:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:43:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') write$tun(r0, 0x0, 0x0) 17:43:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}]}]}, 0x2c}}, 0x0) 17:43:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) [ 957.251892][T22414] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 957.284590][T22415] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) dup2(r0, r2) [ 957.388483][T22414] device geneve2 entered promiscuous mode 17:44:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) 17:44:00 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 958.530838][T22415] device geneve2 entered promiscuous mode 17:44:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 17:44:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x1}], 0x10}, 0x0) 17:44:01 executing program 4: syz_emit_ethernet(0xa9, &(0x7f0000000180)={@local, @local, @val, {@ipv6}}, 0x0) 17:44:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:02 executing program 0: lseek(0xffffffffffffffff, 0x0, 0x0) 17:44:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="4fe50e74a0d08994e134bc9631a7337e9f337dd909f2a9035e7df6962203269a42292a55b9f4e29468110bd42b9f1fb4c08687b3df", 0x35}, {&(0x7f0000000180)="a332f3f26ad6dc771d684c62b477bbca4bfbbc0e8352e994df52613850625a49257280b1dc0bd77192d632277ac52fdcb898d07e0bb632ecccc427bba7a56a70e2a04174657fca6bad185b1c81f203e8dacfd26214fbffae75cc473b7100d0889267447b3f3bc463faee2272fcdc5de7b259a78116843d127e7ef5cecdee8578826b602b788083c7be9f07893b167e5f98b42a3b39ebb9fc95b164b3469464ec", 0xa0}, {&(0x7f0000000240)="c23c77c5cb7aa77c4788c3998939dd68a0dbd14d5a2c9dde115c167982e0febc84caf67bdc72626a3304bdb658ad5c29edf2ddfdfd6566d07472f15c052ab94c5eca98c20b9b7ab6", 0x48}, {&(0x7f0000000680)="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", 0xec4}], 0x4, &(0x7f0000000480)=[@cred], 0x20}, 0x0) 17:44:02 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000240)={@broadcast, @local, @val, {@ipv6}}, 0x0) 17:44:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 960.143630][T22455] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 960.241980][T22457] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 960.265669][T22455] device geneve2 entered promiscuous mode 17:44:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x80, 0x0, 0x0) 17:44:03 executing program 3: open(0xfffffffffffffffe, 0x0, 0x0) [ 961.625915][T22457] device geneve2 entered promiscuous mode 17:44:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1, &(0x7f0000001880)}, 0x0) 17:44:04 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6}}, 0x0) 17:44:04 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @local, @val, {@ipv4}}, 0x0) 17:44:04 executing program 3: ftruncate(0xffffffffffffffff, 0x0) 17:44:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:05 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @local, @val, {@ipv4}}, 0x0) 17:44:05 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) [ 963.021836][T22494] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:05 executing program 4: perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x7800, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x5, 0xae, &(0x7f0000000080)=""/174, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 963.110974][T22495] device geneve2 entered promiscuous mode [ 963.192030][T22498] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x5, 0xbb}]}]}}, &(0x7f0000000080)=""/217, 0x32, 0xd9, 0x1}, 0x20) 17:44:06 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) [ 964.287572][T22498] device geneve2 entered promiscuous mode 17:44:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:07 executing program 4: connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000028c0), 0x20000, 0x0) 17:44:07 executing program 5: perf_event_open$cgroup(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:07 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 17:44:07 executing program 0: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000240)) 17:44:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:44:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf4240, &(0x7f00000000c0)=@framed={{}, [@jmp]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xa4, &(0x7f0000000140)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x84840) 17:44:08 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x33, &(0x7f0000000080), 0x4) [ 965.873330][T22532] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 965.953879][T22532] device geneve2 entered promiscuous mode [ 965.993063][T22536] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x5}, @struct={0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000080)=""/217, 0x37, 0xd9, 0x1}, 0x20) 17:44:09 executing program 0: perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 967.268324][T22536] device geneve2 entered promiscuous mode 17:44:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:10 executing program 4: socketpair(0x22, 0x3, 0x0, &(0x7f0000000640)) 17:44:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x1}, @typedef={0x5}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000080)=""/217, 0x54, 0xd9, 0x1}, 0x20) 17:44:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001300)={'vcan0\x00', @local}) 17:44:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:11 executing program 3: socketpair(0x22, 0x0, 0x6, &(0x7f0000000000)) 17:44:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f00000000c0)=""/227, 0x26, 0xe3, 0x1}, 0x20) [ 968.876428][T22569] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.943102][T22570] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 969.006979][T22569] device geneve2 entered promiscuous mode [ 970.314372][T22570] device geneve2 entered promiscuous mode [ 971.849083][ C0] not chained 10000 origins [ 971.852439][ C0] CPU: 0 PID: 11977 Comm: kworker/u4:16 Not tainted 5.12.0-rc6-syzkaller #0 [ 971.852439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.852439][ C0] Workqueue: krdsd rds_connect_worker [ 971.852439][ C0] Call Trace: [ 971.852439][ C0] [ 971.852439][ C0] dump_stack+0x24c/0x2e0 [ 971.852439][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 971.852439][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.852439][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.852439][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.852439][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.852439][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 971.852439][ C0] ? tcp_parse_options+0x22c4/0x2360 [ 971.852439][ C0] __msan_chain_origin+0x54/0xa0 [ 971.852439][ C0] tcp_conn_request+0x1afd/0x4d90 [ 971.852439][ C0] ? memcg_slab_free_hook+0x3a/0xb20 [ 971.852439][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.852439][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.852439][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.956868][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 971.956868][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.967780][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.968841][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] ? tcp_filter+0xf0/0xf0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 971.968841][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] ? ip_rcv_core+0x1480/0x1480 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 971.968841][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.968841][ C0] ? net_tx_action+0xd30/0xd30 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] ? idle_cpu+0x9a/0x1d0 [ 971.968841][ C0] ? __irq_exit_rcu+0x83/0x280 [ 971.968841][ C0] do_softirq+0x123/0x1c0 [ 971.968841][ C0] [ 971.968841][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 971.968841][ C0] local_bh_enable+0x36/0x40 [ 971.968841][ C0] ip_finish_output2+0x244e/0x2930 [ 971.968841][ C0] ? __msan_get_context_state+0x9/0x20 [ 971.968841][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 971.968841][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] __ip_finish_output+0x9fd/0x1050 [ 971.968841][ C0] ip_finish_output+0x329/0x480 [ 971.968841][ C0] ip_output+0x32e/0x6d0 [ 971.968841][ C0] ? ip_mc_finish_output+0x770/0x770 [ 971.968841][ C0] ? ip_finish_output+0x480/0x480 [ 971.968841][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 971.968841][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 971.968841][ C0] ? __msan_poison_alloca+0xec/0x110 [ 971.968841][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 971.968841][ C0] ip_queue_xmit+0xcc/0xf0 [ 971.968841][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 971.968841][ C0] __tcp_transmit_skb+0x4c59/0x5ea0 [ 971.968841][ C0] tcp_connect+0x104d/0x3d40 [ 971.968841][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 971.968841][ C0] tcp_v4_connect+0x255c/0x26f0 [ 971.968841][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 971.968841][ C0] __inet_stream_connect+0x8bf/0x1780 [ 971.968841][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 971.968841][ C0] ? __msan_instrument_asm_store+0x22/0x130 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] inet_stream_connect+0x101/0x180 [ 971.968841][ C0] ? __inet_stream_connect+0x1780/0x1780 [ 971.968841][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 971.968841][ C0] ? kmsan_get_metadata+0x116/0x180 [ 971.968841][ C0] ? rds_tcp_state_change+0x400/0x400 [ 971.968841][ C0] rds_connect_worker+0x3ba/0x5b0 [ 971.968841][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 971.968841][ C0] ? rds_addr_cmp+0x2f0/0x2f0 [ 971.968841][ C0] process_one_work+0x1219/0x1fe0 [ 971.968841][ C0] worker_thread+0x10ec/0x2340 [ 971.968841][ C0] kthread+0x521/0x560 [ 971.968841][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 971.968841][ C0] ? kthread_blkcg+0x110/0x110 [ 971.968841][ C0] ret_from_fork+0x1f/0x30 [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_conn_request+0x1b33/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 971.968841][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_conn_request+0x1b33/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 971.968841][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_conn_request+0x1b33/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 971.968841][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was stored to memory at: [ 971.968841][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 971.968841][ C0] __msan_chain_origin+0x54/0xa0 [ 971.968841][ C0] tcp_conn_request+0x1b33/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_v6_conn_request+0xe3/0x500 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_rcv+0x599/0x820 [ 971.968841][ C0] __netif_receive_skb+0x1ec/0x640 [ 971.968841][ C0] process_backlog+0x517/0xbd0 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 [ 971.968841][ C0] [ 971.968841][ C0] Uninit was created at: [ 971.968841][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 971.968841][ C0] kmsan_alloc_page+0xd0/0x1e0 [ 971.968841][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 971.968841][ C0] alloc_pages_current+0x7b6/0xb60 [ 971.968841][ C0] allocate_slab+0x364/0x1260 [ 971.968841][ C0] ___slab_alloc+0xd42/0x1930 [ 971.968841][ C0] kmem_cache_alloc+0xc68/0x1030 [ 971.968841][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 971.968841][ C0] tcp_conn_request+0x85d/0x4d90 [ 971.968841][ C0] tcp_v4_conn_request+0x201/0x290 [ 971.968841][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 971.968841][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 971.968841][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 971.968841][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 971.968841][ C0] ip_local_deliver+0x585/0x8d0 [ 971.968841][ C0] ip_sublist_rcv+0x121b/0x1560 [ 971.968841][ C0] ip_list_rcv+0x8f1/0x960 [ 971.968841][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 971.968841][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 971.968841][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 971.968841][ C0] napi_complete_done+0x558/0xdb0 [ 971.968841][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 971.968841][ C0] virtnet_poll+0x170f/0x1d10 [ 971.968841][ C0] __napi_poll+0x13e/0xca0 [ 971.968841][ C0] net_rx_action+0x726/0x14a0 [ 971.968841][ C0] __do_softirq+0x1b9/0x715 17:44:16 executing program 5: perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:16 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)) 17:44:16 executing program 4: perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x0, 0x40002, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, 0x0, &(0x7f00000021c0)=""/4089}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, &(0x7f0000033740)=""/102399}, 0x20) 17:44:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 974.425527][T22597] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 974.469252][T22599] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 974.530895][T22597] device geneve2 entered promiscuous mode 17:44:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) close(r0) 17:44:17 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x7800, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x5, 0xae, &(0x7f0000000080)=""/174, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000140)=""/252, 0x2a, 0xfc, 0x1}, 0x20) 17:44:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xaed3, 0x80, 0x6, 0x0, 0x1}, 0x40) 17:44:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000010010000100100000a000000080000000800000f02"], &(0x7f00000001c0)=""/4096, 0x132, 0x1000, 0x1}, 0x20) 17:44:18 executing program 0: socketpair(0x9, 0x0, 0x0, &(0x7f0000000400)) [ 975.673449][T22599] device geneve2 entered promiscuous mode 17:44:18 executing program 3: perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:19 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000280)=""/183, 0x26, 0xb7, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)}, 0x10) 17:44:19 executing program 0: perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000140)=""/191, 0x2f, 0xbf, 0x1}, 0x20) 17:44:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 17:44:19 executing program 4: bpf$BPF_PROG_TEST_RUN(0x11, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x48) 17:44:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4044040) 17:44:20 executing program 3: perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 977.577966][T22645] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 977.589012][T22646] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 977.711662][T22645] device geneve2 entered promiscuous mode 17:44:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4002, &(0x7f00000000c0)=@framed={{}, [@jmp]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xa4, &(0x7f0000000140)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 17:44:20 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x4, 0x0, 0x700) 17:44:21 executing program 3: io_setup(0x0, &(0x7f0000000080)=0x0) io_getevents(r0, 0x8, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)) 17:44:21 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/4096, 0x1000) [ 979.125616][T22646] device geneve2 entered promiscuous mode 17:44:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:23 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) connect(r0, &(0x7f0000000040), 0x1c) 17:44:23 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) r0 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 17:44:23 executing program 5: mlock(&(0x7f0000ff3000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000) 17:44:23 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x100) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 17:44:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 980.793994][T22687] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 980.896117][T22687] device geneve2 entered promiscuous mode 17:44:23 executing program 0: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 17:44:23 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0xd04f00) 17:44:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x100011, 0x4) [ 981.308959][T22694] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:24 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) select(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x2}, 0x0, &(0x7f0000000100)={r0}) 17:44:24 executing program 0: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) [ 982.442970][T22694] device geneve2 entered promiscuous mode 17:44:26 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40043, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) 17:44:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:26 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89e0, &(0x7f0000000180)) 17:44:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') read$fb(r0, &(0x7f0000000000)=""/28, 0xffffff76) read$fb(r0, 0x0, 0x31) 17:44:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:26 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)) [ 984.064933][T22727] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$fb(r0, &(0x7f00000001c0)=""/243, 0x200002b3) [ 984.173996][T22727] device geneve2 entered promiscuous mode 17:44:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc1810f3b7da56cac) 17:44:26 executing program 3: mmap$usbmon(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x5c6bf1d0549e057a, 0xffffffffffffffff, 0x0) 17:44:26 executing program 5: socket(0x25, 0x1, 0x4) [ 984.384107][T22732] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "93245b90"}, 0x0, 0x0, @planes=0x0}) 17:44:28 executing program 4: pipe2$9p(&(0x7f0000001f40), 0x0) [ 986.161321][T22732] device geneve2 entered promiscuous mode 17:44:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 17:44:29 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x0) read$fb(r0, &(0x7f0000000000)=""/27, 0x1b) read$fb(r0, 0x0, 0x0) 17:44:29 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa9b0d09"}, 0x0, 0x0, @fd}) 17:44:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 987.765031][T22766] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:30 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 17:44:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@loopback}, {@in=@dev}, @in6=@local}}, 0xf0}}, 0x0) [ 987.883567][T22766] device geneve2 entered promiscuous mode 17:44:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 987.948234][T22771] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 988.536330][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 989.117200][T22771] device geneve2 entered promiscuous mode 17:44:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10041) 17:44:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') read$fb(r0, &(0x7f0000000000)=""/28, 0xffffff76) read$fb(r0, 0x0, 0x0) 17:44:32 executing program 0: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:32 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa9b0d09"}, 0x0, 0x0, @fd}) [ 990.413867][T22801] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 990.438954][T22802] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 990.549483][T22801] device geneve2 entered promiscuous mode 17:44:33 executing program 0: syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) 17:44:33 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 17:44:33 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x40043, 0x10) io_cancel(0x0, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x800) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x222e, 0xffffffffffffffff, &(0x7f0000000180)="2a8a1ce954ba539286b11106b10fa909deaa06446a1c0cc560b5e8c81c3e84c79413da69eef3ba23f8deb714ea8ec21f8381ac42a3bc5145769468a9b01b1efaa77925b6c25e21a972d8ed3d4517415adc2770c2bc6ddbc4ee22e1bdb29b94bf99d706f9f51a409f37bc3ea50b3401e0ee9d50eac993f4d97f7c538e4c23ba83f8261b43db1a41db71c0d7970187c1884f292de71286fd578e5ac8bf1da22d92b7556cf1c0d2ce8b14559c3037d16819", 0xb0, 0x962, 0x0, 0x1, r0}, &(0x7f00000002c0)) syz_mount_image$sysv(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x2, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="59e55dd7f34571fcd54349197f95b1700963ddd4c95b8394ca1f58881530befbbede3ea0ed7ace493582c27cbccf000c51e33257dbdac226c96a2ea0240e0de6e2b60db5716b8a97b2f82b6cac03a43351bf41af11d13a2808873d43621e65913adb78a57f449dbb8bb2fa004bde5a17317d49385318f58e1a08f3ed4db01fa3448a227ca6bfcf764233872645de60964d96f87663c941d9c34a67d008b1c73e180c39413e06d1763a35370bf048e728ff701a27f4fec94401e2d22a77303a16cd02ce6835c7cf082b494f9b7679b9eaa700c3626bf4e494994bf144fafaa9fe2a0730089140541cbf780eeb3cb62ce8664af7", 0xf3, 0x4384}], 0x0, &(0x7f00000004c0)={[{}, {'syz1\x00'}, {'^\''}, {'/dev/audio#\x00'}, {'/^'}, {'/dev/audio#\x00'}, {'\'\\,'}], [{@euid_gt}, {@euid_lt}]}) io_getevents(0x0, 0x8, 0x1, &(0x7f0000000540)=[{}], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4e}]}, 0x24}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)={0x20, 0x37, 0x1, {0x2, 0x0, 0x101, 0xffffffffffffffff, 0x2, '/^'}}, 0x20) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000840)={0x0, &(0x7f0000000800)}) 17:44:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={0x0, 0xf0ff7f}}, 0x0) [ 991.489560][T22817] loop4: detected capacity change from 0 to 67 17:44:34 executing program 5: select(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000240)) [ 991.550313][T22817] VFS: unable to find oldfs superblock on device loop4 [ 991.807190][T22802] device geneve2 entered promiscuous mode [ 991.821573][T22821] loop4: detected capacity change from 0 to 67 17:44:34 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000000c0)={'bond0\x00', @ifru_map}) [ 991.933116][T22821] VFS: unable to find oldfs superblock on device loop4 17:44:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x13, 0x0, &(0x7f0000000100)) 17:44:35 executing program 4: syz_mount_image$adfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$sysv(0x0, 0x0, 0x0, 0x4, &(0x7f0000001c00)=[{&(0x7f00000008c0), 0x0, 0x400}, {&(0x7f0000000980)="a73b3b4d6d6e2c198ddae0b80a28d380112c99c67db8c1acdf42510da906e39cf5ebccf71194a558da7a01632b1576ce4d85c946671de57587c2ce7ad12f06", 0x3f, 0x15a6517e}, {&(0x7f0000000b00)}, {0x0}], 0x0, &(0x7f0000001cc0)={[{'-]'}, {'/dev/amidi#\x00'}, {'}{$))&\'+:\'\\+*'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x0, 0x37, 0x0, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x66, 0x39, 0x33], 0x2d, [0x38, 0x61, 0x61], 0x2d, [0x0, 0x0, 0x61], 0x2d, [0x63, 0x56, 0x62, 0x65, 0x30, 0x31, 0x0, 0x30]}}}, {@dont_measure}]}) 17:44:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 17:44:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:35 executing program 0: select(0x40, &(0x7f0000000000)={0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) [ 993.092980][T22843] loop4: detected capacity change from 0 to 264192 [ 993.178870][T22849] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.312994][T22849] device geneve2 entered promiscuous mode 17:44:36 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x970000) 17:44:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, 0x0, 0x0) [ 993.670503][T22856] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:36 executing program 3: select(0xffc99a3b, 0x0, 0x0, 0x0, &(0x7f0000000240)) 17:44:36 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 994.426161][T22856] device geneve2 entered promiscuous mode 17:44:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$fb(r0, 0x0, 0x0) 17:44:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x400c011) 17:44:37 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa9b0d09"}, 0x0, 0x0, @fd}) 17:44:37 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') write$char_raw(r0, 0x0, 0xbe00) 17:44:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x0) 17:44:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:44:38 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1}, 0x0) 17:44:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000002b40)=@getae={0x40, 0x1f, 0x0, 0x0, 0x0, {{@in6=@dev}}}, 0x40}}, 0x0) 17:44:38 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') read$fb(r0, &(0x7f0000000180)=""/251, 0x2000027b) [ 996.399295][T22892] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 996.526192][T22896] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 996.534774][T22892] device geneve2 entered promiscuous mode 17:44:39 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 17:44:39 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b0fe4049"}, 0x0, 0x0, @fd}) 17:44:39 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x584, 'syz1\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x222e, 0xffffffffffffffff, &(0x7f0000000180)="2a8a1ce954ba539286b11106b10fa909deaa06446a1c0cc560b5e8c81c3e84c79413da69eef3ba23f8deb714ea8ec21f8381ac42a3bc5145769468a9b01b1efaa77925b6c25e21a972d8ed3d4517415adc2770c2bc6ddbc4ee22e1bdb29b94bf99d706f9f51a409f37bc3ea50b3401e0ee9d50eac993f4d97f7c538e4c23ba83f8261b43db1a41db71c0d7970187c1884f292de71286fd578e5ac8bf1da22d92b7556cf1c0d2ce8b14559c3037d168", 0xaf, 0x962}, &(0x7f00000002c0)) r1 = geteuid() syz_mount_image$sysv(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'syz1\x00'}, {'^\''}, {'/^'}, {'/dev/audio#\x00'}, {'\'\\,'}], [{@euid_gt={'euid>', r1}}]}) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000540)=[{}], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:44:40 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b0fe4049"}, 0x0, 0x0, @fd}) 17:44:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) [ 997.864339][T22896] device geneve2 entered promiscuous mode 17:44:40 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x1) [ 998.006887][T22913] VFS: unable to find oldfs superblock on device loop4 17:44:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b0fe4049"}, 0x0, 0x0, @fd}) 17:44:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000080)=0x100000033) 17:44:41 executing program 0: syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x68000000, &(0x7f0000001500), 0x2040, &(0x7f00000015c0)) 17:44:41 executing program 5: r0 = socket(0x18, 0x0, 0x2) bind$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 999.711674][T22943] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 999.732792][T22944] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 999.875802][T22944] device geneve2 entered promiscuous mode 17:44:42 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b0fe4049"}, 0x0, 0x0, @fd}) 17:44:42 executing program 4: syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x2040, &(0x7f00000015c0)) 17:44:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) 17:44:43 executing program 0: syz_mount_image$adfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[], [{@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_mount_image$sysv(&(0x7f0000000800), 0x0, 0x0, 0x1, &(0x7f0000001c00)=[{0x0}], 0x800000, &(0x7f0000001cc0)) 17:44:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 17:44:43 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 1001.353862][T22943] device geneve2 entered promiscuous mode [ 1001.370518][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.377210][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 17:44:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2, 0x0, &(0x7f0000000100)) 17:44:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xd, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa9b0d09"}, 0x0, 0x0, @fd}) 17:44:45 executing program 5: select(0x40, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0) 17:44:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 17:44:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1003.272338][T23003] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1003.419484][T23003] device geneve2 entered promiscuous mode 17:44:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) 17:44:46 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) 17:44:46 executing program 0: syz_mount_image$hpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x1000, &(0x7f0000000400)) 17:44:46 executing program 3: mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9130, 0xffffffffffffffff, 0x0) [ 1003.808438][T23011] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:47 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 17:44:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1004.924909][T23011] device geneve2 entered promiscuous mode 17:44:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:48 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x0) 17:44:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$fb(r0, &(0x7f0000000000)=""/28, 0xffffff76) 17:44:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 17:44:48 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000100)) 17:44:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1006.403408][T23051] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, 0x0, &(0x7f0000000100)) [ 1006.524748][T23051] device geneve2 entered promiscuous mode 17:44:49 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000340)="0830031df6addf6a2b63763eea3cc9ba565adace", 0x14, 0x3ff}, {&(0x7f0000000380)="1f6a", 0x2, 0xfff}, {0x0, 0x0, 0x4}], 0x2070a0, &(0x7f0000000580)={[{'*+*!)