cuting program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 366.365643][T12113] loop2: detected capacity change from 0 to 224 15:32:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000140)=0xf6) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa518) 15:32:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={[{@size={'size', 0x3d, [0x65]}}]}) 15:32:02 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}, 0x45c) [ 367.789549][T12131] not chained 20000 origins [ 367.794101][T12131] CPU: 1 PID: 12131 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 367.802979][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.813065][T12131] Call Trace: [ 367.816403][T12131] dump_stack+0x24c/0x2e0 [ 367.820776][T12131] kmsan_internal_chain_origin+0x6f/0x130 [ 367.826531][T12131] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 367.833082][T12131] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 367.839196][T12131] ? kmsan_get_metadata+0x116/0x180 [ 367.844449][T12131] ? kmsan_get_metadata+0x116/0x180 [ 367.849676][T12131] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 367.855510][T12131] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 367.861600][T12131] ? kmsan_get_metadata+0x116/0x180 [ 367.866848][T12131] ? kmsan_set_origin_checked+0xa2/0x100 [ 367.872596][T12131] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 367.878688][T12131] ? kmsan_unpoison_shadow+0x74/0xa0 [ 367.883997][T12131] ? _copy_from_user+0x1fd/0x300 [ 367.889225][T12131] __msan_chain_origin+0x54/0xa0 [ 367.894192][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 367.899436][T12131] get_compat_msghdr+0x108/0x2b0 [ 367.904404][T12131] do_recvmmsg+0xdc1/0x22d0 [ 367.908947][T12131] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 367.914791][T12131] ? kmsan_get_metadata+0x116/0x180 [ 367.920116][T12131] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 367.926225][T12131] ? kmsan_get_metadata+0x116/0x180 [ 367.931704][T12131] ? kmsan_internal_set_origin+0x82/0xc0 [ 367.937404][T12131] ? __msan_poison_alloca+0xec/0x110 [ 367.942825][T12131] ? __sys_recvmmsg+0xb5/0x6f0 [ 367.947808][T12131] __sys_recvmmsg+0x519/0x6f0 [ 367.952521][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 367.958630][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 367.964991][T12131] __do_fast_syscall_32+0x127/0x180 [ 367.970239][T12131] do_fast_syscall_32+0x77/0xd0 [ 367.975120][T12131] do_SYSENTER_32+0x73/0x90 [ 367.979651][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 367.986130][T12131] RIP: 0023:0xf7f31549 [ 367.990234][T12131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 368.009871][T12131] RSP: 002b:00000000f54e95fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 368.018494][T12131] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 368.026498][T12131] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 368.034504][T12131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.042604][T12131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 368.050616][T12131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.058905][T12131] Uninit was stored to memory at: [ 368.063972][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.069719][T12131] __msan_chain_origin+0x54/0xa0 [ 368.074686][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.080088][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.085051][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.089579][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.094284][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.100413][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.106597][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.111832][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.116711][T12131] do_SYSENTER_32+0x73/0x90 [ 368.121235][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.127596][T12131] [ 368.129938][T12131] Uninit was stored to memory at: [ 368.134985][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.140866][T12131] __msan_chain_origin+0x54/0xa0 [ 368.145942][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.151101][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.156243][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.160859][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.165555][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.171648][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.177923][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.183630][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.188511][T12131] do_SYSENTER_32+0x73/0x90 [ 368.193054][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.199412][T12131] [ 368.201742][T12131] Uninit was stored to memory at: [ 368.206757][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.212585][T12131] __msan_chain_origin+0x54/0xa0 [ 368.217593][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.222923][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.227930][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.232491][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.237223][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.243420][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.249641][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.254877][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.259842][T12131] do_SYSENTER_32+0x73/0x90 [ 368.264456][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.270811][T12131] [ 368.273138][T12131] Uninit was stored to memory at: [ 368.278156][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.283897][T12131] __msan_chain_origin+0x54/0xa0 [ 368.288939][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.294066][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.299014][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.303527][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.308216][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.314322][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.320517][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.325736][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.330710][T12131] do_SYSENTER_32+0x73/0x90 [ 368.335253][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.341617][T12131] [ 368.343944][T12131] Uninit was stored to memory at: [ 368.348962][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.354961][T12131] __msan_chain_origin+0x54/0xa0 [ 368.360127][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.365260][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.371162][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.375892][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.380579][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.386678][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.392847][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.398060][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.402920][T12131] do_SYSENTER_32+0x73/0x90 [ 368.407432][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.413809][T12131] [ 368.416149][T12131] Uninit was stored to memory at: [ 368.421162][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.426907][T12131] __msan_chain_origin+0x54/0xa0 [ 368.431881][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.437031][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.441993][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.446514][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.451212][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.457297][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.463561][T12131] __do_fast_syscall_32+0x127/0x180 [ 368.468773][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.473633][T12131] do_SYSENTER_32+0x73/0x90 [ 368.478144][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.484491][T12131] [ 368.486809][T12131] Uninit was stored to memory at: [ 368.491819][T12131] kmsan_internal_chain_origin+0xad/0x130 [ 368.497549][T12131] __msan_chain_origin+0x54/0xa0 [ 368.502496][T12131] __get_compat_msghdr+0x6db/0x9d0 [ 368.507638][T12131] get_compat_msghdr+0x108/0x2b0 [ 368.512585][T12131] do_recvmmsg+0xdc1/0x22d0 [ 368.517099][T12131] __sys_recvmmsg+0x519/0x6f0 [ 368.521788][T12131] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 368.527875][T12131] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 368.534077][T12131] __do_fast_syscall_32+0x127/0x180 15:32:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 368.539318][T12131] do_fast_syscall_32+0x77/0xd0 [ 368.544330][T12131] do_SYSENTER_32+0x73/0x90 [ 368.548844][T12131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 368.555186][T12131] [ 368.557509][T12131] Local variable ----msg_sys@do_recvmmsg created at: [ 368.564169][T12131] do_recvmmsg+0xbf/0x22d0 [ 368.568606][T12131] do_recvmmsg+0xbf/0x22d0 [ 368.615930][T12136] loop2: detected capacity change from 0 to 224 [ 368.759345][T12146] input: syz1 as /devices/virtual/input/input13 15:32:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:04 executing program 1: socketpair(0x10, 0x80002, 0xfffeffff, 0x0) 15:32:04 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000001a80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) 15:32:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd4(r1, &(0x7f0000000040)={[0x7fff]}, 0x8, 0x800) connect$unix(r2, &(0x7f0000000140)=@abs={0x4d515bf7a7af0ac, 0x0, 0x4e22}, 0x6e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r0, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 369.455812][T12159] loop2: detected capacity change from 0 to 224 15:32:05 executing program 1: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 15:32:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 370.363418][T12178] loop2: detected capacity change from 0 to 224 15:32:06 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 15:32:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:06 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 15:32:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x2) write(r3, &(0x7f0000000000)="92", 0x1) keyctl$setperm(0x5, 0x0, 0x1c243911) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, 0xee00, r6) sendmmsg$unix(r3, &(0x7f0000004780)=[{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="fc69477824ea343c57193d3da89a8b88c5a4d1f8b573f5d4fb945801e3f24eb5d986bbef5640d0c05976970a0b51a1674cc9e861c3dee39d68a4db97098d110a", 0x40}, {&(0x7f0000001f80)="aed150c0ac580fee6526a9fcffefc9c20e3e4db4e7d04850a181ddbe8ab5a3aedfc20ad6a138c1cdfdadd3a2dd1afba5907da30895b92f7b8982cbae12e049b5e96825a48a4de550617ccad60cd2bb42b4571be5b74fb149ee70336ac6ddc5a51d72ba57defa4c4b9c6338c3728dd6eafe97bb3e3df82efedd841b5b2639ec3be5b873", 0x83}, {&(0x7f0000001500)="cd3ada9ba2c7b0eb41213c59d12fc98bdcbbef27e890f78eb8baef7d6ed26a48085ba2abe56c788973f7f4306ac4800c7efc873e7402da6bd8655d921e349b27d3caecd220cf9bac5224a1dcdc97701739b1fc3a165f6be5e64f156c7d5f928085282345fa015f2bc691b4389253f72c341a4062d82204469ef47aac03146e92d0c03745c1cf4cf8a2b9b856a60f195e1b0e699b3b8a58051ff29029d53a76c6758b95d98aafae2a21668a58d3c997ae540ae5c5745ad6fd31003026ae4352dcac60317d47f375a4f36e3639a0c04a4d", 0xd0}], 0x4, 0x0, 0x0, 0x4000000}, {&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000016c0)="92dd6d528979f67ed495de3a133a43a95cc06b3acc1c59547bc872dabd26d7b69bf91bb6aecb3eb792f82463d377dfa5fa0dfb6a03d06979116db90f9560f742f59ac8912c7ee0bb759204905669041fef9ef7ee7c3dca0a06ed2c44007389076a00686165e6c9ce3f16dc24f0c4937155c98ba3ad91c69f91e12416f74a3b8dcf4fb30a9b838f376de213f04c26322e7369d54648b912e50f3452aaf9a24453ab9089e54289aabfcef5ffdd4b01cbb53f1bdda38ae267339c58b60426c44ffdd718a703", 0xc4}, {&(0x7f00000017c0)="0a1f766f8828408834e511bdcb2994230e465f153767dca7a0e692c40e0a4babf7b84369be8e52618a27a23f87fa4d18593ceb651639", 0x36}, {&(0x7f0000001800)="dc9e88a9897f9b7692490b40b32f60e572719f78282ab2b74cd242b2dcf1553f4fec3d0f4262d589d0044a3d89d006206b8462405a38192407f375ef3ae0499be7ae641650bb201bc200deed795c3dbce8120c83e90a782d0712f53d53c8f7db0aee35b32cba35f809e471489f26ad76424f", 0x72}, {&(0x7f0000001880)="69b7960919b17eeba1afd49292235cd2771da25a80090da7eed9f347becd22dc05cb98920f8df85dc5b0a6256799400ac9c691e19673c7add40e1db90822a819ddb07d8abac820ade7", 0x49}, {&(0x7f0000001900)="e1f8ba3bfbfaa1e49993cd6392aa364dec852563b129bb3342bc6a8a876b4ec69a4a501e21c1582987c1ee596c224594603fc72378de7cb8ef892b8dda4a0443e0f9e69714ab3367a687a1a091ab0e656cc85de400461002282395ef6259824cfdca7342c0d906c13198b70db3ee863f7f12ec52953e82e901819130fe74fa8fa2be0301a486a06474301beee3f9d9e64383fce17efec8a525f58398bb20d099566596fcdf894dc2e54c09779772539b762801cf850fb0c07bbf2f6e77dc48705e0566a78820498f2e7d84f5cb46aae18dfc272d3bf02f1014", 0xd9}, {&(0x7f0000001a00)="9e31ce8d1050f9a0bdc1412a97a0e36261e5a0441c55167dd4d4cc7f0edb733a37dc781d2169888ee3acf09366dfb9e4405803e76584a64c019a8b8309af8b189e1f798601f720a9f3e8979e46330991bdb5deb89ce192093106d08d7c31bb909ec0ced51d468151cd38ad71b7", 0x6d}, {&(0x7f0000001a80)="598f891f218384c9ff47488c1eaaae65ef8f82260d70e7071a0a658772b14bd578973f940ac8f40865ce2065", 0x2c}, {&(0x7f0000001ac0)="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", 0xff}], 0x8, 0x0, 0x0, 0x800}, {&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="45e64f7e4dea2d96cd7b97b5c1cdfc4c6569136b2afa6debbb433fcdd10cc28df8ba3445560c0c7bed910cac104d9ab55907b7bba4dde854154052c5d700a227f8e1369ce947737027e98bd5a0052561109b6c200c9b5e184d71db4285cbe115fcd925729ac51c7cf46f463090198e65acaea0294c8a1eadd866", 0x7a}, {&(0x7f00000044c0)="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", 0x1df}, {&(0x7f0000001dc0)="45d98314c1d11a89f012c8b427d4ec1728156a6b80", 0x15}, {&(0x7f0000001e00)="4c0ff85900b5761cbb1b3070b74f5931bd6d19ce6ffdd58d99ee4ba1457f7bd10f0ef6134426b903e8edda26d5e2e9f1358fbd5fe8be03c07227ac40ce249366b0be2e3ed3f13eb06385b146ca231a60dfedb2ec21de4417c0189912ba1f3c8bbdfdf01c2ddd64e839cb0d013e2e19fdd0963c1ddf153ce9c2c8a30ba5272f4fc4a1b90bc351db7cb00ad7e73abbfb30a37121c71e3a0e8e0d4e324ebe0d65c48cdfb0", 0xa3}], 0x4, &(0x7f0000004800)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18fb4fd29b263c6db7578ab9f7af2d231c4f64d71fdba7e6d146cec34487a2d68445d85f33eb8b3d77f082939ffca8604664d313ded1bb1001f8b90b9891020000000000000086310dd96176c8f7ec91b7291b7c8e0d1574fe", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1800dfffdeffffff02000000eb0ff5915fc9c1a05f1c7e95143f886f310a12317fb506e3b738971ada38966841617d16474dd7328f642fdecc8eca4b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xb0, 0x40000c0}, {&(0x7f0000002300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="03df079f5f42f92af9e7b0c7e7b2b88e80e8508c36da9cf7a5c9d279ca387634bc000d2ab4a6abf65172", 0x2a}, {&(0x7f00000033c0)="3e3af0d1c7c5353dfa411bb8487b31a6658fec266b44eb5e19ae6d1ceb49cf924cc3041f202183b02ae52e87addcf17bc3936317e571172ac9a7a2104baee6c3127b3eb3e261660254444e3fa21a3953bc4f215eb4a362e890a1518e62bde861519934e60bd4055a314efd599452b6516d4c425aea3165f4ba82b40706865087996bbe43402989d875848dbb8e96482ed5c0dddf215d6a62282ea36d23fa7ef556f5e3b085ca5bc671c861ce7cf130cf856e28371f0a0a5696c70fbe222b3bd80bb7db56385061c09c433f9bd7f0acfea2ee3fd22c17cec42724d5680b9606964433c75e68d24edd3ad17231095df571003f06682b6bfd8f39d47d2da573328fb8fb0771d373897e896e1327600ab391a3257b06c832986726f690624b51ed8e6f381c013fed563471fe2ba4e9a951471b9d049bb2eca41b1a29754da7444ec8c2b0b026f3f48a3077046a4c95100d79103f7dc277744728dad91904f158035de3488eebeb293455256d93c7adaadceeadc6e3b1d48207f98229bb01a32811e6d83586622fc29ca60dfc3c2d7d4432b45bc74a08f28bec4b99cac671e3e224e6b5e31a9034ece0765b530bfa9a1c6920044f0e22875b04cd6a8c8a1cfde3e6ec1616fb40b7a8f3518ce42a3893bdf0d53dbec3a0aae2df69caddb0a795a2d3e542006edc9a48814d55efa6ac04074b96f57b867687a936b6cad0b824cf592d943f2e502ed034d9737edeacaf45b6a4fdf3a8afd3daeaf07ef4ee7e0d3f961f9b8b3ba4087695119c206d291fb297664b8e993bfc09df4c982d9bf71354b0910400aa1dedec3e237eb811ce3f1f210e863ff66cb0341da931dc6d55dde6ddfa4bb401104488acb14269f691628022ff68eccf6efa2fd7874d04938a7f107c3d28b2b2e603d2583231dfb0b069dd95a3d4793c4d6cd347ec654daf0c87db63084530997b2c6a588d4190e80a698c1c35e136d742cf3496d57117ace16eb8837ebaba393519f78db6361c67e51f6fb33554395871e6721d9caed341eb30bfe4448941fc0204c933ba54ed57993f3eded0a9a51fdf903a05aaa97bf85cc9a783fca28bd92b0c40e36fa87f2c9f34150029b20268666f38da8a703b8d9ccfda818eafb5cfffe8243baa8dc1338a56feeb95c28acb0dd020455938c0f6d635b5b92eab7f55f7a4ce57bc876aa0cd01714921914306124958eace5d53363f74b251b0c78247674024bd9b329fef95b6e89a6e9d702f07d9762014d838f959ddb36db06ea009d1aee7850bf84c2f37732861c359c6b64d98f077744c5a54fd57ad2c5e6684296340615e78646ab8fca297e9dd1985ad5cf2a1b281681aa9ecfbc28f7a1929c5c22df868ecfadeab738f1995712b809dea0a9bfe86385fd769894780990e89c0bba1a80ec3a9aa0f6e6875f298a0518c04f490b67f541fb4c97c2162c5868cc0b0137c1a7c05fd86f3f7e610a300f199fcb36745b1d93409499c18fced3fc9fea81d182c2c175565c6308cca57cb6d786fa9ca03a4756b72db20f8d1d0d7c2f8a8a819a192af2766a2db3c014f242606cc7f4d040e875822c49c5b9ede61c09434e37d325d4c3b00e5842b564fa36f321b422a143c90211efdd44d0736fad815387e6e87bd344562190b751ab93e07dc06da8d341e399444438b23ba65c303e4a33ad614f52c5e29931d79bbb39e5cf1da975e0a9054d2c095e27f9234911a95f1e49f53f4eb5fac0b6c1dc1f766e998c0f2057fb6f08d682a840b56bd23dd66a1bd63cd2f66e91041461feb55124ad72d8ee895741059b79749cc7e37c939ccb96f4d1ef80f3d291e55995743fb5dce90e5aa518c93b2dff4ac7a64cb5d3927b3f3401d7ccd411a28b94f4d5026983ae41b3bb4dbff5840968514d15498c76f7d39dd855792cc04b119fec87a76f7a288e2aec34b0da88430495e39a3dbfe52120d62bcac8db4f757da9d8451e0c927046dbe08a299d9d8cfc005b90604736f1a3f7ed5a1fdc4ab75fbc0e2c9c0c6e6e658c4c8c07d2a1c97cfc5a3c53894ff80d4324abc88d96145b4d5444ca9c9162efb24a57149639d9e466f298236e5c431fe55fa3c304467767d7dee2fa5c1226e6805b32b2de5b889bfdace2f986fba46a87710780320c4db53e6ceaf84da2bff9234d71a8abae668ee737e51da3cae188eed60f9dec855592f33a997bc7696bf5a21ce8713b92925e0e413706dc020fc884d974c6a3f266e0e41ec8f4cfb24324ef1c656dba5aaa46f39e95bdae753db8d29fe5e850fc7a90b77ad71a524cc640def5dda76469581d37cc34e0736a8b605fd2ac948949c7c165a023a9574fa0579531396e196fd946fd68ac41ade72451c9aea1ff8fe9f085c8b5d85747de218e542234a0c709fcb6dcc91ba8cb96e8efffa5778e8e4ccf7d4d014c7eb3f617ecdd940d114aa9efea053b3a60c3dfef9ac2d82f1ad494921c99cbeccf26801065c12918a5e4e413cc385b3e908bbf9a1ddf0c2e7718ffec4feda930d36747695d4dc954a0d476350ff0e4c92b3687d65d6a62a0478b44e03e1a9261cadcb164676987db5cc9e5e38d9c1673ab252687a5ead15b9e6bfc59643a1dc7a5905801301080487d9d36aaa7964fe106db29ce1951c212d3fece6f1c45a8ffba6b114e2c4239e0fb73da611758aaf76ab71dd3bb12be86d17a065ea1a2ac0beacd6c68d615789be7c278948f77a256073bd28ee4597cfe1d8fcbeb6e4bd27b15d55c38d80d175e9783895251d2ddff54de4fa1cf66b9ab5171022b9ca364707b22e42513cc34565206c1516560e73f0c63d516ee08a86cd850c01789b25a4946f34426cb8b4d01bcb8519092783a3c33f6182408532b48f4e09c33cfda64f74afefa15266a6b040128d27cd89a2a0cca235f54ac81e991e246f8c1726445af55cc996798a7b187367155294730a2c5c0271fd159b70d5adfa3314dcb5c8f10dfcd5c1d08012d9439e9f48847111d174ea144c288b128107a79eafbe90471483ea98b22e156d36abe72554d46542ac693854c9a3cf251d7cd80c97d6441f216ced4131385c80b2fb2641c545cf2d9a2e7fcdd24fdbf8a3f4fda2959789e30a715b98ef76df0cedab8783a02ef0cd190198b03151b77e2ffbf93fe2a19ccb9f851a1948070c534511fcac92f5368e844f3e5be5484e668d8df9bce82b7059480965c143cbc1f420686483a0714f26eabf73e1795e06a2d4c91a6b8e769584081740227a6783a87cc0ffeed531098e61db2d1e7da14cbd1e9825de85fc9d9e6a8c0b03b4c32408f0adc9c26e2d6adaea67335ac343a70c6dc5bdb0371b3131d71fc403785a282dfb34fc3b70d86168b1fac9f5779fc042f94ad29d64475f041e07e960a92105215c8f4e0aefaeccdddac7eb68fe88d53f71af5f3629367e8c5e5a344f9b403b4ddbe91b36447097ac5ad4be55bc90e6723a99baebd809e7aba7f433ffe0d458e0807dc7674d0efc88f37724f879859300392c976e75648980c9bfb3ad93f574558de638a050582b4b424af6f855fa33f4c05db26197ac1ff74d312505e8469fd82409b58305dfa696b9bbc68daf886390d6f964223a852e76d74714376ff92f7c8c4c01af90aca4757a55fb3a3e71d21d5d94d122a89f675196130a7070ba6592223f053af5dc0a118f30c95d71954dabd675bacb3a0a520e6f599b76c77bf77827384bd7ba5f9fd4f417814743fd8cdcbc493dc0776d7eb1dd61e96a48dd4671830bd7fa6aeee9ffd1c03ddeab713f9e3f80ffdb2215f226d3369182e18804edb3d9c4b1cb9d41abe860cc326436b111fbd51c3013fa3888b956aa80253ca2bfb5d9390370491ab81f920880276be6dae7271b7725de56100bde10d6278ff3caac2152ec42daa735e901147d50631a91d266f3d07694774db72f8b2830b17ae6efe79f78a666daba25ccfef855c43e43cc22ab4a1a8ec3b1071554b6048e95503c5d7c05512a5247776ff8458826785f77868be4502c7743fa946f44424bc5182f5a406317df2eeca0d56ef0b8bf21f2201bfced656535521bf4f10d2833896e133bf85b3c89303ccee23b14d4cd1ecb4141a3da4d50e3a7eb353afbafc6a5099dbc3813f181fcdf8d0b80660c949a6409a8ea5df6088d538bddc4f2a1cf7a2f4c08436d088cf0dc8d069154c5899471b37089fbcdfcce18caad63448c8d64ac45f7108d087563ea83824b211fe67f9b0988769d4bcf4e39c009f2b2a12d8d436936320b25f1bb30d8f7460e5ffdcf64790b577c23c166058f1e50afbd8cb1f67aed9c38400d40d121768448b81724b580aad377818d1182ae59cbdfccaea4bec09489f8591717b6282b0ecd3c978fce7dd3cbf16adaaa1b072b1d8b3bfc7c0645b026dc3c7b78b98df18cc43e763f8575e1bbd71036d67b1dc5db5736589745fbd59e01cd0cfcee0ee281a0968cc36067785e33e06bff0784e219ab0e044aab1843f13486f1c55efde76f796c82e4039d6edee0b359d293f3987bf0217127bca40ee2df39011a1c84553a3587ef7b51a506d47d775a9b5f36287c58d0bc02bba9fe47445b6dd1c3304bf5a742186a20f683b788fb8626404b6ced94ff665702a7e182e18c34cf20fafde79d23e1cbccc36811542118188e676979289663ea833e3ebd2219646d4f665b50b5e66e9daccb971eb0327996fa28ccf6aa845ad6d98eb9ad43c19b453114b6daf34bb2888ce6dc0bafd6af2723943802365d2f623cf0d0c00ecc110f941c1ca86eef568e4e6c39809c70b4c830e81919bd76b95c2f6d1559623eeaf0fc471cbe301b759b6468a720b99090bd03046299862f2bddffbee47daf5d33b277777c28a1d18663c131a3274160fd35c0f36c2bb2c4329b135dddd2f6bfe1457268618834b0426347d8a0fc48456e54361076626368115d8e8c9e621007a7976941713d5126ef8843fd4dd995943f14bcf86a47a46ee82107dd2f96a909f766b34bccd3f92899ca61ab923e79ea19885afdbef0896d9e1017d507d619e111f5a595f8be3fb12ad49ef3c83a8b1fe87d38fccaa0dc424a1be3a3db2526259564197d74ee169103f6e0620557f81310d5053a06687b20d8f6f2c218e731a192e0001bdb4761332d94dc47474de4d032169fb26dcc65faa04c083b0971c1aab186eaa66d62d2d59a6edcd9408cdaf04f6d9e5513fc8adec0335bf8f2a079d0a847e62f1230d51ebff95ad389d5e789084ebaa29408639e4d8ca972577f64bdd9b7c3b18031692803b810f519b5e22c965c633844b9be8c47885f1d77a2ca54415c63189217f8ef2c71c506ead1427b07ae1c4c5b1c4b56709aa086ee815f875a9d12a468e3b42752ebbf76bc0f4a02db8b594bc7bdf46b50556f708d71777b05350daf38f47779e8efb61ea9844d747d712bce11518efcb3e67e9d3b0c95f8f0acad84f271e2f4ad6b12665b6420ad4bd6af866a08ed7ce8069ec1e4e6e32de230cf0322a38c5ceca5ba5ad46d0849b920486a9403ddc41eb0d31a056a66483d827dfb0223b3d4984c17a059b9a43b40abaeb79d17e62dac74fc9687844e76368081552f07473d674c1a3804a17729f8cbdc1e31488e0580fbea2b9498a2f8999c6bd74b02f8ba2c9cf9e3f3f3f01886099fddcb3da722853325264e7bf3cd1d92a480f675d43427abf0073d31335a124561c6b1184623cc2c2fa984992f762e7f269974fceed1ba32cc44ae2fe25dbc1a907ecf1ba7e6c266499d48b2cf2b474df4bad4fb6d36cf972e106dd6b7e6cf3b4683129b5d88d7767b5580ba8cf50ce6b29d0b63", 0x1000}, {&(0x7f00000043c0)="f7e3cc76d1a1d40daca517cb97dfca16b44941fd046d1813ff217c59643186474ab130005ed1fcb63c2e8ef3ac102a6d037ac131ee4f1a3f5fb54128cf2b0899bca49b5491894ec5767f479bdf66fef07bf0f3c580de3a9f5a2822a5b4a8ea248cd601ed80985e4b3cba88beab282033590f331f35430909f9e6b766937cbb9a5c433178", 0x84}, {&(0x7f0000001440)="ebee10d941816e1975d2cb38073011e26cac1a8369c07746255c4437b80afcf92a5ca0f5177a48336ed2a341e9bbe294b7c0d3772002f136757be9a94e", 0x3d}], 0x5, &(0x7f0000004700)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000010000005d2e04d1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r6], 0x5c, 0x20008805}], 0x4, 0x810) write$binfmt_misc(r3, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)={0x30000000}) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) syz_io_uring_setup(0x223c, &(0x7f0000000200)={0x0, 0x82f3, 0x0, 0x0, 0x35b, 0x0, r3}, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x77) sendto$inet(r7, &(0x7f0000000140)="f1dd25615e919a4a793d2653d3ea68cff58942c68c8572c0d87d6b4ca0b4fc235396a39f962a22376e8ca4ab77996e9030e98e9a5f9e5dec7ba7ad1c9e740050710511a9e8695e4e3a5015c5b99bcb8bd71636", 0x53, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) [ 371.397504][T12192] loop2: detected capacity change from 0 to 224 15:32:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006040), 0x0, 0x100, &(0x7f0000006180)={0x77359400}) 15:32:07 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x7c1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 15:32:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 372.318952][T12218] loop2: detected capacity change from 0 to 224 15:32:07 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x12, 0x181f645072bbebd5, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "0660040018"}]}, 0x58}}, 0x0) 15:32:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@volatile, @union, @fwd, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x5a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:32:08 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0xf6) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000140)=0xf6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xf6) socket$phonet_pipe(0x23, 0x5, 0x2) 15:32:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@bridge_delneigh={0x1c, 0x1c, 0xd03, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 373.139449][T12241] loop2: detected capacity change from 0 to 224 15:32:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:09 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 15:32:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:10 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 374.481665][T12262] loop2: detected capacity change from 0 to 224 15:32:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0xc, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 375.219577][T12281] loop2: detected capacity change from 0 to 224 15:32:11 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:11 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 15:32:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:11 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) [ 376.149583][T12300] loop2: detected capacity change from 0 to 224 [ 376.195696][T12300] ISOFS: Logical zone size(0) < hardware blocksize(1024) 15:32:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 15:32:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:13 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) socket(0x10, 0x800000000080002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:32:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x2026}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:32:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:13 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 378.390970][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 378.410494][T12332] loop2: detected capacity change from 0 to 224 [ 378.550299][T12332] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 378.820982][ T8882] Bluetooth: hci3: command 0x0406 tx timeout 15:32:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:15 executing program 5: socket(0x1, 0x3, 0x0) unshare(0x20600) select(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000800)={0xc}, 0x0) 15:32:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x2026}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 379.721372][T12355] loop2: detected capacity change from 0 to 224 [ 379.913740][T12355] ISOFS: Logical zone size(0) < hardware blocksize(1024) 15:32:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00"/120, 0x78, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x566b, 0xffffffffffff8001, 0x1, 0x9ae, 0xa2f4, 0x8001}}, @TCA_NETEM_DELAY_DIST={0x1f, 0x2, "9e393a4abe767b75453b81f9b29b09fc0f00ac784d9614b046f29e"}, @TCA_NETEM_RATE64={0xc}]}}}]}, 0xd0}}, 0x0) r3 = getpid() pidfd_open(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0xdc, 0x13, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x400, 0x10}, [@IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f57686d209b6a004ae4905e8dd8fe0e9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3082abd7b74fd6a011683807a55baa71"}]}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_LINKMODE={0x5, 0x11, 0x18}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffc}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'hsr0\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4805}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) write(r6, &(0x7f0000000000)="92", 