@.'}, {'.log\x00'}, {']@'}, {}, {'\xe8\xda\xb9\x924\xbb1.'}, {'\xe8\xda\xb9\x924\xbb1.'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}) 17:44:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000580)) 17:44:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='syscall\x00') read$fb(r0, 0x0, 0x0) [ 1006.659142][T23056] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.259482][T23065] loop0: detected capacity change from 0 to 15 17:44:50 executing program 3: socket$unix(0x1, 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000002bc0), &(0x7f0000002c00)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x8, &(0x7f0000003f40)) 17:44:50 executing program 4: syz_mount_image$adfs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x0, &(0x7f0000000340)) [ 1007.961161][T23056] device geneve2 entered promiscuous mode [ 1008.097483][T23079] VFS: unable to find oldfs superblock on device loop3 17:44:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:51 executing program 0: syz_mount_image$ocfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'*+*!)@.'}, {'.log\x00'}]}) 17:44:51 executing program 3: setrlimit(0x7, &(0x7f0000000100)) setrlimit(0x7, &(0x7f00000000c0)={0x1f}) 17:44:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002d80)={&(0x7f0000000000), 0x2000000c, 0x0}, 0x0) 17:44:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0xc, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 17:44:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1009.021659][T23099] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 1009.212103][T23101] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x1c}, 0x20108) 17:44:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) 17:44:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)=0xb0) [ 1009.334855][T23101] device geneve2 entered promiscuous mode 17:44:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x29) [ 1009.389484][T23107] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:52 executing program 3: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 17:44:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000280), 0x4) [ 1010.546016][T23107] device geneve2 entered promiscuous mode 17:44:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@in6={0x0, 0x2, 0x1}, 0x10) 17:44:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@in6={0x0, 0x2, 0x1}, 0x10) shutdown(r0, 0x1) 17:44:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000280)=0xa0) 17:44:54 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r0, 0x0) 17:44:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, &(0x7f00000000c0)) 17:44:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 17:44:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x5a02d5f339df9a7d}, 0x98) [ 1012.206942][T23148] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1012.250259][T23149] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.350421][T23148] device geneve2 entered promiscuous mode 17:44:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, &(0x7f0000000380)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:44:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x18c, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 17:44:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001940)={&(0x7f0000001400)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000018c0)=[{&(0x7f00000019c0)="fd", 0x1}], 0x1}, 0x0) [ 1013.776881][T23149] device geneve2 entered promiscuous mode 17:44:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:44:57 executing program 5: r0 = socket(0x1c, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 17:44:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x47, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 17:44:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/233, 0xe9}, 0x1) 17:44:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:44:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1015.216994][T23196] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1015.306870][T23196] device geneve2 entered promiscuous mode 17:44:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 17:44:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), 0x94) 17:44:58 executing program 3: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x00') 17:44:58 executing program 5: clock_nanosleep(0x4, 0x1, &(0x7f0000000000), 0x0) [ 1015.587960][T23201] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:44:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) [ 1016.654362][T23201] device geneve2 entered promiscuous mode 17:45:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:00 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000080)='Z', 0x1, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:45:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000180), 0x8) 17:45:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x0, 0x0, 0x100}, 0x98) 17:45:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x51, 0x0, 0x0) 17:45:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:00 executing program 4: clock_settime(0x0, &(0x7f0000002100)={0x0, 0x3938700}) [ 1018.107219][T23241] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x0) 17:45:00 executing program 3: fcntl$getown(0xffffffffffffffff, 0x12) [ 1018.226272][T23242] device geneve2 entered promiscuous mode [ 1018.254671][T23246] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x43, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 17:45:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:45:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x5c00, 0x0, &(0x7f00000001c0)=@un=@abs={0x8}, 0x8) [ 1019.486578][T23246] device geneve2 entered promiscuous mode 17:45:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 17:45:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x14, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 17:45:03 executing program 4: fork() shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 17:45:03 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b4393300000000fe80000000000000000000000000000000000000000000000000a87d31c6309d026990"], 0x0) 17:45:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 1021.059349][T23286] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)='I', 0x1}], 0x1, &(0x7f0000000680)=[@authinfo={0x10}], 0x10}, 0x0) [ 1021.100985][T23287] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:03 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b4393300000000fe80000000000000000000000000000000000000000000000000a87d31c6309d026990"], 0x0) [ 1021.208789][T23286] device geneve2 entered promiscuous mode 17:45:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f00000016c0)={r1}, 0x8) 17:45:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 17:45:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 1022.361906][T23287] device geneve2 entered promiscuous mode 17:45:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x8c) 17:45:05 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b4393300000000fe80000000000000000000000000000000000000000000000000a87d31c6309d026990"], 0x0) 17:45:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="02", 0x1, 0x0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 17:45:05 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xffffffffffffffaf, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0x8) 17:45:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1023.761014][T23333] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 17:45:06 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) [ 1023.879694][T23333] device geneve2 entered promiscuous mode 17:45:06 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b4393300000000fe80000000000000000000000000000000000000000000000000a87d31c6309d026990"], 0x0) [ 1023.948949][T23338] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:45:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 17:45:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, 0x0) [ 1025.229430][T23338] device geneve2 entered promiscuous mode 17:45:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400), 0x8c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="d9a634b3e34402087125619512fa31df4ea2f8af6fbc0167a6cefb31afc126eacdf3a3bb3be3d597b953951528c696783a3971f16c0a4e3ea38438bb6e5bbddf31b75f5473b7ab3db39c995b0cabcab96bba7d3b46925b9e2af44067eba4ea609d4520db4f5a1887b5aaee3610b9cca9b3fc1cf6046e9d5933241852d7d1d28a2eb1d2ffd97ac437e3cbd4a1f770bfa3", 0x90}, {&(0x7f00000004c0)="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", 0x800}, {&(0x7f00000014c0)="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", 0x264}], 0x3}, 0x0) 17:45:08 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 17:45:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @prinfo={0x14}, @init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndinfo={0x1c}, @init={0x14}], 0xa4}, 0x0) 17:45:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000500)={0x10, 0x2}, 0x10) 17:45:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x4894}, 0x8) [ 1026.734993][T23378] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1026.763411][T23379] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0xa0) 17:45:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 1026.858585][T23378] device geneve2 entered promiscuous mode 17:45:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000080), 0xc) 17:45:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)='w', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x6}, 0x98) 17:45:10 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) [ 1027.769904][ C0] not chained 20000 origins [ 1027.772438][ C0] CPU: 0 PID: 11981 Comm: kworker/u4:17 Not tainted 5.12.0-rc6-syzkaller #0 [ 1027.772438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.772438][ C0] Workqueue: krdsd rds_connect_worker [ 1027.772438][ C0] Call Trace: [ 1027.772438][ C0] [ 1027.772438][ C0] dump_stack+0x24c/0x2e0 [ 1027.772438][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1027.772438][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 1027.772438][ C0] ? tcp_parse_options+0x22c4/0x2360 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_conn_request+0x19e9/0x4d90 [ 1027.772438][ C0] ? tcp_shutdown+0x1f5/0x270 [ 1027.772438][ C0] ? memcg_slab_free_hook+0x3a/0xb20 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1027.772438][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? tcp_filter+0xf0/0xf0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 1027.772438][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] ? ip_rcv_core+0x1480/0x1480 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1027.772438][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] ? net_tx_action+0xd30/0xd30 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] ? idle_cpu+0x9a/0x1d0 [ 1027.772438][ C0] ? __irq_exit_rcu+0x83/0x280 [ 1027.772438][ C0] do_softirq+0x123/0x1c0 [ 1027.772438][ C0] [ 1027.772438][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1027.772438][ C0] local_bh_enable+0x36/0x40 [ 1027.772438][ C0] ip_finish_output2+0x244e/0x2930 [ 1027.772438][ C0] ? __msan_get_context_state+0x9/0x20 [ 1027.772438][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 1027.772438][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] __ip_finish_output+0x9fd/0x1050 [ 1027.772438][ C0] ip_finish_output+0x329/0x480 [ 1027.772438][ C0] ip_output+0x32e/0x6d0 [ 1027.772438][ C0] ? ip_mc_finish_output+0x770/0x770 [ 1027.772438][ C0] ? ip_finish_output+0x480/0x480 [ 1027.772438][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 1027.772438][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1027.772438][ C0] ? __msan_poison_alloca+0xec/0x110 [ 1027.772438][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 1027.772438][ C0] ip_queue_xmit+0xcc/0xf0 [ 1027.772438][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 1027.772438][ C0] __tcp_transmit_skb+0x4c59/0x5ea0 [ 1027.772438][ C0] tcp_connect+0x104d/0x3d40 [ 1027.772438][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1027.772438][ C0] tcp_v4_connect+0x255c/0x26f0 [ 1027.772438][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 1027.772438][ C0] __inet_stream_connect+0x8bf/0x1780 [ 1027.772438][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1027.772438][ C0] ? __msan_instrument_asm_store+0x22/0x130 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] inet_stream_connect+0x101/0x180 [ 1027.772438][ C0] ? __inet_stream_connect+0x1780/0x1780 [ 1027.772438][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 1027.772438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1027.772438][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1027.772438][ C0] rds_connect_worker+0x3ba/0x5b0 [ 1027.772438][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1027.772438][ C0] ? rds_addr_cmp+0x2f0/0x2f0 [ 1027.772438][ C0] process_one_work+0x1219/0x1fe0 [ 1027.772438][ C0] worker_thread+0x10ec/0x2340 [ 1027.772438][ C0] kthread+0x521/0x560 [ 1027.772438][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 1027.772438][ C0] ? kthread_blkcg+0x110/0x110 [ 1027.772438][ C0] ret_from_fork+0x1f/0x30 [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1027.772438][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1027.772438][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1027.772438][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was stored to memory at: [ 1027.772438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.772438][ C0] __msan_chain_origin+0x54/0xa0 [ 1027.772438][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_rcv+0x599/0x820 [ 1027.772438][ C0] __netif_receive_skb+0x1ec/0x640 [ 1027.772438][ C0] process_backlog+0x517/0xbd0 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1027.772438][ C0] [ 1027.772438][ C0] Uninit was created at: [ 1027.772438][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1027.772438][ C0] kmsan_alloc_page+0xd0/0x1e0 [ 1027.772438][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 1027.772438][ C0] alloc_pages_current+0x7b6/0xb60 [ 1027.772438][ C0] allocate_slab+0x364/0x1260 [ 1027.772438][ C0] ___slab_alloc+0xd42/0x1930 [ 1027.772438][ C0] kmem_cache_alloc+0xc68/0x1030 [ 1027.772438][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 1027.772438][ C0] tcp_conn_request+0x85d/0x4d90 [ 1027.772438][ C0] tcp_v4_conn_request+0x201/0x290 [ 1027.772438][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1027.772438][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1027.772438][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1027.772438][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1027.772438][ C0] ip_local_deliver+0x585/0x8d0 [ 1027.772438][ C0] ip_sublist_rcv+0x121b/0x1560 [ 1027.772438][ C0] ip_list_rcv+0x8f1/0x960 [ 1027.772438][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 1027.772438][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 1027.772438][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 1027.772438][ C0] napi_complete_done+0x558/0xdb0 [ 1027.772438][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 1027.772438][ C0] virtnet_poll+0x170f/0x1d10 [ 1027.772438][ C0] __napi_poll+0x13e/0xca0 [ 1027.772438][ C0] net_rx_action+0x726/0x14a0 [ 1027.772438][ C0] __do_softirq+0x1b9/0x715 [ 1029.338966][T23379] device geneve2 entered promiscuous mode 17:45:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0) 17:45:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)=ANY=[], 0x98) 17:45:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 17:45:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) 17:45:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000100), &(0x7f0000000180)=0x18) [ 1030.482546][T23425] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000008c0)="bf", 0x1}], 0x1, &(0x7f0000000400)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:45:13 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) [ 1030.641888][T23428] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1030.665716][T23425] device geneve2 entered promiscuous mode 17:45:13 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:15 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26200, 0x86) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x400, 0x5b3, 0x3}) 17:45:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xff, 0x7, 0x7, 0x0, 0x0, 0x1000, 0x8000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x6, 0x4}, 0x40002, 0x81, 0x1000, 0x4, 0xf01e, 0x983, 0x3, 0x0, 0x1, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26200, 0x86) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="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"]) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x400, 0x5b3, 0x3}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4}) 17:45:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x400, 0x5b3}) 17:45:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 17:45:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:15 executing program 4: socketpair(0x1e, 0x0, 0x10001, &(0x7f0000000040)) 17:45:15 executing program 3: socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1033.265240][T23474] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000006300)=[{{&(0x7f00000004c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000500)="14", 0x1}], 0x1, &(0x7f0000001b00)=[@ip_retopts={{0x14, 0x84, 0x7, {[@lsrr={0x83, 0x3}]}}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x1, 0x40040c0) 17:45:16 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) [ 1033.408723][T23474] device geneve2 entered promiscuous mode [ 1033.495106][T23479] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:16 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) [ 1034.567212][T23492] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:17 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x233}}, 0x1e) 17:45:17 executing program 5: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x6e6bbe}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1}}, 0xe8) pipe(&(0x7f0000000000)) 17:45:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 17:45:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000d1b7db"], 0x14}}, 0x0) 17:45:17 executing program 5: setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) 17:45:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002d80), 0x10}, 0x78) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) [ 1035.300533][T23506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:17 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040), 0x1e) [ 1035.467160][T23509] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1035.468094][T23506] device geneve2 entered promiscuous mode 17:45:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 17:45:18 executing program 3: socket$netlink(0x10, 0x3, 0x53d2d65694a98c24) 17:45:18 executing program 0: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) [ 1036.530574][T23524] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:19 executing program 5: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) 17:45:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x48005) 17:45:19 executing program 3: pipe(&(0x7f0000001640)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) 17:45:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 17:45:19 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) [ 1037.280231][T23539] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x76, &(0x7f0000000400)={r2}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002600)={r2, 0x5}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000007200000008000300", @ANYRES32=r5, @ANYBLOB="18ef78d1b5532702350356d6214c763e52a0c4b77ee66c5b3768db9be733"], 0x1c}}, 0x0) [ 1037.610396][T23548] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x7}, 0x14}}, 0x0) [ 1037.755478][T23548] device geneve2 entered promiscuous mode 17:45:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002b40)={0x1c, 0x0, 0x0, 0x0, 0x1202, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x8, &(0x7f0000002c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff119}, [@initr0, @map_val, @exit]}, &(0x7f0000002c80)='GPL\x00', 0x329, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002d40), 0x8, 0x10, 0x0}, 0x78) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000002ec0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38af49a1276291ac80b758914d1309dc498d3cdcbcdf6f450dfb3e15f60dc3a55857fc05245dc02a96b46d7666ce69b589011785cc3949204f2e59a6bf01aa", 0x1}, {0x0}, &(0x7f0000002e80)}, 0xa0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004d40), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x0) 17:45:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 17:45:20 executing program 0: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x2040014) [ 1038.457857][T23564] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:21 executing program 5: pipe(&(0x7f0000002b80)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000004c40), r0) 17:45:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002b40)={0x1c, 0x0, 0x0, 0x0, 0x1202, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x8, &(0x7f0000002c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff119}, [@initr0, @map_val, @exit]}, &(0x7f0000002c80)='GPL\x00', 0x329, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002d40), 0x8, 0x10, 0x0}, 0x78) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000002ec0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38af49a1276291ac80b758914d1309dc498d3cdcbcdf6f450dfb3e15f60dc3a55857fc05245dc02a96b46d7666ce69b589011785cc3949204f2e59a6bf01aa", 0x1}, {0x0}, &(0x7f0000002e80)}, 0xa0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004d40), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x0) 17:45:21 executing program 0: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001640)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:45:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1039.491232][T23581] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:22 executing program 5: connect$l2tp(0xffffffffffffffff, 0x0, 0x0) 17:45:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000340)) 17:45:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\a'], 0x14}}, 0x0) [ 1039.868877][T23587] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) [ 1040.029300][T23587] device geneve2 entered promiscuous mode 17:45:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) [ 1040.457690][T23597] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001300)=0xbb1, 0x4) 17:45:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:45:24 executing program 4: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:45:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) 17:45:24 executing program 5: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x9, 0x0, 0x8}, &(0x7f00000000c0)={0x77359400}) [ 1041.639897][T23613] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:24 executing program 0: pipe(&(0x7f0000002080)) 17:45:24 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x6201c0, 0x0) 17:45:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) [ 1042.050732][T23623] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1042.152932][T23623] device geneve2 entered promiscuous mode 17:45:24 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x3) 17:45:25 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000e40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, @bcast, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}) [ 1042.666679][T23633] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) 17:45:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000003c0)) 17:45:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 17:45:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 17:45:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={@with_ht={{{}, {}, @broadcast}}, 0x0, 0x0, 0x0, @void}}]}, 0x44}}, 0x0) 17:45:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) 17:45:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0), &(0x7f0000000340)=0x44) [ 1043.902021][T23651] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002b40)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 1044.123413][T23656] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1044.250038][T23656] device geneve2 entered promiscuous mode 17:45:26 executing program 5: socket$isdn(0x22, 0x3, 0x23) 17:45:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 17:45:27 executing program 3: socket$inet(0x2, 0x754ed2de885f952b, 0x0) 17:45:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x33b0}, 0x0) [ 1044.977575][T23669] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:27 executing program 4: pipe(&(0x7f0000001640)) socketpair(0x0, 0x0, 0x0, 0x0) 17:45:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) 17:45:28 executing program 5: socketpair(0x0, 0x8000d, 0x0, &(0x7f0000000100)) 17:45:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 17:45:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x0, 0x5, &(0x7f0000002c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@initr0]}, &(0x7f0000002c80)='GPL\x00', 0x329, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002d40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002d80)={0x0, 0xc}, 0x10}, 0x78) 17:45:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1046.121208][T23688] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.248211][T23688] device geneve2 entered promiscuous mode 17:45:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250200000008000100030000001c0004"], 0xf8}}, 0x0) 17:45:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={0x0}, 0x1, 0x0, 0x7}, 0x0) [ 1046.473853][T23695] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, 0x0}) r0 = syz_open_dev$ndb(&(0x7f0000001340), 0x0, 0x200080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x4f, 0xff, 0x1}, {0x6, 0xbd, 0x81, 0x100}]}) syz_open_dev$ndb(&(0x7f0000001340), 0x0, 0x200080) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$BLKIOMIN(r1, 0x1278, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x5) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000000c0)=""/33) 17:45:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40044591, &(0x7f0000000000)) [ 1046.967722][T23699] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1047.068456][T23704] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1047.088747][ T35] audit: type=1326 audit(1619372729.631:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7f5d549 code=0x0 [ 1047.221791][ T35] audit: type=1326 audit(1619372729.681:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f5d549 code=0x0 17:45:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 1047.493983][T23695] device geneve2 entered promiscuous mode 17:45:30 executing program 5: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x66f40) [ 1047.876352][ T35] audit: type=1326 audit(1619372730.421:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7f5d549 code=0x0 [ 1048.028177][ T35] audit: type=1326 