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r7, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000140)=0xf6) write$binfmt_misc(r7, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0xd}, 0x14) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TCXONC(r3, 0x540a, 0x1) 15:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x2026}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:32:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 380.886447][T12377] loop2: detected capacity change from 0 to 224 [ 381.021548][T12377] ISOFS: Logical zone size(0) < hardware blocksize(1024) 15:32:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00"/120, 0x78, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xd0, 0x1c8, 0xd0, 0x1c8, 0xd0, 0x2c0, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast2, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x7}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x2026}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400add427323b472545b4560a117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71026000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 381.916039][T12405] loop2: detected capacity change from 0 to 224 [ 382.043107][T12405] ISOFS: Logical zone size(0) < hardware blocksize(1024) 15:32:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000680)="cf4561f39b36cb4d3f8740f9b34650885b8688c2a867da728058c56e2c9ccbdff4b7fddee2f3c08238a3bf249dbf3ee8c71328fb835a9fcac8d0cd4583675904ac05b2a20a9075de0e7c0345cd089eb4377ced0cbe098623b7c87955d6cbb7637552c6bde40c8169089175107ebc7707958a5fe11a9f6aeef75f3f6adb94b5e001ab77bfbc80e492272b5b35a6692c6ef2cca36e77a44108be5372248f3a54a2c82831b7253746e2045e6067344c7de334ef1e3a2d1995dcc101d8f2a0f4577a376c8c90edaf5dde898a8350cd09906a43248f83acb1e1d0ab814515d061", 0xde}], 0x1, 0xd) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) socketpair(0x25, 0xa, 0x8000, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x3, 0x7f, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0, 0x700, 0x8, 0xb5, 0x1}}) sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x810056}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_deladdrlabel={0x80, 0x49, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x18, 0x0, r6, 0xa5c00000}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008001) 15:32:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0xffffff88, &(0x7f0000000180)=[{&(0x7f00000000c0)="8224", 0x2}], 0x1}}], 0x1, 0x40008040) write(r0, &(0x7f00000005c0)="3c03eed4cdda9eff2e1df5cc4f04771965df059d068de3", 0x17) 15:32:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00"/120, 0x78, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37027647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace$cont(0x18, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 15:32:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37027647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace$cont(0x18, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 382.938202][T12431] loop2: detected capacity change from 0 to 224 [ 383.056646][T12431] ISOFS: Logical zone size(0) < hardware blocksize(1024) 15:32:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 15:32:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) r3 = syz_io_uring_setup(0x4f13, &(0x7f0000000180)={0x0, 0x475, 0x8, 0x3, 0x1c8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x403f, &(0x7f0000000280)={0x0, 0xb4a5, 0x4, 0x0, 0xd3, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r6, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd=r2, 0x1, &(0x7f0000000380)="97d64d917b0d46de8b113742f30f3e4b481520877a366ffc2d3bc5528766812c7bea3bfb51e7971c221ade14b4b8222b298b9999", 0x34, 0x8}, 0xe9c) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x311144) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x65, 0x1, {0x0, r9}}, 0xffffff80) r10 = dup(r3) ioctl$RTC_WIE_ON(r10, 0x700f) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000000140)=0x100) socket$inet6(0xa, 0x5, 0x800) 15:32:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37027647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace$cont(0x18, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 384.048087][T12453] loop2: detected capacity change from 0 to 224 [ 384.114140][T12453] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_sec_ctx={0x1}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x38, 0x0, 0x20000000}]}, 0x78}}, 0x0) 15:32:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37027647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace$cont(0x18, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 15:32:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=']) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 384.951857][T12477] loop2: detected capacity change from 0 to 224 15:32:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) [ 385.001130][T12477] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xdbd, 0x1d) write(r1, &(0x7f0000000640)="92be672fdb7dd2928a0edbf48d6407179320d7e8cb0382bfcccf6c6f082db7fb82f8e62e5ccabaaf31e54eef0e0bf396c0c8426e506f71f00dba855091ad721d0bb24d4431519834bf6a6164355db54f69ff662e68a65cb7b808ef91277b078a030a1d021c63a44023a02cff14f84b655f43d75133c3fa7937c245a0d1f5a34cf947619e106cf4c3ffc4683c875807b6882133d832", 0x95) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000700)="b56cf0b4e6ffaa7b494d207de78ea40f78cec4803d2c8dd4e75c16a8ac740f87521ae75c47f7c9c34566dca70660856701d995b917201df296debcc0a717ee78f6b39eeb71f17d8d2200c54bd47958c534aee9630344708c20dd3626102403669dadbf25c20069d8e03cf5d9724d827d5fd185332410cad8cb6c65f54df20713b70247698feeeb8d70891f7125216ce16768386be65b949373674d1ecb4bc1420bd832b650eed15269f0533cc1016148b2509c7ae97894a5231c1a0603f44dc9587e80787d9bc834d01f2765107a65b014d25452d2bfbdb96005de672e78614f4dbd12b9c99a68b958d5e97be04b337f4761", 0xf2}, {&(0x7f0000000800)="7ddf2b5ac4644edc95d9d60d3c9dd981a4446b1f5ab5ca5e47f20042c43f12f1e7d4f9565f82dd3d4974b33535a8e520b93a9850ea95dff5fb490c154ab0fc745afad620f08053f029ff695cd45ec2f80e00b25ae3bf37349cbe16e2991f9c2a768402fa56aed95d3013705be524b0f5f78d29f2a5c1a03bd0a4e800477c4b458e875d6351a6d7dc846c3ce7add5ac4b26d41d8268aee5d5a492762b68632daf77ea7a68551cc2446a9656b27b36a69c3381bc52da97299c9ddd4b50e7ccbf1a57", 0xc1}, {&(0x7f0000000900)="41d81e4044c02e181ec0a5a7a074179d094b77d0bea37eaea66e8f83713988fd138d77d5816b726b9922e6ff45ddc96cad490fb9c7ad21baae2248167eead2b8be0451223c02ec8737f2e2b6c808e23577c781b180d5fd773a3cb2d2cd0aa3aef7ace88d59c029c3876510089533cd40b7fe9249310c73789e72303e2770c2b984c2c7fe6aee82e6acd5271ffb93cbdcb9d6d46b581a9f3901d189e31b2a141f51cd7d95308e7482d34d059cd5f1ce4f1bd39667013f8b3f1f6662dc83cb7485094d6d144b57f602e7a4c4430f52cdc340f9ac3862eb6e167c67eccd69196afc3e2856fcc41c8829ca53d41e2d050d7a2da0f03c9d30cb059cdf39ea0cc0a19a8800a74d9f037af8100c8ec08330e6a1681a4b6cc2c120ff9d52e4b57178408402ff9869d8d15b81f610fd7d6ffea9121c84b3994162d2dba304084193d85031b9cc145a7a09b9f9ec647236e7d153c20cfbc5538485b53d23b1dc5b4b6d2bff507dca76ff492d7bf7b3b94d9a01dbc3d65cbc63f309d4fb17da37cfc64f94d31e1e2c0baa815a318a573bcaa7e1c898a3ffa31331e935e3a1e896a5fe27ed904108b269452e28dbd7db532e2887496ed41b2bc48730d139c1e53fed70ce472dd2f811dfdcb575c1e705871b161b1c5f1ae842685e576d40b2e4181e3de573be4493ead637cc4743743f60fbcd1b744dbc755cf2bbdaff2249677e4aa32f00632907fe214f0e8cb12a4cd5317735b2475b293b78f28804c2755c521d48e193384840f6cfd9ffa8ced54a9d0b898ffba832e8d53cfc4efdc3e423c07568ea66ff2fdfc91d2f97154e124aa13cc2502a2ac8e268b237c559a0c5ac7fca3c4c44949b2b3b0a14b29ed4fdc8597dd0620a354ac84e88197df8d4e986372a8723ffee504d313ece65746e1efdda7dad8fbb421d2ed7f3b9cb3b0953d36eb9b47999869cf422e0151d716cd6849f5fade15c6557c3ba323e42a5631789ad2039cc35401abda98585b1f3599ed2edd5203e0efe2c644143eb502d13331743af8cd9d5a021e2e6ac57e03e1a15da0314b109c22d9418ff42f1d6064814fe227c25e13ac51b390a8c802f5dd2704e03533c717f1b37bf6e0061db4dab178c2958fcecbbbc94c83e86cfe88aec66399f617015a4d432f47859ba47162536c1170624f38c39d188e599598478c717b842ed7a756494a0201c664efa9db22e4b34adfc64eab32a703008b6b2be6aad546c02fa23eeacaee697fecc35b23c26e17dcbf510e60d35e232265a74ffeee4e603a62930351b7303e772a1a1411873263f6d56fdc1750e318852fc72c5276ec50a558a083ca6826247a665ca5a951eb3dfeaccd8e0ade22239b97c6cbd9c16d1d74822148f0b9dd7219c8e5aad0a33d6a2b324b5112d1d5870ecc54681b86b6ee2eb90547278a0c5f518968cc4df02ac7f023b9f9a04354681447019b2dd24672d4a036e500fe147fe92bd52681fb8b03b7421839f5113499e4bb6d69c34b09ea84074194bd5a4d7319cde3d293dd07f57dd47e3d4e8671ccbb025028a8a6496bde521984149af2e7aa17458a7c12e9603e51d7bd88e9b9e416c75daabc7ff047cace3afab46dd66e82290ba7433c6ff71b4e38e5c36eca5b670fe75038787c3ec075af0b918f60a1f2e745738e311a45b6c908f3064fb3c21170ab7ef5362146201be8027895877e4c01856128ad3ed8f47a2ce9dd7d1be6d5b58049e575e7730b04dd70e2b7531ab53377441a7224dfc5e6b2103df59cf15f00203c8cb080e534f43e0f72e5bf54c2ab8004fd48bd928976529db0e6dc2a50b3508f99b64a20b2ce39804f2c7ef79c086157cc967d188661638af6bcd8acc8344b0ab07f1a5855cb23082cbb6558c8a9be3eacf4cf44d341a4aba6db88b84887d1c573e18d49309e60a106801665ebc872c4a9f898712e2c75c5e5d82babbfbd1d12b180f31e940579c960f4e0a9fa247c286c353295d79989e6b3f0e1becb80b1ba7da6c6561e1ca88628e2b65ff71b7149a39499fca11fae72a8aa1dba479b3ed1f4f9c5492d6e1f523d08417a37011a7691e9f97c25f65a93452fa88809a72d6c0bfde40f0896a917b4bbe68bc39910a40c539dc4226c033e5430ea75705c83662258d26f4258fa03d76e34041b791441c3bf2477ba94c04560660e347499c7d28be9a952fb39fa1d05e71b4680ad6909d174e448cd805c445e71501a9f52c43b2939b3e1aab7ba6444c43ee275bddf1bbdfdd9359aa11c45ea024274152d11c9c553e2edfde898cc25b32ada31b1441fc5aeb97d6cea8810e46af82abcfd539096f06b6d21551186b3fa4814c784e3af1e3c84ba60bc3f7eeaa59ed555579e3f73662fb69d193e37410173fb7cbf63458775ac442a9c59e71caabf6152573429effd00684ecaa3c30d9b91c7d18d25aae4de5a039af51ba84be6ec683184bbd6e68221c43a60f11ef11b8e3ab1154e70987bf50f4d418c6c768f174d9baae9492c78826e39d177a4cdb4d2ed6cc5d001a74cae99285b4bf0539b205574c6e81987f5054493a2a748eae7e44a360a0ae07fcab29ddd2813c78a11cde10c10e75e8fb8f7ef4d9af14efbb18c054e06a6eead4e1979c85cc7f869d1b59df2a5fa6bdc4ed31e29c8b08f3b9957151f95220f1272f66c54407659b2f1ed7b9d9230edd60fcf6c4ba67ad73d636294231e4520370418f1de94e018339ca70049028f941e2894ea7583c46c2a4ffe578f03863b3432aaf30841b4e512c9c9bc834e74d73704cedcd29b3d60772310ab29c51bee12786e3e94c480899b39474184eeafd73be7fcfe0914be7cad2c80e68cbdad180c2917f96db447b51fe2ca59cb72cfbc276ec2132bf5c7a55f3cdf0e591ce48cedb665237dd854105eeb7f1a789b97d4fb7c85dbf747ad88f8a50567569f4d79f381612b4aee35fc68837fedf1636616ee63c9bb34763fd88360ad818a1cc4f3a22d7d2a5b40d9557fe6370c61d17cd9378fbd5bd2b260af569de5d10716e7be1af0c69db2ea1e10f539dddbaed777bdf8bbd5e1965e5d8c30ce486e28f6ac0262ca488ceca7eac9489d7df1f6f7597e59eaf5b3a998f924dc727f2cbe282e4d91f76e2f8b81d9ae6e7cc4038490dd4b9f1710a8db910dea983da40b6dc76e4a75e0822bc75aac21db7f5dcd988d65a2de8de58f93b64b4483d34e0ed6688dbe13b0925dba488399123bf1e63e2afd208e2befb5129bfb98b683ee47092eb85731c3a2ecaf75dce4500eae31558d36d489fe2eb3fe11ab51bbe0a340a79e468ca3558020c102efe97fe50d46ec0276340c2545ab8c3c0d3717e6ce31033fe40e82e36316fcc0e2b6579aae393c6365e16c348bb6fbc2f5a70a52c393c241d31425e618e5b72ea2c43a86e36aa7ef207fb310355a405a230908d98413d5b9c7f778ab59a309ba25d79dfebf548f10452bcb5aa99627ede6e68ad492cbf89dd606bc7364be1061815306920071c2b893fa8c650587f84c110547b581d3a8b6afffce857374e951eac0ec75a9319daeb5345a355cddc23221e9853e0370dbedbd9cb6e77fb41473ce8ed13ae3971165fc9be6b89b17e17eb4ade9009370f9c4562153392ee7f6c7710e62804061858df5ff6bf0908587ece6540760a9d806716b495ce82cc3787e9b369af332282f47657274a04399358f8f8d1600cb99f4992a825d241ea35fd3e11d19d23089a3c2fc0b7d55068f0cc46631e326a9074610f053a7d157f98f4fd34482797d3c3f6a16de90abb2102d54a79b694fee4a09e56923f1144b804876469b9c78c775773bc0b65b42669e294982a9483b8039714403e759487504d7013366ccb1d104ad65771d8679df37607110d7f0fc730788ba66beeb4302b872165d163f159130bb106498bba47719d336de2b9f34e3c22849b117fea2c23985bd0b7a7703200a78255c1787ac9b195d1da8aaf15057a1cf4fa39e9344e826a9bb2d132aad141811d71ff54873d20a7904b2194c068bbe38e3c87bdffe2c67d0240eb1d3553e32556c1449d73267b079c3c32f19d9020880ad058933170e0dd1b928a1b917e6f9b4f1b9a8ae3cd9214f5b7ca790f82939a86c2a3ddf1041b604e9a8c64091680e947cf57a41d685561b3aa19f2525ca14ca75e6ca3410dc73130d4e27706686da4c7019754936bfd7bc45ad5e725ab9cab56b4a43a9be59635f1bffda43f664bcace735701bd4ff70c7cca84db98055935670899d03af5f866613454b5ed4571af6a92a29cf209d4312a51f65efc32966ea7317dd44155780c3f91e7c1a4e9962d27d757c72a838fa277ca3865f19df28985e3c188afc5aab8ade60af4cf1d22a5a534a3ff398dcd072bab064d8bc80ccceb1c6de7acbf8bb6c63d5ae8ef548295cee2812a12cdbfe9a021d93efe6d60a101308db2146f68c244842a459fd70236e8d48ec31de2eff8c866701b24c88e0be1b131cd1dd14dff8c069df27d159aeb7ae5b963e7fa5c992fb4db026ea696e700fc642627e9a0dd4a6613c82575de96c3ff86b7a77ba0202a29a64384bf08b6376f2669967ea1fab9d52b730b2d45d9db166b798a04d5637c54de300fd0daacdad3add4173ce8ec0ab112ac726cc84fd6d5f2a48b5bf8ceb1dbeae8b4d1e50f06fdd2b3e1aa0e5c96930abeea738a0a2bb39631faab380ca56a266a79a880ab6e664cec4f7ad1ffb5ad36048202e7c9e1f7bb2826a33cb2caba6519bb0095ad4c102257306514ef6cfd0ff7a69fd3bdd234a8282f1d5cbf24a8f64d362c770630e0616c5736651bb958c94971fe15e3f6c2a8077cc6043a9dce34404a19f3f73121bdc3119f4c8aaa9a991bec6649ab7de006b80a3e79de4bad9a5d5b39f8292801a3b845ad775fda1bd1115552cceda94499d74da2f03c197d57b15946fee9671b92b7278858bcb2b44437c2f35b58d2d1fa0a37289397b1834f3bf69fc7cb9b7ef45d7da56524fe08b9e7468fb9227b3178cb3d6d9d9b9623a3650814b870ae437834b1538d28a39353f1512176ac109d52661fde26d2b66c7b2f69871ee0bfcfed321791e029cca20e66d1c4724f1ec568093b46864eca3a89cf09dc374fd27ac7f61e1e099ee61e70535f2caf0040eead156105973f40635b0b2a3d0e7bee5008e97ea72a9b510c6a9a37cc5a9edd88a78cefe6d9dce5f2bdbae763889ac6b84b58cd277fb120a8c3045d6dbf992bd421f750dfa67836b1e724e4f83235c8ebc7b27796f5401ba59589b2ddcec60caa2cb68505961880b35acf7fb6f3cd1d36f7ae46b56535c144c2f7895c7ce6bef6dfaf991680212323cf690050ff3c09039f18db8428209e4f75cd50908a41b154e1db57da3f94d8da0b278edd77b91fe057a0b4dd4ae802aaecc9dbe7aa7b6f34fa20af5274b85149d6d7b05ad8ad1b3706e8e4c1d9dfa8e2e0865dae60f9f72a497736ecf45d7eaad31d36ac714c23cc998046243391ffdde6fb3bd22c0e24c41e535116ecba79d1072525443cb5fd12a28fc06f612dd24a21467fb447392e85820395b6b3cf057876e443b777c8052974f607c0e68e8a1cf640bdce2d699182e071fb0ada496c86c27e04f21a0baa4e2b525d65ce137546a88ec4b8b6056a7013f7cfd4551ae912f3ccb529e4ffa76e1683eceb20507149fdcbce949aea8fc63e73754aef0303f5840d117c53ad087cb9f04fe5a12abcbc3fbcd04afb7c1c0fbba956556373cd38add10649bab343540d2788cf391aafa9eb61795aca20feb9b7a442a5196366595c460fd9d0119702ec21a8080f266c968198ca", 0x1000}, {&(0x7f0000000580)="7f16413d1178598b62f71dd625257afc78eb88c71d9c11f36637921aadefceed7e9c97d7ede4bfcab4a343ee10f442db519df9cfa7df3f904eccc259469bf14d535078c16de64218994e7a8acd9d9506091cb7999575e07f7214de47a8b506968d6d33b03d8d0fb0c913ec001cf41effe35878fe8f04a8c168ddda21abb4f25bf958638d57f4a40e76d151d3ccd233a556735a919ef96fa72653ac2a990fc8c2874efa056ac5c705422e", 0xaa}, {&(0x7f0000000000)="562f61a2db1e0c9bf4fb10abc7f9e17ad0167e822a7309d0f65ed7dba4e123b5027fc467e4c2333f4c957f1963c25f", 0x2f}], 0x5) write$binfmt_misc(r2, 0x0, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000500)=0x9) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) r4 = syz_open_dev$sndmidi(&(0x7f0000001900), 0x2bcc, 0x20000) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000140)="f3193c7719f9ac3b1b3e0b217e83e9b9b45db32facf8d318a0f0f4b0c9e69e80088b452727a5980d0c64d84b66d2b191311fbee3b0c2059ca325ae36fa26637abc08204e4e9cdf835cd12e64e0137046d8acb27c52018c9c2c87d4e465616b0976286b7c73dd24f3d0b5a90f9c6395172986c902c72561c86599996265eca725118721619ef16501d3e4e78f787b5568518e1117494c277803f3884dc80e3d29ab1bc29214f1b2af42be7279268a2ef155de365e069eacdbd6fd15eebaa8c10d02879d3b6fadfe72514dbdb788cd5713d0380a31bfa78e832b491caf4113c94ca48da3ee619d71ef4ab75c419d", 0xed}, {&(0x7f0000000040)="ac4c781a6504dbc60f1c5e1f82be61762df02511e371d774a25faa695a4d164ce1b8d747bc37942fbf7418f0e0d7ae6ce1b1a86b04e9b5ff9f412e449c39389a4b", 0x41}, {&(0x7f0000000240)="0fd7a5e70c283d594dc5e1a05e549ea4fd9b6a45d6d1844765fb0ebeadadfe6132106248c4c6ec3cfbd30aeaee86efa2bef591fed3654a24f88587dcaf336218b5427fad37663a7a15b6d6f95527a364dc0893e00d6e26cdfa3b3a39a11fcd00edb028a7f4e32333d88d9cdde287fe0d4585117a006a75b5c9b349397a92b2dfb52ecfc764fbe09ea3b123c80afac7d2354cb2786aa9f8be7251369c7d8255e21f2b6b13f805f0d18a122366960f205644853b110b37a42570ea6641d68580bfc3174f36d63f3ffab478", 0xca}, {&(0x7f0000000340)="86930b23b049ce7205d0c9a8d5018a827efaa004b5c6b4079c21cfea6d0f1e953d5908d1621a9fdfe099d1c9562fb7d1fc70765b7ee696c9e720555b9ad186196fa9d718c754ebb9", 0x48}, {&(0x7f0000001940)="3998f7da58c46e67b0672e505ac6e0a15d31e9cd715f20f724a9edcdd63c4cb437ccc274046d1ed5bb700bc168006bda53e6ee88f9b20f4bbea8221b9790da24a373b31e490d855938315294ee868ad35e2a453214f41a0000", 0x59}, {&(0x7f0000000400)="9299bbecfb97938a5751199d981810e901d7ea24175adf4b7e86cfe86abfe48dbf47a2b59b9a910d31eec716140b96068f68f55b89be4e508c120fb2a14dc7480719140a5427e1a43606bca421f45eb5f641c16e1c9ccc3485792348044648d474899404500fd2223d01d44fdb1634bcc061e60f26bcda21a07c0e0b7c0239c84d4fd4fd8ef896151812030c5daa1a7648239fe3f4d3842c3ff7e094684de07a74f4a7276aa36bfe3f0593846d33ae13115c991895b176c791f449b96584e36915bf7fe49aa9cf8c20cb87f38b7169e203111fba6a4d", 0xd6}, {&(0x7f00000019c0)="02c453a99d4180df579f6e18b060e546a3d302ff66e76af06d9be724fdb82277599817d08713c9751f9c37f0e211d8cdecfc4401c6c0e4dbc1ccae7cd16f9e0ad31d8432a5db6c08e9347bdb910795667e910c2f788893d3b73473f2f77d4c6f", 0x60}], 0x7) 15:32:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:21 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, 0x0, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x0, 0x1}, {0x0, 0xfffffe3d}]}]}}, {0x0, 0x0, 0xfffffffffffffdee, 0x0, @opaque="98ff3c774e621dc5ff4dc9fa53289d8d137e282fb085eb6b7025ffc14235430840e3a63a6dd47e28e3e188babfb0851799c948a97256bd37a4f4d3c9761132e7ead43fbd5ebca7fc323770e3"}}}}}, 0x0) 15:32:21 executing program 5: r0 = fork() ptrace(0x10, r0) socket$inet6(0xa, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x100000b, 0x0) [ 385.583143][T12491] tmpfs: Bad value for 'nr_blocks' [ 385.957982][T12495] loop2: detected capacity change from 0 to 224 [ 385.979020][T12495] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001814000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x1) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRES16=r1], 0x10034) 15:32:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x7, 0x4) 15:32:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=']) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 386.715414][T12514] loop2: detected capacity change from 0 to 224 [ 386.778217][T12514] isofs_fill_super: root inode is not a directory. Corrupted media? [ 386.979000][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.985667][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 15:32:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001814000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:22 executing program 5: unshare(0x4a060480) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r5, 0x3, 0x6, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 15:32:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0xfffc, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) sendto$inet(r0, &(0x7f00000004c0)="3c84", 0x2, 0x0, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) [ 387.328728][T12537] tmpfs: Bad value for 'nr_blocks' [ 387.554291][T12541] IPVS: ftp: loaded support on port[0] = 21 [ 387.649509][T12543] device lo entered promiscuous mode [ 387.660676][T12544] loop2: detected capacity change from 0 to 224 [ 387.755356][T12544] isofs_fill_super: root inode is not a directory. Corrupted media? [ 387.992059][T12541] IPVS: ftp: loaded support on port[0] = 21 15:32:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001814000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000180)={0x3ff, 0x6, 0x4, 0x0, 0x7, {r4, r5/1000+10000}, {0x4, 0x2, 0x6, 0x6, 0x0, 0x80, "4552b288"}, 0x3321, 0x3, @offset=0x1000, 0x1f, 0x0, r3}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@mmap}], [{@subj_role}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@context={'context', 0x3d, 'system_u'}}]}}) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0xfffc, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) sendto$inet(r0, &(0x7f00000004c0)="3c84", 0x2, 0x0, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) 15:32:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=']) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:24 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)) [ 388.768441][T12600] loop2: detected capacity change from 0 to 224 15:32:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0xfffc, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) sendto$inet(r0, &(0x7f00000004c0)="3c84", 0x2, 0x0, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) [ 388.827882][T12600] isofs_fill_super: root inode is not a directory. Corrupted media? [ 388.982258][T12614] tmpfs: Bad value for 'nr_blocks' 15:32:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000", 0x9b, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:25 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x80002, 0x0) writev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)='r', 0x1}], 0x2) 15:32:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0xfffc, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) sendto$inet(r0, &(0x7f00000004c0)="3c84", 0x2, 0x0, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) 15:32:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 389.985122][T12630] loop2: detected capacity change from 0 to 224 [ 390.034119][T12630] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:25 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0) 15:32:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX]) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000", 0x9b, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) [ 390.712088][T12648] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 390.894831][T12656] loop2: detected capacity change from 0 to 224 [ 391.023827][T12656] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'lo\x00'}) 15:32:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 15:32:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX]) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000", 0x9b, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:27 executing program 5: unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) clone(0x1402c90c, 0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x34) tkill(r1, 0x13) 15:32:27 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 391.905109][T12677] loop2: detected capacity change from 0 to 224 [ 391.946831][T12677] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 15:32:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX]) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:32:28 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) [ 392.759329][T12704] loop2: detected capacity change from 0 to 224 15:32:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000140)="9251e45a836ed4ad02a587b7ab63de7b6a3e9abb0fbb814aaaf5dd5704acb0d5570246b3132a56af751fef73da8dc8339f9e65f46e41e5e73292c87b67e465ba187944e19cd12acc369aac5b1406a94c6712d1f9963887fb80bc11d8fba8e88a0719bc40df010000000a8d299981f2aee48ecd73360cd4b9141fa5c5279758dee2", 0x81) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 392.930354][T12704] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 15:32:28 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xf7) 15:32:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 393.770313][T12725] tmpfs: Unknown parameter '0x0000000000000000' 15:32:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x231, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffbff}]}, 0x24}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) [ 393.864181][T12728] loop2: detected capacity change from 0 to 224 [ 394.091909][T12728] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 15:32:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) write(r1, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r1, 0x0, 0x4) 15:32:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 395.139839][T12750] loop2: detected capacity change from 0 to 224 15:32:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @local}]}, 0x24}}, 0x0) [ 395.358604][T12750] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:31 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 395.582476][T12758] tmpfs: Unknown parameter '0x0000000000000000' 15:32:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x14, 0x1009, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e6060000000000200000230000"}]}, 0x28}}, 0x0) 15:32:31 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 15:32:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000140)=0xf6) write(r3, &(0x7f0000000140)="b26c2dfc1d978e987223bb348dba4bfc175887628c17177e5da5a5daf064fbd932be84e13a13b34345445d49cfa57dd4a9973f7661c63ae173ebfff298c4c36a462b4b83034f57df5901e83fde6070752ffcbf70361db55bbd20affede78bb6866d350fe3bd5b6f49fb4ebc80efa04e57f600e47eaa71352150dbd7087926af0671b4e5f12b25904d89330d405397f9151d1ba4424ff7fc76e77e34eb808abda645c27917040b0fbe4c70e7935fb24912e089d896f2334678a245ff291a2b83ccd9be885ecf02dd858007296f632f18276e7ee2003e10e23036e39398181ad0af63f4be4297cd3dc4cefe348144ae01275574728c91b4a6d30", 0xf9) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xf6) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES64=r5, @ANYRESHEX=r1], 0x10065) [ 396.312259][T12772] loop2: detected capacity change from 0 to 224 [ 396.455752][T12772] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:32 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xaefc, 0x0, 0x0, 0x0, 0x0, "f0df7e951406e19e70923ff145a66a5147a824"}) 15:32:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:32 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 397.357523][T12794] loop2: detected capacity change from 0 to 224 [ 397.386469][T12794] isofs_fill_super: root inode is not a directory. Corrupted media? [ 397.488404][T12800] tmpfs: Unknown parameter '0x0000000000000000' 15:32:33 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$TUNGETFILTER(r0, 0x8927, &(0x7f0000000300)=""/95) 15:32:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018140000000000000000000016000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000140)="17890cf3cc4c67edc58f2e78aec3291e33f55f98214a814c19a441ed1602a0676d48b76644f49057499f228081821689e1783455ebe291510080226c001c35e9c81968b01ac2477bfb5dcff263ba2f182c29788eeaebaf1e3c77559a5988b7430b073b2d38eddb87ff76f327c25f5c101c36b215d956bccd96") ptrace$cont(0x20, r0, 0x0, 0x0) [ 398.137734][T12820] loop2: detected capacity change from 0 to 224 [ 398.220098][T12820] isofs_fill_super: root inode is not a directory. Corrupted media? 15:32:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 15:32:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 398.879636][T12837] loop2: detected capacity change from 0 to 224 [ 399.023511][T12843] tmpfs: Unknown parameter '0x0000000000000000' 15:32:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'tunl0\x00', {0x1}, 0x5}) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x800, 0x121041) r1 = memfd_create(&(0x7f0000000640)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac\x0f\xb7\x00\x00\x00\x00\x00\x00\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\x02\x00\x00\x00\x00\x00\x00\x00S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xad\xf3\xdf3\xfb\xa6)\xeas\xb9\xb6\xa0\x96\xcd\xfa\x85\x99vY\xee\xf8\xbc\'(3P\xfa\x98q#\x04z\xfa\xf0\xab\xc2b\xda*\xa3\xf7w\x9d-\nz\xe7\x149G,0\xb7;\x84\x9b\xca\xcf\x15\xac\xc6z\xf09\xeffK\x8e\xbb\xc9\xcaqX\x11\v\xe4\x03\x1c\\\xba\xf1\x80\x8aI5\xa9\xb0\xd1IX\x83+.8\xf5\x9c\x8f\xa8\x14\x01U4x\aGz\xab\xd3\xdc\xc9^\xfb\xf8\x97\xed\xb76\xc2\xd1\xd2rX\xc5e\xa8\xf9\xac\x10\x82iMK8\xd2\xbbFb!