audit(1619372730.501:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f5d549 code=0x0 17:45:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) 17:45:31 executing program 4: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 17:45:31 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xc0000102) 17:45:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x2}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) 17:45:31 executing program 5: prctl$PR_SET_SECCOMP(0x29, 0x2, 0x0) 17:45:31 executing program 5: futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) 17:45:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40044590, &(0x7f0000000000)) 17:45:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/149) 17:45:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002000)={&(0x7f0000000040), 0xc, &(0x7f0000001fc0)={0x0, 0xec0}}, 0x0) [ 1049.225988][T23734] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1049.309682][T23736] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1049.367162][T23734] device geneve2 entered promiscuous mode 17:45:32 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0xc0072, 0xffffffffffffffff, 0x10000000) 17:45:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2502"], 0xf8}}, 0x0) [ 1050.573176][T23736] device geneve2 entered promiscuous mode [ 1050.658070][T23756] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1050.707293][T23757] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) 17:45:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1c, 0x4) 17:45:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {}]}) 17:45:34 executing program 5: prctl$PR_SET_SECCOMP(0x27, 0x0, &(0x7f0000000100)={0x0, 0x0}) 17:45:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80044584, &(0x7f0000000000)) [ 1051.862571][T23772] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:34 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, 0x12, r0, 0x10000000) [ 1051.995716][T23772] device geneve2 entered promiscuous mode 17:45:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 17:45:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x400445a0, &(0x7f0000000000)=[0x7]) 17:45:34 executing program 4: pselect6(0x6, &(0x7f0000002a40), 0x0, &(0x7f0000002ac0), &(0x7f0000002b40), 0x0) [ 1052.167747][T23777] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x8982, &(0x7f0000000000)={@remote, @mcast1, @private1}) 17:45:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000000000)={@remote, @mcast1, @private1}) [ 1053.361213][T23777] device geneve2 entered promiscuous mode 17:45:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(0x0, r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:36 executing program 3: r0 = getpid() r1 = fork() epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) 17:45:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x40049409, &(0x7f0000000000)={@remote, @mcast1, @private1}) 17:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x60}}, 0x0) 17:45:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:45:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}}, 0x0) 17:45:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000000)={@remote, @mcast1, @private1}) 17:45:37 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) [ 1054.708100][T23815] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1054.708926][T23814] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1054.807954][T23817] device geneve2 entered promiscuous mode 17:45:37 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 17:45:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 17:45:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f00000003c0)={@dev}, 0x14) 17:45:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x11, &(0x7f00000003c0)={@dev}, 0x14) [ 1056.081451][T23815] device geneve2 entered promiscuous mode 17:45:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(0x0, r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:39 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) 17:45:39 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 17:45:39 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x20000) 17:45:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:45:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) 17:45:40 executing program 0: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:45:40 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000900)={&(0x7f0000000180), 0xc, &(0x7f00000008c0)={0x0}}, 0x0) 17:45:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$fb(r0, &(0x7f0000000000)=""/28, 0xffffff76) 17:45:40 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x4, "a19898a5f57fe692c2e07d53e0aece43151a1f3b1ed0ded2b43067592681a5f4"}) [ 1057.801277][T23855] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1057.848342][T23857] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1057.950240][T23857] device geneve2 entered promiscuous mode 17:45:41 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x113241, 0x0) 17:45:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast2, @mcast1, @private1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000}) [ 1058.959008][T23855] device geneve2 entered promiscuous mode 17:45:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(0x0, r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x60) 17:45:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 17:45:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17:45:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:45:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast2, @mcast1, @private1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000}) 17:45:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x17, &(0x7f00000003c0)={@dev}, 0x14) [ 1060.222596][T23892] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="780007000000000400000c214e020078006500003f2990787f000001ac"]}) 17:45:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private0, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x0, 0x8, 0x1ff, 0x0, 0x0, 0x5000000}) [ 1060.370890][T23892] device geneve2 entered promiscuous mode 17:45:43 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 1060.641090][T23900] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:43 executing program 3: io_uring_setup(0x211, &(0x7f0000000140)={0x0, 0x74b3, 0x8}) 17:45:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000200)="046837a94c18418c35f9fed27f3f1b0ac0e5d3127ce99d08bde4fb5e148532910895d8d492510fbc626ae415bf2bb16ba6aff62613a4e16d1081cbbcf04dfa425c52db999c72fb355ac34fe9848d3ae03b6a66da5501992ed3457ce9abbe094afb982c78025d321b2f0b96e2c5bad1d816fa44e95923c19cdec8dca5a4f540cf40f16924760af50631b90ea49c76d3d0a42991339bd4ba97ed666c4601be6586a12a86a7bcef4ad3a859cc8f07597225", 0xb0}, {&(0x7f0000002340)="71889189eb646e33f2becacfb3d7b3bb0c658e7dfa9305a394", 0x19}], 0x2}}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xf, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 1061.721781][T23900] device geneve2 entered promiscuous mode 17:45:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:45 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 17:45:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) 17:45:45 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:45:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:45 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) [ 1062.813196][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.819690][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 17:45:45 executing program 3: socketpair(0x0, 0x8080d, 0x0, &(0x7f0000000000)) [ 1063.255814][T23933] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:45 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1063.321469][T23938] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1063.446967][T23933] device geneve2 entered promiscuous mode 17:45:46 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 17:45:46 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x0, 0x2}) 17:45:46 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) 17:45:46 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 1064.989895][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1065.007293][T23938] device geneve2 entered promiscuous mode 17:45:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@private, @rand_addr=0x64010101}, 0xc) 17:45:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x0, "a19898a5f57fe692c2e07d53e0aece43151a1f3b1ed0ded2b43067592681a5f4"}) 17:45:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x5451, 0x0) 17:45:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000000)={@remote, @mcast1, @private1}) 17:45:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0xc020660b, 0x0) 17:45:48 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a63, 0x0) 17:45:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/153, 0x99}], 0x1}}], 0x1, 0x0, 0x0) [ 1065.878028][T23970] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1065.996765][T23970] device geneve2 entered promiscuous mode [ 1066.005663][T23975] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xdc}]}}}], 0x40}, 0x0) 17:45:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0045878, 0x0) 17:45:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r1, 0x605, 0x0, 0x0, {0x12}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}}, 0x0) [ 1067.343134][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x140) 17:45:50 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) 17:45:50 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x24) 17:45:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:50 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) 17:45:50 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) [ 1068.132117][T24008] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1068.143746][T24007] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:50 executing program 0: migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) [ 1068.258179][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) [ 1068.342805][T24008] device geneve2 entered promiscuous mode 17:45:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESOCT], 0x60}}, 0x0) 17:45:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x10, &(0x7f00000003c0)={@dev}, 0x14) [ 1069.260507][T24025] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.566076][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x0, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:52 executing program 0: socketpair(0x11, 0xa, 0x0, &(0x7f0000000100)) 17:45:52 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 17:45:52 executing program 3: syz_io_uring_setup(0x5e64, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 17:45:52 executing program 5: r0 = getpid() r1 = fork() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) 17:45:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:52 executing program 0: io_uring_setup(0x10b3, &(0x7f0000000040)={0x0, 0x4c277, 0x8}) 17:45:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0}}) [ 1070.275203][T24040] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:53 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 1070.418768][T24044] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1070.448759][T24045] device geneve2 entered promiscuous mode 17:45:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x5b) 17:45:53 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 17:45:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}, 0x0) [ 1071.757144][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x0, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:54 executing program 5: syz_open_dev$video4linux(&(0x7f0000000180), 0x9, 0x1) 17:45:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x3c, &(0x7f00000003c0)={@dev}, 0x14) 17:45:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) 17:45:54 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f00000000c0)) [ 1072.660234][T24079] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1072.770112][T24082] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:55 executing program 5: socketpair(0x2, 0x2, 0x88, &(0x7f0000000140)) [ 1072.897668][T24081] device geneve2 entered promiscuous mode 17:45:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) 17:45:55 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x319102, 0x0) 17:45:55 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000004c0)=[{}], &(0x7f0000000500)=0x8) 17:45:56 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000180)) 17:45:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x0, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '&/@\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0xfece}}, 0x0) [ 1074.181115][T24082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x0, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0xe4}, 0x300}, 0x0) 17:45:57 executing program 3: bpf$BPF_PROG_QUERY(0x2, 0x0, 0x0) 17:45:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d3608400", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x4, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) 17:45:57 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000015c0)='ns/pid_for_children\x00') 17:45:57 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) [ 1074.975176][T24112] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1075.003735][T24113] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1075.150076][T24114] device geneve2 entered promiscuous mode 17:45:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}]}}, &(0x7f0000000080)=""/140, 0x32, 0x8c, 0x1}, 0x20) 17:45:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d3608400", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:58 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0}, 0x20) 17:45:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:45:58 executing program 3: socketpair(0x26, 0x5, 0x0, &(0x7f0000000280)) 17:45:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d3608400", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:45:59 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)={&(0x7f0000001240)='\x00'}, 0x10) 17:45:59 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x33fe0}}, 0x0) 17:45:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'gretap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 17:45:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, 0x453, 0x0, 0x70bd29, 0x25dfdbfc, "e3b86204a46f930985a1b7bfb62dc6b371f9fb819bf61520f6ac82f7a35bb1be8855ed51b7d9654d7bbb070a6b7cfce7c0202814de78800d6c9b31f699ec3df98ab0d3de68376f56319849747ad5b046b4cd95aa4fb5390639ca62e548a7268ca4303c6d1d8a14756ada33b3471487daf4d4"}, 0x84}}, 0x4) [ 1077.229466][T24149] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:45:59 executing program 0: bpf$BPF_PROG_QUERY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 1077.325853][T24154] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1077.345365][ T35] audit: type=1107 audit(1619372759.891:18): pid=24148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='ã¸b¤o“ …¡·¿¶-Ƴqùû›ö ö¬‚÷£[±¾ˆUíQ·ÙeM{» [ 1077.345365][ T35] k|üçÀ (Þx€l›1ö™ì=ùаÓÞh7oV1˜ItzÕ°F´Í•ªOµ99ÊbåH§&Œ¤00xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) 17:46:00 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x10) 17:46:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:00 executing program 0: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x0) [ 1078.299564][T24168] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000d00)=""/174, 0x26, 0xae, 0x1}, 0x20) 17:46:01 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x3) 17:46:01 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) 17:46:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'S'}]}}, &(0x7f00000000c0)=""/244, 0x2a, 0xf4, 0x1}, 0x20) 17:46:01 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 17:46:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCDISCONN(r0, 0x7439) 17:46:02 executing program 4: socketpair(0x2, 0x2, 0x1, &(0x7f0000000140)) [ 1079.454677][T24184] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.577809][T24184] device geneve2 entered promiscuous mode [ 1079.649217][T24191] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:02 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "0020e1", 0x10, 0x21, 0x0, @dev, @private2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "828bb3", 0x0, "998ced"}}}}}}}, 0x0) 17:46:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:46:03 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) [ 1081.043434][ C1] not chained 30000 origins [ 1081.047973][ C1] CPU: 1 PID: 761 Comm: kworker/u4:12 Not tainted 5.12.0-rc6-syzkaller #0 [ 1081.052632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.052632][ C1] Workqueue: krdsd rds_connect_worker [ 1081.072885][ C1] Call Trace: [ 1081.072885][ C1] [ 1081.072885][ C1] dump_stack+0x24c/0x2e0 [ 1081.072885][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1081.072885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.096332][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.102785][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.102785][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1081.113520][ C1] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 1081.113520][ C1] ? tcp_parse_options+0x22c4/0x2360 [ 1081.124682][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.124682][ C1] tcp_conn_request+0x1b33/0x4d90 [ 1081.132675][ C1] ? memcg_slab_free_hook+0x3a/0xb20 [ 1081.132675][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.132675][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.132675][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.132675][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1081.162621][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.162621][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1081.162621][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.162621][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1081.162621][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1081.162621][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.162621][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.162621][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.203704][ C1] ? tcp_filter+0xf0/0xf0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 1081.203704][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] ? ip_rcv_core+0x1480/0x1480 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 1081.203704][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] ? net_tx_action+0xd30/0xd30 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] ? idle_cpu+0x9a/0x1d0 [ 1081.203704][ C1] ? __irq_exit_rcu+0x83/0x280 [ 1081.203704][ C1] do_softirq+0x123/0x1c0 [ 1081.203704][ C1] [ 1081.203704][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1081.203704][ C1] local_bh_enable+0x36/0x40 [ 1081.203704][ C1] ip_finish_output2+0x244e/0x2930 [ 1081.203704][ C1] ? __msan_get_context_state+0x9/0x20 [ 1081.203704][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 1081.203704][ C1] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 1081.203704][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.203704][ C1] __ip_finish_output+0x9fd/0x1050 [ 1081.203704][ C1] ip_finish_output+0x329/0x480 [ 1081.203704][ C1] ip_output+0x32e/0x6d0 [ 1081.203704][ C1] ? ip_mc_finish_output+0x770/0x770 [ 1081.203704][ C1] ? ip_finish_output+0x480/0x480 [ 1081.203704][ C1] __ip_queue_xmit+0x1e3d/0x23b0 [ 1081.203704][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 1081.203704][ C1] ? __msan_poison_alloca+0xec/0x110 [ 1081.203704][ C1] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 1081.203704][ C1] ip_queue_xmit+0xcc/0xf0 [ 1081.203704][ C1] ? __ip_queue_xmit+0x23b0/0x23b0 [ 1081.203704][ C1] __tcp_transmit_skb+0x4c59/0x5ea0 [ 1081.203704][ C1] tcp_connect+0x104d/0x3d40 [ 1081.203704][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 1081.203704][ C1] tcp_v4_connect+0x255c/0x26f0 [ 1081.203704][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 1081.203704][ C1] __inet_stream_connect+0x8bf/0x1780 [ 1081.203704][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1081.203704][ C1] ? __msan_instrument_asm_store+0x22/0x130 [ 1081.203704][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.203704][ C1] inet_stream_connect+0x101/0x180 [ 1081.203704][ C1] ? __inet_stream_connect+0x1780/0x1780 [ 1081.203704][ C1] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 1081.203704][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1081.203704][ C1] ? rds_tcp_state_change+0x400/0x400 [ 1081.203704][ C1] rds_connect_worker+0x3ba/0x5b0 [ 1081.203704][ C1] ? rds_addr_cmp+0x2f0/0x2f0 [ 1081.203704][ C1] process_one_work+0x1219/0x1fe0 [ 1081.203704][ C1] worker_thread+0x10ec/0x2340 [ 1081.203704][ C1] kthread+0x521/0x560 [ 1081.203704][ C1] ? process_one_work+0x1fe0/0x1fe0 [ 1081.203704][ C1] ? kthread_blkcg+0x110/0x110 [ 1081.203704][ C1] ret_from_fork+0x1f/0x30 [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_conn_request+0x1b33/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1081.203704][ C1] tcp_conn_request+0x2bbd/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_conn_request+0x1b33/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1081.203704][ C1] tcp_conn_request+0x2bbd/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_conn_request+0x1b33/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1081.203704][ C1] tcp_conn_request+0x2bbd/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was stored to memory at: [ 1081.203704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1081.203704][ C1] __msan_chain_origin+0x54/0xa0 [ 1081.203704][ C1] tcp_conn_request+0x1b33/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_v6_conn_request+0xe3/0x500 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_rcv+0x599/0x820 [ 1081.203704][ C1] __netif_receive_skb+0x1ec/0x640 [ 1081.203704][ C1] process_backlog+0x517/0xbd0 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 [ 1081.203704][ C1] [ 1081.203704][ C1] Uninit was created at: [ 1081.203704][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1081.203704][ C1] kmsan_alloc_page+0xd0/0x1e0 [ 1081.203704][ C1] __alloc_pages_nodemask+0x827/0xf90 [ 1081.203704][ C1] alloc_pages_current+0x7b6/0xb60 [ 1081.203704][ C1] allocate_slab+0x364/0x1260 [ 1081.203704][ C1] ___slab_alloc+0xd42/0x1930 [ 1081.203704][ C1] kmem_cache_alloc+0xc68/0x1030 [ 1081.203704][ C1] inet_reqsk_alloc+0xaf/0x8c0 [ 1081.203704][ C1] tcp_conn_request+0x85d/0x4d90 [ 1081.203704][ C1] tcp_v4_conn_request+0x201/0x290 [ 1081.203704][ C1] tcp_rcv_state_process+0x2f4/0x4560 [ 1081.203704][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 1081.203704][ C1] tcp_v4_rcv+0x5f17/0x73f0 [ 1081.203704][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1081.203704][ C1] ip_local_deliver+0x585/0x8d0 [ 1081.203704][ C1] ip_sublist_rcv+0x121b/0x1560 [ 1081.203704][ C1] ip_list_rcv+0x8f1/0x960 [ 1081.203704][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 1081.203704][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 1081.203704][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 1081.203704][ C1] napi_complete_done+0x558/0xdb0 [ 1081.203704][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 1081.203704][ C1] virtnet_poll+0x170f/0x1d10 [ 1081.203704][ C1] __napi_poll+0x13e/0xca0 [ 1081.203704][ C1] net_rx_action+0x726/0x14a0 [ 1081.203704][ C1] __do_softirq+0x1b9/0x715 17:46:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:05 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "0020e1", 0x10, 0x21, 0x0, @dev, @private2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "828bb3", 0x0, "998ced"}}}}}}}, 0x0) 17:46:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/140, 0x1a, 0x8c, 0x1}, 0x20) 17:46:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCDISCONN(r0, 0x7439) 17:46:05 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) [ 1082.766216][T24225] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 17:46:05 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "0020e1", 0x10, 0x21, 0x0, @dev, @private2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "828bb3", 0x0, "998ced"}}}}}}}, 0x0) [ 1083.014708][T24232] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1083.132683][T24232] device geneve2 entered promiscuous mode 17:46:05 executing program 3: pipe(&(0x7f00000031c0)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 17:46:06 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1083.695127][T24245] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:06 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r0, 0x0, &(0x7f0000000380)) 17:46:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0xfffffdef}}, 0x0) 17:46:07 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "0020e1", 0x10, 0x21, 0x0, @dev, @private2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "828bb3", 0x0, "998ced"}}}}}}}, 0x0) 17:46:07 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') 17:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000d00)=""/174, 0x29, 0xae, 0x1}, 0x20) 17:46:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1085.151670][T24265] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:07 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 17:46:07 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) 17:46:07 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000100)) [ 1085.389724][T24270] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:08 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000480)={0x2, 'virt_wifi0\x00'}) [ 1085.524247][T24270] device geneve2 entered promiscuous mode 17:46:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:08 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 17:46:08 executing program 3: socketpair(0x2, 0x2, 0x73, &(0x7f0000000140)) 17:46:08 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) [ 1086.283514][T24284] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:09 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 17:46:09 executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x0, 0xbe, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x50, 0x0, 0x9}}, [{}]}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x0, 0x0}]}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x4, @string={0x4, 0x3, "c278"}}, 0x0, 0x0}, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000a00)) read$hiddev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000bc0)={0x14, 0x0, 0x0}, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000031c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4060, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x113}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6d}}}}}]}}]}}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) 17:46:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000480)={0x2, 'virt_wifi0\x00'}) 17:46:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d6", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1087.103294][ T8458] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1087.343759][ T8458] usb 6-1: Using ep0 maxpacket: 16 [ 1087.504421][ T8458] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1087.583989][ T8458] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1087.620031][T24306] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1087.663796][T24307] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.742762][ T8467] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1087.773541][ T8458] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.782884][ T8458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.791030][ T8458] usb 6-1: Product: syz [ 1087.795541][ T8458] usb 6-1: Manufacturer: syz [ 1087.800268][ T8458] usb 6-1: SerialNumber: syz 17:46:10 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) [ 1087.839478][T24306] device geneve2 entered promiscuous mode 17:46:10 executing program 4: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73f3"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, 