\xdbc$\x94{\x1a\xe9&f\xa0\x17\xc1\xbb\x03', 0x3) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x108000000, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/100) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x1000, 0x6fd9}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) lseek(r1, 0x0, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x107ffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}, 0x0, 0x3, 0x2}, {{0x77359400}, 0x16, 0x0, 0x8}, {{0x77359400}, 0x4, 0x400, 0x7ff}, {{r4, r5/1000+60000}, 0x1f, 0x7fff, 0x100}, {{0x77359400}, 0x4, 0xf3d8}], 0x78) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) clock_gettime(0x7, &(0x7f00000002c0)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000300)=[{{}, 0x15, 0x8, 0x7f}, {{0x77359400}, 0x5, 0x8}, {{}, 0x2, 0x6, 0x5}, {{}, 0x17, 0x4, 0x7}, {{0x0, 0xea60}, 0x5, 0x3, 0x3}, {{r6, r7/1000+60000}, 0x1a, 0x0, 0x480d}], 0x90) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0xfffd, 0x20406, 0x8, 0xffffffffffffffff, 0x40000005}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX=r3], 0x72) 15:32:37 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:37 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x4}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 402.049321][T12867] tmpfs: Unknown parameter '0x0000000000000000' [ 402.085839][T12868] loop2: detected capacity change from 0 to 224 15:32:37 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x6c14, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 15:32:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:38 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x3, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 402.717779][T12879] not chained 30000 origins [ 402.722331][T12879] CPU: 1 PID: 12879 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 402.731107][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.741178][T12879] Call Trace: [ 402.744478][T12879] dump_stack+0x24c/0x2e0 [ 402.748840][T12879] kmsan_internal_chain_origin+0x6f/0x130 [ 402.754595][T12879] ? kmsan_get_metadata+0x116/0x180 [ 402.759899][T12879] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 402.765724][T12879] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 402.771813][T12879] ? kmsan_get_metadata+0x116/0x180 [ 402.777027][T12879] ? kmsan_set_origin_checked+0xa2/0x100 [ 402.782677][T12879] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 402.788760][T12879] ? kmsan_unpoison_shadow+0x74/0xa0 [ 402.794079][T12879] ? _copy_from_user+0x1fd/0x300 [ 402.799038][T12879] __msan_chain_origin+0x54/0xa0 [ 402.803993][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 402.809135][T12879] get_compat_msghdr+0x108/0x2b0 [ 402.814105][T12879] do_recvmmsg+0xdc1/0x22d0 [ 402.818676][T12879] ? kmsan_get_metadata+0x116/0x180 [ 402.823898][T12879] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 402.829748][T12879] ? kmsan_get_metadata+0x116/0x180 [ 402.834970][T12879] ? kmsan_internal_set_origin+0x82/0xc0 [ 402.840632][T12879] ? __msan_poison_alloca+0xec/0x110 [ 402.845940][T12879] ? __sys_recvmmsg+0xb5/0x6f0 [ 402.850731][T12879] __sys_recvmmsg+0x519/0x6f0 [ 402.855472][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 402.861574][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 402.867758][T12879] __do_fast_syscall_32+0x127/0x180 [ 402.872989][T12879] do_fast_syscall_32+0x77/0xd0 [ 402.877869][T12879] do_SYSENTER_32+0x73/0x90 [ 402.882399][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.888754][T12879] RIP: 0023:0xf7f31549 [ 402.892858][T12879] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 402.912488][T12879] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 402.920939][T12879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 402.928933][T12879] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 402.936931][T12879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.944945][T12879] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 402.952979][T12879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.960997][T12879] Uninit was stored to memory at: [ 402.966039][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 402.971803][T12879] __msan_chain_origin+0x54/0xa0 [ 402.976773][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 402.981919][T12879] get_compat_msghdr+0x108/0x2b0 [ 402.986896][T12879] do_recvmmsg+0xdc1/0x22d0 [ 402.991525][T12879] __sys_recvmmsg+0x519/0x6f0 [ 402.996248][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.002355][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.008533][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.013762][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.018644][T12879] do_SYSENTER_32+0x73/0x90 [ 403.023174][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.029623][T12879] [ 403.031958][T12879] Uninit was stored to memory at: [ 403.036978][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.042726][T12879] __msan_chain_origin+0x54/0xa0 [ 403.047689][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.052827][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.057792][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.062315][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.067011][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.073118][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.079305][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.084524][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.089393][T12879] do_SYSENTER_32+0x73/0x90 [ 403.094036][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.100405][T12879] [ 403.102732][T12879] Uninit was stored to memory at: [ 403.107749][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.113492][T12879] __msan_chain_origin+0x54/0xa0 [ 403.118450][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.123577][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.128525][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.133038][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.137720][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.143801][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.149966][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.155178][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.160039][T12879] do_SYSENTER_32+0x73/0x90 [ 403.164559][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.170908][T12879] [ 403.173232][T12879] Uninit was stored to memory at: [ 403.178245][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.183984][T12879] __msan_chain_origin+0x54/0xa0 [ 403.188939][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.194073][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.199035][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.203560][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.208261][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.214362][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.220551][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.225764][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.230718][T12879] do_SYSENTER_32+0x73/0x90 [ 403.235242][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.241594][T12879] [ 403.243916][T12879] Uninit was stored to memory at: [ 403.248931][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.254667][T12879] __msan_chain_origin+0x54/0xa0 [ 403.259608][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.264724][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.269675][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.274188][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.278872][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.284952][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.291121][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.296419][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.301302][T12879] do_SYSENTER_32+0x73/0x90 [ 403.305816][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.312168][T12879] [ 403.314482][T12879] Uninit was stored to memory at: [ 403.319490][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.325225][T12879] __msan_chain_origin+0x54/0xa0 [ 403.330172][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.335293][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.340237][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.344756][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.349455][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.355532][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.361706][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.366949][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.371813][T12879] do_SYSENTER_32+0x73/0x90 [ 403.376327][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.382759][T12879] [ 403.385116][T12879] Uninit was stored to memory at: [ 403.390126][T12879] kmsan_internal_chain_origin+0xad/0x130 [ 403.395869][T12879] __msan_chain_origin+0x54/0xa0 [ 403.400843][T12879] __get_compat_msghdr+0x6db/0x9d0 [ 403.406002][T12879] get_compat_msghdr+0x108/0x2b0 [ 403.410967][T12879] do_recvmmsg+0xdc1/0x22d0 [ 403.415492][T12879] __sys_recvmmsg+0x519/0x6f0 [ 403.420300][T12879] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.426492][T12879] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.432698][T12879] __do_fast_syscall_32+0x127/0x180 [ 403.437937][T12879] do_fast_syscall_32+0x77/0xd0 [ 403.442809][T12879] do_SYSENTER_32+0x73/0x90 [ 403.447345][T12879] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.453703][T12879] [ 403.456025][T12879] Local variable ----msg_sys@do_recvmmsg created at: [ 403.462689][T12879] do_recvmmsg+0xbf/0x22d0 [ 403.467131][T12879] do_recvmmsg+0xbf/0x22d0 15:32:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) r4 = syz_io_uring_complete(0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x6}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x566b, 0xffffffffffff8001, 0x1, 0x9ae, 0x4, 0x8001}}, @TCA_NETEM_DELAY_DIST={0x1f, 0x2, "9e393a4abe767b75453b81f9b29b09fc0f00ac784d9614b046f29e"}, @TCA_NETEM_RATE64={0xc}]}}}]}, 0xd0}}, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0xd0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000002c0)={0x30000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe4) sendmsg$nl_route(r4, &(0x7f0000001b00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001800)=@can_newroute={0x2bc, 0x18, 0x400, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "a0b1dcc4db3bf6b6"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1}, 0x3, 0x1, 0x0, 0x0, "64a87c4b285d282f"}, 0x3}}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x9, 0x4f, 0x2a, 0xb3, 0x81, "5d3ba0ec723fb36216c282416bafc4c25a6800093801b52e250e1471ac525bf582fa3f1934f87977ebfd83765ecbd6c8989c37e85fdd01953d4d8622ec954742601964f92b766dd6c31b60c401a2f999c76fd392f499edfc8eeda744216b8564854228402cbc41a72809147779d994512f1f5ddca7280bb86738575704af7fbb3c2450041e575a31ef1f41be35045f5453a4ee78f26931c7eaf7131cfe6f948ce2b28bf8582ab4ea22a9e0d4898a3f78ac32d034144fdadd4fd7aa603bf1a9f7aa2a975df64042f2310aaa07a7e186c49ac822ab18a4e26c6f293ec699aa1d09b954ffdcee8e02ad04768cbdbe401c9dadd5ec9675fd34485af92d79c733f669", 0x3, "c4a52ede03928c90d5b658e30a628232e271af2f"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x79, 0x7c, 0x9, 0x40, 0x8, "62c16b4318f1f86cbac418e1132f13088c07a7676b1be4986845bffaca8049655f52a3182f22e20cefeafb4a21ba74f84ec615608e627281e05b3e7c503151701f9ee6bba6abc33c73c9d40da81be30d76de2a0edf29502fead4bfc182ac1890078cf0eba8072b659608969dd7210590e4d977f25db689ed83e6de4d8e66949cb9b3d8712f9ea3bfb40407c04af6cac3cbc10e047910048db6c8ebcf9827a8b7f8d64be9f310b2b9f358532c890e0ebb27aaf580d50b083bd4bb6c6a609ee7890cbc0dc293cbd26fd36ef4213ed55a097847fea2c294bca1d8510af57e33a40b688bb292513561d417dfb86f6afcae98aec6f4095556af28816565a8871ef3f3", 0x1, "f8fb851b04198476da8d980c869b127ded4f39b3"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "c73d005d12d9d14d"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r10}, @CGW_DST_IF={0x8}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008005) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 403.951094][T12896] loop2: detected capacity change from 0 to 224 15:32:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 15:32:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x6, 0x5, &(0x7f0000937fed)=""/1, &(0x7f0000000080)=0x1) [ 404.335010][T12903] tmpfs: Unknown parameter '0x0000000000000000' [ 404.532298][T12908] loop2: detected capacity change from 0 to 224 15:32:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 405.238845][T12927] loop2: detected capacity change from 0 to 224 15:32:41 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_test}) 15:32:41 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7f}]}}}}}}}, 0x0) 15:32:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_si', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xd7788541fa1f3f0b, 0x0) splice(r3, &(0x7f0000000080)=0x6be, r2, &(0x7f0000000140), 0x3, 0x8) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 405.950192][T12943] loop2: detected capacity change from 0 to 224 [ 405.978456][T12944] tmpfs: Bad value for 'huge' 15:32:41 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = fork() ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000100)={0x0, 0x3, 0x5, 0x0, {0x8, 0x0, 0x0, 0x7, 0x4}, [0x0, 0x9, 0x401]}}, @name="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"}) ptrace(0x10, r1) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:32:41 executing program 5: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f00000002c0)) 15:32:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) mremap(&(0x7f00001a8000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00003ee000/0x1000)=nil) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7fffdffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:32:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_si', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 407.078722][T12971] loop2: detected capacity change from 0 to 224 15:32:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0x2, 0xb, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x1, 0x7, 0x0, 0x5, 0xc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x1, 0xb, 0x1, 0x9, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x1, 0x4, 0x3, 0x3144, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xcc, &(0x7f0000000200)=""/204, 0x41100, 0x2, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000000080)={0x8000a, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0xffffffff, 0x3}, 0x10, 0xd03}, 0x74) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000140)=0xf6) splice(r4, &(0x7f00000003c0)=0xc456, r5, &(0x7f0000000400)=0xb, 0x2, 0xb) [ 407.387229][T12977] tmpfs: Bad value for 'huge' 15:32:43 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) pread64(r2, &(0x7f0000000280)=""/188, 0xbc, 0x0) 15:32:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 407.937421][T12994] loop2: detected capacity change from 0 to 224 15:32:43 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x24}, 0x24}}, 0x0) 15:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 15:32:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7f, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x1260, 0xc04a01) 15:32:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_si', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x2000, 0x0) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)}], 0x5, &(0x7f0000000440)=""/25, 0x19}, 0x40000100) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000100)=0xf6) splice(r1, 0x0, r1, 0x0, 0x10000, 0x8) write(r1, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r1, 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 15:32:44 executing program 5: r0 = inotify_init() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 409.364222][T13021] tmpfs: Bad value for 'huge' [ 409.461356][T13023] loop2: detected capacity change from 0 to 224 15:32:45 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x5347402bcd93a54d) close(r0) truncate(&(0x7f0000000000)='./file0\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:32:45 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000440)="ee", 0x1}]) 15:32:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_b', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 410.433597][T13043] loop2: detected capacity change from 0 to 224 15:32:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15:32:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:32:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xd0, 0x0, 0xd0, 0xd0, 0xd0, 0x2c0, 0x2d0, 0x2d0, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'bridge_slave_1\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xb4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0xa, 0x4e27, 0x0, @remote}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) 15:32:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 411.314231][T13061] tmpfs: Unknown parameter 'nr_b0x0000000000000000' 15:32:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xf6) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='status\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x30000000}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r7, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000140)=0xf6) io_submit(0x0, 0x5, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="6d0bf63c180f5a1ca5f4", 0xa, 0x1, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1f, r4, &(0x7f0000000180)="5f5c864be71dee0f70bca156e9cc14318a820c6ee758a9db18d4adf7ce7113acd9972d6cb082c00f9e122e43cdd432aec80dccb7a1b25c27154dc67723de7de2cf14194d37d2df0ee103764582ffb795903cd888fcec9d1efc7ba9ec5c00a41d8ad90097df497ca69dc77a2a523e7a58682234176c8edfb495c1ba743ff15a9e9f53c1d4be82bd8d101bda556bc0fc7d23fa45324c12496816b319159f5d3fae6b13ab88e26b3963b5dad51faf2d30015bb07ece54e90bf817e6a2ff7e43b4cfe47a085b2c0b3b3f975029eeabb9443ea4853a8697d7b9688524cf0a03ddf86ba13ab38bf2ebc87a058dda96c95d", 0xee, 0xaf, 0x0, 0x3, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x200, r7, &(0x7f00000002c0)="14e2bde4526c703b77a105ee6856cd04c5825e3506609d948a52d0e28bd077ad706946f9e9aada9ed1761eb44a3bf3f61412eb8bcb55fd97ee86616ef7848e0bd71eb555a6409c0f19d5c7baf6b5c5b61c3625b2452d76c282d00fc2b88ed8528888e21a03ea885fc21b8c", 0x6b}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x9, r2, &(0x7f0000000380)="82ad4c1ef6d95366a4d77cffbbd31e70dd6800a6f2b1ff32757163d5cc9ec28dd6a3fa266d1673fdc60b2a407ab3c8afbfe9f54aa6d1c867daf224ca56d4a1ca78f35b768569ff5804c261a651209bb3092ad3fc5d75afa4fba8df386fe2a846a1d13c587c1f3bb2fb4047a7bdbf2540b33b37060c459700ad9708df0d8cfdc0c3f2ccb8a02eff618420863c96620bc4f2ce3c8232bba27132d718d783a3b11b6aa6dcfb9ef37e6e3798721b4b17529493ea02e2a4621239495ac8e606be", 0xbe, 0xfffffffffffffff9, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xa6, r0, &(0x7f0000000480)="28f133369503", 0x6, 0x2, 0x0, 0x0, r2}]) [ 411.492001][T13064] loop2: detected capacity change from 0 to 224 15:32:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x0) 15:32:47 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/pstore', 0x0, 0x0) lseek(r0, 0x1, 0x1) 15:32:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_b', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 412.447230][T13089] loop2: detected capacity change from 0 to 224 15:32:48 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:48 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/pstore', 0x0, 0x0) lseek(r0, 0x1, 0x1) 15:32:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x0) 15:32:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:32:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797b30275d54b947a435db609b99c7509daa2b7916f3716c5433e1e0ab725ebbede9c9f920991016a542372c8e47ab88d28f8d6feca4e0592af63127aa2ee62aa6f7661dd961fadd7bfd2152c299d104000000000000003f1bf33a6f6dd44e6a3138946acd1dc7ff6cd15e1658a9baaedaecac3ef2ade182e9cabfce9c79522819fb85db6a008c7735d77a5a73683560494f79dbe0cd3289c978b9dab723784a7acf966e75b5d1f3ad4b9a715ea9b7e1479da3f9d0deeb4289625a068f9aedad9a15358f2156f17ce906bf125b37812949c1c41de09c1e65dc3e3cc7da70fc55c49309647548a4ee9739a809bf0fb8f9f63c9272132589b6163c4076"], 0xfd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 413.063452][T13099] tmpfs: Unknown parameter 'nr_b0x0000000000000000' 15:32:48 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/pstore', 0x0, 0x0) lseek(r0, 0x1, 0x1) 15:32:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_b', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 413.530809][T13113] loop2: detected capacity change from 0 to 224 15:32:49 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/pstore', 0x0, 0x0) lseek(r0, 0x1, 0x1) 15:32:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@map_off}]}) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x0) 15:32:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x200a00, 0x0) write$binfmt_misc(r3, 0x0, 0x4a) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:49 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 414.060960][T13127] tmpfs: Unknown parameter 'nr_b0x0000000000000000' 15:32:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) fcntl$getflags(r3, 0x1) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 414.502364][T13137] loop2: detected capacity change from 0 to 224 15:32:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 414.655711][ T8867] Bluetooth: hci4: command 0x0406 tx timeout 15:32:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x0) [ 414.977280][ T35] audit: type=1800 audit(1625585570.552:3): pid=13148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14578 res=0 errno=0 15:32:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_bloc', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 415.223165][ T35] audit: type=1800 audit(1625585570.772:4): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14005 res=0 errno=0 15:32:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 15:32:51 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 415.766948][T13164] tmpfs: Unknown parameter 'nr_bloc0x0000000000000000' 15:32:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) capget(&(0x7f0000000100)={0x20080522}, 0x0) 15:32:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r5 = epoll_create1(0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/99, 0x63}], 0x2, 0x6, 0xec) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0x30000000}) sendto$inet6(r4, &(0x7f0000000140)="d017762fcf68230798b44c813556d6ad089e79e7ce18e8dbb593b96be249f6e935262a0b18eddf013c86092d9f054ab116160de609000000000000001cd89bde0336080b3470c9ccf434994f81c098ff8cf060a2b4eace032179d8dde46ce25f2ec440ee616339785d83e2696a3eaaafb0a88aa82a9903699b8dbfbeb64c5bac9813bf0ae91de3981c5e638a2b8ceed95365c1fb6b99f55b156baec02c1421d8bb65f037745bacde3df4c67c08630b021152782268c93cd5be727a2bbd03ddf88ef363ac4a07724a4a91e0dd19e852def31174b0747e6bdc667b755178e67e3084", 0xe1, 0x40000c1, 0x0, 0x0) read(r0, &(0x7f0000000440)=""/45, 0x2d) write$binfmt_misc(r3, 0x0, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "904ae5", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xff, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "90ed2b", 0x0, 0x0, 0x0, @empty, @private1}}}}}}}, 0x0) [ 416.180407][ T35] audit: type=1326 audit(1625585571.752:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13176 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5c549 code=0xffff0000 15:32:51 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/tpm', 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) 15:32:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:32:52 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_bloc', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:32:52 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ca92c5", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) [ 417.440349][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 417.449060][T13208] tmpfs: Unknown parameter 'nr_bloc0x0000000000000000' 15:32:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="81c72a4f8a05280f233479771df1cc3022c0aff8dd7302b21c2313d818c1323788a09e7960f1e16c64047df7104d61419e0b55e35c5832b8cab9df81cc147f30e6acbec784cd0c99cf412f", 0x4b}, {&(0x7f0000000140)="28161eba1e7b39c190d7698dfd1649451a56126ffb8407d0d04d4449159a6744cdef799a3780ee4e9b5eafcb92005c3860b868af09fd8217112168dc9c1db12d0922f52e30668dcaf7a97099c57b7a96e2a4424dadb2cf0c123588cfe290ad007a4b75f63662fac3ba2c64358500bf76f92b714d12e4945fbaa152250c04a5a22c9f817dc27d54e952588390c4", 0x8d}, {&(0x7f0000000200)="807dbdb1446b62754e767c787d6506ada87492fcc3a237d735b23aad124e155a51c503e99415424508995cb2c44518", 0x2f}, {&(0x7f0000000240)="426bfc517a961e16ef2471ff804b90d27ad3d6c506c31e93570ce4778ae8dd0ad3", 0x21}], 0x4) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705002000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) 15:32:53 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtaction={0x4c, 0x1e, 0x501, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mpls={0x34, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "9c99"}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) [ 418.129029][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.326352][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.391691][T13228] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:32:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:32:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_bloc', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 418.503813][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.537188][T13228] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.630788][T13233] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 418.639382][T13233] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 15:32:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 15:32:54 executing program 5: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x80000a, 0x11, r0, 0x0) ftruncate(r0, 0x1045) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 419.217635][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:32:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x13, r1, 0xe3449000) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 419.381737][T13248] tmpfs: Unknown parameter 'nr_bloc0x0000000000000000' 15:32:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:55 executing program 5: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x80000a, 0x11, r0, 0x0) ftruncate(r0, 0x1045) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 15:32:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x201, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 15:32:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:32:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) write(r1, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r1, 0x0, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7d1630e317d1da4de9bda658a11f3204abca199d1743d57b42228aca0d9a188de4eb584aeac42aef9619f6dc48d212eb3d78168aa6dc9d0d03c0a8a4a622d2ef839c6c4fbb0c32ce381b1e0d0da1d40e135a7f7c25c0c9bb2fe707b5e542df168bd8ba3b11573760e7b0e510a0d11103f95fcd05d9f24d6918a8313141ba08e9baf1c01f3b", @ANYRES16, @ANYBLOB="adb794d3b35b33844641c047ddddd006cab456293a3f0dcf644804348f659bc20fabaa0be68306f020226db248d229a8ac1247a2eec39b723d621ddd423b7bc8dadd8ae3604bae27cf24a677e08b24d2a50023e823aa7028b25278a18ec46aa49de7094dd6cb85dce8e4bf042225b85800f95159e4286281819d76e8b0d3e9509fb8cdbaad720f63ebb1c8", @ANYRES16], 0x10034) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) 15:32:56 executing program 1: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xfffffffffffffe89, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x4, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 420.701533][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:32:56 executing program 5: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x80000a, 0x11, r0, 0x0) ftruncate(r0, 0x1045) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 421.080840][T13282] tmpfs: Unknown parameter 'nr_blocks0x0000000000000000' 15:32:56 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:32:57 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x2, 0x3, 0x3f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0xb70, 0xa40, 0x9a8, 0x9a8, 0x0, 0x878, 0xad8, 0xad8, 0xad8, 0xad8, 0xad8, 0x6, 0x0, {[{{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbd0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000d, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 15:32:57 executing program 5: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x80000a, 0x11, r0, 0x0) ftruncate(r0, 0x1045) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 15:32:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:32:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 422.146771][T13306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:32:57 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 422.830288][T13327] tmpfs: Unknown parameter 'nr_blocks0x0000000000000000' 15:32:58 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "046d20c700000000782650ed9660be9300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819) ioctl$TCXONC(r1, 0x540a, 0x2) 15:32:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000100)='n', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) 15:32:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:32:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 423.425991][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.651983][T13350] tmpfs: Unknown parameter 'nr_blocks0x0000000000000000' 15:32:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a1c, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) fallocate(r0, 0x3, 0x0, 0x1fbfc) 15:32:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000100)='n', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) 15:32:59 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x0, 0x1, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) write(r3, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x10034) 15:32:59 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:32:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000100)='n', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) [ 425.167256][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xe4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb4, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x9, 0x2, "6943e88759"}, @TCA_NETEM_RATE={0x14}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0xa}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0xe4}}, 0x0) 15:33:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a1c0)=[{{&(0x7f0000005580)=@isdn={0x22, 0x6, 0x7, 0x1, 0x80}, 0x80, &(0x7f0000006940)=[{&(0x7f0000005600)="9f75632bd289a8190de38e1f8e71fcd30572f93efc0078c56b5d9432425d6ab9291627a3dd151c30999622aa1c94868e3db101f9600a22cb171bed930998c8fc325fa36adb83da502f5d01ad2f3f76469c2c51752d72c227f3d1873d27f4d228a1962863e4a5baa7cd2040f332be07338c09d1f3cbed3276b7d1641a3313b73749d679791cbe861beccc666daed971fd6e8b5fc7af6b2a89904c74b514f606e251aa40", 0xa3}, {&(0x7f00000056c0)="5bc831fee5920b7da2eba96f77aff276720a3de570285cddfa7fd3885819a00ffdd30c29081299d46cfee0d29af2dd4ba4ea53f093bd25f6014f12cdd0e3eeea5cfde445b7f31e135308b23626f68fd2c6fd8628752b4eea233ce229a96ee4603cffc5f520e0229295b27ba22d573edd6d22d4952d600c42614fb0bf4eeccee7a8d7980b430b3ff9e236708d21c87ec70d461b27dc33ca75946eabf6a97596ef", 0xa0}, {&(0x7f0000005780)="237593a9bc8b8d721c72a3651e2e629f8ac0d38e10664297a86372414c880478e63a06fe5ad126c3909a72cefab24d71f063cc7ed635d458ed013ddb166359fa3f50daf1ee7193c077758aacb4498e69da666544aae8712828bc826f8aa787bbfde13364f8d117bfb949b3582289d7823aac00a3eb637a67233b445bb38ed1d9e87e13da821f8c5bdff561647d96578a58867272021c21df7920dfaa45a55b90b6", 0xa1}, {&(0x7f0000005840)="c338d22f89939214264298f948701d288e272e9bd1597cbbe239c94260c0bd2c18c5bf63400caa4d2e88b8b3d53c624195dc4a83be6ced15cf76b619fdec55bf9a1a05b1e852d443a1522a7be89ee177fb0ed447b57fabc2ab85c617835e4f92fc8120c698f706c5043314485c00f3f596602b03d548452d0e383c452da94f448be36bb591e65f72b911f3620c197d646914fa3ceb337788eb2b4ce4939b7f610464728559e66248fde17a75e8d25a73baeba4f264e1500d870578ec6a8796a4baf1849d7a9de9f431b29a58423b0928362173ade71c2e5813c956f7c22edfbeaa1ef084391606328d2945a23e02b12692ba6962d558121feb998223f1c6344be3008bac3e41d04bd4cf35a7056cf8cb8aa68a7c6fba8d3370ee7496dfda7c9acb7ad09d12814bf32dec77afb3881c9a26979948bb5aacba4a0194e2bbe7d637ae94bc1d1db14a39bab9caa6adbb114cc0ea2cd281cb41be9f9f366f33dcbdf5cb04c00b6eac0e7e89a90bee8dafad39b639644a6f06db660104f90a683c23858b49dbce302c87239a310cd1728db691a5db932b047db5471a90aaffa5175876479f84885eb3b13f95324673c0c765f5f67210692fcf7d51bf3c829eea7b7c17fe485dc16507476e3ce9a403ad3e16a60afd892d01edde357d362a8193493964f95de503485aeb280b603b465b8facb6f37e76dd8576f21c96e72484f318f4a098257ae1d86005c76979025d8a560adf345428b368c0b05af25c8a328938d0f19ca16543c62212b0bc4771af43df7e68fe46e1f4d957dcfe81ffc65f2ec6639ebab3f3783d1dbe2a50a28bec682e59d954cf73363efd5b8fde154a808b813ed5859219b66514e0670138987ee050044b1cf99f9264eb67f0b853eb6cae4bdbc6fe759da55619540aefb9b7cf46cb7eb861d6cc993a1e42569a504b0abdc84d51abab8c7b7ed8c05699450c939d878f53841be73a070a755dc55c4ac9d2105962771638a86035948185d485df9ede7013772a4b3309ab3456a6782ed2adfc82a18976b21a13605f97477099369a10ada378f49ad036bfe3d6535845cfe1daf0b11b6604d0c4e7bff0fe105c0c574d8baf8b3c18dec2286d8ccce1656de520fac5d0b9f2a35052b5e20d8db5cc6e926107120f4f4d60f47b257a123f34dd239d2886eeca1a0be0896a28c7a20462e0edf5582315c9d0503daac3d2c67cb29c793dd9df7bb2770e49305e13bd50ed834cc97b0f0f8870f347505675cf77595cebcfc5ed97b213afde95dd2f029ef4cbe5015d97bd58ff03d39e0b839c72b61d022c4c1ef3e94a8557fc1064f7f8c6ce140d3bd87d0e47bf9760f6d0b43f6f5a7c5a57452655e61688fe06d14bd7787f4a0f9bdc60a8af3c9c95857fdeed1cc163fb5c52f87c6090cece88b34aa160648e287c1da1b798c8a87a28f16f3f4ef387f442fc7cf883e8ff78099acc059647d0e7242bcf349f41397e2d81ae4788d3648af8e9fe7ee60a97aa7571e412abfbc705c35ae6f3902e873219370f4915a7f75a65f71397a84b1d8786b5599ac38ad991a7fdcc4f91fdfc1f514d4c961c5780851bd304ee29d517a623c62f50d2bd7bae920292e47328693b8ce8464689be75e96ae152d5ab82a30497c8241357d7c4ea15a7e17009f0ae6095a38f316558699fb55110fb76be2d2440977004a110f656fbc05431e7a61436125ae4827a05a49aa0558fe323272798998e4f959074a69854f6d78b404e074052f23dfa22544549853881b7c103468b4f3d4e25b89a7ac5d228ec339aa2e7681fd3be076aadb63ad309991f8f591f42c034850dc6dd460c102a378402f945c4d553649e15f0a947fd5cd4306a33c3bf52b3604d25f8e6dbb4441c07291b613e22a443920f2e9c517b7675f954f0c6cfa3b26daa5ac34b6f4fffc849578b2270dfcc843b75b43bf4f8accd903750eefb30ae5aa3e3a8070cc233b1c7179662e38889331471cd834c6784a5e336280a76c942b5b4d9eac588f9ba2fb2c926a81d17d7fc0236f4004bd9dfc2ec50935ad72838a8f211524dc2c3cb1ae04bb369f1f6061423a01b4dcf367772cc3f30d6734acfaad206c7ce1fa9afddffd66b787d0e6905a8f27c436c86eba8eb3a1fe3e470559032c50856a3e1439181ba95a2520febaf0542bbc7c7e3c51237b8f29ff7cc16cc84d67fbaf2135118e0df27ba15127473f46842389e51377f1d9a8af84b96202bdc1e5f0045235e04836c06c9493e31a07d0f89f4422eadc07c98f8eae9f26c46a4f69d57186e1d2d0ec2fc6beec013f1bb9de1b88e6ccbf74c3257042b0babd11b82459b5f20c8e16dd271cf1c7ddff6e2774833fff5c0b298d2ae41d8546d9cdf0f38d247a64e783512bd5b23add98bcb5cd0452b7f0c52d7fee6ae2fd27071c08c0f86a848a62f54ea4db3ac2574cec54a91d86895c8b943b662598cb82657e7e01cc9e0d1c95be6f4a96c635b901633907bb03900fc848882796f1045327c5d80b7665914675cb2dbe9807888ff86f68a2ea80bf4f13e0740e8b9e3e97ff051153812c38838f7f9ddcc28b252b19846897a195a47a2353b0806bf53a3610a03680edb8c9529c2c06ba1cb4a3dd31a4e3164a8857da515c687b29219868d565918894fc66b1ae05b1e7f6009bcb074b051acd82b21073dbd67e13e2b224620b799e4edc8b8a34ffa45771cd97e6f49e70c2c8c99bcf4f94ba1963022cfde2c1bdb5e24e74311c8dbb333ed637c98ffac0eac8a4ebd1b48cc25d88cffd51b83e58ea740942a4856aa6320578dfb57ace674c8047f55163767a5d849e35b7f18b26d519e9b9c468fd0da1946e116eb3ac9b56468316477ac910efe1f35a51145f01e5603aaf32faf4daf2b9687e74234b25281024038d753ac4536c1a8b130f29748d7f06bd60fd18abba9daafe9fea2906c6308493bfb043729b43f7282fc839f0e579ac20924a20ba78084cdbca90afc7fac7b61783e14fde04f853b9fce05df5687078ac90f27d05b2904a20436929815df51338c7d52984dbe762d1f89354a2f0c9eeb7d39e81de422f6519f963b88fad1823fff37c1e9853ec3b2faaa4c68470c71b0f8c17865526bdf6f53705b3ba5d0a05395038d61d39d1ce0d0c33cf54965c5f86cea290ac991c74d12c7d620c64735ad6022948801674c6238cd732f2c10272448368409d875f5c6c3516190faa050935c4edf627f1bf19b4eb3cb4a0187ab0f7fdcacbf4f6a22cd0f31dca1c1638183b64507ad335e5a69f85902c1c2d82a4be6682c3dfaf8e3e61d7ff63c29204086338f5288ec143692d641e583ad3543da1296e1f8e096189b039930131bbe909abe8ead24851791ca0039068bb3e60590c9d4f0f0e660c80e3b26c58f0efe92fc7b071767b9140cee21f587a8d127a3d96b847630657670c8dfb8d0bec54866e58db275f023a3769ab2a999a497d65d1868c2f82c8b5088018514f87dccf092ef550e870018e48465fcaac973c5f5960b6d755eace034a6d99045738ea22191e600a9a891eb07bcea94337e6f05b40fee50af1cda001d41cbd182b47f5bb9aae4194181259f0997c4a4f06d3cee1f8893a5242992956c7f6d334e5fd9f78bd6692bc7a9d297dc69f8e892166b4902f8abcc0def6ace8aeb55c1a43f7689c6587f621dcfd11643dc3e653631648dc7bcdccdc35f2da132f64d7e100a9be81666a851be28f0f700ccbead49894f691f6884ca6edb5d4f1c9e790c35eb580cb5263e671c813627a709793f2dbd0d67ff6a680c4c92d21193c4f6edc486f30bda70ded46fbba0e5a5e9f2c56257de165f0b700a2fbe1c71a8713344bda619501238d6567dbfd87c108c28d08af44f04d47a5bfe7ddfe3291d87899c8f42df5316282388c00eac6b5761c662c68fa39a400d0e20e8c68cb4e2595b80cfbb794187f30f251299a218c4d03b751deafc8ccc69a3a591a6d3907f78ea35ff2b120c8f721e973386fd2fb24c50317043a93fbc84425455d172635f2a7cbfbfb3ddb27faf58cd6095f1d21aed242235d36c87b1eba0b5e627a8470c099f8fc6c62c05dd5b182aac25df4892cd45004a5b0c229325e685fe7e785a19cddbef8aeb4bb2eba21fcad11b0fbba98696d20ef6ad3137010ca7935a7b2f0a8d26f8356ae72ea7859ef85fd57fe748269a38d34733294fb48375b5679c36fd41ed8bf676739ca7facafeb85443330272726c4a4859ff56a201ab476ea538441fc74f951a034e96d0f56315e598f8360ba87e23371407f6f093a7fff07322dc20407e338455ec01269ac196d9ea2f2a7c0b051a73534f9f9f5cd11e3e24f3a1c655506d9ab7ed1fbbbfb12d92beb814e57594ff72f108a39ae093f6e06731d68cdd95a4fee5cbd1a385ecfce6bd7a1f49beaf3e2fb891c26dff07ea3a960f14e6bea6d7b42f25329504e1370bc7b1ded1ad90fd03b54b8d71003c543ebb4bc700019360245298f9fd50ad2ed11554c412b56d06f5344daa966e2cba3ce99aa7ff473b1285807489b66329776571bf0b49f35d2a99f8afea835261588c76b2dd95a5ab426e2f498ff705429da55e9c02bcee361545e092052bc438da16a35fd17c7ea757a3550f25950a1d2c7d954d42bd5ef50da38102b8ffdd42f6e7f62cbd2df86d041643ee77d5c402639fd5190ccee6a3d6119bb4f77231ca7fb34a93a15dc0c8ac34c4658775f6d990f6bb357fc996e045bc9e8b687bba3c9110bbdb3f9d8104d7dec60830c723a0a2a24bbe939ceea325489826d8dfc36db3889a9fd37bca8e6bb8704084d19311a18d525adf505cdc91d441fb8fd53a96880b9b462ac906adbb101044beac0833c3516e6d98173171d70a640f1d3b51a57fa135757f41d27421e3a8b4fc0264cfc2ab0f0487cb217c0e7e0c315f2a6c4a501fac7dc8abd9ba24569ed60a02adff8737d4097f2396ef074f91c36e757c04c015007869ddac782161f8cb3524f59653e9d14de5684e8c9e05d58c11323c9e78a8aca0db68b6945ff4d1288856f73c1875ce3f525865ccb4374092a3fb4a7a6affd5d35af95adc1a49ad42aec270e91ec2e64d0513c90b1105331b0888203d47362fff5546182cfb480a355c5edfcf212909f2e7e81ca43cece5bcf9c36e239115c527dfd41b22287a34994d73a05a469eb8c51cdf81e502be070fe0e0a3b150c680f32035a0c97648c161b74e87672847c4b02b9f5e0520ad18b4df9e3fff132a8344f976add670bdd535b2a2284d8c3c1b55bf3df010a3da746a22fc0a4f0958ba23eb4672f9313da33fc6640ca45517d08b4f763bd6bdd9a22c470a3f023d42839c0a81b7f7135ae88ac0bf23aad5d66ac48b1e4bb36e56aea262a451afd33d84784c2da360111e7a5f43745cb303ea67b8eacec6e02d58a3bcabdbb84fc88e27acd5f703a83ae481cf89a93de820c99bd790482f7022fbdbb36d73fa4bffc222b8c983bb21af661559b013a64dbbdd8371bdb33c26cf7c4bc33439a1d5b71855c61fe05520bb80db5d92bec6d2c2672fd1f6c578f133c32e2c0b7e3e200d91315922dca82d19c6248f84d7ba34a80cfcffbdb715e68615d32adc718b1878e423034eada436e3e6b6487b023fe1a15fe917e1e81ad21f09e3ae15760fdbd527dbefd189cb5bc9131bf93cb50eacdc5cb39973472203cd7339321500fb94aff15efa545524f7e6ce1d61d8503e0254abaf1cb43cf38e01776905c61165a24c0a4be9055d926c96170aaba5c673135be2420b446eaab2de1e50d989afbeadd2b0673063c388ea37cc2eadbf59da", 0x1000}, {&(0x7f00000050c0)}, {&(0x7f0000006840)="6be70bf8cba8f04506adfdfe204204b53dc150d11ac611d8630a4e35d11008211710592784f2268cecb11ff5677e5fda73479c1aa1a5d31a2b75b94a8557a81e84ac0a58fb127e58dc3831d1983a89ca51a2923be105ddee7c675ce2f4de366dece8b9334de12c18a514026ad70b5146d6e3102e914a2f88bb41ad4282d70aec6a51e022c9a3af0cea26d0f76787c8ebfc0a434c53a33022b6d0567a8eecf7ce526fcd19d123fbdae0675f725d50d4ce1411994c8fd4f1819c6824dc73a18a9ab25a44a5fe82fdff184f522dd7f0a9", 0xcf}], 0x6, &(0x7f0000006980)=[{0x6c, 0x100, 0x80, "0a27f66e36470b822da8b0157d6c16052d51b667dcf0825e163e955414c5a33bb6a79f9a46c4d9f875b8fe5c17820a39a2288663fb65e05568af68b183d369e5cd2200f030a780bd29b52913dd8cb94a5d35c4782178a1e3369be8a0b5095d"}], 0x6c}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006a00)="f4bd5d50aed37b3d4871322da0222de6eed9cb9c2895c558fa6c70cbd2fac1c48e17947350e9c8671f04ada8ba280d971f49a69140bff2cfdfee48c80483fcb28d79557f682990f8c59848f6eb418b0d61fe26356dd3bce83726387d8e64ee3d067a80aeae60d6dee7abe80fd4768088943d60a7d2", 0x75}, {&(0x7f0000006a80)="6b6e5c0d8be4fa98ae20b9b1630cb5", 0xf}, {&(0x7f0000006ac0)="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", 0xff}], 0x3, &(0x7f0000006c00)=[{0xb0, 0x1, 0x6, "b9f763df0a635a881f0b07cd0a54e82610f25839dfdbcd9bf180861060a879620d44c306b1258303c16b086c5edf9f4a17cf4f29f47e8d860d06c5241b360f805d0677a7ad3842670f3c7f97df3ae915492e87b4daba50f180603c20ea8d0bd906e964ed297ae198ebb492c9ded51305a6a984c4fd164434bc66d99edeb902396e5b16a1283523c6fd4f643998241b06a1950d14834188fc83930508ff79795358662c5e"}, {0xec, 0x119, 0x7, "97e937c5b7838d429237ecfad6ff480a1b1ea7e84657c67ac38fc114d4b183fb43271b2a4cb04ae18aa87f3abdd410a414d7fefff9f13e83fd90f58541b380a859f47edcbd7f6d9c7e09554ffd7c07ab3940b7776d2f40c427e02182a27f79b86cfd9c7f90acd6f5a5e69680092e037727a40e481891b66d3fbbd9f7fb06bf0f084f40f5f0ab15869c048c55a969143075b459833dac377f63881ebc267ed57e43c5626606ef97e4772ba53a98c695df7ae307fb4577856c688424ed90c2e37c44d50f1fa3bc1ebe6d33cf35179888c18c6ff87fc9343e728afe690c91"}, {0x10, 0x100, 0x7f, "bb"}, {0x70, 0x116, 0x578c, "5d9e61f662eb24798e8451e6847f49344893800ca43fff6d06d458f7947c115922098e2dc3516c2e65b1910d5ad4dbf2314e1a023640cd2e85562af50b64b2e469b8ce31d088e5b37aa79a773c6a1646174823d5da6a20560391f2b70dca4d2d6601"}, {0x60, 0x110, 0xffffffec, "7c1046f775b5efef24964fd81a9dd014518ef0ca9ff486ad151d2c318fbbc994859e36e5f8045376eb25c50813bbd2011144ccb861cb14e262180c3340fafd501aee58b148b676c14223fdbdc5451053f26d"}, {0xe4, 0x111, 0x7, "5f35245253085904aafdf06a5cde521ad22555e1a1c12e9fd8a27578270ba43e47a9bdb3cbf897042e30acc521765034b51c2cee749c11f7c5a911d9f474654b3f19a2ef5354ddff9d164d782f53946db6d4aef92bcd344813d582141273ac7eddbc9192558dde7067cba10a6f68d40ca7af820affb82e9e7e3ccf64e83526ec380a8ea63ae0ec4cd339d0015f07d30dc7d646fd3d3fdb3b36715847b7403b57a93a9a0ce06553fb1571ab77cba444006f469c34150bd25acb2638eb334bb27a25cae8b29ffa0d2b8874052bc1ec1c2b2b81f94c92"}], 0x360}}, {{&(0x7f0000006f80)=@ipx={0x4, 0x0, 0x3, "6f801b991bb6", 0x3f}, 0x80, &(0x7f00000083c0)=[{&(0x7f0000007000)="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", 0x1000}, {&(0x7f0000008000)="e8b7348ce6832221854b5bb594f4e09a892d732ee214d91382b21b3f5603728b11eb9ccf2660718ba7c61fae71f25e7829ae490f456cbd3e4aecaa37a81550b16f439e39f92a9c0081ddc5515cf3c391725f8fc0ecc2d7c5ca9d2fed69e3981802224b45d9894e6b1ec9458f8d9b7d25b6a4f777a005e5b7dd27308019ad672a2b787a1b8363c93cec5f248578b9d4d0c0b9a614ee4b7bbdadfb743816d77b0f26c0aa4d58a8acd0b1807ef8ee7adb3188e980d8ec7bc4850925c817ecca64f122b7f94d5b6014986470513eda0a8544054a5606d5ef9e6a0cc0bf5ddd8f7e", 0xdf}, {&(0x7f0000008100)="0a1a3f3e5867ad0f798e655a6f146c8b5df0191638d49cacc14f87d7d997488b708f4b45ef2b93dd6333ebf080a5c6f94950f850c1dcf1400c8721740db28449e10694a16baa5382b17440705c6cf5b8b6ccf9cd6179bb07b367ba29cbb1747373ddd6", 0x63}, {&(0x7f0000008180)="7a8127d48867bd180352666ba3fc2889c85a41bba1e3990c85379170376b6289", 0x20}, {&(0x7f00000081c0)="e46b3ed22e06862997e2b2c66b415ea934a9c62341ce5a050e6210142836c21bea408551084e578ace2f4b0efd0029ce958a891e5f0d91d57489dc3018ad881af2ff9f12acbe4a2d0d44e9975d36d600aa96ea95aceac823284a4ffe473a6eed7e5d53c5f67d53e8bb83df31fef021f945409790923459c0575cf16bd2e56d8931", 0x81}, {&(0x7f0000008280)="31f8d9c0f2a8554bcc2fe47bd281e22bfaee03c88a11024a5e9becd377f591c56bbca2ca610c588c253c37d7977a42997e7f491ba576e0615c9d160b7aa82546bde58f1e449439b7421f501f025bf6f0cb7594f0aae98e1ae4582f6dde2d27d6ddf2c2491d00958a8bdcca127009f947a6cf37df4cefc51daed4240fd5b0817e223af8657385117fe43cf798d7e7decae319a25550f8543e6e31600c1b26073e4cf017694a7b", 0xa6}, {&(0x7f0000008340)="14e1f9c3009137c14cec9084f8cb4c8fdac67b2b894d1b91bf9d51c13661a2fab5dd7684d598b814ce0a8f07969254b6277b668d4514104c50e13fc32d3006db6f6aef072bc57df06ef76f6b1e4d1b1d5e15a671ff1568504cdb6eafa3d7ae", 0x5f}], 0x7, &(0x7f0000008400)=[{0x64, 0x1, 0xfff, "26fd4caedd6a4d5c13b3e36edbb506d58853846304bf415a83e823b5ef25c121f1f0968e76b2a2ff869fc8d64ff194144a6e1c5c73e80a2677e421f0aa5d83eca0655299df855dcb0b5d56d38509c12263b690197f"}, {0xcc, 0x104, 0x3f, "1d6840fefd61899f0da01887d89db1a10eefe1ab304abd33026c1bfff914f0bbd266ee6cd948444ac09ccf6f4e1d59cef975e5c8c644f1b9b2c064f440f98640c9e13bb5822bbda93a13b3583380215415e91b811d0e2259a0c9510e892d98eb7e5336c1e2c3a8c6be9bf8a172b95dfd9515d1af0f546955dea756f0a2d442593c9d8a552f8c7dcdcc47f9c69eb72c4a1b472daa30fb1d7575e2224ff78cd3f05ca1e84ca53f1beaa6171eb06b0132b35cd44c587354e208fd7b06962604041d"}], 0x130}}, {{&(0x7f0000008540)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f00000086c0)=[{&(0x7f00000085c0)="20e1118fd4b6493292bbf9892eace200e730dca58e36c1b15770bde1e252b2cfb8d04ace6b606788c5f9601f5e960c0b80fea3649075867b737bc133c45eedef16fd5540d7783ffb071e57bbbdfdb8ff0d3f25fa5c5455917a19928a609333cc33db2386f0c8cf380fc0558c7a59dd383e2629e3c3f6ee1bcfab750a82f5d583111d93f3acbe7b72647871f3ff48f99dcf2939f9f1319e8c4594992ec4939aad7d2776ec0ea9c08d8be061f04999c7f7cc2ff622ecd61792b646f611a16bc323a16e1d974e55c0c43e1ab8d87dbf6903bc25e2c358347e16af351334e386582fcea53a186c223df830b9b0a62547fe56e9da", 0xf2}], 0x1, &(0x7f0000008700)=[{0xc, 0x84, 0x7}], 0xc}}, {{0x0, 0x0, &(0x7f0000008900)=[{&(0x7f0000008740)="0e2690f7bff8aa768ec020107ff7b801d3ccb183de966738d1839118b48a81459774a97e4912e3fa7da8d9cc047e2738b8bc7b3ba9683cd4646c945f0462a724d2cf09639630b0598680dedfac8ccbf27a78c69ad0f5a7ad5212036d2a9b99e3677bcd759c0a3ce7e380d4318574020b4e94db966694da95", 0x78}, {&(0x7f00000087c0)="eece40a8d879fead3a380ec79fe4e595a17a5d92f10e481a800591f9cb9cf99aacbe0ae5293cefd28fb1af9828d8845580e416e3c556ee0b4e27b0d03f66f396f1", 0x41}, {&(0x7f0000008840)="e931c8d04577abeb519af103ed83aad319791369fe52cd100cfee0bd19a64163e06656d7b7788621be111f43ad21dcfbfa2fca04b6cbb25119dfa5fcebfeac874a2e07dd43d6afcf5d9f07b0477e1782e0058bf45c3eb9be482ebb0a3c57aca2e8fdf141276500e65ec5a473edba9dd72785b25e4f9567c34efbaf5b35a051d79b8c9bc579b7affe62d96889572176440836d8200a9ea2a0235e79a0c0f13c61823bac0a82935923538f52f9344ad02ad0a418d33d327ded8f9ab239a57c", 0xbe}], 0x3}}, {{&(0x7f0000008940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000008d80)=[{&(0x7f00000089c0)="f6ba350a31095039d7c14ff7849c07dad2b966397fcd69ec213b0f2c5ca5b730a36a07ac958ffdcca3b42b2a1d9e31bc1b24d8b5d74c977bba812de0261e03218176579295eb77e17046cc58059bafe7529f32957ef39b6c50a74ab558bf9c6b240eeba5babd56e518bbfbebe1d7712be120985d61c0be243ae7503b20c2a91f651566d7a0c9ca0e1517367db132782f1e1a04", 0x93}, {&(0x7f0000008a80)="a0763a9ae46db7f4721927d209f9657de218ff", 0x13}, {&(0x7f0000008ac0)="4d5298360ddb2b7523f1", 0xa}, {&(0x7f0000008b00)="727ac3b9e4491685d3ef522fc7cfdf0248192fe37e891fb8a93e354eed2fe918fb92f4d6206baebfcc15c1444d961c5016776a37737f3e24a38b981fef12023c325a57dd37a801a13956a2ed68570858abc55aa56cb3a920", 0x58}, {&(0x7f0000008b80)="83f7a4202e7e6ea10a880932766b9ccdb44d4305f65d23f3ac31d73ca5a6765540702664607e4a67a65e8d00fcc4fc51b38487d08a812011c6bcbf7d7e136765dbaf6b7d726a116952a0486ef138c96f8451824d1be9cf2239ae3f818107d44293c50b7e95e9fb61de77c9b340a009ca26310635d02538eb2d24b02cc9392fdfeb0ac81ddb2523345e6f4b1e7082fa6a2d3ecb19fc5c58f68cfba294f623cc39c46934adca50556db0493d97e29426", 0xaf}, {&(0x7f0000008c40)}, {&(0x7f0000008c80)="28d019ca6a2bc72e07b3f5dd23240e98c19147ebeebae1cb5a923b26901495eaff5a57994a0e264c96f39b74a39d2b831365731a92a9208ffb3e1834e568cab23b9533c0678ec978e5418d7b0d72f6aaf9cf24d3462da5e68144e85b8e7a387a51d1fdf403bc5402a03b41e6878b7683e3ecbea5e5d653908509ea2c99451dea53efecafa29e1f33cde25b4525ad823c5ea7aee5c24fb638b31e996e2be8433ec16196055a7a1a275872493dee3da3892b152cc8f1dfe3eb88b369d29191af32c01319000f34e4d71855e016bdad", 0xce}], 0x7, &(0x7f0000008dc0)=[{0x100c, 0x88, 0xcc5, "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"}, {0xf4, 0x101, 0x60, "f66a95d414f4d1f6c7cb612ecdcaa2605d571ef15458413344e34256e2ab52f45e5f40e9d77c8723c252c236270edb09fa5c059c1c4203497dc58f65159f03ff6e032b4a498d9a155a19ffb5890d3160a6c544b525f201caa8dd61e57a468f9d149ad866c89df16b2158a5d50247eeb93c944ed21515e83376bf5eb7df36edf39ad30698d6d0f6861f483cb8671e490edb3cb783864536a4a3a97e1091042982d2753b1677c70b88c0e33d10159713a4bcd4494bc66c4dd05fda0a4f3cc87e179b7ed66ed0f843d76863fce33f94fea8935149daa18c08414cd840c64bf078be54088dc9563307"}, {0x38, 0x29, 0x6, "021669fa443ac3c000a92cce523d8a0f7f96feb630e0578002386922d656a225daf76666ff377cc128e9"}, {0xb4, 0x115, 0x9, "58349637fa1ba4c8356608dcf37e8882e631abb5471cffb1252fe0a406ee1c63849191327e7d99f8ce5c8bc82292b25d5a3bc49f1ed7d71bbcb483a0eef908aadeda6efc28b121cc28b72c5b4c6b1e15249c302b130125203703f9b9a33970614740864c93e6221a813e6c9e25b3f9c7dbe59fab18a0e2a987ff947e581eea03daea7dc2c654f726a521622eefa936317072c0d821106938cd2d6f8bab06bbd06b0a6c0ddaaaaa71"}, {0x50, 0x104, 0x8, "0d8021f9fc328ac6c06e641f9df77d7fa29bc685adf9cc7c1262798eb6eaef92505658f339c71cc66c19a279f1f6516f9e5e8793e97f1cfe4b39915d065df4812006"}, {0xb4, 0x108, 0x1f, "abaa5e57a4d55fcfce3a9534baec7395510bfb278491c9c89d871b205e93ebe0eb60babeaec7c152651b8fe6598f06ac6ff57890b830bbbe22b553f65df7a7a72e510290014ca4a1be1c11dbbedf4d60ec121e513f7e93cd1e1d168c9b36439b9c475e83ee4a2933fc41fe55be4055b26590be4cdbf9fbc11d81ac70c970fd8761f13fb8aacd2af0dae7a65ac30e43dd04a5935a23abcf3eb54235fc065572d323dc94197e"}, {0xe8, 0x198, 0x3ff, "601b7b98a1fd26e8a6e22e22234b19d717b1224e4f879e8f057df6775333946809d1dac1834063ed405d4321ce7969d7cfb1fe339aca10ff2dffa1cbe984027abad016144ba5df00e97faeecf736986b204f478d8f9ec18442a79ca43bc1657f3bea3795b21d37c78e301aaf20bb68da95148ff02b0e7c5845368cc6767ac821529114c5db2eeec45da6deab132b7aea0088e62165d6142787a695824a196ce447c93426f9090b24b929cc48fda6a0edfb4e62dce50443dba4d944f6c33dc975f1ca1ea949ce027ccd57c225915d8f81e9e6a45d879453cbb822"}], 0x13d8}}], 0x6, 0x4000890) r3 = socket$isdn(0x22, 0x3, 0x24) sendmmsg(r3, &(0x7f0000005500)=[{{&(0x7f0000000040)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000140)="20edab7f9d7202084a8264c70be38faa53c3fdea622170e551", 0x19}, {&(0x7f0000000180)="49c15461ab4b89c476607f81d59ac61e9f7441bb3fc30edd7d2c8ebf585e6d896529825e9cd4048ec5919515abee0558bf1ebc4b642327b376f62a80e736e6715b0e17cdfdce5db316939ff84719afde843f00a8605820a284f57445", 0x5c}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="ee56bc64b54e", 0x6}], 0x4, &(0x7f0000001280)=[{0x4c, 0x105, 0x6, "b362a15d7cd025a345bb622a5bc05fce1a4daea0d3678e745d9488a1d99d95de7930b66f3dae9634b175aca33cfbe3e41cadfe557dcf0c4a1dcdc9b74e"}, {0xe4, 0x10b, 0x9, "bff545b601c695fa6ceae1180874d62d10b722ee0bfe17e5c9a8b4d14bdff4e4f76ba08126821541371228823e00b7f0063ad557bafbe8f1aeb5f08b13bb92cea3582420e42b01e46d7ea5bfbcb5fcca854ee12560baeca2c9227c34ebe6f1e74e09a301107533155577ce6049459400fd21d30f5a99cb4a14cf5da219dce1256989aac60afee59baaa7a841b9d51e1c49c855f1e4461167e5d241b811f94a3b754373616d75993f8539ed976070a5b6a6d0208eb068a73c69144a43bc3b2bcb5d7a628c2fe096f503db90da460420dbc0ecc4ac897209"}], 0x130}}, {{&(0x7f00000013c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="50d46c218d97b3b184bec5e45cc5099c1c997f5134b5a8150a4f0aaefd4869dd44b60107b5664ebee25ccdb7ed416693b57b9f477909ff5e0ad2e63dd6364e5cf65465b86dc243ea22e67a1667c0f702965d3e", 0x53}, {&(0x7f00000024c0)="0b1001c168bc7362", 0x8}], 0x3, &(0x7f0000002540)=[{0x30, 0x1, 0x7, "a5aefba10ba413aa28cadac275445119854768dbe512e01dfa1f3ec5aec3c8721e8e28"}, {0xd0, 0x114, 0x3, "32d9a5c0298241490d2ef5e0a1621583301a7394ece0dbfe51c480cd79d5afdc73ae754dbc2346682261af97b5ddd24e3373ff57bfff1c1e8c9c3bbe54c5cb7d24620ef5d215dd96711f3dc2e32d7e1f4caf95d6151d052bc5a566037401abea116d60be59b32f22cc70cc990c54ec8601894e93f54a8feb0fb5919da2a2bab7a80b007815daaf73dc5fb932de4321eb82b2bc472980c07f0b32cb4b310d5ea8eab1dc15d6f0b64be1a09d046f2d8653b1dbedaeeafef2e4938ebabb229a97c30681011a"}, {0xbc, 0x118, 0x7f, "3ebcc52a861a809d76c24bbf31d7bdc3e3dba93b0d68b780e3a19f50e2bfa85c8748ced0ee32b8abad0188972005dcb857f430a263a31e46cae78f7e7d6c8383ab3ab26c5fec4ad575f438eefebde4395867db8d3682478c5441954ac2c34b9cf01c4cb465ee85725bc5d2fc7f9fad16ed657b7a1a28658bf099cefedd0d351b50f23e1a9863cd6a6e96433cd880d6a6e40f95e6312e112fd7f07d675f327110edc6a3a56bc758d0a43faaf9eced95"}, {0x9c, 0x110, 0x0, "31b393062993a4af0a8b6a2763784b0f4c9743663848b75e983f8ccadf0981779e7d47df60b1a41575a541b32c7a6f67f1d5022216448f6b7bab3ec9fb5243b8ffb04753d64c1b82cb655ddfb4f3c0dcf84fb49ca20be2fe486ac273f0f7c55377ca012580959f1fb192967d73fc6dfc83e9195ae21eb32f6d85a4063d8eae0012baf65a63efff9fd10b97625ba5b5a3"}, {0x104, 0x88, 0x9, "25ceb48b33553ab022dda3e3aad57b0d8a89d88deb9fff696025843890ed0aa2941c40d3985379c0f13b454e71de60840aa302997722c1c8223510d168f4f6b3679ddaacdb996377e59eed0407c157a481c70d2d62f458bdf73c0e0fe4be62135fc9b22f7b3154d75fd7be3bc8fa62151137d130664dccf00759d1a6b806bdff5e8004faea6a4d0f7b70e5589566f36e54a9d00bcf27dda2f1488a4ac2127634fff4e34e47df338be2560e9c4519b90fa08859e761f9499d53ea0d8ef42782437a388f28d020952a2ef8be8d8d94bb909443346f03f71ec3fb0e83288051fcc6688634bfdd0d9a875947e135cf8e1c1c6fa3f921223dba"}, {0xc0, 0x84, 0x29, "24f0ac9d5e38bb41093f7e3f4e5102f6a1f9e1fa9b66c6857eb71af34158718d3f4f4c20cde1c0d8bcdb90c6d4ec809adc10e0f618fea5650f02e7adc248645eb13f468fb8947da3a6621254e7b022cfd15175a383275d6e9de4db040e9981a38aa280ba87ab00010b17794e4f258b40035157ff84d5282e76dd2f399d5d21001bcace158eedf7aa45d898c14d6f6880ae89e7fc478b3ca5fcdaa083ba00e3bfa4450224ba9b3888b51c9fc64cb4f3878a2d78"}], 0x41c}}, {{&(0x7f0000002980)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002a00)="7d7eb23dfeb3ed6bddb1db381cb7d991674175ec25d3475b734cb6e6a27465a35bc0283ef5f63d799401a326cfe39ca96f8b70a04a3a5ae66bf63dda22ed0221b3dd0da9c1e5ffcb6be2c77a1602d88d4fa9403704accbb36e3713a579c0a21f618f3a86771715358defaf55f47759aa2e3e81102d5d61e1ce5583ec9355d26a43e6189d7770a764435277ec6d1059c6cf0c3dd8919acc30c7df1b055c7ff42f19862d", 0xa3}, {&(0x7f0000002ac0)="276eb392fa39800deac704f318990ba39f34ba22e7780401f58d9d4df6b488b2818132d3147fe2c93e00dfe6f6e2ed5dad76726e2908cbf79328d5014e4d944a7ea2adb01df43b7d9b8111349f5a9b9c15e552f6c7e6475ee905370ab49062187c2996e3ca574484b437752336b9fbfe116d6fd79b46852b334a76", 0x7b}, {&(0x7f0000002b40)="e09428f12b7f1cddc44466ae2ea6823bb429f5315de248835a5bc5f3b80cd08a5a59dae33f53573624bf41ed2f42d1342b0560375b94b2e7104130d14bdd36d5f394400fe7dd3a0bc33cbbb1a28a108b823d7f9c694dcdbdef7cd0a08b630d102c4acd04dbf077c0a76132635b6bdc983e6327966be1712b105ebdf72408c87ee2d1180c7f19e111a65661eeca804db37a90951ab00c038779cf590a95e5b3f055e6346608a6a3815515e1eba69bf35bc48b9a2e437a377330210fcdb873639a894f70015d2291f8da1d6d37acfc5ebdea792582b04731c07edefd56", 0xdc}], 0x3, &(0x7f0000002c80)=[{0xf8, 0x116, 0x8, "99b6e8890c33e2074047b6c7f305ca730f52c9c5631be1fed397d3bbdf401bf40e122f9102fc7cd9bb35acac2b62dc8209478a68c9de0bf0d0c9bc7d11d5cf0d87d394df4e0cd3f54c1e8d464acbebe20263bf6be17fd0e719703ee837cccf9fead39712c1c95ca93af0b35b9dc4dd8029df1771cbc80582bfb7139d0c739ca08b25402cfb03574a873139fa18ca99aeaa83e64068149e7d3d2f9378335c882de9eb0ca0653fcc2aad84874493be5bd24975c27d0506c4ca8fc6230a5f61f8ffd279874917f6e14db7c802bb8c9336d6278025d2be396acc6befdd81bb67a5848ae8dfd9f64bf5345580"}, {0xcc, 0x10d, 0x7, "daf9373811e7d915aa80b1cd69a602492156404305e6d0851cef8609df26533680c1bc9588c1798adc72e894b10f32afbc45083eab490942e4e80b138836e830e05090c7585de35cc9209d591d8b58be082379a706b61bb345f81d2ef68c0a9f93df6feb7276b47110a20f709639d9e2a19a7bcff986e016847d51fad2344a57e99eaaf1d12c1b32787a8821e6d80dbdf3067d2f78f015f6e590cdf8667edd4dfd865db1256b708c524eef59ef97b228129d40a3de758a282b1a6dc95e"}, {0x8c, 0x116, 0x8000, "9e82978dfa184d8d908902492b2f70d71c5074d07305ea5628232b1bbca3f2324c3a98098adc90ae5677cdf4015bbff3e6770441820ce7a2752ec64d62ff51c28bce44dabc16070a8d73c8ce2c97e51932fa8127733ce8fc12ab26776bef77289e449bebcbccee29db85472fb705f4c14fa309a47ec7a51356ce58afada72c"}, {0x100c, 0x1e4, 0xffff, "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"}, {0x50, 0x115, 0x1ff, "9bcd6fc7f14b82c024b4723165b60052843a5679fc342157a467561abe145e59ba2d851240d58de27f1b79ddefe5be8297d2fc83a8e574668d74d8d17e13a8723956"}], 0x12ac}}, {{&(0x7f0000003f40)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="7b418a1fe6ada315e0ffe2d1ce89a4356cf2e99fed3f8f27a2aaa1d1a38846999243", 0x22}, {&(0x7f0000005000)="b5b2a27e1e258ada525eb898721352d6c55395c7386cc4a9bf7b9ce4f9a2af5aab755c30ddaa1fee3481b9a35bb47d6f2c282a30ab6bcd69c581aad41010759baa417e9789a4b6e48c174476c5da97f8a29f0ef3e09900b8acb63c9cf3bb0295161433795ebf22c01e32746265cd5c609cbd464b831bdc2d411f26fff1152017745f5083bba3e7fae8d02599bdf29d3ed9ce220eca737df5acfe456d4878f723", 