0x0}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:46:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d6", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1088.029126][ T8458] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1088.143516][ T8467] usb 4-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1088.154913][ T8467] usb 4-1: config 1 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 1088.167925][ T8467] usb 4-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.181655][ T8467] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1088.230490][T17990] usb 6-1: USB disconnect, device number 10 [ 1088.395908][ T8467] usb 4-1: language id specifier not provided by device, defaulting to English [ 1088.533188][ T8456] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1088.555085][T24327] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1088.706503][ T9660] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1088.754921][ T8467] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.40 [ 1088.764627][ T8467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.772986][ T8467] usb 4-1: Product: syz [ 1088.777319][ T8467] usb 4-1: SerialNumber: syz [ 1088.785294][ T8456] usb 1-1: Using ep0 maxpacket: 16 [ 1088.935809][ T8456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1088.945851][ T8456] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1088.955943][ T8456] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1088.965986][ T8456] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.066697][T24301] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1089.172948][ T9660] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1089.181919][ T9660] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.194315][ T9660] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1089.203935][ T9660] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:46:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d6", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1089.234125][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd 17:46:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1089.426045][ T8456] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.435397][ T8456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.443755][ T8456] usb 1-1: Product: syz [ 1089.448058][ T8456] usb 1-1: Manufacturer: syz [ 1089.452940][ T8456] usb 1-1: SerialNumber: syz [ 1089.474277][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1089.514029][ T9660] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1089.523537][ T9660] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1089.531736][ T9660] usb 5-1: Product: syz [ 1089.534083][T24301] udc-core: couldn't find an available UDC or it's busy [ 1089.536330][ T9660] usb 5-1: Manufacturer: syz [ 1089.543410][T24301] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1089.654397][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1089.658283][T24317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1089.669961][T24337] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1089.680882][ T8467] usbhid 4-1:1.0: can't add hid device: -22 [ 1089.688103][ T8467] usbhid: probe of 4-1:1.0 failed with error -22 [ 1089.759167][ T8456] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1089.778101][ T9660] cdc_wdm 5-1:1.0: skipping garbage [ 1089.783863][ T9660] cdc_wdm 5-1:1.0: skipping garbage [ 1089.812810][ T8467] usb 4-1: USB disconnect, device number 11 [ 1089.882846][ T9660] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device 17:46:12 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) [ 1089.960227][T24347] device geneve2 entered promiscuous mode [ 1090.001926][ T8456] usb 1-1: USB disconnect, device number 13 [ 1090.016360][T24324] udc-core: couldn't find an available UDC or it's busy [ 1090.022963][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1090.024091][T24324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1090.031165][ T7] usb 6-1: can't read configurations, error -71 17:46:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a22", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1090.422880][ T5] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1090.786513][ T5] usb 4-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1090.798200][ T5] usb 4-1: config 1 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 1090.809595][ T5] usb 4-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.825547][ T5] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1090.892088][T24370] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1090.956237][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1091.123610][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1091.132114][ T8456] usb 1-1: new high-speed USB device number 14 using dummy_hcd 17:46:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r5) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1091.362712][ T8456] usb 1-1: Using ep0 maxpacket: 16 [ 1091.383777][ T7] usb 6-1: Using ep0 maxpacket: 16 17:46:13 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x800) 17:46:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a22", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1091.464125][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.40 [ 1091.473643][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.481952][ T5] usb 4-1: Product: syz [ 1091.563639][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1091.635971][ T5] usb 4-1: can't set config #1, error -71 [ 1091.647939][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:46:14 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) [ 1091.733637][ T5] usb 4-1: USB disconnect, device number 12 [ 1091.762904][ T8456] usb 1-1: device descriptor read/all, error -71 [ 1091.821820][T24384] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.838801][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.850695][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.859593][ T7] usb 6-1: Product: syz [ 1091.864103][ T7] usb 6-1: Manufacturer: syz [ 1091.869001][ T7] usb 6-1: SerialNumber: syz [ 1091.873532][ T3693] usb 5-1: USB disconnect, device number 4 17:46:14 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) [ 1092.249908][ T7] cdc_ether: probe of 6-1:1.0 failed with error -22 17:46:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a22", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r5) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1092.581693][ T9660] usb 6-1: USB disconnect, device number 12 17:46:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 17:46:15 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 17:46:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000005240)={'batadv_slave_0\x00'}) [ 1092.830641][T24410] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1093.008869][T24414] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 17:46:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ff", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@private1}}, 0xe8) 17:46:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r5) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:16 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 17:46:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000002880)=[{{&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="84", 0x1}], 0x1}}], 0x1, 0x0) [ 1093.775517][T24423] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1093.873026][T24428] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xfffffffffffffe71) 17:46:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ff", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, 0x0, 0x0) 17:46:17 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1094.787753][T24444] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:17 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r0) [ 1094.986807][T24448] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ff", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1095.569879][T24441] not chained 40000 origins [ 1095.572448][T24441] CPU: 1 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1095.572448][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.572448][T24441] Call Trace: [ 1095.572448][T24441] dump_stack+0x24c/0x2e0 [ 1095.572448][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1095.603365][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.603365][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1095.603365][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1095.603365][T24441] ? update_load_avg+0x876/0x1340 [ 1095.603365][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.603365][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1095.636380][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.636380][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1095.636380][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1095.636380][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.636380][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1095.666684][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1095.666684][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1095.666684][T24441] ? _copy_from_user+0x1fd/0x300 [ 1095.682859][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.682859][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.682859][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.682859][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.682859][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.682859][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1095.682859][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1095.682859][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1095.682859][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1095.682859][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.682859][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.682859][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.682859][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.682859][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.682859][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.682859][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.682859][T24441] RIP: 0023:0xf7f5c549 [ 1095.772815][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1095.772883][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1095.772883][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1095.772883][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1095.772883][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.772883][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1095.772883][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.772883][T24441] Uninit was stored to memory at: [ 1095.841803][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.841803][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Uninit was stored to memory at: [ 1095.855151][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1095.855151][T24441] __msan_chain_origin+0x54/0xa0 [ 1095.855151][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1095.855151][T24441] get_compat_msghdr+0x108/0x2b0 [ 1095.855151][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1095.855151][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1095.855151][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.855151][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.855151][T24441] __do_fast_syscall_32+0x127/0x180 [ 1095.855151][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1095.855151][T24441] do_SYSENTER_32+0x73/0x90 [ 1095.855151][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.855151][T24441] [ 1095.855151][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1095.855151][T24441] do_recvmmsg+0xbf/0x22d0 [ 1095.855151][T24441] do_recvmmsg+0xbf/0x22d0 [ 1096.599840][T24462] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1097.331949][T24432] not chained 50000 origins [ 1097.334282][T24432] CPU: 0 PID: 24432 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1097.334282][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.334282][T24432] Call Trace: [ 1097.334282][T24432] dump_stack+0x24c/0x2e0 [ 1097.334282][T24432] kmsan_internal_chain_origin+0x6f/0x130 [ 1097.334282][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1097.334282][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.334282][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1097.334282][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1097.334282][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.334282][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.334282][T24432] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1097.334282][T24432] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1097.409651][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.409651][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1097.409651][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1097.409651][T24432] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1097.409651][T24432] ? _copy_from_user+0x1fd/0x300 [ 1097.409651][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.409651][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.409651][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.409651][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.409651][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1097.409651][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.409651][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1097.409651][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1097.409651][T24432] ? __msan_poison_alloca+0xec/0x110 [ 1097.409651][T24432] ? __sys_recvmmsg+0xb5/0x6f0 [ 1097.409651][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.409651][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.409651][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.409651][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.409651][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.409651][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.409651][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.409651][T24432] RIP: 0023:0xf7f5c549 [ 1097.409651][T24432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1097.409651][T24432] RSP: 002b:00000000f55355fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1097.409651][T24432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1097.409651][T24432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1097.409651][T24432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1097.409651][T24432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1097.409651][T24432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1097.409651][T24432] Uninit was stored to memory at: [ 1097.409651][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.409651][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.409651][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.409651][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.409651][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.409651][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.409651][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.409651][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.409651][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.651312][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.651312][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.651312][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.651312][T24432] [ 1097.651312][T24432] Uninit was stored to memory at: [ 1097.651312][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.651312][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.651312][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.651312][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.651312][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.651312][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.651312][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.651312][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.651312][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.651312][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.651312][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.651312][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.651312][T24432] [ 1097.651312][T24432] Uninit was stored to memory at: [ 1097.651312][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.651312][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.651312][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.651312][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.651312][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.651312][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.651312][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.651312][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.651312][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.651312][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.651312][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.651312][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.812857][T24432] [ 1097.812857][T24432] Uninit was stored to memory at: [ 1097.812857][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.812857][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.812857][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.812857][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.812857][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.812857][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.812857][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.812857][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.812857][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.812857][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.812857][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.812857][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.812857][T24432] [ 1097.812857][T24432] Uninit was stored to memory at: [ 1097.812857][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.812857][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.812857][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.812857][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.812857][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.812857][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.812857][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.812857][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.812857][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.812857][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.812857][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.812857][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.812857][T24432] [ 1097.812857][T24432] Uninit was stored to memory at: [ 1097.812857][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.812857][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.812857][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.812857][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.812857][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.812857][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.812857][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.812857][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.812857][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.812857][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.812857][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.812857][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.812857][T24432] [ 1097.812857][T24432] Uninit was stored to memory at: [ 1097.812857][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1097.812857][T24432] __msan_chain_origin+0x54/0xa0 [ 1097.812857][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1097.812857][T24432] get_compat_msghdr+0x108/0x2b0 [ 1097.812857][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1097.812857][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1097.812857][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.812857][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.812857][T24432] __do_fast_syscall_32+0x127/0x180 [ 1097.812857][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1097.812857][T24432] do_SYSENTER_32+0x73/0x90 [ 1097.812857][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.812857][T24432] [ 1097.812857][T24432] Local variable ----msg_sys@do_recvmmsg created at: [ 1097.812857][T24432] do_recvmmsg+0xbf/0x22d0 [ 1097.812857][T24432] do_recvmmsg+0xbf/0x22d0 [ 1098.641274][T24441] not chained 60000 origins [ 1098.642434][T24441] CPU: 1 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1098.647973][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.647973][T24441] Call Trace: [ 1098.647973][T24441] dump_stack+0x24c/0x2e0 [ 1098.647973][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1098.647973][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1098.647973][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.647973][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1098.647973][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1098.647973][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.647973][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.647973][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1098.647973][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1098.647973][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.647973][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1098.647973][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1098.647973][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1098.647973][T24441] ? _copy_from_user+0x1fd/0x300 [ 1098.647973][T24441] __msan_chain_origin+0x54/0xa0 [ 1098.647973][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1098.757917][T24441] get_compat_msghdr+0x108/0x2b0 [ 1098.757917][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1098.757917][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.773271][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1098.773271][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1098.773271][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1098.773271][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1098.793507][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1098.793507][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.802737][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.802737][T24441] __do_fast_syscall_32+0x127/0x180 [ 1098.802737][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1098.802737][T24441] do_SYSENTER_32+0x73/0x90 [ 1098.802737][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.802737][T24441] RIP: 0023:0xf7f5c549 [ 1098.802737][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1098.802737][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1098.802737][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1098.802737][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1098.802737][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1098.802737][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1098.802737][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1098.802737][T24441] Uninit was stored to memory at: [ 1098.802737][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1098.802737][T24441] __msan_chain_origin+0x54/0xa0 [ 1098.802737][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1098.802737][T24441] get_compat_msghdr+0x108/0x2b0 [ 1098.802737][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1098.802737][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1098.802737][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.802737][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.802737][T24441] __do_fast_syscall_32+0x127/0x180 [ 1098.802737][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1098.802737][T24441] do_SYSENTER_32+0x73/0x90 [ 1098.802737][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.802737][T24441] [ 1098.802737][T24441] Uninit was stored to memory at: [ 1098.802737][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1098.802737][T24441] __msan_chain_origin+0x54/0xa0 [ 1098.802737][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1098.802737][T24441] get_compat_msghdr+0x108/0x2b0 [ 1098.802737][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1098.802737][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1098.802737][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.802737][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.802737][T24441] __do_fast_syscall_32+0x127/0x180 [ 1098.802737][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1098.802737][T24441] do_SYSENTER_32+0x73/0x90 [ 1098.802737][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.802737][T24441] [ 1099.046075][T24441] Uninit was stored to memory at: [ 1099.048112][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1099.048112][T24441] __msan_chain_origin+0x54/0xa0 [ 1099.048112][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1099.048112][T24441] get_compat_msghdr+0x108/0x2b0 [ 1099.048112][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1099.048112][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1099.048112][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.048112][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.048112][T24441] __do_fast_syscall_32+0x127/0x180 [ 1099.048112][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1099.048112][T24441] do_SYSENTER_32+0x73/0x90 [ 1099.048112][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.111641][T24441] [ 1099.111641][T24441] Uninit was stored to memory at: [ 1099.111641][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1099.111641][T24441] __msan_chain_origin+0x54/0xa0 [ 1099.111641][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1099.111641][T24441] get_compat_msghdr+0x108/0x2b0 [ 1099.140898][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1099.140898][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1099.140898][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.140898][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.140898][T24441] __do_fast_syscall_32+0x127/0x180 [ 1099.140898][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1099.140898][T24441] do_SYSENTER_32+0x73/0x90 [ 1099.140898][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.140898][T24441] [ 1099.140898][T24441] Uninit was stored to memory at: [ 1099.140898][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1099.140898][T24441] __msan_chain_origin+0x54/0xa0 [ 1099.203255][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1099.203255][T24441] get_compat_msghdr+0x108/0x2b0 [ 1099.203255][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1099.203255][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1099.221447][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.221447][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.221447][T24441] __do_fast_syscall_32+0x127/0x180 [ 1099.221447][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1099.221447][T24441] do_SYSENTER_32+0x73/0x90 [ 1099.221447][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.221447][T24441] [ 1099.221447][T24441] Uninit was stored to memory at: [ 1099.221447][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1099.221447][T24441] __msan_chain_origin+0x54/0xa0 [ 1099.274741][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1099.274741][T24441] get_compat_msghdr+0x108/0x2b0 [ 1099.274741][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1099.274741][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1099.274741][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.274741][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.274741][T24441] __do_fast_syscall_32+0x127/0x180 [ 1099.274741][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1099.274741][T24441] do_SYSENTER_32+0x73/0x90 [ 1099.274741][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.274741][T24441] [ 1099.274741][T24441] Uninit