0xa0}, {&(0x7f00000050c0)}, {&(0x7f0000005100)="bfca272a3e74f077eee9550705d14c59cc", 0x11}], 0x5, &(0x7f0000005180)=[{0xd8, 0x3a, 0xfff, "b32c4ac933cddea6213117491425112b78d00141ba977ff8ed33f313980325cfe3546a653d0b29d0d3341690e5bf0638e095b70d1d224be52d067e0afb1021c627053af629f0a0a73057287eff6fd1dbff4b3d9d06a01fd4d6d2bac7176f4c54a0cfe80de16720edd677265b73c4e7d5cc0f88284eb5aa9fed96945aa5797a14eb0f36fff15cc425cf9858c6136df30a522730ec30e200cf6b00e437e81af1f6b118d3b5776361ac9827117fd8901f773c2e67ae145d16b6aa5503307b0754cdd04ca84ca430cf732e"}, {0xf0, 0x10e, 0xfffe0000, "9df24582dc4014b61e36751128a23db263d61c8744af5e66238f228eef2c3d2e35800c6ac708ca7d8d657c6ecfdd8ca023b40e5ad8a963427eda437cf2b8f4af5e6c468e8e7e5952d3c2a67da92e4c12b28a6ecf4764dad1b630ece6d123bbd6efadb0ed41bf89add6615b3fc32b9f1bf2dea6a832c4deaca7551b433fd8deaa854cc28bb5d9cbb11a8c035787d907fbeac5e4dc99689d3980a1f4680b8922f140d4831a3c3c72a7b8a456b4be94419e4a8d2d26bbfc4f1a4bb87355d092352343c6854bfb4431937ee5a486e984a3f652a6305479fe2087b59f7194709a7005110743"}, {0x7c, 0x6, 0x401, "119425d67e2d612672213695cd5220b541440fd960ba34de2991d8c2e92edf176d7b9595e590cf21adb6d6e22b4ec495f9b5f9ec30bbbd0e1d89e4ad550252910a8b961dc9b0138be659baa79c94cecea2c13b286eab5c64062a79c214a28c75e74c9c4515b09d48ccd0c86fa5c317"}, {0xf8, 0x111, 0x1, "9181571624451433c4d802b8f3130be37aba874ad2edb4ef53ddbadcf390eba85fd3a0e5770cb785cbb7630ba0daeaf72aea8d45111f5900e81db9f8749c8e6d1cd50c5aa616b3f2c575ea13fffb42ab874e5b63d1e1e026cc510b3721cb1e154250f3697fc033dc549bee044a6a160d92ca22428c8aa377cc2560f86ce84b752784887f76d7bb5edb882d9f1033978a074dee9afed7fc0fff2bb93023a7db3b5d316d95bfaee4db10dd679f732728e87cb909ae1a10e0e6d87c7acccdabc1175fcfaa98a2b1264292dc0b6c094bdd865ab74c5c695f6848b4e1994e45b76759b6a663f341c59e42d1e076c5"}, {0x44, 0x117, 0x9, "6f13da921f2255c553670245da974700c9da9b275ee201df49277cb30f474261734ab4d042cac0be909849f62956275e8ed7a46137"}], 0x380}}], 0x4, 0x8000) umount2(&(0x7f00000050c0)='./file0\x00', 0x3) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r2, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:33:01 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000100)='n', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) 15:33:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 426.180876][T13394] netem: incorrect gi model size [ 426.186618][T13394] netem: change failed 15:33:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 426.514959][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 15:33:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0'}, 0x4) quotactl(0x2080000200, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)='0') 15:33:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 426.861111][T13395] not chained 40000 origins [ 426.865665][T13395] CPU: 1 PID: 13395 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 426.875141][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.885307][T13395] Call Trace: [ 426.888631][T13395] dump_stack+0x24c/0x2e0 [ 426.893018][T13395] kmsan_internal_chain_origin+0x6f/0x130 [ 426.898765][T13395] ? do_user_addr_fault+0x1912/0x2650 [ 426.904598][T13395] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.911160][T13395] ? kmsan_get_metadata+0x116/0x180 [ 426.916381][T13395] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 426.922215][T13395] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 426.928339][T13395] ? kmsan_get_metadata+0x116/0x180 [ 426.933582][T13395] ? kmsan_set_origin_checked+0xa2/0x100 [ 426.939518][T13395] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 426.945658][T13395] ? kmsan_unpoison_shadow+0x74/0xa0 [ 426.951003][T13395] ? _copy_from_user+0x1fd/0x300 [ 426.955976][T13395] __msan_chain_origin+0x54/0xa0 [ 426.960958][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 426.966099][T13395] get_compat_msghdr+0x108/0x2b0 [ 426.971346][T13395] do_recvmmsg+0xdc1/0x22d0 [ 426.975982][T13395] ? kmsan_get_metadata+0x116/0x180 [ 426.981396][T13395] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 426.987229][T13395] ? kmsan_get_metadata+0x116/0x180 [ 426.992516][T13395] ? kmsan_internal_set_origin+0x82/0xc0 [ 426.998278][T13395] ? __msan_poison_alloca+0xec/0x110 [ 427.003603][T13395] ? __sys_recvmmsg+0xb5/0x6f0 [ 427.008395][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.013141][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.019345][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.025732][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.030986][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.035886][T13395] do_SYSENTER_32+0x73/0x90 [ 427.040426][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.046788][T13395] RIP: 0023:0xf7f31549 [ 427.050881][T13395] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 427.070506][T13395] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 427.078953][T13395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 427.086969][T13395] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 427.094958][T13395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.102946][T13395] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 427.110947][T13395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.118939][T13395] Uninit was stored to memory at: [ 427.123963][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.129716][T13395] __msan_chain_origin+0x54/0xa0 [ 427.134690][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.139833][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.144798][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.149332][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.154027][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.160120][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.166316][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.171559][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.176661][T13395] do_SYSENTER_32+0x73/0x90 [ 427.181206][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.187596][T13395] [ 427.189950][T13395] Uninit was stored to memory at: [ 427.195000][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.200834][T13395] __msan_chain_origin+0x54/0xa0 [ 427.205797][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.210969][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.215924][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.220449][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.225150][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.231278][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.237506][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.242738][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.247642][T13395] do_SYSENTER_32+0x73/0x90 [ 427.252188][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.258533][T13395] [ 427.260850][T13395] Uninit was stored to memory at: [ 427.265881][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.271888][T13395] __msan_chain_origin+0x54/0xa0 [ 427.276848][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.282073][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.287044][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.291653][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.296349][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.302437][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.308712][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.313930][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.318794][T13395] do_SYSENTER_32+0x73/0x90 [ 427.323316][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.329670][T13395] [ 427.332004][T13395] Uninit was stored to memory at: [ 427.337055][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.342922][T13395] __msan_chain_origin+0x54/0xa0 [ 427.347893][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.353027][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.357988][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.362520][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.367226][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.373324][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.379513][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.384738][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.389638][T13395] do_SYSENTER_32+0x73/0x90 [ 427.394182][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.400538][T13395] [ 427.402866][T13395] Uninit was stored to memory at: [ 427.407881][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.413619][T13395] __msan_chain_origin+0x54/0xa0 [ 427.418588][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.423719][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.428720][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.433285][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.438005][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.444140][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.450342][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.455578][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.460458][T13395] do_SYSENTER_32+0x73/0x90 [ 427.464985][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.471334][T13395] [ 427.473662][T13395] Uninit was stored to memory at: [ 427.478677][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.484590][T13395] __msan_chain_origin+0x54/0xa0 [ 427.489548][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.494792][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.499837][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.504485][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.509180][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.516053][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.522234][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.527475][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.532362][T13395] do_SYSENTER_32+0x73/0x90 [ 427.536917][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.543293][T13395] [ 427.545625][T13395] Uninit was stored to memory at: [ 427.550654][T13395] kmsan_internal_chain_origin+0xad/0x130 [ 427.556416][T13395] __msan_chain_origin+0x54/0xa0 [ 427.561470][T13395] __get_compat_msghdr+0x6db/0x9d0 [ 427.566607][T13395] get_compat_msghdr+0x108/0x2b0 [ 427.571574][T13395] do_recvmmsg+0xdc1/0x22d0 [ 427.576110][T13395] __sys_recvmmsg+0x519/0x6f0 [ 427.580807][T13395] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.586891][T13395] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.593078][T13395] __do_fast_syscall_32+0x127/0x180 [ 427.598301][T13395] do_fast_syscall_32+0x77/0xd0 [ 427.603166][T13395] do_SYSENTER_32+0x73/0x90 [ 427.607698][T13395] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.614044][T13395] [ 427.616367][T13395] Local variable ----msg_sys@do_recvmmsg created at: [ 427.623064][T13395] do_recvmmsg+0xbf/0x22d0 [ 427.627515][T13395] do_recvmmsg+0xbf/0x22d0 15:33:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write(r1, &(0x7f0000000000)="92", 0x1) write$binfmt_misc(r2, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = epoll_create1(0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000140)=0xf6) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x0, 0x1011, r5, 0x74bee000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x30000000}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000040)={{}, 0x5}) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 15:33:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x730, 0x1d0, 0x3f8, 0x3f8, 0x2b8, 0x1d0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:null_device_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ef0d"}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@frag={{0x30}}]}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 15:33:03 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000093000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:33:03 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 428.458140][T13425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xc, 0x0, 0x0) [ 428.526168][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.569697][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.579557][T13438] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 15:33:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(0x0, 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000740)={'syz1', "176ab62a37259d0905350ca6"}, 0x10) 15:33:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 15:33:05 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(0x0, 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 430.014765][T13470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 430.105277][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='totmaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r2, r0, 0x0, 0x4000000000edb9) 15:33:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 15:33:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(0x0, 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x28}}, 0x0) [ 431.596704][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.674148][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:07 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:07 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddde) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:33:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 432.636472][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 15:33:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 15:33:09 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 433.586422][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000200000020080000000c000000000000010a000000000000fef600a71af9ac3ffd79000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005849000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ead800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000b4b918d3e29a2e2c4dc5c891000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f18a0afe99350000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90400000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea18fde51d55aaab000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fc95bb0000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000001100000000000000000000000000000000000000000000005080000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700000000000100"/2448]}, 0x9e0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 15:33:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(0x0, 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 15:33:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(0x0, 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 434.873385][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:10 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 15:33:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 15:33:11 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 15:33:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(0x0, 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:12 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 436.495608][T13596] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 15:33:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x20004800) sendto(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 15:33:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:13 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xd0, 0x0, 0xd0, 0x0, 0xd0, 0x2c0, 0x2b0, 0x2b0, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'syz_tun\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "20179705e5402a1b2e9ae53bfcc85dc329505d2fda1a43a570438f34d27f"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendto$inet6(r0, 0x0, 0x0, 0x484c0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) 15:33:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) set_tid_address(0x0) 15:33:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:14 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="df4eeec63ae0", @broadcast, @val, {@ipv6}}, 0x0) 15:33:14 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 438.862317][ T35] audit: type=1326 audit(1625585594.432:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13621 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe5549 code=0xffff0000 15:33:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0xd0, 0x1d0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x3, @random="1e0de4a44849"}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8505"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 15:33:14 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/mnt\x00') 15:33:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000000c0), 0x4800000, 0x0) 15:33:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000f40)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 15:33:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 440.089084][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:15 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 440.375385][T13656] input: syz0 as /devices/virtual/input/input15 15:33:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xd0, 0x0, 0xd0, 0xd0, 0xd0, 0x2c0, 0x330, 0x330, 0x330, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@ipv6={@mcast2, @dev, [], [], 'veth0_macvtap\x00', 'ipvlan0\x00'}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@remote, @ipv6=@loopback, @ipv4, @ipv6=@dev}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'ip6tnl0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xf8, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'erspan0\x00', 'bridge_slave_1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 15:33:16 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) 15:33:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f05", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@ptr, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 441.260952][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:16 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) [ 441.537028][T13667] not chained 50000 origins [ 441.541571][T13667] CPU: 0 PID: 13667 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 441.550349][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.560412][T13667] Call Trace: [ 441.563696][T13667] dump_stack+0x24c/0x2e0 [ 441.568050][T13667] kmsan_internal_chain_origin+0x6f/0x130 [ 441.573791][T13667] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.580317][T13667] ? kmsan_set_origin_checked+0xa2/0x100 [ 441.585959][T13667] ? kmsan_get_metadata+0x116/0x180 [ 441.591173][T13667] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 441.596992][T13667] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 441.603069][T13667] ? kmsan_get_metadata+0x116/0x180 [ 441.608276][T13667] ? kmsan_set_origin_checked+0xa2/0x100 [ 441.613922][T13667] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 441.620009][T13667] ? kmsan_unpoison_shadow+0x74/0xa0 [ 441.625333][T13667] ? _copy_from_user+0x1fd/0x300 [ 441.630297][T13667] __msan_chain_origin+0x54/0xa0 [ 441.635251][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 441.640561][T13667] get_compat_msghdr+0x108/0x2b0 [ 441.645614][T13667] do_recvmmsg+0xdc1/0x22d0 [ 441.650145][T13667] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 441.656243][T13667] ? kmsan_get_metadata+0x116/0x180 [ 441.661491][T13667] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 441.667331][T13667] ? kmsan_get_metadata+0x116/0x180 [ 441.672543][T13667] ? kmsan_internal_set_origin+0x82/0xc0 [ 441.678186][T13667] ? __msan_poison_alloca+0xec/0x110 [ 441.683483][T13667] ? __sys_recvmmsg+0xb5/0x6f0 [ 441.688266][T13667] __sys_recvmmsg+0x519/0x6f0 [ 441.692962][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.699062][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.705233][T13667] __do_fast_syscall_32+0x127/0x180 [ 441.710450][T13667] do_fast_syscall_32+0x77/0xd0 [ 441.715322][T13667] do_SYSENTER_32+0x73/0x90 [ 441.719857][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.726211][T13667] RIP: 0023:0xf7f31549 [ 441.730287][T13667] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.749908][T13667] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 441.758352][T13667] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 441.766339][T13667] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 441.774321][T13667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.782325][T13667] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 441.790309][T13667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.798298][T13667] Uninit was stored to memory at: [ 441.803326][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 441.809066][T13667] __msan_chain_origin+0x54/0xa0 [ 441.814024][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 441.819151][T13667] get_compat_msghdr+0x108/0x2b0 [ 441.824099][T13667] do_recvmmsg+0xdc1/0x22d0 [ 441.828621][T13667] __sys_recvmmsg+0x519/0x6f0 [ 441.833324][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.839406][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.845574][T13667] __do_fast_syscall_32+0x127/0x180 [ 441.850788][T13667] do_fast_syscall_32+0x77/0xd0 [ 441.855650][T13667] do_SYSENTER_32+0x73/0x90 [ 441.860206][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.866553][T13667] [ 441.868896][T13667] Uninit was stored to memory at: [ 441.873908][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 441.879641][T13667] __msan_chain_origin+0x54/0xa0 [ 441.884586][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 441.889728][T13667] get_compat_msghdr+0x108/0x2b0 [ 441.894677][T13667] do_recvmmsg+0xdc1/0x22d0 [ 441.899194][T13667] __sys_recvmmsg+0x519/0x6f0 [ 441.903882][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.909963][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.916330][T13667] __do_fast_syscall_32+0x127/0x180 [ 441.921549][T13667] do_fast_syscall_32+0x77/0xd0 [ 441.926417][T13667] do_SYSENTER_32+0x73/0x90 [ 441.930940][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.937309][T13667] [ 441.939642][T13667] Uninit was stored to memory at: [ 441.944655][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 441.950411][T13667] __msan_chain_origin+0x54/0xa0 [ 441.955382][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 441.960514][T13667] get_compat_msghdr+0x108/0x2b0 [ 441.965471][T13667] do_recvmmsg+0xdc1/0x22d0 [ 441.969994][T13667] __sys_recvmmsg+0x519/0x6f0 [ 441.974685][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.980784][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.986955][T13667] __do_fast_syscall_32+0x127/0x180 [ 441.992183][T13667] do_fast_syscall_32+0x77/0xd0 [ 441.997316][T13667] do_SYSENTER_32+0x73/0x90 [ 442.001831][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.008182][T13667] [ 442.010503][T13667] Uninit was stored to memory at: [ 442.015554][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 442.021291][T13667] __msan_chain_origin+0x54/0xa0 [ 442.026249][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 442.031459][T13667] get_compat_msghdr+0x108/0x2b0 [ 442.036516][T13667] do_recvmmsg+0xdc1/0x22d0 [ 442.041029][T13667] __sys_recvmmsg+0x519/0x6f0 [ 442.045714][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.051805][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.057980][T13667] __do_fast_syscall_32+0x127/0x180 [ 442.063455][T13667] do_fast_syscall_32+0x77/0xd0 [ 442.068330][T13667] do_SYSENTER_32+0x73/0x90 [ 442.072849][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.079193][T13667] [ 442.081513][T13667] Uninit was stored to memory at: [ 442.086522][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 442.092275][T13667] __msan_chain_origin+0x54/0xa0 [ 442.097739][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 442.102869][T13667] get_compat_msghdr+0x108/0x2b0 [ 442.107855][T13667] do_recvmmsg+0xdc1/0x22d0 [ 442.112368][T13667] __sys_recvmmsg+0x519/0x6f0 [ 442.117056][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.123144][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.129312][T13667] __do_fast_syscall_32+0x127/0x180 [ 442.134525][T13667] do_fast_syscall_32+0x77/0xd0 [ 442.139384][T13667] do_SYSENTER_32+0x73/0x90 [ 442.143895][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.150233][T13667] [ 442.152550][T13667] Uninit was stored to memory at: [ 442.157648][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 442.163728][T13667] __msan_chain_origin+0x54/0xa0 [ 442.168702][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 442.173822][T13667] get_compat_msghdr+0x108/0x2b0 [ 442.178786][T13667] do_recvmmsg+0xdc1/0x22d0 [ 442.183297][T13667] __sys_recvmmsg+0x519/0x6f0 [ 442.187981][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.194058][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.200247][T13667] __do_fast_syscall_32+0x127/0x180 [ 442.205459][T13667] do_fast_syscall_32+0x77/0xd0 [ 442.210345][T13667] do_SYSENTER_32+0x73/0x90 [ 442.214857][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.221303][T13667] [ 442.223618][T13667] Uninit was stored to memory at: [ 442.228633][T13667] kmsan_internal_chain_origin+0xad/0x130 [ 442.234363][T13667] __msan_chain_origin+0x54/0xa0 [ 442.239314][T13667] __get_compat_msghdr+0x6db/0x9d0 [ 442.244433][T13667] get_compat_msghdr+0x108/0x2b0 [ 442.249384][T13667] do_recvmmsg+0xdc1/0x22d0 [ 442.253898][T13667] __sys_recvmmsg+0x519/0x6f0 [ 442.258584][T13667] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.264664][T13667] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.271004][T13667] __do_fast_syscall_32+0x127/0x180 [ 442.276218][T13667] do_fast_syscall_32+0x77/0xd0 [ 442.281079][T13667] do_SYSENTER_32+0x73/0x90 [ 442.285607][T13667] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.291950][T13667] [ 442.294272][T13667] Local variable ----msg_sys@do_recvmmsg created at: [ 442.300957][T13667] do_recvmmsg+0xbf/0x22d0 [ 442.305411][T13667] do_recvmmsg+0xbf/0x22d0 15:33:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:19 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 444.453242][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:20 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) 15:33:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:20 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:20 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) 15:33:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 445.515470][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 446.446395][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:33:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 15:33:22 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 15:33:22 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 447.451301][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8080fffffffe) 15:33:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x1, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x800}]}, 0x28}}, 0x8080) 15:33:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:23 executing program 1: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2) pipe(&(0x7f00000001c0)) open(&(0x7f00000004c0)='./file0/file0/file0\x00', 0x0, 0x0) [ 448.179740][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.419979][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.426565][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 15:33:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) 15:33:24 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8080fffffffe) 15:33:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:24 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) [ 449.109217][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) 15:33:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8080fffffffe) 15:33:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) [ 450.142207][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 450.221061][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:25 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 450.412389][T13827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 450.492881][ T8867] Bluetooth: hci5: command 0x0406 tx timeout 15:33:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) [ 451.196939][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 15:33:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) 15:33:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:27 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 452.217028][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 15:33:28 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 15:33:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 453.397760][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:29 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shutdown(r0, 0x0) 15:33:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x0) 15:33:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)}], 0x1, &(0x7f0000001840)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:29 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001400)={0xc0000002}) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18}, 0x18) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 454.233901][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x0) [ 454.409163][T13915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x64, 0xda1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @dev}]}, 0x2c}}, 0x0) [ 455.200434][T13931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:31 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=', @ANYRESHEX=r1]) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r2, 0x0, 0x0) 15:33:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 455.609931][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.734637][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.778600][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.790552][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 15:33:31 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) perf_event_open(&(0x7f0000001740)={0x0, 0x80, 0x6, 0x7, 0x20, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x9, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x5, 0xff, 0x4, 0x0, 0x4, 0x40608, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) [ 456.579268][T13958] __nla_validate_parse: 1 callbacks suppressed [ 456.579333][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 456.814516][T13971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:33:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:32 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 457.361460][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) 15:33:33 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x0, 0x1) [ 457.877765][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) 15:33:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:34 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/119) [ 458.868762][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.909051][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 459.400333][T14027] not chained 60000 origins [ 459.404895][T14027] CPU: 0 PID: 14027 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 459.413678][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.423776][T14027] Call Trace: [ 459.427078][T14027] dump_stack+0x24c/0x2e0 [ 459.431449][T14027] kmsan_internal_chain_origin+0x6f/0x130 [ 459.437206][T14027] ? kmsan_get_metadata+0x116/0x180 [ 459.442465][T14027] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.448331][T14027] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.454428][T14027] ? kmsan_get_metadata+0x116/0x180 [ 459.460081][T14027] ? kmsan_set_origin_checked+0xa2/0x100 [ 459.465792][T14027] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 459.471942][T14027] ? kmsan_unpoison_shadow+0x74/0xa0 [ 459.477256][T14027] ? _copy_from_user+0x1fd/0x300 [ 459.482249][T14027] __msan_chain_origin+0x54/0xa0 [ 459.487214][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.492351][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.497312][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.501856][T14027] ? psi_group_change+0x10e4/0x1440 [ 459.507073][T14027] ? kmsan_get_metadata+0x116/0x180 [ 459.512293][T14027] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.518117][T14027] ? kmsan_get_metadata+0x116/0x180 [ 459.523376][T14027] ? kmsan_internal_set_origin+0x82/0xc0 [ 459.529029][T14027] ? __msan_poison_alloca+0xec/0x110 [ 459.534338][T14027] ? __sys_recvmmsg+0xb5/0x6f0 [ 459.539128][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.543828][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.549924][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.556213][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.561431][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.566298][T14027] do_SYSENTER_32+0x73/0x90 [ 459.570825][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.577180][T14027] RIP: 0023:0xf7f31549 [ 459.581267][T14027] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.600906][T14027] RSP: 002b:00000000f54e95fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 459.609355][T14027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 459.617365][T14027] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 459.625355][T14027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.633346][T14027] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.641421][T14027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.649421][T14027] Uninit was stored to memory at: [ 459.654474][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 459.660217][T14027] __msan_chain_origin+0x54/0xa0 [ 459.665167][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.670289][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.675237][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.679756][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.684464][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.690548][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.696714][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.701931][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.706803][T14027] do_SYSENTER_32+0x73/0x90 [ 459.711321][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.717665][T14027] [ 459.719987][T14027] Uninit was stored to memory at: [ 459.724998][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 459.730736][T14027] __msan_chain_origin+0x54/0xa0 [ 459.735704][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.740828][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.745773][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.750305][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.754991][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.761071][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.767244][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.772468][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.777332][T14027] do_SYSENTER_32+0x73/0x90 [ 459.781846][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.788185][T14027] [ 459.790504][T14027] Uninit was stored to memory at: [ 459.795521][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 459.801340][T14027] __msan_chain_origin+0x54/0xa0 [ 459.806283][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.811409][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.816361][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.820875][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.825561][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.831656][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.837838][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.843094][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.847979][T14027] do_SYSENTER_32+0x73/0x90 [ 459.852495][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.858852][T14027] [ 459.861170][T14027] Uninit was stored to memory at: [ 459.866183][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 459.871920][T14027] __msan_chain_origin+0x54/0xa0 [ 459.876869][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.881998][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.886940][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.891458][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.896146][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.902230][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.908401][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.913642][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.918562][T14027] do_SYSENTER_32+0x73/0x90 [ 459.923089][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.929438][T14027] [ 459.931760][T14027] Uninit was stored to memory at: [ 459.936774][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 459.942513][T14027] __msan_chain_origin+0x54/0xa0 [ 459.947464][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 459.952591][T14027] get_compat_msghdr+0x108/0x2b0 [ 459.957535][T14027] do_recvmmsg+0xdc1/0x22d0 [ 459.962057][T14027] __sys_recvmmsg+0x519/0x6f0 [ 459.966767][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.972894][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.979069][T14027] __do_fast_syscall_32+0x127/0x180 [ 459.984286][T14027] do_fast_syscall_32+0x77/0xd0 [ 459.989157][T14027] do_SYSENTER_32+0x73/0x90 [ 459.993678][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.000025][T14027] [ 460.002349][T14027] Uninit was stored to memory at: [ 460.007364][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 460.013105][T14027] __msan_chain_origin+0x54/0xa0 [ 460.018060][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 460.023205][T14027] get_compat_msghdr+0x108/0x2b0 [ 460.028245][T14027] do_recvmmsg+0xdc1/0x22d0 [ 460.032772][T14027] __sys_recvmmsg+0x519/0x6f0 [ 460.037471][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.043566][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.049736][T14027] __do_fast_syscall_32+0x127/0x180 [ 460.054945][T14027] do_fast_syscall_32+0x77/0xd0 [ 460.059815][T14027] do_SYSENTER_32+0x73/0x90 [ 460.064413][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.070752][T14027] [ 460.073070][T14027] Uninit was stored to memory at: [ 460.078081][T14027] kmsan_internal_chain_origin+0xad/0x130 [ 460.083811][T14027] __msan_chain_origin+0x54/0xa0 [ 460.088752][T14027] __get_compat_msghdr+0x6db/0x9d0 [ 460.093884][T14027] get_compat_msghdr+0x108/0x2b0 [ 460.098850][T14027] do_recvmmsg+0xdc1/0x22d0 [ 460.103373][T14027] __sys_recvmmsg+0x519/0x6f0 [ 460.108064][T14027] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.114145][T14027] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.120319][T14027] __do_fast_syscall_32+0x127/0x180 [ 460.125537][T14027] do_fast_syscall_32+0x77/0xd0 [ 460.130403][T14027] do_SYSENTER_32+0x73/0x90 [ 460.134913][T14027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.141252][T14027] [ 460.143567][T14027] Local variable ----msg_sys@do_recvmmsg created at: [ 460.150273][T14027] do_recvmmsg+0xbf/0x22d0 [ 460.154788][T14027] do_recvmmsg+0xbf/0x22d0 15:33:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) 15:33:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func, @const, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x46, 0x0, 0xffffffff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 15:33:36 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 461.500366][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.573057][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) 15:33:37 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 15:33:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:37 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:33:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b5579c65d37237647e947e4df73950000bb3987b178b1ead5a678216d5d3568dab9af674d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145a8300ccb63617aa1dd7d7833bb045174ad6edb6b23de0a183dd660efa2d6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731e921fb541b7a2cc83eb76fe0952aea033004c34", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 462.576011][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = dup2(r1, r1) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x4, @local}, 0x10) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b0dabb74acb7"}, 0x10) 15:33:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:38 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 463.127000][T14078] device lo entered promiscuous mode [ 463.169321][T14076] device lo left promiscuous mode [ 463.193408][T14079] device lo entered promiscuous mode 15:33:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 463.219217][T14076] device lo left promiscuous mode 15:33:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 15:33:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents(r0, &(0x7f0000000300)=""/150, 0x96) getdents64(r0, &(0x7f0000000080)=""/121, 0x379e01e2053d1f3d) 15:33:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:39 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 463.821291][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x8}]}}]}, 0x44}}, 0x0) 15:33:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 15:33:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 464.673633][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.739817][T14116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:40 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 464.895524][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.008714][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x4, [@func_proto, @func, @typedef, @const, @ptr, @ptr, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], "a9"}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xd4}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:33:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:40 executing program 3: set_mempolicy(0x4, &(0x7f0000000000)=0x1, 0x7ff) 15:33:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 465.738910][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:41 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 465.929984][T14151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:41 executing program 3: timer_create(0xb, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 15:33:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:42 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) open(0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 466.717530][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.881115][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:42 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 467.587385][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:44 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f00000026c0)='fd/4\x00') 15:33:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:44 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) close(r1) [ 468.742081][T14212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 468.833851][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.886950][T14215] not chained 70000 origins [ 468.891496][T14215] CPU: 0 PID: 14215 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 468.900287][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.910365][T14215] Call Trace: [ 468.913696][T14215] dump_stack+0x24c/0x2e0 [ 468.918058][T14215] kmsan_internal_chain_origin+0x6f/0x130 [ 468.923822][T14215] ? kmsan_get_metadata+0x116/0x180 [ 468.929047][T14215] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 468.934883][T14215] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 468.940985][T14215] ? kmsan_get_metadata+0x116/0x180 [ 468.946220][T14215] ? kmsan_set_origin_checked+0xa2/0x100 [ 468.951881][T14215] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 468.958158][T14215] ? kmsan_unpoison_shadow+0x74/0xa0 [ 468.963508][T14215] ? _copy_from_user+0x1fd/0x300 [ 468.968483][T14215] __msan_chain_origin+0x54/0xa0 [ 468.973444][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 468.978628][T14215] get_compat_msghdr+0x108/0x2b0 [ 468.983599][T14215] do_recvmmsg+0xdc1/0x22d0 [ 468.988137][T14215] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 468.993982][T14215] ? kmsan_get_metadata+0x116/0x180 [ 468.999214][T14215] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 469.005075][T14215] ? kmsan_get_metadata+0x116/0x180 [ 469.010355][T14215] ? kmsan_internal_set_origin+0x82/0xc0 [ 469.016107][T14215] ? __msan_poison_alloca+0xec/0x110 [ 469.021433][T14215] ? __sys_recvmmsg+0xb5/0x6f0 [ 469.026255][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.030968][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.037165][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.043352][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.048590][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.053473][T14215] do_SYSENTER_32+0x73/0x90 [ 469.058008][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.064363][T14215] RIP: 0023:0xf7f31549 [ 469.068556][T14215] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.088287][T14215] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 469.096825][T14215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 469.104815][T14215] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 469.112802][T14215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.120880][T14215] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 469.128988][T14215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.136986][T14215] Uninit was stored to memory at: [ 469.142012][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.147757][T14215] __msan_chain_origin+0x54/0xa0 [ 469.152720][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.157860][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.162826][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.167348][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.172046][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.178338][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.184552][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.189791][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.194665][T14215] do_SYSENTER_32+0x73/0x90 [ 469.199195][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.205547][T14215] [ 469.207877][T14215] Uninit was stored to memory at: [ 469.212899][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.218674][T14215] __msan_chain_origin+0x54/0xa0 [ 469.223814][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.228961][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.233956][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.238497][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.243211][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.249315][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.255534][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.260783][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.265658][T14215] do_SYSENTER_32+0x73/0x90 [ 469.270192][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.276543][T14215] [ 469.278871][T14215] Uninit was stored to memory at: [ 469.283891][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.289720][T14215] __msan_chain_origin+0x54/0xa0 [ 469.294705][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.299836][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.304800][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.309323][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.314032][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.320128][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.326398][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.331627][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.336521][T14215] do_SYSENTER_32+0x73/0x90 [ 469.341062][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.347417][T14215] [ 469.349749][T14215] Uninit was stored to memory at: [ 469.354939][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.360743][T14215] __msan_chain_origin+0x54/0xa0 [ 469.365830][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.371242][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.376231][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.380844][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.385549][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.391751][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.397961][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.403193][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.408064][T14215] do_SYSENTER_32+0x73/0x90 [ 469.412590][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.418939][T14215] [ 469.421263][T14215] Uninit was stored to memory at: [ 469.426282][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.432134][T14215] __msan_chain_origin+0x54/0xa0 [ 469.437096][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.442229][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.447280][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.451801][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.456493][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.462589][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.468767][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.473989][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.478854][T14215] do_SYSENTER_32+0x73/0x90 [ 469.483381][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.489764][T14215] [ 469.492092][T14215] Uninit was stored to memory at: [ 469.497121][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.502858][T14215] __msan_chain_origin+0x54/0xa0 [ 469.507806][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.512936][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.517888][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.522407][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.527101][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.533189][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.539369][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.544593][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.549463][T14215] do_SYSENTER_32+0x73/0x90 [ 469.554002][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.560445][T14215] [ 469.562779][T14215] Uninit was stored to memory at: [ 469.567798][T14215] kmsan_internal_chain_origin+0xad/0x130 [ 469.573554][T14215] __msan_chain_origin+0x54/0xa0 [ 469.578516][T14215] __get_compat_msghdr+0x6db/0x9d0 [ 469.583654][T14215] get_compat_msghdr+0x108/0x2b0 [ 469.588608][T14215] do_recvmmsg+0xdc1/0x22d0 [ 469.593169][T14215] __sys_recvmmsg+0x519/0x6f0 [ 469.597947][T14215] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.604050][T14215] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.610233][T14215] __do_fast_syscall_32+0x127/0x180 [ 469.615467][T14215] do_fast_syscall_32+0x77/0xd0 [ 469.620336][T14215] do_SYSENTER_32+0x73/0x90 [ 469.624864][T14215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.631211][T14215] [ 469.633529][T14215] Local variable ----msg_sys@do_recvmmsg created at: 15:33:45 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) [ 469.640213][T14215] do_recvmmsg+0xbf/0x22d0 [ 469.644647][T14215] do_recvmmsg+0xbf/0x22d0 15:33:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:45 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x400) 15:33:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 470.390883][T14243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.435767][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x2b) 15:33:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff6e4b05000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:33:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x310, 0x218, 0x218, 0x218, 0x310, 0x4, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'macsec0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb0, 0x0, 0xb0, 0xb0, 0xb0, 0x170, 0x1a8, 0x1a8, 0x170, 0x1a8, 0x3, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'erspan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "506a598264bdd6fcb66b2f2815b6eb09b93eed4084409a31d330eb5a4123"}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r4, r3, 0x0, 0x4000000000edbc) [ 470.925355][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.080328][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 471.266931][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15:33:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 471.796857][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 472.158364][T14292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, &(0x7f0000000040)=0x1000, 0x1) [ 472.707640][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) [ 473.293846][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0x4}, 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f00000002c0)="f478168ff0e8204a", &(0x7f00000003c0)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000200)="65e0e29b420f5f", &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000200), 0x0}, 0x20) 15:33:49 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x8, 0x2009, 0x20000000000001, 0x0, 0x0}, 0xd) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), 0xffffffffffffffff}, 0x20) [ 473.941959][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 474.319040][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:50 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x8, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:33:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000080)) 15:33:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:50 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 475.192837][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @dev}]}, 0x2c}}, 0x0) 15:33:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 15:33:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 475.913839][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:33:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000480)={0x2}) [ 476.191641][T14382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 15:33:52 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0xc0}]}, 0x38}}, 0x0) 15:33:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000130009006900cf47a7912e30d1eb8000200000004600010707000014190001801000000800005068230000000000ef38b7461e59d7", 0x39}], 0x1) 15:33:52 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 477.577087][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:53 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:53 executing program 1: clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f00000002c0)={&(0x7f0000001600)=""/4096, 0x1000}) [ 478.155930][T14411] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.450804][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:33:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731e", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 15:33:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000001680)) 15:33:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:54 executing program 1: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) ioprio_set$pid(0x3, 0x0, 0x0) [ 479.237391][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:54 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x310, 0x230, 0x230, 0x230, 0x310, 0x4, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'macsec0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b6ee77263b9403e7cfd7cddedb7007e38b2f6ec8db52f4fd7e9184bc87c2"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r2, r1, 0x0, 0x4000000000edbc) [ 479.489242][T14452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 479.628969][T14460] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 15:33:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:55 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x1, &(0x7f0000000380)=@raw=[@ldst], &(0x7f0000000400)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x2b) 15:33:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffff9}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) writev(r0, 0x0, 0x0) [ 480.164539][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.358762][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 480.664646][ T35] audit: type=1326 audit(1625585636.