was stored to memory at: [ 1099.274741][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1099.274741][T24441] __msan_chain_origin+0x54/0xa0 [ 1099.274741][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1099.274741][T24441] get_compat_msghdr+0x108/0x2b0 [ 1099.274741][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1099.274741][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1099.274741][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.274741][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.274741][T24441] __do_fast_syscall_32+0x127/0x180 [ 1099.274741][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1099.274741][T24441] do_SYSENTER_32+0x73/0x90 [ 1099.274741][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.274741][T24441] [ 1099.274741][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1099.274741][T24441] do_recvmmsg+0xbf/0x22d0 [ 1099.274741][T24441] do_recvmmsg+0xbf/0x22d0 [ 1100.608561][T24432] not chained 70000 origins [ 1100.612432][T24432] CPU: 1 PID: 24432 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1100.612432][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.631823][T24432] Call Trace: [ 1100.631823][T24432] dump_stack+0x24c/0x2e0 [ 1100.631823][T24432] kmsan_internal_chain_origin+0x6f/0x130 [ 1100.631823][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1100.631823][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.631823][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1100.656487][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1100.656487][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.672377][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.672377][T24432] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1100.672377][T24432] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1100.672377][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.672377][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1100.672377][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1100.672377][T24432] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1100.672377][T24432] ? _copy_from_user+0x1fd/0x300 [ 1100.672377][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.672377][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.672377][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.672377][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.672377][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1100.672377][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.672377][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1100.752983][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1100.752983][T24432] ? __msan_poison_alloca+0xec/0x110 [ 1100.752983][T24432] ? __sys_recvmmsg+0xb5/0x6f0 [ 1100.752983][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.752983][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.752983][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.752983][T24432] __do_fast_syscall_32+0x127/0x180 [ 1100.752983][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1100.792842][T24432] do_SYSENTER_32+0x73/0x90 [ 1100.792842][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.792842][T24432] RIP: 0023:0xf7f5c549 [ 1100.792842][T24432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1100.792842][T24432] RSP: 002b:00000000f55355fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1100.792842][T24432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1100.792842][T24432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1100.792842][T24432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1100.792842][T24432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1100.792842][T24432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1100.792842][T24432] Uninit was stored to memory at: [ 1100.792842][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1100.792842][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.792842][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.792842][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.792842][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.792842][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.792842][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.792842][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.792842][T24432] __do_fast_syscall_32+0x127/0x180 [ 1100.792842][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1100.792842][T24432] do_SYSENTER_32+0x73/0x90 [ 1100.792842][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.792842][T24432] [ 1100.792842][T24432] Uninit was stored to memory at: [ 1100.792842][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1100.792842][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.792842][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.792842][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.792842][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.792842][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.792842][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.792842][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.792842][T24432] __do_fast_syscall_32+0x127/0x180 [ 1100.792842][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1100.792842][T24432] do_SYSENTER_32+0x73/0x90 [ 1100.792842][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.792842][T24432] [ 1100.792842][T24432] Uninit was stored to memory at: [ 1100.792842][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1100.792842][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.792842][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.792842][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.792842][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.792842][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.792842][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.792842][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.792842][T24432] __do_fast_syscall_32+0x127/0x180 [ 1100.792842][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1100.792842][T24432] do_SYSENTER_32+0x73/0x90 [ 1100.792842][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.792842][T24432] [ 1100.792842][T24432] Uninit was stored to memory at: [ 1100.792842][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1100.792842][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.792842][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.792842][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.792842][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.792842][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.792842][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.792842][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.792842][T24432] __do_fast_syscall_32+0x127/0x180 [ 1100.792842][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1100.792842][T24432] do_SYSENTER_32+0x73/0x90 [ 1100.792842][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.792842][T24432] [ 1100.792842][T24432] Uninit was stored to memory at: [ 1100.792842][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1100.792842][T24432] __msan_chain_origin+0x54/0xa0 [ 1100.792842][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1100.792842][T24432] get_compat_msghdr+0x108/0x2b0 [ 1100.792842][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1100.792842][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1100.792842][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.204323][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.204323][T24432] __do_fast_syscall_32+0x127/0x180 [ 1101.204323][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1101.204323][T24432] do_SYSENTER_32+0x73/0x90 [ 1101.204323][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.204323][T24432] [ 1101.204323][T24432] Uninit was stored to memory at: [ 1101.204323][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1101.204323][T24432] __msan_chain_origin+0x54/0xa0 [ 1101.204323][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1101.204323][T24432] get_compat_msghdr+0x108/0x2b0 [ 1101.204323][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1101.204323][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1101.269482][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.269482][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.269482][T24432] __do_fast_syscall_32+0x127/0x180 [ 1101.269482][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1101.269482][T24432] do_SYSENTER_32+0x73/0x90 [ 1101.269482][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.269482][T24432] [ 1101.269482][T24432] Uninit was stored to memory at: [ 1101.269482][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1101.269482][T24432] __msan_chain_origin+0x54/0xa0 [ 1101.269482][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1101.269482][T24432] get_compat_msghdr+0x108/0x2b0 [ 1101.269482][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1101.269482][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1101.269482][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.269482][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.269482][T24432] __do_fast_syscall_32+0x127/0x180 [ 1101.269482][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1101.269482][T24432] do_SYSENTER_32+0x73/0x90 [ 1101.269482][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.269482][T24432] [ 1101.269482][T24432] Local variable ----msg_sys@do_recvmmsg created at: [ 1101.269482][T24432] do_recvmmsg+0xbf/0x22d0 [ 1101.269482][T24432] do_recvmmsg+0xbf/0x22d0 [ 1102.170306][T24441] not chained 80000 origins [ 1102.172424][T24441] CPU: 1 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1102.183392][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.183392][T24441] Call Trace: [ 1102.183392][T24441] dump_stack+0x24c/0x2e0 [ 1102.183392][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1102.183392][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1102.183392][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.183392][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1102.183392][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1102.183392][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.232813][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.232813][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1102.232813][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1102.232813][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.232813][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1102.232813][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1102.232813][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1102.232813][T24441] ? _copy_from_user+0x1fd/0x300 [ 1102.232813][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.232813][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.232813][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.232813][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.232813][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.232813][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1102.232813][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1102.232813][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1102.232813][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1102.322825][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.322825][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.322825][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.322825][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.322825][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.322825][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.322825][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.322825][T24441] RIP: 0023:0xf7f5c549 [ 1102.322825][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1102.322825][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1102.322825][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1102.402918][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1102.402918][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1102.402918][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1102.402918][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1102.402918][T24441] Uninit was stored to memory at: [ 1102.402918][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.402918][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.402918][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.402918][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.402918][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.402918][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.402918][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.402918][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.402918][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.402918][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.402918][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.402918][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.402918][T24441] [ 1102.402918][T24441] Uninit was stored to memory at: [ 1102.402918][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.402918][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.402918][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.402918][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.402918][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.402918][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.402918][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.402918][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.402918][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.402918][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Uninit was stored to memory at: [ 1102.563028][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.563028][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.563028][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.563028][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.563028][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.563028][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.563028][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.563028][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.563028][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.563028][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Uninit was stored to memory at: [ 1102.563028][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.563028][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.563028][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.563028][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.563028][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.563028][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.563028][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.563028][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.563028][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.563028][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Uninit was stored to memory at: [ 1102.563028][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.563028][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.563028][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.563028][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.563028][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.563028][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.563028][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.563028][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.563028][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.563028][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Uninit was stored to memory at: [ 1102.563028][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.563028][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.563028][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.563028][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.563028][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.563028][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.563028][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.563028][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.563028][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.563028][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Uninit was stored to memory at: [ 1102.563028][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1102.563028][T24441] __msan_chain_origin+0x54/0xa0 [ 1102.563028][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1102.563028][T24441] get_compat_msghdr+0x108/0x2b0 [ 1102.563028][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1102.563028][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1102.563028][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.563028][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.563028][T24441] __do_fast_syscall_32+0x127/0x180 [ 1102.563028][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1102.563028][T24441] do_SYSENTER_32+0x73/0x90 [ 1102.563028][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.563028][T24441] [ 1102.563028][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1102.563028][T24441] do_recvmmsg+0xbf/0x22d0 [ 1102.563028][T24441] do_recvmmsg+0xbf/0x22d0 [ 1103.585122][T24432] not chained 90000 origins [ 1103.589670][T24432] CPU: 1 PID: 24432 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1103.592430][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.592430][T24432] Call Trace: [ 1103.592430][T24432] dump_stack+0x24c/0x2e0 [ 1103.613740][T24432] kmsan_internal_chain_origin+0x6f/0x130 [ 1103.617545][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1103.617545][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.617545][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1103.617545][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1103.617545][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.646097][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.646097][T24432] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1103.646097][T24432] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1103.646097][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.646097][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1103.646097][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1103.683098][T24432] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1103.684583][T24432] ? _copy_from_user+0x1fd/0x300 [ 1103.684583][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.684583][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.684583][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.684583][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.684583][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1103.684583][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.684583][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1103.684583][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1103.733289][T24432] ? __msan_poison_alloca+0xec/0x110 [ 1103.733289][T24432] ? __sys_recvmmsg+0xb5/0x6f0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] RIP: 0023:0xf7f5c549 [ 1103.733289][T24432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1103.733289][T24432] RSP: 002b:00000000f55355fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1103.733289][T24432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1103.733289][T24432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1103.733289][T24432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.733289][T24432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1103.733289][T24432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1103.733289][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.733289][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733289][T24432] __do_fast_syscall_32+0x127/0x180 [ 1103.733289][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1103.733289][T24432] do_SYSENTER_32+0x73/0x90 [ 1103.733289][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.733289][T24432] [ 1103.733289][T24432] Uninit was stored to memory at: [ 1103.733289][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1103.733289][T24432] __msan_chain_origin+0x54/0xa0 [ 1103.733289][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1103.733289][T24432] get_compat_msghdr+0x108/0x2b0 [ 1103.733289][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1103.733289][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1104.242562][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.242562][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.242562][T24432] __do_fast_syscall_32+0x127/0x180 [ 1104.242562][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1104.242562][T24432] do_SYSENTER_32+0x73/0x90 [ 1104.242562][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.242562][T24432] [ 1104.242562][T24432] Uninit was stored to memory at: [ 1104.242562][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1104.242562][T24432] __msan_chain_origin+0x54/0xa0 [ 1104.242562][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1104.242562][T24432] get_compat_msghdr+0x108/0x2b0 [ 1104.242562][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1104.242562][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1104.242562][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.242562][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.242562][T24432] __do_fast_syscall_32+0x127/0x180 [ 1104.242562][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1104.242562][T24432] do_SYSENTER_32+0x73/0x90 [ 1104.242562][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.242562][T24432] [ 1104.242562][T24432] Local variable ----msg_sys@do_recvmmsg created at: [ 1104.242562][T24432] do_recvmmsg+0xbf/0x22d0 [ 1104.242562][T24432] do_recvmmsg+0xbf/0x22d0 [ 1104.815211][ C0] not chained 100000 origins [ 1104.819830][ C0] CPU: 0 PID: 11988 Comm: kworker/u4:20 Not tainted 5.12.0-rc6-syzkaller #0 [ 1104.822436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.822436][ C0] Workqueue: krdsd rds_connect_worker [ 1104.822436][ C0] Call Trace: [ 1104.822436][ C0] [ 1104.822436][ C0] dump_stack+0x24c/0x2e0 [ 1104.822436][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1104.822436][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.822436][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.822436][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.822436][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1104.822436][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 1104.822436][ C0] ? tcp_parse_options+0x22c4/0x2360 [ 1104.822436][ C0] __msan_chain_origin+0x54/0xa0 [ 1104.822436][ C0] tcp_conn_request+0x19e9/0x4d90 [ 1104.822436][ C0] ? tcp_shutdown+0x1f5/0x270 [ 1104.822436][ C0] ? memcg_slab_free_hook+0x3a/0xb20 [ 1104.822436][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.822436][ C0] tcp_v4_conn_request+0x201/0x290 [ 1104.822436][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1104.924375][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1104.924375][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1104.924375][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] ? tcp_filter+0xf0/0xf0 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1104.924375][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 1104.924375][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1104.924375][ C0] ? ip_rcv_core+0x1480/0x1480 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1104.924375][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1104.924375][ C0] ? swake_up_one+0x2a2/0x390 [ 1104.924375][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1104.924375][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1104.924375][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1104.924375][ C0] ? net_tx_action+0xd30/0xd30 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1104.924375][ C0] ? idle_cpu+0x9a/0x1d0 [ 1104.924375][ C0] ? __irq_exit_rcu+0x83/0x280 [ 1104.924375][ C0] do_softirq+0x123/0x1c0 [ 1104.924375][ C0] [ 1104.924375][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1104.924375][ C0] local_bh_enable+0x36/0x40 [ 1104.924375][ C0] ip_finish_output2+0x244e/0x2930 [ 1104.924375][ C0] ? __msan_get_context_state+0x9/0x20 [ 1104.924375][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 1104.924375][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] __ip_finish_output+0x9fd/0x1050 [ 1104.924375][ C0] ip_finish_output+0x329/0x480 [ 1104.924375][ C0] ip_output+0x32e/0x6d0 [ 1104.924375][ C0] ? ip_mc_finish_output+0x770/0x770 [ 1104.924375][ C0] ? ip_finish_output+0x480/0x480 [ 1104.924375][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 1104.924375][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] ? __msan_poison_alloca+0xec/0x110 [ 1104.924375][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 1104.924375][ C0] ip_queue_xmit+0xcc/0xf0 [ 1104.924375][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 1104.924375][ C0] __tcp_transmit_skb+0x4c59/0x5ea0 [ 1104.924375][ C0] tcp_connect+0x104d/0x3d40 [ 1104.924375][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] tcp_v4_connect+0x255c/0x26f0 [ 1104.924375][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 1105.213143][T24441] not chained 110000 origins [ 1104.924375][ C0] __inet_stream_connect+0x8bf/0x1780 [ 1104.924375][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1104.924375][ C0] ? __msan_instrument_asm_store+0x22/0x130 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] inet_stream_connect+0x101/0x180 [ 1104.924375][ C0] ? __inet_stream_connect+0x1780/0x1780 [ 1104.924375][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 1104.924375][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1104.924375][ C0] rds_connect_worker+0x3ba/0x5b0 [ 1104.924375][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1104.924375][ C0] ? rds_addr_cmp+0x2f0/0x2f0 [ 1104.924375][ C0] process_one_work+0x1219/0x1fe0 [ 1104.924375][ C0] worker_thread+0x10ec/0x2340 [ 1104.924375][ C0] kthread+0x521/0x560 [ 1104.924375][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 1104.924375][ C0] ? kthread_blkcg+0x110/0x110 [ 1104.924375][ C0] ret_from_fork+0x1f/0x30 [ 1104.924375][ C0] Uninit was stored to memory at: [ 1105.222422][T24441] CPU: 1 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.222422][T24441] Call Trace: [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] dump_stack+0x24c/0x2e0 [ 1104.924375][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1105.222422][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] ? _copy_from_user+0x1fd/0x300 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] RIP: 0023:0xf7f5c549 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] ORIG_RAX: 0000000000000151 [ 1104.924375][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1105.222422][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] Uninit was stored to memory at: [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was stored to memory at: [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] __msan_chain_origin+0x54/0xa0 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] ip_rcv+0x599/0x820 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] __netif_receive_skb+0x1ec/0x640 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] process_backlog+0x517/0xbd0 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] __do_softirq+0x1b9/0x715 [ 1105.222422][T24441] [ 1105.222422][T24441] Uninit was stored to memory at: [ 1104.924375][ C0] [ 1104.924375][ C0] Uninit was created at: [ 1104.924375][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1105.222422][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1104.924375][ C0] kmsan_alloc_page+0xd0/0x1e0 [ 1105.222422][T24441] __msan_chain_origin+0x54/0xa0 [ 1104.924375][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 1105.222422][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1104.924375][ C0] alloc_pages_current+0x7b6/0xb60 [ 1105.222422][T24441] get_compat_msghdr+0x108/0x2b0 [ 1104.924375][ C0] allocate_slab+0x364/0x1260 [ 1105.222422][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1104.924375][ C0] ___slab_alloc+0xd42/0x1930 [ 1105.222422][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1104.924375][ C0] kmem_cache_alloc+0xc68/0x1030 [ 1105.222422][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.924375][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 1105.222422][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.924375][ C0] tcp_conn_request+0x85d/0x4d90 [ 1105.222422][T24441] __do_fast_syscall_32+0x127/0x180 [ 1104.924375][ C0] tcp_v4_conn_request+0x201/0x290 [ 1105.222422][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1104.924375][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1105.222422][T24441] do_SYSENTER_32+0x73/0x90 [ 1104.924375][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1105.222422][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.924375][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1105.222422][T24441] [ 1105.222422][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1104.924375][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1105.222422][T24441] do_recvmmsg+0xbf/0x22d0 [ 1104.924375][ C0] ip_local_deliver+0x585/0x8d0 [ 1105.222422][T24441] do_recvmmsg+0xbf/0x22d0 [ 1104.924375][ C0] ip_sublist_rcv+0x121b/0x1560 [ 1105.222422][ C0] ip_list_rcv+0x8f1/0x960 [ 1105.222422][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 1105.222422][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 1105.222422][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 1105.222422][ C0] napi_complete_done+0x558/0xdb0 [ 1105.222422][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 1105.222422][ C0] virtnet_poll+0x170f/0x1d10 [ 1105.222422][ C0] __napi_poll+0x13e/0xca0 [ 1105.222422][ C0] net_rx_action+0x726/0x14a0 [ 1105.222422][ C0] __do_softirq+0x1b9/0x715 [ 1107.577560][T24441] not chained 120000 origins [ 1107.582198][T24441] CPU: 0 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1107.582441][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.582441][T24441] Call Trace: [ 1107.582441][T24441] dump_stack+0x24c/0x2e0 [ 1107.582441][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1107.582441][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1107.616833][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1107.616833][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1107.616833][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1107.616833][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1107.616833][T24441] ? _copy_from_user+0x1fd/0x300 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1107.616833][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1107.616833][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1107.616833][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] RIP: 0023:0xf7f5c549 [ 1107.616833][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1107.616833][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1107.616833][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1107.616833][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1107.616833][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.616833][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1107.616833][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Uninit was stored to memory at: [ 1107.616833][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1107.616833][T24441] __msan_chain_origin+0x54/0xa0 [ 1107.616833][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1107.616833][T24441] get_compat_msghdr+0x108/0x2b0 [ 1107.616833][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1107.616833][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1107.616833][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1107.616833][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1107.616833][T24441] __do_fast_syscall_32+0x127/0x180 [ 1107.616833][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1107.616833][T24441] do_SYSENTER_32+0x73/0x90 [ 1107.616833][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.616833][T24441] [ 1107.616833][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1107.616833][T24441] do_recvmmsg+0xbf/0x22d0 [ 1107.616833][T24441] do_recvmmsg+0xbf/0x22d0 [ 1108.561312][T24441] not chained 130000 origins [ 1108.562437][T24441] CPU: 0 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1108.562437][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.562437][T24441] Call Trace: [ 1108.562437][T24441] dump_stack+0x24c/0x2e0 [ 1108.588823][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1108.588823][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1108.588823][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1108.588823][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1108.588823][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1108.588823][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1108.588823][T24441] ? _copy_from_user+0x1fd/0x300 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1108.588823][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1108.588823][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1108.588823][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] RIP: 0023:0xf7f5c549 [ 1108.588823][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1108.588823][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1108.588823][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1108.588823][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1108.588823][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.588823][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1108.588823][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Uninit was stored to memory at: [ 1108.588823][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1108.588823][T24441] __msan_chain_origin+0x54/0xa0 [ 1108.588823][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1108.588823][T24441] get_compat_msghdr+0x108/0x2b0 [ 1108.588823][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1108.588823][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1108.588823][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1108.588823][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1108.588823][T24441] __do_fast_syscall_32+0x127/0x180 [ 1108.588823][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1108.588823][T24441] do_SYSENTER_32+0x73/0x90 [ 1108.588823][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.588823][T24441] [ 1108.588823][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1108.588823][T24441] do_recvmmsg+0xbf/0x22d0 [ 1108.588823][T24441] do_recvmmsg+0xbf/0x22d0 [ 1109.586968][T24432] not chained 140000 origins [ 1109.591590][T24432] CPU: 1 PID: 24432 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1109.592422][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.592422][T24432] Call Trace: [ 1109.592422][T24432] dump_stack+0x24c/0x2e0 [ 1109.592422][T24432] kmsan_internal_chain_origin+0x6f/0x130 [ 1109.592422][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1109.592422][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.592422][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1109.592422][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1109.592422][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.592422][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.592422][T24432] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1109.662566][T24432] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1109.662566][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.662566][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1109.662566][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1109.662566][T24432] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1109.662566][T24432] ? _copy_from_user+0x1fd/0x300 [ 1109.692858][T24432] __msan_chain_origin+0x54/0xa0 [ 1109.692858][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1109.692858][T24432] get_compat_msghdr+0x108/0x2b0 [ 1109.692858][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1109.692858][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1109.692858][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.692858][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1109.692858][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1109.692858][T24432] ? __msan_poison_alloca+0xec/0x110 [ 1109.692858][T24432] ? __sys_recvmmsg+0xb5/0x6f0 [ 1109.692858][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1109.692858][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1109.692858][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1109.692858][T24432] __do_fast_syscall_32+0x127/0x180 [ 1109.769072][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1109.769072][T24432] do_SYSENTER_32+0x73/0x90 [ 1109.769072][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.769072][T24432] RIP: 0023:0xf7f5c549 [ 1109.769072][T24432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1109.769072][T24432] RSP: 002b:00000000f55355fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1109.769072][T24432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1109.769072][T24432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1109.769072][T24432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.769072][T24432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1109.769072][T24432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.769072][T24432] Uninit was stored to memory at: [ 1109.769072][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1109.769072][T24432] __msan_chain_origin+0x54/0xa0 [ 1109.769072][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1109.769072][T24432] get_compat_msghdr+0x108/0x2b0 [ 1109.769072][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1109.769072][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1109.769072][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1109.769072][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1109.902891][T24432] __do_fast_syscall_32+0x127/0x180 [ 1109.902891][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1109.902891][T24432] do_SYSENTER_32+0x73/0x90 [ 1109.902891][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.902891][T24432] [ 1109.902891][T24432] Uninit was stored to memory at: [ 1109.902891][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1109.902891][T24432] __msan_chain_origin+0x54/0xa0 [ 1109.902891][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1109.902891][T24432] get_compat_msghdr+0x108/0x2b0 [ 1109.902891][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1109.902891][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1109.902891][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1109.902891][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1109.902891][T24432] __do_fast_syscall_32+0x127/0x180 [ 1109.902891][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1109.902891][T24432] do_SYSENTER_32+0x73/0x90 [ 1109.902891][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.992563][T24432] [ 1109.992563][T24432] Uninit was stored to memory at: [ 1109.992563][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1109.992563][T24432] __msan_chain_origin+0x54/0xa0 [ 1109.992563][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1109.992563][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.022643][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.022643][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.022643][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.022643][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.022643][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.022643][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.053507][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.053507][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.053507][T24432] [ 1110.053507][T24432] Uninit was stored to memory at: [ 1110.053507][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.053507][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.082818][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.082818][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.082818][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.082818][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.082818][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.082818][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.082818][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.082818][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.082818][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.082818][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.082818][T24432] [ 1110.082818][T24432] Uninit was stored to memory at: [ 1110.082818][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.082818][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.082818][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.082818][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.082818][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.082818][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.082818][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.082818][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.082818][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.082818][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.082818][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.082818][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.082818][T24432] [ 1110.082818][T24432] Uninit was stored to memory at: [ 1110.082818][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.082818][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.082818][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.082818][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.082818][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.082818][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.082818][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.082818][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.082818][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.082818][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.082818][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.082818][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.082818][T24432] [ 1110.082818][T24432] Uninit was stored to memory at: [ 1110.082818][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.082818][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.082818][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.082818][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.082818][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.082818][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.082818][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.082818][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.082818][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.082818][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.082818][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.082818][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.082818][T24432] [ 1110.082818][T24432] Local variable ----msg_sys@do_recvmmsg created at: [ 1110.082818][T24432] do_recvmmsg+0xbf/0x22d0 [ 1110.082818][T24432] do_recvmmsg+0xbf/0x22d0 [ 1110.473309][T24432] not chained 150000 origins [ 1110.477948][T24432] CPU: 1 PID: 24432 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1110.484904][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.484904][T24432] Call Trace: [ 1110.484904][T24432] dump_stack+0x24c/0x2e0 [ 1110.484904][T24432] kmsan_internal_chain_origin+0x6f/0x130 [ 1110.484904][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1110.484904][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1110.484904][T24432] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1110.484904][T24432] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1110.484904][T24432] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1110.484904][T24432] ? _copy_from_user+0x1fd/0x300 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_get_metadata+0x116/0x180 [ 1110.484904][T24432] ? kmsan_internal_set_origin+0x85/0xc0 [ 1110.484904][T24432] ? __msan_poison_alloca+0xec/0x110 [ 1110.484904][T24432] ? __sys_recvmmsg+0xb5/0x6f0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] RIP: 0023:0xf7f5c549 [ 1110.484904][T24432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1110.484904][T24432] RSP: 002b:00000000f55355fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1110.484904][T24432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1110.484904][T24432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1110.484904][T24432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.484904][T24432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1110.484904][T24432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Uninit was stored to memory at: [ 1110.484904][T24432] kmsan_internal_chain_origin+0xad/0x130 [ 1110.484904][T24432] __msan_chain_origin+0x54/0xa0 [ 1110.484904][T24432] __get_compat_msghdr+0x6db/0x9d0 [ 1110.484904][T24432] get_compat_msghdr+0x108/0x2b0 [ 1110.484904][T24432] do_recvmmsg+0xdc1/0x22d0 [ 1110.484904][T24432] __sys_recvmmsg+0x519/0x6f0 [ 1110.484904][T24432] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1110.484904][T24432] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1110.484904][T24432] __do_fast_syscall_32+0x127/0x180 [ 1110.484904][T24432] do_fast_syscall_32+0x6a/0xc0 [ 1110.484904][T24432] do_SYSENTER_32+0x73/0x90 [ 1110.484904][T24432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.484904][T24432] [ 1110.484904][T24432] Local variable ----msg_sys@do_recvmmsg created at: [ 1110.484904][T24432] do_recvmmsg+0xbf/0x22d0 [ 1110.484904][T24432] do_recvmmsg+0xbf/0x22d0 [ 1111.659942][T24441] not chained 160000 origins [ 1111.662439][T24441] CPU: 1 PID: 24441 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 1111.662439][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.662439][T24441] Call Trace: [ 1111.662439][T24441] dump_stack+0x24c/0x2e0 [ 1111.662439][T24441] kmsan_internal_chain_origin+0x6f/0x130 [ 1111.662439][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1111.662439][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1111.662439][T24441] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1111.662439][T24441] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1111.662439][T24441] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1111.662439][T24441] ? _copy_from_user+0x1fd/0x300 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_get_metadata+0x116/0x180 [ 1111.662439][T24441] ? kmsan_internal_set_origin+0x85/0xc0 [ 1111.662439][T24441] ? __msan_poison_alloca+0xec/0x110 [ 1111.662439][T24441] ? __sys_recvmmsg+0xb5/0x6f0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] RIP: 0023:0xf7f5c549 [ 1111.662439][T24441] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1111.662439][T24441] RSP: 002b:00000000f54f35fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1111.662439][T24441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1111.662439][T24441] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1111.662439][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.662439][T24441] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1111.662439][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Uninit was stored to memory at: [ 1111.662439][T24441] kmsan_internal_chain_origin+0xad/0x130 [ 1111.662439][T24441] __msan_chain_origin+0x54/0xa0 [ 1111.662439][T24441] __get_compat_msghdr+0x6db/0x9d0 [ 1111.662439][T24441] get_compat_msghdr+0x108/0x2b0 [ 1111.662439][T24441] do_recvmmsg+0xdc1/0x22d0 [ 1111.662439][T24441] __sys_recvmmsg+0x519/0x6f0 [ 1111.662439][T24441] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1111.662439][T24441] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1111.662439][T24441] __do_fast_syscall_32+0x127/0x180 [ 1111.662439][T24441] do_fast_syscall_32+0x6a/0xc0 [ 1111.662439][T24441] do_SYSENTER_32+0x73/0x90 [ 1111.662439][T24441] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.662439][T24441] [ 1111.662439][T24441] Local variable ----msg_sys@do_recvmmsg created at: [ 1111.662439][T24441] do_recvmmsg+0xbf/0x22d0 [ 1111.662439][T24441] do_recvmmsg+0xbf/0x22d0 17:46:35 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "b0787c78da7bb3a74aee071ef79ef7263f934db6e8b13c4d0c2e65cdc55a8ef27f4ec9f74a17a95c327ba6b740077030546934899390e8490e5239b680a8fe21", 0x3a}, 0x48, r0) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='85baa174f0cb1142', r1) 17:46:35 executing program 4: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keyring\x00', 0xffffffffffffffff) 17:46:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, 0x0, 0x0) 17:46:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) 17:46:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000140)) 17:46:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1113.109543][T24475] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1113.149767][T24476] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:36 executing program 4: add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) 17:46:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, 0x0, 0x0) 17:46:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0), 0x0) 17:46:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 17:46:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:36 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc4}, &(0x7f0000000d40)={0x0, "9ac0d1f9f83dcfb39ba517c333c87cfc5b9e5b83d4de00607ccb09c7a9f582f910176ce5667bb9f8cd2653833fa7212deded4931165b472b46592156771fa191"}, 0x48, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) [ 1114.098290][T24494] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1114.109587][T24495] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}}, 0x0) 17:46:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:46:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x2, 0x0, "7ee002b4c357d0bd3c2a5083d30a149ae65cf9bfd807c7d4d8e979b41211c680"}) 17:46:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg(r1, &(0x7f0000001400)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) 17:46:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb9460a480e0a10000000e3bd6efb250009000e00030040fe00ff050005001201", 0x2e}], 0x1}, 0x0) [ 1114.854973][T24507] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1114.894888][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1114.917883][T24511] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17:46:37 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0, 0x0) 17:46:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 17:46:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1115.864116][T24528] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1115.867672][T24530] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.082922][T24520] @þ: renamed from team0 17:46:38 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) 17:46:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 1116.793010][T24545] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 17:46:39 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) [ 1117.077880][T24520] 8021q: adding VLAN 0 to HW filter on device @þ 17:46:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 17:46:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000180)=@ethernet, 0x80) 17:46:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='gid=']) 17:46:40 executing program 4: add_key(&(0x7f00000001c0)='rxrpc\x00', 0x0, &(0x7f0000000240)="17a8ceb6738d5359788e9a19c0797603c9f8c6eeb43beeb483f794934a99217c", 0x20, 0xffffffffffffffff) 17:46:40 executing program 3: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 17:46:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000040)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xe9c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe95, 0x3, "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"}]}]}, 0xec4}}, 0x0) 17:46:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) 17:46:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:41 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000001b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:46:41 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001540)=[{&(0x7f0000000300)="87", 0x1}], 0x0, 0x0) [ 1118.814053][T24567] tmpfs: Bad value for 'gid' [ 1118.818326][T24572] __nla_validate_parse: 4 callbacks suppressed [ 1118.818389][T24572] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1118.850435][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1118.889483][T24567] tmpfs: Bad value for 'gid' 17:46:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1119.033951][T24578] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1119.135543][ C0] not chained 170000 origins [ 1119.140352][ C0] CPU: 0 PID: 11960 Comm: kworker/u4:10 Not tainted 5.12.0-rc6-syzkaller #0 [ 1119.142436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.142436][ C0] Workqueue: krdsd rds_connect_worker [ 1119.142436][ C0] Call Trace: [ 1119.142436][ C0] [ 1119.142436][ C0] dump_stack+0x24c/0x2e0 [ 1119.142436][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1119.142436][ C0] ? ip_route_output_key_hash_rcu+0x1ce9/0x1ef0 [ 1119.142436][ C0] ? xfrm_lookup_route+0x2e0/0x3a0 [ 1119.192547][ C0] ? ip_route_output_flow+0x411/0x4c0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1119.192547][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1119.192547][ C0] ? tcp_select_initial_window+0x92f/0x9f0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1119.192547][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1119.192547][ C0] ? vringh_getdesc_user+0x2c55/0x3ed0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1119.192547][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] ? tcp_filter+0xf0/0xf0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 1119.192547][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] ? ip_rcv_core+0x1480/0x1480 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1119.192547][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] ? net_tx_action+0xd30/0xd30 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] ? idle_cpu+0x9a/0x1d0 [ 1119.192547][ C0] ? __irq_exit_rcu+0x83/0x280 [ 1119.192547][ C0] do_softirq+0x123/0x1c0 [ 1119.192547][ C0] [ 1119.192547][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1119.192547][ C0] local_bh_enable+0x36/0x40 [ 1119.192547][ C0] ip_finish_output2+0x244e/0x2930 [ 1119.192547][ C0] ? __msan_get_context_state+0x9/0x20 [ 1119.192547][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 1119.192547][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] __ip_finish_output+0x9fd/0x1050 [ 1119.192547][ C0] ip_finish_output+0x329/0x480 [ 1119.192547][ C0] ip_output+0x32e/0x6d0 [ 1119.192547][ C0] ? ip_mc_finish_output+0x770/0x770 [ 1119.192547][ C0] ? ip_finish_output+0x480/0x480 [ 1119.192547][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 1119.192547][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1119.192547][ C0] ? __msan_poison_alloca+0xec/0x110 [ 1119.192547][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 1119.192547][ C0] ip_queue_xmit+0xcc/0xf0 [ 1119.192547][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 1119.192547][ C0] __tcp_transmit_skb+0x4c59/0x5ea0 [ 1119.192547][ C0] tcp_connect+0x104d/0x3d40 [ 1119.192547][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 1119.192547][ C0] tcp_v4_connect+0x255c/0x26f0 [ 1119.192547][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 1119.192547][ C0] __inet_stream_connect+0x8bf/0x1780 [ 1119.192547][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1119.192547][ C0] ? __msan_instrument_asm_store+0x22/0x130 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] inet_stream_connect+0x101/0x180 [ 1119.192547][ C0] ? __inet_stream_connect+0x1780/0x1780 [ 1119.192547][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 1119.192547][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1119.192547][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1119.192547][ C0] rds_connect_worker+0x3ba/0x5b0 [ 1119.192547][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1119.192547][ C0] ? rds_addr_cmp+0x2f0/0x2f0 [ 1119.192547][ C0] process_one_work+0x1219/0x1fe0 [ 1119.192547][ C0] worker_thread+0x10ec/0x2340 [ 1119.192547][ C0] kthread+0x521/0x560 [ 1119.192547][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 1119.192547][ C0] ? kthread_blkcg+0x110/0x110 [ 1119.192547][ C0] ret_from_fork+0x1f/0x30 [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1119.192547][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1119.192547][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 1119.192547][ C0] tcp_conn_request+0x2bbd/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was stored to memory at: [ 1119.192547][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1119.192547][ C0] __msan_chain_origin+0x54/0xa0 [ 1119.192547][ C0] tcp_conn_request+0x1b33/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_v6_conn_request+0xe3/0x500 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_rcv+0x599/0x820 [ 1119.192547][ C0] __netif_receive_skb+0x1ec/0x640 [ 1119.192547][ C0] process_backlog+0x517/0xbd0 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 [ 1119.192547][ C0] [ 1119.192547][ C0] Uninit was created at: [ 1119.192547][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1119.192547][ C0] kmsan_alloc_page+0xd0/0x1e0 [ 1119.192547][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 1119.192547][ C0] alloc_pages_current+0x7b6/0xb60 [ 1119.192547][ C0] allocate_slab+0x364/0x1260 [ 1119.192547][ C0] ___slab_alloc+0xd42/0x1930 [ 1119.192547][ C0] kmem_cache_alloc+0xc68/0x1030 [ 1119.192547][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 1119.192547][ C0] tcp_conn_request+0x85d/0x4d90 [ 1119.192547][ C0] tcp_v4_conn_request+0x201/0x290 [ 1119.192547][ C0] tcp_rcv_state_process+0x2f4/0x4560 [ 1119.192547][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 1119.192547][ C0] tcp_v4_rcv+0x5f17/0x73f0 [ 1119.192547][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 1119.192547][ C0] ip_local_deliver+0x585/0x8d0 [ 1119.192547][ C0] ip_sublist_rcv+0x121b/0x1560 [ 1119.192547][ C0] ip_list_rcv+0x8f1/0x960 [ 1119.192547][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 1119.192547][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 1119.192547][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 1119.192547][ C0] napi_complete_done+0x558/0xdb0 [ 1119.192547][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 1119.192547][ C0] virtnet_poll+0x170f/0x1d10 [ 1119.192547][ C0] __napi_poll+0x13e/0xca0 [ 1119.192547][ C0] net_rx_action+0x726/0x14a0 [ 1119.192547][ C0] __do_softirq+0x1b9/0x715 17:46:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req={0x1000, 0x2}, 0x10) 17:46:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x1c}, @sndrcv={0x2c}], 0x48}, 0x0) [ 1120.655292][T24583] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) [ 1120.751368][T24583] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) socket$inet6_sctp(0x1c, 0x5, 0x84) 17:46:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1121.560560][T24594] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1121.593909][T24596] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1121.782327][T24601] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 17:46:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000180), &(0x7f0000000000)=0xa0) 17:46:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="d9a634b3e34402087125619512fa31df4ea2f8af6fbc0167a6cefb31afc126eacdf3a3bb3be3d597b953951528c696783a3971f16c0a4e3ea38438bb6e5bbddf31b75f5473b7ab3db39c995b0cabcab96bba7d3b46925b9e2af44067eba4ea609d4520db4f5a1887b5aaee36", 0x6c}, {&(0x7f00000004c0)="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", 0xfe8}], 0x2}, 0x0) 17:46:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000180), &(0x7f0000000000)=0x98) 17:46:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) [ 1122.592353][T24617] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1122.708661][T24617] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1122.995516][T24624] device geneve2 entered promiscuous mode 17:46:45 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) syz_mount_image$hpfs(&(0x7f00000042c0), &(0x7f0000004300)='./file0\x00', 0x0, 0x6, &(0x7f00000046c0)=[{&(0x7f0000004340)="e9451d9f252d99468079bbecc08616ae8e81fed219198bec7ec6c6c3b54a8f7fc20335ba439c009d4612ad0ed3a62ec9acc0f4a98c829de1c7d922af2bea304328ae491bc22a5a9937e20b70cbfbec79d5a0554a01891b1c053314b9001edb0768c4b83b01b0c1cfd49f5874877961cda83881d91daef38821b7379fc853cc13d3130b4a08d50bac6c7086ba3b6ad4c79ecc315bea2205393132b270113d770a515e518f10a28ca2e0392e53a0d0fed8e5a2206f6f62fa9fc54df32099bbd9fd2134261ea983d15067cd83abb70240c7e6e9c3cd03543363c5d3a08b9e4b69844b106ea30fc18da5df752f7c7d677bf49613737a13f80bcf3aa311d203df", 0xfe, 0x97}, {&(0x7f0000004440)="2bfe7dce53a07109a09ece64809901cfe89b196381b1b3f0a94446f9dba7afd4ad8b97405844740a79aee8de5759cec394d3885086d16e5ea09bd6375cf5725736eed24980ccb7649ea04878d697337291fff7a67c94a680b92069c7726aa1aa", 0x60, 0x8}, {&(0x7f00000044c0)="7bbfd9367ec6fb78c86e2b186b3896571ea4c5264a60d39205b4713126012536334f2133", 0x24, 0x7}, {&(0x7f0000004500)="3451d41ecfd5e5fdf104742c341c3dbd414e3d1f7757742a889a2afcf459121d03878eca11f1fa40139be1d0a212d0adfde36667ae05c0138432f59494d8e0e8f7c93900aae878fece306f791f9e285da720b68a1599b405cf89", 0xffffffffffffff95}, {&(0x7f0000004580)="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", 0xfa, 0xffff}, {&(0x7f0000004680)="ea13575e9a252e9b756179f33dcb9da9ca202745215bcab1bf961cc478a2da", 0x1f, 0x89}], 0x4, &(0x7f0000006300)={[{'\xe9\x99\x06\x80\xa2!lM\xcc\xd4v\xd8\x00\xc8\xa6\f\x1e\xd2{\xd1P\x93\x97\x8b5\xedh\x91\\b\xa5\xd0\xff\x05\xbev\x18\xbb,oxt~\x81\xb4\x7fIo\xf08\xf1\xb9\xbd\xed\x1az\x9f\x82\xb0\xb7\x1f\xba#\xee\x9d\xc7\xf2yF\xfa\x13 \x1d'}, {'$*-'}, {'-'}], [{@dont_appraise}, {@fsmagic}, {@subj_role={'subj_role', 0x3d, '$&'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 17:46:45 executing program 0: add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180), 0x0, 0xfffffffffffffffc) 17:46:45 executing program 4: pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700), 0x0, &(0x7f0000000780), 0x0) 17:46:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x44, 0x0, &(0x7f0000001180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000001240)="2207a76b"}) [ 1123.876078][T24636] __nla_validate_parse: 1 callbacks suppressed [ 1123.876153][T24636] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:46 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)='@', 0x1}, {0x0}, {&(0x7f0000000580)="e7", 0x1}], 0x4, &(0x7f0000000c40)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:46:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0xa, 0x0, @empty}}, 0xa4824054, 0x0, 0x0, 0x0, 0xb3550aa4ba878255}, 0x9c) [ 1124.253092][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.259675][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.358749][T24636] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) 17:46:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x90, 0x0, &(0x7f0000001180)=[@acquire_done={0x40106309, 0x3}, @free_buffer, @request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000010c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/90, 0x5a, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000, 0x2, 0x10}, @flat=@weak_binder={0x77622a85, 0x101, 0x1}}, &(0x7f0000001140)={0x0, 0x28, 0x50}}}], 0x55, 0x0, &(0x7f0000001240)="2207a76b458e19ebb2d15a77f34c0d93745b1528f429225f634b09a18ce8676d4be8e708fa1c1b6eaa25b502b77e9af6c684e9ea0398be094f52d28a9b37979d553e8ad47865a80e10270d105724318b3419d00a10"}) 17:46:47 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x1, r0, 0x6000) 17:46:47 executing program 5: pipe(&(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) [ 1125.288125][T24654] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1125.291765][T24653] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1125.404014][T24654] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1125.453419][T24653] device geneve2 entered promiscuous mode 17:46:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:48 executing program 3: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x42ee, &(0x7f0000000b00)) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x24}}, 0x0) 17:46:48 executing program 0: syz_mount_image$sysv(&(0x7f0000002bc0), &(0x7f0000002c00)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000003f40)) 17:46:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 17:46:48 executing program 5: syz_mount_image$sysv(&(0x7f0000002bc0), &(0x7f0000002c00)='./file0\x00', 0x0, 0xbc03, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)) [ 1126.426322][T24667] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1126.659967][T24667] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0], 0x60}}, 0x0) [ 1126.952315][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:46:49 executing program 0: syz_mount_image$sysv(&(0x7f0000002bc0), &(0x7f0000002c00)='./file0\x00', 0x0, 0xff00, &(0x7f0000003ec0), 0x8, &(0x7f0000003f40)) 17:46:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1127.161023][T24679] device bond1 entered promiscuous mode 17:46:49 executing program 3: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x50b4, &(0x7f0000001340)) 17:46:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) [ 1127.639768][T24718] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.785315][T24718] device geneve2 entered promiscuous mode [ 1127.819170][T24722] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:50 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x48001, 0x0) 17:46:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) [ 1128.965671][T24722] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1128.975858][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1128.993250][T24722] device geneve3 entered promiscuous mode 17:46:51 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000001480)) 17:46:51 executing program 0: prctl$PR_SET_DUMPABLE(0x24, 0x3) 17:46:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 17:46:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:46:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:52 executing program 3: syz_mount_image$sysv(&(0x7f0000002bc0), &(0x7f0000002c00)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x1f000000, &(0x7f0000003f40)) [ 1129.756729][T24751] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1129.887128][T24751] device geneve2 entered promiscuous mode [ 1130.022953][ T8458] usb 6-1: new high-speed USB device number 13 using dummy_hcd 17:46:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000640)) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000006c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 17:46:52 executing program 4: mount_setattr(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x0, &(0x7f00000021c0), 0x71) [ 1130.169557][T24758] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1130.404516][ T8458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.415957][ T8458] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1130.425390][ T8458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.521912][T24760] VFS: unable to find oldfs superblock on device loop3 [ 1130.724864][T24760] VFS: unable to find oldfs superblock on device loop3 [ 1130.737359][ T8458] usb 6-1: config 0 descriptor?? 17:46:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000040)=@raw=[@call], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8c, &(0x7f00000000c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:46:53 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000079c0)={&(0x7f0000007880), 0xc, &(0x7f0000007980)={&(0x7f00000078c0)={0x60, r0, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x60}}, 0x0) 17:46:53 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) [ 1131.225786][ T8458] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 1131.280794][ T8458] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0001/input/input31 [ 1131.390194][ T8458] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1131.486198][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1131.495947][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1131.643744][ T5] usb 6-1: USB disconnect, device number 13 17:46:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:46:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:46:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000d540)={0x18, 0x3, &(0x7f000000d380)=@framed, &(0x7f000000d3c0)='GPL\x00', 0x2000, 0xaf, &(0x7f000000d400)=""/175, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 1132.319677][T24819] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1132.426675][T24819] device geneve2 entered promiscuous mode [ 1132.437626][ T5] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1132.476485][T24825] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 17:46:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @generic={0x0, "374d793f374017304d5a1c72d407"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, @generic={0x0, "6f3a8431670a5e658d1a426a06d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_batadv\x00'}) 17:46:55 executing program 0: openat$cgroup_root(0xffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 17:46:55 executing program 3: syz_mount_image$romfs(0x0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0) 17:46:55 executing program 0: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000640)=[{0x0, 0x0, 0x6}, {0x0, 0x0, 0x5}, {0x0}, {0x0}, {&(0x7f0000000400)="18c511346cfb74864890b12dbaaa964e1bec1dfc4d4bd60b6fe53fd12f7cca44eea10cb52c06932b13ba7cde828dcde8d7810f0f2125689ed94baaa2c86fdec7952268a69b1ba071d1f741e501ade5b58f3ee14c33adaf781f51b623a850c178ec77f36ab94d3453948ff60ef21048492b466f182e51c13290eadb99dc99e007bc025e7e71060bf1422cfc2fa92f70dd670129ad38224fffbb92bb575aa354188280482d6db094c6d342022032bbf366f8fe18423339a8934e3f7f4e233fb35b12945d8d5d63fad796fd3aad1a510b", 0xcf, 0x1ff}, {&(0x7f0000000500)="6e72fc69a917254f3cd2d8f2cd345569d1e3fc1ab4b24fa7854b9d9b5b8b", 0x1e, 0xa8f}, {&(0x7f0000000540)="5920a331041323f50b1152d99a3fcf756585651d53f06e75c5057e84a307ea320f400d25ff4beaf2ac431c6627a29455d7b7143bc71883fbdde254855cf5fc931e6b16cd427d3aa8dd35b05a575d6280378dada41c8af4103a480c93e09b5cc2eb77072ff3f7be9d58d4cf36fa0ed9e4bfe107b15c5a12a282b43c81f4b0c8c7292cc48b7fc9253390d4a937debbf1b3f293848b4759909c00c0aaab1ed4acac7d6463e2cda98560b0aaade2c1787b4334b75c2fb4ac4e703c27eafa918ca9aefb19ad085f51", 0xc6, 0x8}], 0x20000, &(0x7f00000006c0)={[{}, {'%!:---'}, {'-}('}, {'%:&*)'}, {}, {}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@audit}, {@subj_role={'subj_role', 0x3d, '\'^\xfc]-@^'}}, {@appraise_type}, {@fowner_lt={'fowner<', 0xee00}}, {@obj_type={'obj_type', 0x3d, ',:'}}]}) 17:46:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x21, &(0x7f0000000340)=""/33, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 1133.526359][T24825] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1133.536199][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYBLOB], 0x60}}, 0x0) 17:46:56 executing program 4: r0 = openat$random(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 17:46:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1133.852841][ T5] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1133.905555][T24844] loop0: detected capacity change from 0 to 10 [ 1134.045820][T24844] loop0: detected capacity change from 0 to 10 [ 1134.214055][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.225644][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1134.235374][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:46:56 executing program 3: prctl$PR_SET_DUMPABLE(0x21, 0x0) 17:46:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000100a009500000000000000d5108dd01543e6c4a53b389eb81951007106d55c672ffea4b699315dfba1b3628f06c14bdcc765c1"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x7, &(0x7f00000002c0)="020e003f0004087e5b0123ca1fcd", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_dequeue\x00', r0}, 0x10) [ 1134.374448][T24855] device geneve2 entered promiscuous mode 17:46:56 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006c80)) [ 1134.474467][ T5] usb 6-1: config 0 descriptor?? [ 1134.602848][T24862] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1134.946630][ T5] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 1135.001642][T24869] ===================================================== [ 1135.002402][T24869] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1135.002402][T24869] CPU: 1 PID: 24869 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 1135.002402][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.002402][T24869] Call Trace: [ 1135.002402][T24869] dump_stack+0x24c/0x2e0 [ 1135.002402][T24869] kmsan_report+0xfb/0x1e0 [ 1135.002402][T24869] __msan_warning+0x5c/0xa0 [ 1135.002402][T24869] erspan_xmit+0x21b9/0x3ea0 [ 1135.002402][T24869] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1135.002402][T24869] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? erspan_tunnel_init+0x470/0x470 [ 1135.002402][T24869] xmit_one+0x2b6/0x760 [ 1135.002402][T24869] dev_hard_start_xmit+0x196/0x420 [ 1135.002402][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1135.002402][T24869] __qdisc_run+0x35b/0x490 [ 1135.002402][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1135.002402][T24869] dev_queue_xmit+0x4b/0x60 [ 1135.002402][T24869] __bpf_redirect+0x1461/0x16b0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1135.002402][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1135.002402][T24869] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1135.002402][T24869] ? bpf_csum_level+0x760/0x760 [ 1135.002402][T24869] __bpf_prog_run512+0x12e/0x190 [ 1135.002402][T24869] ? process_slab+0x13a0/0x1b70 [ 1135.002402][T24869] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? __msan_get_context_state+0x9/0x20 [ 1135.002402][T24869] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 1135.002402][T24869] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1135.002402][T24869] ? should_fail+0x72/0x9e0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? __msan_poison_alloca+0x2e/0x110 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1135.002402][T24869] ? ktime_get+0x390/0x470 [ 1135.002402][T24869] ? kmsan_get_metadata+0x4f/0x180 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? __bpf_prog_run480+0x190/0x190 [ 1135.002402][T24869] bpf_test_run+0x53f/0xe60 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1135.002402][T24869] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1135.002402][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_internal_check_memory+0xb5/0x520 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.002402][T24869] __se_sys_bpf+0x8e/0xa0 [ 1135.002402][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1135.002402][T24869] __do_fast_syscall_32+0x127/0x180 [ 1135.002402][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1135.002402][T24869] do_SYSENTER_32+0x73/0x90 [ 1135.002402][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.002402][T24869] RIP: 0023:0xf7f5d549 [ 1135.002402][T24869] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1135.002402][T24869] RSP: 002b:00000000f55575fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1135.002402][T24869] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1135.002402][T24869] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.002402][T24869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.002402][T24869] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1135.002402][T24869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.002402][T24869] [ 1135.002402][T24869] Uninit was created at: [ 1135.002402][T24869] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1135.002402][T24869] kmsan_slab_alloc+0x8e/0xe0 [ 1135.002402][T24869] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1135.002402][T24869] pskb_expand_head+0x25e/0x1e20 [ 1135.002402][T24869] erspan_xmit+0xa04/0x3ea0 [ 1135.002402][T24869] xmit_one+0x2b6/0x760 [ 1135.002402][T24869] dev_hard_start_xmit+0x196/0x420 [ 1135.002402][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1135.002402][T24869] __qdisc_run+0x35b/0x490 [ 1135.002402][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1135.002402][T24869] dev_queue_xmit+0x4b/0x60 [ 1135.002402][T24869] __bpf_redirect+0x1461/0x16b0 [ 1135.002402][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1135.002402][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1135.002402][T24869] __bpf_prog_run512+0x12e/0x190 [ 1135.002402][T24869] bpf_test_run+0x53f/0xe60 [ 1135.002402][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1135.002402][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1135.002402][T24869] __se_sys_bpf+0x8e/0xa0 [ 1135.002402][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1135.002402][T24869] __do_fast_syscall_32+0x127/0x180 [ 1135.002402][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1135.002402][T24869] do_SYSENTER_32+0x73/0x90 [ 1135.002402][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.002402][T24869] ===================================================== [ 1135.002402][T24869] Disabling lock debugging due to kernel taint [ 1135.609626][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input32 [ 1135.755941][T24869] ===================================================== [ 1135.762434][T24869] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1135.762434][T24869] CPU: 0 PID: 24869 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1135.777568][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.777568][T24869] Call Trace: [ 1135.777568][T24869] dump_stack+0x24c/0x2e0 [ 1135.777568][T24869] kmsan_report+0xfb/0x1e0 [ 1135.777568][T24869] __msan_warning+0x5c/0xa0 [ 1135.777568][T24869] erspan_xmit+0x21b9/0x3ea0 [ 1135.777568][T24869] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1135.777568][T24869] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? erspan_tunnel_init+0x470/0x470 [ 1135.777568][T24869] xmit_one+0x2b6/0x760 [ 1135.777568][T24869] dev_hard_start_xmit+0x196/0x420 [ 1135.777568][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1135.777568][T24869] __qdisc_run+0x35b/0x490 [ 1135.777568][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1135.777568][T24869] dev_queue_xmit+0x4b/0x60 [ 1135.777568][T24869] __bpf_redirect+0x1461/0x16b0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1135.777568][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1135.777568][T24869] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1135.777568][T24869] ? __msan_instrument_asm_store+0x107/0x130 [ 1135.777568][T24869] ? bpf_csum_level+0x760/0x760 [ 1135.777568][T24869] __bpf_prog_run512+0x12e/0x190 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1135.777568][T24869] ? __perf_event_task_sched_in+0xbc7/0xdb0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.777568][T24869] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1135.777568][T24869] ? ktime_get+0x390/0x470 [ 1135.777568][T24869] ? kmsan_get_metadata+0x4f/0x180 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? __bpf_prog_run480+0x190/0x190 [ 1135.777568][T24869] bpf_test_run+0x53f/0xe60 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1135.777568][T24869] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1135.777568][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_internal_check_memory+0xb5/0x520 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1135.777568][T24869] __se_sys_bpf+0x8e/0xa0 [ 1135.777568][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1135.777568][T24869] __do_fast_syscall_32+0x127/0x180 [ 1135.777568][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1135.777568][T24869] do_SYSENTER_32+0x73/0x90 [ 1135.777568][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.777568][T24869] RIP: 0023:0xf7f5d549 [ 1135.777568][T24869] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1135.777568][T24869] RSP: 002b:00000000f55575fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1135.777568][T24869] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1135.777568][T24869] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.777568][T24869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.777568][T24869] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1135.777568][T24869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.777568][T24869] [ 1135.777568][T24869] Uninit was created at: [ 1135.777568][T24869] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1135.777568][T24869] kmsan_slab_alloc+0x8e/0xe0 [ 1135.777568][T24869] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1135.777568][T24869] pskb_expand_head+0x25e/0x1e20 [ 1135.777568][T24869] erspan_xmit+0xa04/0x3ea0 [ 1135.777568][T24869] xmit_one+0x2b6/0x760 [ 1135.777568][T24869] dev_hard_start_xmit+0x196/0x420 [ 1135.777568][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1135.777568][T24869] __qdisc_run+0x35b/0x490 [ 1135.777568][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1135.777568][T24869] dev_queue_xmit+0x4b/0x60 [ 1135.777568][T24869] __bpf_redirect+0x1461/0x16b0 [ 1135.777568][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1135.777568][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1135.777568][T24869] __bpf_prog_run512+0x12e/0x190 [ 1135.777568][T24869] bpf_test_run+0x53f/0xe60 [ 1135.777568][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1135.777568][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1135.777568][T24869] __se_sys_bpf+0x8e/0xa0 [ 1135.777568][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1135.777568][T24869] __do_fast_syscall_32+0x127/0x180 [ 1135.777568][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1135.777568][T24869] do_SYSENTER_32+0x73/0x90 [ 1135.777568][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.777568][T24869] ===================================================== [ 1136.360779][ T5] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1136.483816][ T5] usb 6-1: USB disconnect, device number 15 [ 1136.834156][T24862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1136.852012][T24862] device geneve4 entered promiscuous mode [ 1136.871107][T24873] ===================================================== [ 1136.874642][T24873] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1136.882831][T24873] CPU: 1 PID: 24873 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1136.882831][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.882831][T24873] Call Trace: [ 1136.882831][T24873] dump_stack+0x24c/0x2e0 [ 1136.882831][T24873] kmsan_report+0xfb/0x1e0 [ 1136.882831][T24873] __msan_warning+0x5c/0xa0 [ 1136.919331][T24873] erspan_xmit+0x21b9/0x3ea0 [ 1136.919331][T24873] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1136.919331][T24873] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1136.919331][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1136.919331][T24873] ? erspan_tunnel_init+0x470/0x470 [ 1136.919331][T24873] xmit_one+0x2b6/0x760 [ 1136.919331][T24873] dev_hard_start_xmit+0x196/0x420 [ 1136.919331][T24873] sch_direct_xmit+0x57c/0x1a60 [ 1136.919331][T24873] __qdisc_run+0x35b/0x490 [ 1136.963374][T24873] __dev_queue_xmit+0x26ad/0x4600 [ 1136.963374][T24873] dev_queue_xmit+0x4b/0x60 [ 1136.963374][T24873] __bpf_redirect+0x1461/0x16b0 [ 1136.963374][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1136.963374][T24873] bpf_clone_redirect+0x4a1/0x660 [ 1136.963374][T24873] ___bpf_prog_run+0x2b78/0xb950 [ 1136.963374][T24873] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 1136.963374][T24873] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1136.963374][T24873] ? bpf_csum_level+0x760/0x760 [ 1136.963374][T24873] __bpf_prog_run512+0x12e/0x190 [ 1136.963374][T24873] ? process_slab+0x13a0/0x1b70 [ 1136.963374][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1136.963374][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1136.963374][T24873] ? __msan_get_context_state+0x9/0x20 [ 1136.963374][T24873] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 1137.042661][T24873] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1137.042661][T24873] ? should_fail+0x72/0x9e0 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.042661][T24873] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1137.042661][T24873] ? ktime_get+0x390/0x470 [ 1137.042661][T24873] ? kmsan_get_metadata+0x4f/0x180 [ 1137.042661][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.042661][T24873] ? __bpf_prog_run480+0x190/0x190 [ 1137.042661][T24873] bpf_test_run+0x53f/0xe60 [ 1137.042661][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.042661][T24873] bpf_prog_test_run_skb+0x1914/0x3500 [ 1137.042661][T24873] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1137.042661][T24873] __do_sys_bpf+0xbe6f/0x1aba0 [ 1137.042661][T24873] ? kmsan_internal_set_origin+0x85/0xc0 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_internal_check_memory+0xb5/0x520 [ 1137.042661][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.042661][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.180356][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.180356][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1137.180356][T24873] __se_sys_bpf+0x8e/0xa0 [ 1137.180356][T24873] __ia32_sys_bpf+0x4a/0x70 [ 1137.180356][T24873] __do_fast_syscall_32+0x127/0x180 [ 1137.180356][T24873] do_fast_syscall_32+0x6a/0xc0 [ 1137.180356][T24873] do_SYSENTER_32+0x73/0x90 [ 1137.180356][T24873] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.180356][T24873] RIP: 0023:0xf7f5d549 [ 1137.180356][T24873] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1137.180356][T24873] RSP: 002b:00000000f55365fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1137.180356][T24873] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1137.180356][T24873] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.180356][T24873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.180356][T24873] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1137.180356][T24873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.180356][T24873] [ 1137.180356][T24873] Uninit was created at: [ 1137.180356][T24873] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1137.304468][T24873] kmsan_slab_alloc+0x8e/0xe0 [ 1137.304468][T24873] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1137.304468][T24873] pskb_expand_head+0x25e/0x1e20 [ 1137.304468][T24873] erspan_xmit+0xa04/0x3ea0 [ 1137.304468][T24873] xmit_one+0x2b6/0x760 [ 1137.330190][T24873] dev_hard_start_xmit+0x196/0x420 [ 1137.330190][T24873] sch_direct_xmit+0x57c/0x1a60 [ 1137.330190][T24873] __qdisc_run+0x35b/0x490 [ 1137.330190][T24873] __dev_queue_xmit+0x26ad/0x4600 [ 1137.330190][T24873] dev_queue_xmit+0x4b/0x60 [ 1137.330190][T24873] __bpf_redirect+0x1461/0x16b0 [ 1137.330190][T24873] bpf_clone_redirect+0x4a1/0x660 [ 1137.362741][T24873] ___bpf_prog_run+0x2b78/0xb950 [ 1137.362741][T24873] __bpf_prog_run512+0x12e/0x190 [ 1137.362741][T24873] bpf_test_run+0x53f/0xe60 [ 1137.362741][T24873] bpf_prog_test_run_skb+0x1914/0x3500 [ 1137.362741][T24873] __do_sys_bpf+0xbe6f/0x1aba0 [ 1137.362741][T24873] __se_sys_bpf+0x8e/0xa0 [ 1137.392737][T24873] __ia32_sys_bpf+0x4a/0x70 [ 1137.394446][T24873] __do_fast_syscall_32+0x127/0x180 [ 1137.394446][T24873] do_fast_syscall_32+0x6a/0xc0 [ 1137.394446][T24873] do_SYSENTER_32+0x73/0x90 [ 1137.394446][T24873] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.394446][T24873] ===================================================== 17:47:00 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) 17:47:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[], 0x30}}, 0x0) 17:47:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 17:47:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xb, 0x0, 0x0) [ 1138.068652][T24916] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1138.140703][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:00 executing program 4: openat$urandom(0xffffff9c, 0x0, 0x408202, 0x0) 17:47:00 executing program 5: pselect6(0x40, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000002f00), 0x0) 17:47:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1138.408269][T24919] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1138.513467][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1138.530922][T24919] device geneve2 entered promiscuous mode 17:47:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1138.892924][T24928] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1138.949210][T24928] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1139.353835][T24869] ===================================================== [ 1139.360816][T24869] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1139.363494][T24869] CPU: 1 PID: 24869 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1139.363494][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.363494][T24869] Call Trace: [ 1139.363494][T24869] dump_stack+0x24c/0x2e0 [ 1139.363494][T24869] kmsan_report+0xfb/0x1e0 [ 1139.363494][T24869] __msan_warning+0x5c/0xa0 [ 1139.363494][T24869] erspan_xmit+0x21b9/0x3ea0 [ 1139.363494][T24869] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1139.363494][T24869] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? erspan_tunnel_init+0x470/0x470 [ 1139.363494][T24869] xmit_one+0x2b6/0x760 [ 1139.363494][T24869] dev_hard_start_xmit+0x196/0x420 [ 1139.363494][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1139.363494][T24869] __qdisc_run+0x35b/0x490 [ 1139.363494][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1139.363494][T24869] dev_queue_xmit+0x4b/0x60 [ 1139.363494][T24869] __bpf_redirect+0x1461/0x16b0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1139.363494][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1139.363494][T24869] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1139.363494][T24869] ? __msan_instrument_asm_store+0x107/0x130 [ 1139.363494][T24869] ? bpf_csum_level+0x760/0x760 [ 1139.363494][T24869] __bpf_prog_run512+0x12e/0x190 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1139.363494][T24869] ? __perf_event_task_sched_in+0xbc7/0xdb0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1139.363494][T24869] ? ktime_get+0x390/0x470 [ 1139.363494][T24869] ? kmsan_get_metadata+0x4f/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? __bpf_prog_run480+0x190/0x190 [ 1139.363494][T24869] bpf_test_run+0x53f/0xe60 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1139.363494][T24869] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1139.363494][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_internal_set_origin+0x85/0xc0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_internal_check_memory+0xb5/0x520 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] ? kmsan_get_metadata+0x116/0x180 [ 1139.363494][T24869] __se_sys_bpf+0x8e/0xa0 [ 1139.363494][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1139.363494][T24869] __do_fast_syscall_32+0x127/0x180 [ 1139.363494][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1139.363494][T24869] do_SYSENTER_32+0x73/0x90 [ 1139.363494][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.363494][T24869] RIP: 0023:0xf7f5d549 [ 1139.363494][T24869] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1139.363494][T24869] RSP: 002b:00000000f55575fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1139.363494][T24869] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1139.363494][T24869] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.363494][T24869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.363494][T24869] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1139.363494][T24869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.363494][T24869] [ 1139.363494][T24869] Uninit was created at: [ 1139.363494][T24869] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1139.363494][T24869] kmsan_slab_alloc+0x8e/0xe0 [ 1139.363494][T24869] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1139.363494][T24869] pskb_expand_head+0x25e/0x1e20 [ 1139.363494][T24869] erspan_xmit+0xa04/0x3ea0 [ 1139.363494][T24869] xmit_one+0x2b6/0x760 [ 1139.363494][T24869] dev_hard_start_xmit+0x196/0x420 [ 1139.363494][T24869] sch_direct_xmit+0x57c/0x1a60 [ 1139.363494][T24869] __qdisc_run+0x35b/0x490 [ 1139.363494][T24869] __dev_queue_xmit+0x26ad/0x4600 [ 1139.363494][T24869] dev_queue_xmit+0x4b/0x60 [ 1139.363494][T24869] __bpf_redirect+0x1461/0x16b0 [ 1139.363494][T24869] bpf_clone_redirect+0x4a1/0x660 [ 1139.363494][T24869] ___bpf_prog_run+0x2b78/0xb950 [ 1139.363494][T24869] __bpf_prog_run512+0x12e/0x190 [ 1139.363494][T24869] bpf_test_run+0x53f/0xe60 [ 1139.363494][T24869] bpf_prog_test_run_skb+0x1914/0x3500 [ 1139.363494][T24869] __do_sys_bpf+0xbe6f/0x1aba0 [ 1139.363494][T24869] __se_sys_bpf+0x8e/0xa0 [ 1139.363494][T24869] __ia32_sys_bpf+0x4a/0x70 [ 1139.363494][T24869] __do_fast_syscall_32+0x127/0x180 [ 1139.363494][T24869] do_fast_syscall_32+0x6a/0xc0 [ 1139.363494][T24869] do_SYSENTER_32+0x73/0x90 [ 1139.363494][T24869] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.363494][T24869] ===================================================== [ 1140.005001][T24933] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1140.066481][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1140.330445][T24873] ===================================================== [ 1140.332564][T24873] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1140.332564][T24873] CPU: 1 PID: 24873 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1140.332564][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.332564][T24873] Call Trace: [ 1140.332564][T24873] dump_stack+0x24c/0x2e0 [ 1140.332564][T24873] kmsan_report+0xfb/0x1e0 [ 1140.372646][T24873] __msan_warning+0x5c/0xa0 [ 1140.372646][T24873] erspan_xmit+0x21b9/0x3ea0 [ 1140.372646][T24873] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1140.372646][T24873] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? erspan_tunnel_init+0x470/0x470 [ 1140.372646][T24873] xmit_one+0x2b6/0x760 [ 1140.372646][T24873] dev_hard_start_xmit+0x196/0x420 [ 1140.372646][T24873] sch_direct_xmit+0x57c/0x1a60 [ 1140.372646][T24873] __qdisc_run+0x35b/0x490 [ 1140.372646][T24873] __dev_queue_xmit+0x26ad/0x4600 [ 1140.372646][T24873] dev_queue_xmit+0x4b/0x60 [ 1140.372646][T24873] __bpf_redirect+0x1461/0x16b0 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] bpf_clone_redirect+0x4a1/0x660 [ 1140.372646][T24873] ___bpf_prog_run+0x2b78/0xb950 [ 1140.372646][T24873] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1140.372646][T24873] ? __msan_instrument_asm_store+0x107/0x130 [ 1140.372646][T24873] ? bpf_csum_level+0x760/0x760 [ 1140.372646][T24873] __bpf_prog_run512+0x12e/0x190 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1140.372646][T24873] ? __perf_event_task_sched_in+0xbc7/0xdb0 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1140.372646][T24873] ? ktime_get+0x390/0x470 [ 1140.372646][T24873] ? kmsan_get_metadata+0x4f/0x180 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] ? __bpf_prog_run480+0x190/0x190 [ 1140.372646][T24873] bpf_test_run+0x53f/0xe60 [ 1140.372646][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.372646][T24873] bpf_prog_test_run_skb+0x1914/0x3500 [ 1140.372646][T24873] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1140.372646][T24873] __do_sys_bpf+0xbe6f/0x1aba0 [ 1140.372646][T24873] ? kmsan_internal_set_origin+0x85/0xc0 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.372646][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.612395][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.612395][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.612395][T24873] ? kmsan_internal_check_memory+0xb5/0x520 [ 1140.612395][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.612395][T24873] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.612395][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.612395][T24873] ? kmsan_get_metadata+0x116/0x180 [ 1140.612395][T24873] __se_sys_bpf+0x8e/0xa0 [ 1140.612395][T24873] __ia32_sys_bpf+0x4a/0x70 [ 1140.612395][T24873] __do_fast_syscall_32+0x127/0x180 [ 1140.612395][T24873] do_fast_syscall_32+0x6a/0xc0 [ 1140.612395][T24873] do_SYSENTER_32+0x73/0x90 [ 1140.612395][T24873] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.612395][T24873] RIP: 0023:0xf7f5d549 [ 1140.612395][T24873] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1140.612395][T24873] RSP: 002b:00000000f55365fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1140.612395][T24873] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1140.612395][T24873] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.612395][T24873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.612395][T24873] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1140.612395][T24873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.612395][T24873] [ 1140.612395][T24873] Uninit was created at: [ 1140.612395][T24873] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1140.612395][T24873] kmsan_slab_alloc+0x8e/0xe0 [ 1140.612395][T24873] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1140.612395][T24873] pskb_expand_head+0x25e/0x1e20 [ 1140.612395][T24873] erspan_xmit+0xa04/0x3ea0 [ 1140.612395][T24873] xmit_one+0x2b6/0x760 [ 1140.612395][T24873] dev_hard_start_xmit+0x196/0x420 [ 1140.612395][T24873] sch_direct_xmit+0x57c/0x1a60 [ 1140.612395][T24873] __qdisc_run+0x35b/0x490 [ 1140.612395][T24873] __dev_queue_xmit+0x26ad/0x4600 [ 1140.612395][T24873] dev_queue_xmit+0x4b/0x60 [ 1140.612395][T24873] __bpf_redirect+0x1461/0x16b0 [ 1140.612395][T24873] bpf_clone_redirect+0x4a1/0x660 [ 1140.612395][T24873] ___bpf_prog_run+0x2b78/0xb950 [ 1140.612395][T24873] __bpf_prog_run512+0x12e/0x190 [ 1140.612395][T24873] bpf_test_run+0x53f/0xe60 [ 1140.612395][T24873] bpf_prog_test_run_skb+0x1914/0x3500 [ 1140.612395][T24873] __do_sys_bpf+0xbe6f/0x1aba0 [ 1140.612395][T24873] __se_sys_bpf+0x8e/0xa0 [ 1140.612395][T24873] __ia32_sys_bpf+0x4a/0x70 [ 1140.612395][T24873] __do_fast_syscall_32+0x127/0x180 [ 1140.612395][T24873] do_fast_syscall_32+0x6a/0xc0 [ 1140.612395][T24873] do_SYSENTER_32+0x73/0x90 [ 1140.612395][T24873] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.612395][T24873] ===================================================== 17:47:03 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000100a009500000000000000d5108dd01543e6c4a53b389eb81951007106d55c672ffea4b699315dfba1b3628f06c14bdcc765c1"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x7, &(0x7f00000002c0)="020e003f0004087e5b0123ca1fcd", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_dequeue\x00', r0}, 0x10) 17:47:03 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) 17:47:03 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000002600)) 17:47:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028005000300090000001400070000000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 17:47:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1141.378615][T24943] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1141.493586][T24945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.511355][T24945] device geneve5 entered promiscuous mode [ 1141.544166][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:47:04 executing program 4: prctl$PR_SET_DUMPABLE(0xe, 0x0) 17:47:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)) [ 1141.930224][T24959] ===================================================== [ 1141.932436][T24959] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1141.932436][T24959] CPU: 0 PID: 24959 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1141.932436][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.932436][T24959] Call Trace: [ 1141.932436][T24959] dump_stack+0x24c/0x2e0 [ 1141.932436][T24959] kmsan_report+0xfb/0x1e0 [ 1141.975768][T24959] __msan_warning+0x5c/0xa0 [ 1141.975768][T24959] erspan_xmit+0x21b9/0x3ea0 [ 1141.975768][T24959] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1141.975768][T24959] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? erspan_tunnel_init+0x470/0x470 [ 1141.975768][T24959] xmit_one+0x2b6/0x760 [ 1141.975768][T24959] dev_hard_start_xmit+0x196/0x420 [ 1141.975768][T24959] sch_direct_xmit+0x57c/0x1a60 [ 1141.975768][T24959] __qdisc_run+0x35b/0x490 [ 1141.975768][T24959] __dev_queue_xmit+0x26ad/0x4600 [ 1141.975768][T24959] dev_queue_xmit+0x4b/0x60 [ 1141.975768][T24959] __bpf_redirect+0x1461/0x16b0 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] bpf_clone_redirect+0x4a1/0x660 [ 1141.975768][T24959] ___bpf_prog_run+0x2b78/0xb950 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 1141.975768][T24959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1141.975768][T24959] ? bpf_csum_level+0x760/0x760 [ 1141.975768][T24959] __bpf_prog_run512+0x12e/0x190 [ 1141.975768][T24959] ? process_slab+0x13a0/0x1b70 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? __msan_get_context_state+0x9/0x20 [ 1141.975768][T24959] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 1141.975768][T24959] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1141.975768][T24959] ? should_fail+0x72/0x9e0 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1141.975768][T24959] ? ktime_get+0x390/0x470 [ 1141.975768][T24959] ? kmsan_get_metadata+0x4f/0x180 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? __bpf_prog_run480+0x190/0x190 [ 1141.975768][T24959] bpf_test_run+0x53f/0xe60 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] bpf_prog_test_run_skb+0x1914/0x3500 [ 1141.975768][T24959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1141.975768][T24959] __do_sys_bpf+0xbe6f/0x1aba0 [ 1141.975768][T24959] ? kmsan_internal_set_origin+0x85/0xc0 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_internal_check_memory+0xb5/0x520 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1141.975768][T24959] __se_sys_bpf+0x8e/0xa0 [ 1141.975768][T24959] __ia32_sys_bpf+0x4a/0x70 [ 1141.975768][T24959] __do_fast_syscall_32+0x127/0x180 [ 1141.975768][T24959] do_fast_syscall_32+0x6a/0xc0 [ 1141.975768][T24959] do_SYSENTER_32+0x73/0x90 [ 1141.975768][T24959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.975768][T24959] RIP: 0023:0xf7f5d549 [ 1141.975768][T24959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1141.975768][T24959] RSP: 002b:00000000f55575fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1141.975768][T24959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1141.975768][T24959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.975768][T24959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1141.975768][T24959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1141.975768][T24959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1141.975768][T24959] [ 1141.975768][T24959] Uninit was created at: [ 1141.975768][T24959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1141.975768][T24959] kmsan_slab_alloc+0x8e/0xe0 [ 1141.975768][T24959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1141.975768][T24959] pskb_expand_head+0x25e/0x1e20 [ 1141.975768][T24959] erspan_xmit+0xa04/0x3ea0 [ 1141.975768][T24959] xmit_one+0x2b6/0x760 [ 1141.975768][T24959] dev_hard_start_xmit+0x196/0x420 [ 1141.975768][T24959] sch_direct_xmit+0x57c/0x1a60 [ 1141.975768][T24959] __qdisc_run+0x35b/0x490 [ 1141.975768][T24959] __dev_queue_xmit+0x26ad/0x4600 [ 1141.975768][T24959] dev_queue_xmit+0x4b/0x60 [ 1141.975768][T24959] __bpf_redirect+0x1461/0x16b0 [ 1141.975768][T24959] bpf_clone_redirect+0x4a1/0x660 [ 1141.975768][T24959] ___bpf_prog_run+0x2b78/0xb950 [ 1141.975768][T24959] __bpf_prog_run512+0x12e/0x190 [ 1141.975768][T24959] bpf_test_run+0x53f/0xe60 [ 1141.975768][T24959] bpf_prog_test_run_skb+0x1914/0x3500 [ 1141.975768][T24959] __do_sys_bpf+0xbe6f/0x1aba0 [ 1141.975768][T24959] __se_sys_bpf+0x8e/0xa0 [ 1141.975768][T24959] __ia32_sys_bpf+0x4a/0x70 [ 1141.975768][T24959] __do_fast_syscall_32+0x127/0x180 [ 1141.975768][T24959] do_fast_syscall_32+0x6a/0xc0 [ 1141.975768][T24959] do_SYSENTER_32+0x73/0x90 [ 1141.975768][T24959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.975768][T24959] ===================================================== 17:47:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:05 executing program 5: r0 = io_uring_setup(0x3ff, &(0x7f00000000c0)={0x0, 0xe2a9}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, 0x0) 17:47:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028005000300090000001400070000000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 1142.961743][T24959] ===================================================== [ 1142.966367][T24959] BUG: KMSAN: uninit-value in erspan_xmit+0x21b9/0x3ea0 [ 1142.973328][T24959] CPU: 1 PID: 24959 Comm: syz-executor.0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1142.973328][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.973328][T24959] Call Trace: [ 1142.973328][T24959] dump_stack+0x24c/0x2e0 [ 1142.973328][T24959] kmsan_report+0xfb/0x1e0 [ 1142.973328][T24959] __msan_warning+0x5c/0xa0 [ 1142.973328][T24959] erspan_xmit+0x21b9/0x3ea0 [ 1142.973328][T24959] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1142.973328][T24959] ? validate_xmit_xfrm+0xd5/0x1b90 [ 1142.973328][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1142.973328][T24959] ? erspan_tunnel_init+0x470/0x470 [ 1142.973328][T24959] xmit_one+0x2b6/0x760 [ 1142.973328][T24959] dev_hard_start_xmit+0x196/0x420 [ 1142.973328][T24959] sch_direct_xmit+0x57c/0x1a60 [ 1142.973328][T24959] __qdisc_run+0x35b/0x490 [ 1142.973328][T24959] __dev_queue_xmit+0x26ad/0x4600 [ 1142.973328][T24959] dev_queue_xmit+0x4b/0x60 [ 1142.973328][T24959] __bpf_redirect+0x1461/0x16b0 [ 1142.973328][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1142.973328][T24959] bpf_clone_redirect+0x4a1/0x660 [ 1142.973328][T24959] ___bpf_prog_run+0x2b78/0xb950 [ 1142.973328][T24959] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1142.973328][T24959] ? __msan_instrument_asm_store+0x107/0x130 [ 1143.097012][T24959] ? bpf_csum_level+0x760/0x760 [ 1143.097012][T24959] __bpf_prog_run512+0x12e/0x190 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1143.097012][T24959] ? __perf_event_task_sched_in+0xbc7/0xdb0 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1143.097012][T24959] ? ktime_get+0x390/0x470 [ 1143.097012][T24959] ? kmsan_get_metadata+0x4f/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? __bpf_prog_run480+0x190/0x190 [ 1143.097012][T24959] bpf_test_run+0x53f/0xe60 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] bpf_prog_test_run_skb+0x1914/0x3500 [ 1143.097012][T24959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1143.097012][T24959] __do_sys_bpf+0xbe6f/0x1aba0 [ 1143.097012][T24959] ? kmsan_internal_set_origin+0x85/0xc0 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_internal_check_memory+0xb5/0x520 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] ? kmsan_get_metadata+0x116/0x180 [ 1143.097012][T24959] __se_sys_bpf+0x8e/0xa0 [ 1143.097012][T24959] __ia32_sys_bpf+0x4a/0x70 [ 1143.097012][T24959] __do_fast_syscall_32+0x127/0x180 [ 1143.097012][T24959] do_fast_syscall_32+0x6a/0xc0 [ 1143.097012][T24959] do_SYSENTER_32+0x73/0x90 [ 1143.097012][T24959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.097012][T24959] RIP: 0023:0xf7f5d549 [ 1143.097012][T24959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1143.097012][T24959] RSP: 002b:00000000f55575fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1143.097012][T24959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 1143.097012][T24959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.358050][T24959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.358050][T24959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1143.358050][T24959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.358050][T24959] [ 1143.358050][T24959] Uninit was created at: [ 1143.358050][T24959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1143.358050][T24959] kmsan_slab_alloc+0x8e/0xe0 [ 1143.358050][T24959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1143.358050][T24959] pskb_expand_head+0x25e/0x1e20 [ 1143.358050][T24959] erspan_xmit+0xa04/0x3ea0 [ 1143.358050][T24959] xmit_one+0x2b6/0x760 [ 1143.358050][T24959] dev_hard_start_xmit+0x196/0x420 [ 1143.358050][T24959] sch_direct_xmit+0x57c/0x1a60 [ 1143.358050][T24959] __qdisc_run+0x35b/0x490 [ 1143.358050][T24959] __dev_queue_xmit+0x26ad/0x4600 [ 1143.443040][T24959] dev_queue_xmit+0x4b/0x60 [ 1143.443040][T24959] __bpf_redirect+0x1461/0x16b0 [ 1143.443040][T24959] bpf_clone_redirect+0x4a1/0x660 [ 1143.443040][T24959] ___bpf_prog_run+0x2b78/0xb950 [ 1143.443040][T24959] __bpf_prog_run512+0x12e/0x190 [ 1143.443040][T24959] bpf_test_run+0x53f/0xe60 [ 1143.443040][T24959] bpf_prog_test_run_skb+0x1914/0x3500 [ 1143.443040][T24959] __do_sys_bpf+0xbe6f/0x1aba0 [ 1143.443040][T24959] __se_sys_bpf+0x8e/0xa0 [ 1143.443040][T24959] __ia32_sys_bpf+0x4a/0x70 [ 1143.443040][T24959] __do_fast_syscall_32+0x127/0x180 [ 1143.493755][T24959] do_fast_syscall_32+0x6a/0xc0 [ 1143.493755][T24959] do_SYSENTER_32+0x73/0x90 [ 1143.493755][T24959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.512644][T24959] ===================================================== [ 1143.925340][T24970] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1143.949273][T24971] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1144.028295][T24970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:06 executing program 4: getgroups(0x1, &(0x7f0000000140)=[0xee00]) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) [ 1144.100678][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:47:07 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000100a009500000000000000d5108dd01543e6c4a53b389eb81951007106d55c672ffea4b699315dfba1b3628f06c14bdcc765c1"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x7, &(0x7f00000002c0)="020e003f0004087e5b0123ca1fcd", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_dequeue\x00', r0}, 0x10) 17:47:07 executing program 5: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000400)="18", 0x1}], 0x0, 0x0) 17:47:07 executing program 3: syz_io_uring_setup(0x2b07, &(0x7f0000000380)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) 17:47:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x84}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028005000300090000001400070000000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="08000a0094d386ee3e6b0ebda5c2db117854e67d4abaea8ca3ed55aee405eb222eab78e5f1cdeee953c528f6f5dd38b9d3c0ea5ba70a4c2a15dc0c55b82228d8ae110f77d76899599b681ebec55591176c1cb071d36084001ef529e81d18781ca7436d0b2accb0c127b5a2c7eb7b9642550a9fc95af3c47843715dd9e0f630e665fbeb7d8ab50bde80446abad457abd118c6efc3f8a43c70c1a0ae943fef839258ff36e3d62d7ab30a4a227aa2ffec14", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xff}]}]}, 0x68}}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x44, r4, 0x41e2d21ea6e2595b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x763a975720a19baa}, 0x6400c800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800500030009000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 17:47:07 executing program 4: clone(0x3a3dd4008404af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x254, 0x59000005, 0x294, 0x254, 0x294, 0x320, 0x378, 0x378, 0x320, 0x378, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], [], 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x234, 0x254, 0x52020000, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00', {0x2, 0x0, 0x41, 0x0, 0x0, 0xff81, 0x9, 0x8}}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_team\x00', 'dummy0\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x444)