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14490 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6b549 code=0xffff0000 15:33:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705002000000000000000000008", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 15:33:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:56 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:56 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) rt_sigprocmask(0x0, &(0x7f0000000340), &(0x7f00000014c0), 0x8) [ 481.050796][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.117522][T14501] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.211790][T14503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.315520][T14502] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.354895][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:33:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:57 executing program 1: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006880)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002000)="d6c67dfb464581b4c19dda54f7880d4f19030d3cee21e9c35f9da0b72a3345d610897be0f338d34da386f26162c2e842303bbc17ed04d188406c111cf07dd9b36015113ac1a11d7d5b981a4f067e196666", 0x51}], 0x1}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002040)={'syzkaller1\x00'}) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000068c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 15:33:57 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x50004fe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r1, &(0x7f00000000c0)=ANY=[], 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000041, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) getpid() renameat2(r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) sendfile(r1, r1, &(0x7f0000000200), 0xaa4) 15:33:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 15:33:57 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x25, 0x0) 15:33:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:58 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:33:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 15:33:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:33:59 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:33:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, 0x6, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x34}}, 0x0) [ 483.939880][T14569] not chained 80000 origins [ 483.944425][T14569] CPU: 1 PID: 14569 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 483.953203][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.963272][T14569] Call Trace: [ 483.966564][T14569] dump_stack+0x24c/0x2e0 [ 483.970929][T14569] kmsan_internal_chain_origin+0x6f/0x130 [ 483.976778][T14569] ? kmsan_get_metadata+0x116/0x180 [ 483.982004][T14569] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 483.987845][T14569] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 483.993953][T14569] ? kmsan_get_metadata+0x116/0x180 [ 483.999193][T14569] ? kmsan_set_origin_checked+0xa2/0x100 [ 484.004852][T14569] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 484.010944][T14569] ? kmsan_unpoison_shadow+0x74/0xa0 [ 484.016252][T14569] ? _copy_from_user+0x1fd/0x300 [ 484.021219][T14569] __msan_chain_origin+0x54/0xa0 [ 484.026221][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.031382][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.036386][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.040934][T14569] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 484.046800][T14569] ? kmsan_get_metadata+0x116/0x180 [ 484.052039][T14569] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 484.057888][T14569] ? kmsan_get_metadata+0x116/0x180 [ 484.063127][T14569] ? kmsan_internal_set_origin+0x82/0xc0 [ 484.068790][T14569] ? __msan_poison_alloca+0xec/0x110 [ 484.074105][T14569] ? __sys_recvmmsg+0xb5/0x6f0 [ 484.078896][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.083595][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.089691][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.095877][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.101135][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.106017][T14569] do_SYSENTER_32+0x73/0x90 [ 484.110546][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.116987][T14569] RIP: 0023:0xf7f31549 [ 484.121158][T14569] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.140814][T14569] RSP: 002b:00000000f54c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 484.149284][T14569] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 484.157285][T14569] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 484.165461][T14569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.173458][T14569] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.181443][T14569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.189435][T14569] Uninit was stored to memory at: [ 484.194456][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.200193][T14569] __msan_chain_origin+0x54/0xa0 [ 484.205142][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.210267][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.215237][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.219775][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.224468][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.230559][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.236755][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.241986][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.246859][T14569] do_SYSENTER_32+0x73/0x90 [ 484.251388][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.257742][T14569] [ 484.260064][T14569] Uninit was stored to memory at: [ 484.265075][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.270814][T14569] __msan_chain_origin+0x54/0xa0 [ 484.275767][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.280901][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.285866][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.290388][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.295077][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.301180][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.307351][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.312569][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.317438][T14569] do_SYSENTER_32+0x73/0x90 [ 484.321957][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.328319][T14569] [ 484.330655][T14569] Uninit was stored to memory at: [ 484.335680][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.341437][T14569] __msan_chain_origin+0x54/0xa0 [ 484.346393][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.351526][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.356477][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.361003][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.365706][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.371808][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.377987][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.383203][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.388179][T14569] do_SYSENTER_32+0x73/0x90 [ 484.392701][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.399042][T14569] [ 484.401366][T14569] Uninit was stored to memory at: [ 484.406386][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.412131][T14569] __msan_chain_origin+0x54/0xa0 [ 484.417085][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.422386][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.427360][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.431945][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.436658][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.442756][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.448925][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.454144][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.459016][T14569] do_SYSENTER_32+0x73/0x90 [ 484.463720][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.470062][T14569] [ 484.472382][T14569] Uninit was stored to memory at: [ 484.477399][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.483138][T14569] __msan_chain_origin+0x54/0xa0 [ 484.488092][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.493232][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.498200][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.502713][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.507414][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.513585][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.519759][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.526811][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.531698][T14569] do_SYSENTER_32+0x73/0x90 [ 484.536226][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.542572][T14569] [ 484.544890][T14569] Uninit was stored to memory at: [ 484.549900][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.555636][T14569] __msan_chain_origin+0x54/0xa0 [ 484.560600][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.565745][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.570717][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.575249][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.580368][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.586444][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.592610][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.597827][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.602696][T14569] do_SYSENTER_32+0x73/0x90 [ 484.607219][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.613589][T14569] [ 484.615937][T14569] Uninit was stored to memory at: [ 484.621021][T14569] kmsan_internal_chain_origin+0xad/0x130 [ 484.626781][T14569] __msan_chain_origin+0x54/0xa0 [ 484.631751][T14569] __get_compat_msghdr+0x6db/0x9d0 [ 484.636899][T14569] get_compat_msghdr+0x108/0x2b0 [ 484.641849][T14569] do_recvmmsg+0xdc1/0x22d0 [ 484.646361][T14569] __sys_recvmmsg+0x519/0x6f0 [ 484.651048][T14569] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.657126][T14569] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.663298][T14569] __do_fast_syscall_32+0x127/0x180 [ 484.668547][T14569] do_fast_syscall_32+0x77/0xd0 [ 484.673418][T14569] do_SYSENTER_32+0x73/0x90 [ 484.677938][T14569] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.684283][T14569] [ 484.686711][T14569] Local variable ----msg_sys@do_recvmmsg created at: [ 484.693381][T14569] do_recvmmsg+0xbf/0x22d0 [ 484.697822][T14569] do_recvmmsg+0xbf/0x22d0 [ 485.045239][T14574] __nla_validate_parse: 4 callbacks suppressed [ 485.045301][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:00 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 485.478581][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:01 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fd4d846be6e309899926d51cb7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$tun(r0, &(0x7f0000000a00)={@void, @val, @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}, 0x62) 15:34:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:01 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28579be0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x7, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\xd2', 0x42, 0x38, 0x0) r2 = getpgrp(r0) sched_rr_get_interval(r2, &(0x7f0000001140)) r3 = dup2(r1, r1) mq_notify(r3, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mq_timedsend(r3, &(0x7f0000000080)="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", 0x1000, 0x1e, &(0x7f0000000000)={0x0, 0x989680}) [ 486.465273][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 486.715407][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:02 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="26de"], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000015, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 15:34:02 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 15:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x5411, 0xc04a01) 15:34:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 487.490882][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.531345][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:34:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0xc4, 0x4) recvmmsg(r0, &(0x7f0000009940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010041, 0x0) [ 487.850899][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:03 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 15:34:03 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 488.294471][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:34:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x1, 0x4) 15:34:04 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 15:34:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) [ 489.063642][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:04 executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f8ff01", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @local}}}}}}, 0x0) 15:34:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 489.263483][ T35] audit: type=1326 audit(1625585644.832:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0549 code=0xffff0000 15:34:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_wait(r2, &(0x7f0000000040), 0x51, 0xfffffef6) shutdown(r1, 0x1) r3 = dup3(r1, r2, 0x0) shutdown(r3, 0x0) 15:34:05 executing program 5: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 15:34:05 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000035c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x228, 0x9403, 0x0, 0x0, 0x2c0, 0x318, 0x3d8, 0x3d8, 0x318, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xff, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) [ 490.119236][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r3, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:34:06 executing program 5: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 15:34:06 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000500)='./file0\x00', 0x0, 0x203e94, 0x0) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file1\x00', &(0x7f0000000440)='adfs\x00', 0x44000, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00') chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file1\x00', 0x100, 0xe0) fremovexattr(r4, &(0x7f00000004c0)=@known='system.posix_acl_access\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 15:34:06 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) write$tcp_mem(r0, &(0x7f0000001200)={0x0, 0x20, 0xffffffffffffffff, 0x20, 0xffffffffffffffff, 0xa}, 0x48) [ 491.398276][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:07 executing program 5: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) [ 492.185127][ T35] audit: type=1800 audit(1625585647.762:9): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14835 res=0 errno=0 15:34:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 492.390004][ T35] audit: type=1800 audit(1625585647.962:10): pid=14748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14818 res=0 errno=0 [ 492.636257][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:08 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) 15:34:08 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000400)) 15:34:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 493.262788][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x5b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 15:34:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:09 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000400)) [ 493.960896][T14786] bridge0: port 3(dummy0) entered blocking state [ 493.967732][T14786] bridge0: port 3(dummy0) entered disabled state [ 493.976777][T14786] device dummy0 entered promiscuous mode [ 493.984987][T14786] bridge0: port 3(dummy0) entered blocking state [ 493.991610][T14786] bridge0: port 3(dummy0) entered forwarding state 15:34:09 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 494.097060][T14790] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x5b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 15:34:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 494.787304][T14805] not chained 90000 origins [ 494.791936][T14805] CPU: 1 PID: 14805 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 494.800721][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.810802][T14805] Call Trace: [ 494.814100][T14805] dump_stack+0x24c/0x2e0 [ 494.818466][T14805] kmsan_internal_chain_origin+0x6f/0x130 [ 494.824220][T14805] ? kmsan_get_metadata+0x116/0x180 [ 494.829447][T14805] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 494.835470][T14805] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 494.841560][T14805] ? kmsan_get_metadata+0x116/0x180 [ 494.846780][T14805] ? kmsan_set_origin_checked+0xa2/0x100 [ 494.852430][T14805] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 494.858515][T14805] ? kmsan_unpoison_shadow+0x74/0xa0 [ 494.863822][T14805] ? _copy_from_user+0x1fd/0x300 [ 494.868802][T14805] __msan_chain_origin+0x54/0xa0 [ 494.873752][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 494.878886][T14805] get_compat_msghdr+0x108/0x2b0 [ 494.883844][T14805] do_recvmmsg+0xdc1/0x22d0 [ 494.888372][T14805] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 494.894204][T14805] ? kmsan_get_metadata+0x116/0x180 [ 494.899420][T14805] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 494.905244][T14805] ? kmsan_get_metadata+0x116/0x180 [ 494.910466][T14805] ? kmsan_internal_set_origin+0x82/0xc0 [ 494.916123][T14805] ? __msan_poison_alloca+0xec/0x110 [ 494.921426][T14805] ? __sys_recvmmsg+0xb5/0x6f0 [ 494.926211][T14805] __sys_recvmmsg+0x519/0x6f0 [ 494.930911][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.936998][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.943167][T14805] __do_fast_syscall_32+0x127/0x180 [ 494.948385][T14805] do_fast_syscall_32+0x77/0xd0 [ 494.953254][T14805] do_SYSENTER_32+0x73/0x90 [ 494.957786][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.964151][T14805] RIP: 0023:0xf7f31549 [ 494.968329][T14805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 494.987953][T14805] RSP: 002b:00000000f54c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 494.996389][T14805] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 495.004452][T14805] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 495.012434][T14805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.020411][T14805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 495.028476][T14805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.036462][T14805] Uninit was stored to memory at: [ 495.041483][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.047227][T14805] __msan_chain_origin+0x54/0xa0 [ 495.052187][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.057414][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.062374][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.067242][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.071937][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.078033][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.084225][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.089448][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.094321][T14805] do_SYSENTER_32+0x73/0x90 [ 495.098840][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.105187][T14805] [ 495.107550][T14805] Uninit was stored to memory at: [ 495.112563][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.118306][T14805] __msan_chain_origin+0x54/0xa0 [ 495.123280][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.128410][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.133364][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.137886][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.142593][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.148704][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.154885][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.160108][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.164975][T14805] do_SYSENTER_32+0x73/0x90 [ 495.169490][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.175844][T14805] [ 495.178179][T14805] Uninit was stored to memory at: [ 495.183190][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.188931][T14805] __msan_chain_origin+0x54/0xa0 [ 495.193902][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.199038][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.203990][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.208509][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.213201][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.219284][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.225459][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.230769][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.235637][T14805] do_SYSENTER_32+0x73/0x90 [ 495.240161][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.246503][T14805] [ 495.248825][T14805] Uninit was stored to memory at: [ 495.253841][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.259577][T14805] __msan_chain_origin+0x54/0xa0 [ 495.264537][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.269673][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.274631][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.279261][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.283966][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.290077][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.296366][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.301597][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.306580][T14805] do_SYSENTER_32+0x73/0x90 [ 495.311124][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.317484][T14805] [ 495.319811][T14805] Uninit was stored to memory at: [ 495.324828][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.330569][T14805] __msan_chain_origin+0x54/0xa0 [ 495.335527][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.340669][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.345667][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.350192][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.354905][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.360991][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.367166][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.372411][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.377350][T14805] do_SYSENTER_32+0x73/0x90 [ 495.381867][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.388215][T14805] [ 495.390534][T14805] Uninit was stored to memory at: [ 495.395562][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.401296][T14805] __msan_chain_origin+0x54/0xa0 [ 495.406242][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.411368][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.416320][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.420836][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.425527][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.431612][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.437796][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.443007][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.447869][T14805] do_SYSENTER_32+0x73/0x90 [ 495.452392][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.458737][T14805] [ 495.461062][T14805] Uninit was stored to memory at: [ 495.466081][T14805] kmsan_internal_chain_origin+0xad/0x130 [ 495.471828][T14805] __msan_chain_origin+0x54/0xa0 [ 495.476786][T14805] __get_compat_msghdr+0x6db/0x9d0 [ 495.481918][T14805] get_compat_msghdr+0x108/0x2b0 [ 495.486878][T14805] do_recvmmsg+0xdc1/0x22d0 [ 495.491400][T14805] __sys_recvmmsg+0x519/0x6f0 [ 495.496124][T14805] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.502211][T14805] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.508384][T14805] __do_fast_syscall_32+0x127/0x180 [ 495.513598][T14805] do_fast_syscall_32+0x77/0xd0 [ 495.518499][T14805] do_SYSENTER_32+0x73/0x90 [ 495.523124][T14805] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.529496][T14805] [ 495.531824][T14805] Local variable ----msg_sys@do_recvmmsg created at: [ 495.538527][T14805] do_recvmmsg+0xbf/0x22d0 [ 495.542981][T14805] do_recvmmsg+0xbf/0x22d0 15:34:11 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000400)) 15:34:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x5b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 15:34:11 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 496.419205][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x5b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 15:34:12 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000400)) 15:34:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 497.571309][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:13 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:13 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) clone(0x20087104ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') exit_group(0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/32, 0x20}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newrule={0x44, 0x20, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc}, @FRA_SRC={0x8, 0x2, @local}, @FRA_FLOW={0x8, 0xb, 0x205b}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) 15:34:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "362703a98001e7551313053109cfa47400"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 15:34:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000012c0)="5500000019007faf37c0f2b2a4a280930ad60010000243dc900723693900090008000000010000000800050000000000080000000004d5440a009b84136ef75afb83de4409000000c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 498.508179][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:14 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) dup2(r0, r1) 15:34:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 499.462258][T14877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:15 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x9e0, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x948, 0x1a8, 0x1a8, 0x948, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {}, {0x0, 0x1}], [], 0x6}], 0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa40) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r3, r2, 0x0, 0x4000000000edbc) 15:34:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:34:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 501.027724][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:34:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 15:34:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:17 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 501.656331][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:34:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000000070) 15:34:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 502.490062][ T35] audit: type=1800 audit(1625585658.062:11): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14845 res=0 errno=0 [ 502.613672][ T35] audit: type=1800 audit(1625585658.172:12): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14847 res=0 errno=0 15:34:18 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:18 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100000c9, 0x7ff) [ 502.767521][T14941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, 0xffffffffffffffff) 15:34:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 15:34:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) sendto(r0, &(0x7f0000000040)="96", 0xfffffffffffffd51, 0x4055, 0x0, 0x0) close(r0) [ 504.056886][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:19 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:20 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, 0x0]) 15:34:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) sendto(r0, &(0x7f0000000040)="96", 0xfffffffffffffd51, 0x4055, 0x0, 0x0) close(r0) [ 505.129465][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:21 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x10090, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) [ 505.950988][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 505.989635][T15006] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) sendto(r0, &(0x7f0000000040)="96", 0xfffffffffffffd51, 0x4055, 0x0, 0x0) close(r0) 15:34:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:22 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000001e0007021dfffd94086105000a0003e8fe02080100010800080009000400ff7e", 0x24}], 0x1}, 0x0) [ 507.121835][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:22 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 507.345327][T15035] not chained 100000 origins [ 507.350070][T15035] CPU: 1 PID: 15035 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 507.358944][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.369019][T15035] Call Trace: [ 507.372318][T15035] dump_stack+0x24c/0x2e0 [ 507.376679][T15035] kmsan_internal_chain_origin+0x6f/0x130 [ 507.382450][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.387783][T15035] ? kmsan_set_origin_checked+0xa2/0x100 [ 507.393522][T15035] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 507.399612][T15035] ? __msan_instrument_asm_store+0x104/0x130 [ 507.405613][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.410832][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.416052][T15035] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 507.421883][T15035] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 507.428070][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.433311][T15035] ? kmsan_set_origin_checked+0xa2/0x100 [ 507.438976][T15035] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 507.445084][T15035] ? kmsan_unpoison_shadow+0x74/0xa0 [ 507.450401][T15035] ? _copy_from_user+0x1fd/0x300 [ 507.455481][T15035] __msan_chain_origin+0x54/0xa0 [ 507.460444][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.465590][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.470553][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.475346][T15035] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 507.481526][T15035] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 507.487358][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.492570][T15035] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 507.498396][T15035] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 507.504570][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.509789][T15035] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 507.515614][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.520830][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.526058][T15035] ? kmsan_set_origin_checked+0xa2/0x100 [ 507.531754][T15035] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 507.538064][T15035] ? __msan_instrument_asm_store+0x104/0x130 [ 507.544086][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.549318][T15035] ? kmsan_get_metadata+0x116/0x180 [ 507.554545][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.559951][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.565526][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.570763][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.575659][T15035] do_SYSENTER_32+0x73/0x90 [ 507.580211][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.586570][T15035] RIP: 0023:0xf7f5c549 [ 507.590660][T15035] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.610287][T15035] RSP: 002b:00000000f55565fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 507.618739][T15035] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 507.626734][T15035] RDX: 000000000000024a RSI: 0000000000000000 RDI: 0000000000000000 [ 507.634735][T15035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.642762][T15035] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 507.650754][T15035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.658757][T15035] Uninit was stored to memory at: [ 507.663784][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.669527][T15035] __msan_chain_origin+0x54/0xa0 [ 507.674481][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.679613][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.684564][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.689346][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.694744][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.700308][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.705533][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.710400][T15035] do_SYSENTER_32+0x73/0x90 [ 507.714920][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.721268][T15035] [ 507.723591][T15035] Uninit was stored to memory at: [ 507.728610][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.734360][T15035] __msan_chain_origin+0x54/0xa0 [ 507.739319][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.744449][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.749404][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.754199][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.759779][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.765453][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.770711][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.775584][T15035] do_SYSENTER_32+0x73/0x90 [ 507.780111][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.786465][T15035] [ 507.788798][T15035] Uninit was stored to memory at: [ 507.793833][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.799578][T15035] __msan_chain_origin+0x54/0xa0 [ 507.804538][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.809682][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.814635][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.819634][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.825026][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.830622][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.835854][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.840728][T15035] do_SYSENTER_32+0x73/0x90 [ 507.845297][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.851656][T15035] [ 507.853985][T15035] Uninit was stored to memory at: [ 507.859004][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.864744][T15035] __msan_chain_origin+0x54/0xa0 [ 507.869704][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.874871][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.879824][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.884785][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.890184][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.895784][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.901004][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.905868][T15035] do_SYSENTER_32+0x73/0x90 [ 507.910389][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.916734][T15035] [ 507.919055][T15035] Uninit was stored to memory at: [ 507.924066][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.929807][T15035] __msan_chain_origin+0x54/0xa0 [ 507.934765][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 507.939894][T15035] get_compat_msghdr+0x108/0x2b0 [ 507.944839][T15035] __sys_sendmmsg+0x79d/0x1010 [ 507.949616][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 507.955272][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 507.960852][T15035] __do_fast_syscall_32+0x127/0x180 [ 507.966153][T15035] do_fast_syscall_32+0x77/0xd0 [ 507.971015][T15035] do_SYSENTER_32+0x73/0x90 [ 507.975529][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.981868][T15035] [ 507.984274][T15035] Uninit was stored to memory at: [ 507.989287][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 507.995052][T15035] __msan_chain_origin+0x54/0xa0 [ 507.999999][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 508.005120][T15035] get_compat_msghdr+0x108/0x2b0 [ 508.010074][T15035] __sys_sendmmsg+0x79d/0x1010 [ 508.014848][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 508.020234][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 508.025790][T15035] __do_fast_syscall_32+0x127/0x180 [ 508.031018][T15035] do_fast_syscall_32+0x77/0xd0 [ 508.035899][T15035] do_SYSENTER_32+0x73/0x90 [ 508.040418][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.046758][T15035] [ 508.049076][T15035] Uninit was stored to memory at: [ 508.054088][T15035] kmsan_internal_chain_origin+0xad/0x130 [ 508.059817][T15035] __msan_chain_origin+0x54/0xa0 [ 508.064764][T15035] __get_compat_msghdr+0x6db/0x9d0 [ 508.069889][T15035] get_compat_msghdr+0x108/0x2b0 [ 508.074842][T15035] __sys_sendmmsg+0x79d/0x1010 [ 508.079658][T15035] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 508.085046][T15035] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 508.090608][T15035] __do_fast_syscall_32+0x127/0x180 [ 508.095822][T15035] do_fast_syscall_32+0x77/0xd0 [ 508.100695][T15035] do_SYSENTER_32+0x73/0x90 [ 508.105216][T15035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.111561][T15035] [ 508.113879][T15035] Local variable ----msg_sys@__sys_sendmmsg created at: [ 508.120805][T15035] __sys_sendmmsg+0xbd/0x1010 [ 508.125498][T15035] __sys_sendmmsg+0xbd/0x1010 [ 508.176863][T15036] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) sendto(r0, &(0x7f0000000040)="96", 0xfffffffffffffd51, 0x4055, 0x0, 0x0) close(r0) 15:34:24 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) setreuid(0x0, 0x0) [ 509.858267][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.865203][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.988149][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.043316][ T35] audit: type=1326 audit(1625585665.612:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15046 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6b549 code=0xffff0000 15:34:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "e2fe00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:34:26 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x602, 0x0) pwrite64(r0, &(0x7f0000000080)='7', 0x1, 0x0) 15:34:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:26 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee00, 0xee01}}]}, 0x30}}, 0x0) [ 511.044122][T15070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "e2fe00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 511.252116][T15079] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "e2fe00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:34:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:27 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 15:34:27 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 512.161346][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.498778][T15107] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "e2fe00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:34:28 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0xb) 15:34:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 513.226352][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@delchain={0x44, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 15:34:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r1 = dup(r0) exit(0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 15:34:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 513.618314][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.729493][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:34:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@delchain={0x44, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 514.233425][T15151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:30 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x0, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 514.720551][T15162] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.780722][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:34:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@delchain={0x44, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 515.267327][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r1 = dup(r0) exit(0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 15:34:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:31 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x0, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 516.133918][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:34:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@delchain={0x44, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 15:34:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:32 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x0, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r1 = dup(r0) exit(0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 15:34:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) io_setup(0x81, &(0x7f0000000040)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 517.897917][T15238] __nla_validate_parse: 3 callbacks suppressed [ 517.898078][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:33 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff21000000006e2fe0138393", @ANYRES32=r4, @ANYBLOB="00000001f1ffffff0000000008000100636271"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:34:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x0, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 518.674276][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r1 = dup(r0) exit(0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) [ 518.802803][T15260] netlink: 2212 bytes leftover after parsing attributes in process `syz-executor.1'. 15:34:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 519.490152][T15271] not chained 110000 origins [ 519.494783][T15271] CPU: 0 PID: 15271 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 519.503562][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.513742][T15271] Call Trace: [ 519.517028][T15271] dump_stack+0x24c/0x2e0 [ 519.521387][T15271] kmsan_internal_chain_origin+0x6f/0x130 [ 519.527160][T15271] ? kmsan_get_metadata+0x116/0x180 [ 519.532380][T15271] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 519.538210][T15271] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 519.544475][T15271] ? kmsan_get_metadata+0x116/0x180 [ 519.549708][T15271] ? kmsan_set_origin_checked+0xa2/0x100 [ 519.555359][T15271] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 519.561444][T15271] ? kmsan_unpoison_shadow+0x74/0xa0 [ 519.566770][T15271] ? _copy_from_user+0x1fd/0x300 [ 519.571742][T15271] __msan_chain_origin+0x54/0xa0 [ 519.576716][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 519.581871][T15271] get_compat_msghdr+0x108/0x2b0 [ 519.586954][T15271] do_recvmmsg+0xdc1/0x22d0 [ 519.591500][T15271] ? kmsan_get_metadata+0x116/0x180 [ 519.596737][T15271] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 519.602600][T15271] ? kmsan_get_metadata+0x116/0x180 [ 519.607833][T15271] ? kmsan_internal_set_origin+0x82/0xc0 [ 519.613491][T15271] ? __msan_poison_alloca+0xec/0x110 [ 519.618804][T15271] ? __sys_recvmmsg+0xb5/0x6f0 [ 519.623616][T15271] __sys_recvmmsg+0x519/0x6f0 [ 519.628322][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 519.634426][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 519.640614][T15271] __do_fast_syscall_32+0x127/0x180 [ 519.645838][T15271] do_fast_syscall_32+0x77/0xd0 [ 519.650722][T15271] do_SYSENTER_32+0x73/0x90 [ 519.655258][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.661615][T15271] RIP: 0023:0xf7f31549 [ 519.665708][T15271] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 519.685409][T15271] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 519.693868][T15271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 519.701870][T15271] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 519.709864][T15271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.711758][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.717854][T15271] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 519.717883][T15271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.717912][T15271] Uninit was stored to memory at: [ 519.717921][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 519.717961][T15271] __msan_chain_origin+0x54/0xa0 [ 519.717990][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 519.718024][T15271] get_compat_msghdr+0x108/0x2b0 [ 519.718054][T15271] do_recvmmsg+0xdc1/0x22d0 [ 519.718085][T15271] __sys_recvmmsg+0x519/0x6f0 [ 519.718118][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 519.718154][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 519.790478][T15271] __do_fast_syscall_32+0x127/0x180 [ 519.795906][T15271] do_fast_syscall_32+0x77/0xd0 [ 519.800786][T15271] do_SYSENTER_32+0x73/0x90 [ 519.805310][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.811659][T15271] [ 519.814000][T15271] Uninit was stored to memory at: [ 519.819070][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 519.824812][T15271] __msan_chain_origin+0x54/0xa0 [ 519.829770][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 519.834905][T15271] get_compat_msghdr+0x108/0x2b0 [ 519.839869][T15271] do_recvmmsg+0xdc1/0x22d0 [ 519.844426][T15271] __sys_recvmmsg+0x519/0x6f0 [ 519.849140][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 519.855254][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 519.861457][T15271] __do_fast_syscall_32+0x127/0x180 [ 519.866703][T15271] do_fast_syscall_32+0x77/0xd0 [ 519.871575][T15271] do_SYSENTER_32+0x73/0x90 [ 519.876101][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.882477][T15271] [ 519.884815][T15271] Uninit was stored to memory at: [ 519.889832][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 519.895571][T15271] __msan_chain_origin+0x54/0xa0 [ 519.900540][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 519.905664][T15271] get_compat_msghdr+0x108/0x2b0 [ 519.910635][T15271] do_recvmmsg+0xdc1/0x22d0 [ 519.915151][T15271] __sys_recvmmsg+0x519/0x6f0 [ 519.919842][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 519.925926][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 519.932112][T15271] __do_fast_syscall_32+0x127/0x180 [ 519.937359][T15271] do_fast_syscall_32+0x77/0xd0 [ 519.942233][T15271] do_SYSENTER_32+0x73/0x90 [ 519.946772][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.953120][T15271] [ 519.955443][T15271] Uninit was stored to memory at: [ 519.960463][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 519.966218][T15271] __msan_chain_origin+0x54/0xa0 [ 519.971198][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 519.976325][T15271] get_compat_msghdr+0x108/0x2b0 [ 519.981280][T15271] do_recvmmsg+0xdc1/0x22d0 [ 519.985802][T15271] __sys_recvmmsg+0x519/0x6f0 [ 519.990499][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 519.996597][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 520.002800][T15271] __do_fast_syscall_32+0x127/0x180 [ 520.008022][T15271] do_fast_syscall_32+0x77/0xd0 [ 520.012894][T15271] do_SYSENTER_32+0x73/0x90 [ 520.017435][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.023790][T15271] [ 520.026121][T15271] Uninit was stored to memory at: [ 520.031141][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 520.036881][T15271] __msan_chain_origin+0x54/0xa0 [ 520.041837][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 520.047055][T15271] get_compat_msghdr+0x108/0x2b0 [ 520.052011][T15271] do_recvmmsg+0xdc1/0x22d0 [ 520.056548][T15271] __sys_recvmmsg+0x519/0x6f0 [ 520.061278][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 520.067367][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 520.073563][T15271] __do_fast_syscall_32+0x127/0x180 [ 520.078782][T15271] do_fast_syscall_32+0x77/0xd0 [ 520.083673][T15271] do_SYSENTER_32+0x73/0x90 [ 520.088199][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.094635][T15271] [ 520.096962][T15271] Uninit was stored to memory at: [ 520.101981][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 520.107729][T15271] __msan_chain_origin+0x54/0xa0 [ 520.112718][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 520.117855][T15271] get_compat_msghdr+0x108/0x2b0 [ 520.122821][T15271] do_recvmmsg+0xdc1/0x22d0 [ 520.127345][T15271] __sys_recvmmsg+0x519/0x6f0 [ 520.132077][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 520.138169][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 520.144375][T15271] __do_fast_syscall_32+0x127/0x180 [ 520.149596][T15271] do_fast_syscall_32+0x77/0xd0 [ 520.154471][T15271] do_SYSENTER_32+0x73/0x90 [ 520.159025][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.165422][T15271] [ 520.167743][T15271] Uninit was stored to memory at: [ 520.172785][T15271] kmsan_internal_chain_origin+0xad/0x130 [ 520.178531][T15271] __msan_chain_origin+0x54/0xa0 [ 520.183484][T15271] __get_compat_msghdr+0x6db/0x9d0 [ 520.188623][T15271] get_compat_msghdr+0x108/0x2b0 [ 520.193578][T15271] do_recvmmsg+0xdc1/0x22d0 [ 520.198133][T15271] __sys_recvmmsg+0x519/0x6f0 [ 520.202834][T15271] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 520.208920][T15271] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 520.215093][T15271] __do_fast_syscall_32+0x127/0x180 [ 520.220315][T15271] do_fast_syscall_32+0x77/0xd0 [ 520.225185][T15271] do_SYSENTER_32+0x73/0x90 [ 520.229709][T15271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.236070][T15271] [ 520.238419][T15271] Local variable ----msg_sys@do_recvmmsg created at: [ 520.245093][T15271] do_recvmmsg+0xbf/0x22d0 [ 520.249535][T15271] do_recvmmsg+0xbf/0x22d0 15:34:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8000000}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 15:34:36 executing program 1: clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() r1 = memfd_create(&(0x7f0000000540)='\x00&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iQ@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x03\x00\x00\x00\xa60\x1e\x86\x86\x06\x00$f\xfa\xac\xf8\x01\x01\x00\x00vS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\x01\x00IS\xaf\x04\xf78\xf1\'\xdfv\x900b;\xbb\x18\xab\xdc!\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2^Y\x17yX $\xfcU\x9d\x02i\xd9\x00\x00\x00\x00\x00_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\a\x00\x00\x00\x00\x00\x00\x00\x86\xc3\xb6\x910\n\x04\x00\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb3\xf5Pb\xa4\xd8\xb3\xdc\xcb4\xfcUjf\aU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3F\xc0j0O\xbeX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcd-D\x90\xe3l[9or\xa6x\xab\xaf\xb3\xack\xfe\xf6\xcc\x1arp\xd5\b~\xf6\xa2N\xed<\xc2bO\x88\x8e\x7f\x83#\x87\x14\xe4\x9f\xdaEQS\xdf%\xf8\x97N\xaeM\xebk\xa9\xf0z6L\x86\xf4\xf0\xee\x14R\x11\xf6\x03\xd6\x818\x0e^\x01\x00\x00\x00-A]\x8a:\xca\x99\xaa{\xdf\x81\xfc\xc364\xc3s\x8d\t3*\x95\xe4\t`\xfd\xa7P\xb76Ds\xa7\xb6c\xfa\xf1k\x1d-#\xa92\x8c\xf1\v\xa2\xa1\xe3.U{\x8a\x8fr\x01\xb5&Z\xa7\xcc^`r\x95\x99\x9b\x98\x93)\x18\x92\x12\xa6\xea\x13\x925\xf7\xf0\x12\xceLY\x93\x8a%\xb5\xf5\xc6\xe6#\xefX0 t\xba0\xaen\xa6\xcd\xe0/\xc64$n\xa2\xb0\xee\xfab\f!\x93<\xfc\f\xea\xc3\xc3fA\xb7\xac\x8d\xc1\x8d\xfe\x05M\xd7h\xbfY\x8e\xdas\xae\x8b#\x1c\x11kb\x8a\x9e|\xdbb2\xc6\xebLi\xe3\xd3\x1d\xb1N\xa6\x00,j\x90\xadR\xf2\xe6\n\xf1\x80\xd2', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ptrace(0x4206, r0) tkill(r0, 0x14) 15:34:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 520.858138][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.075441][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:37 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'dummy0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) 15:34:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 521.831132][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 521.940524][T15314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.981447][T15316] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 521.982385][T15315] IPVS: stopping backup sync thread 15316 ... 15:34:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 522.177812][T15320] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 15:34:37 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x0, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a0591e8ed47308ca1d1ca9bc50cb6e88e42a3508f87ba2bbc591e24c65cd6643", "bc6196f5568d23ba483d2299eff5da382d517a9b8a61d96932f134eeb29a75d400", "97db39fc9298532ea72ee9579dd47882e21f667f4d66c6de6fa184ed", {"ec250939151e600edb934a80045f7954", "10d3b5e294fb3760f682052d6abad045"}}}}}}}, 0x0) 15:34:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 522.629233][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 523.242971][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array, @array]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x4d}, 0x20) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffa03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:34:39 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x0, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 523.713528][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:39 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000480), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:34:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="017e000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 524.512140][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:40 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x0, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 525.060428][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.186526][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.201258][T15367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:34:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 525.620079][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 525.656338][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.746711][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:34:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="017e000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 15:34:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 526.132469][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 526.305135][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 526.608889][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:34:42 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000480), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:34:42 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x0, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000000000000000000000faffff7201430001000000950000000000000002ec31d612bd29b52aa336f16b577d0df089180731624970fd8c9ad665b129c786ffd1e1a1efdb07f36f5ddffb13e6e995ece9e7a32c16c59e44db619587f1328734056d9c6d90b4f911474a13f7b9a3d0126a03656f3231d09e662378930ecd139e054849e1114b74876b02c352aa91d1f37cc1967b56d17148277ea049e4cceb1593a8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 526.928593][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.497622][T15422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.637393][T15422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.652746][T15422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:34:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') pread64(r0, 0x0, 0x0, 0x648d) 15:34:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:44 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x0, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') close(r1) [ 528.769660][T15444] __nla_validate_parse: 1 callbacks suppressed [ 528.769755][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 528.993909][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:44 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 15:34:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:45 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:45 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000480), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:34:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:45 executing program 3: io_setup(0x3, &(0x7f0000000080)=0x0) fork() io_getevents(r0, 0x7, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x5, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000001400)=0x1000, &(0x7f0000001440)=0x7) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000001480)) epoll_create1(0x80000) io_destroy(r0) [ 529.964411][T15472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 530.498169][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.653317][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.669316][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:34:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 531.930688][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.952072][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'lo\x00', @ifru_data=0x0}) 15:34:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 532.833046][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 533.050031][T15534] not chained 120000 origins [ 533.055966][T15534] CPU: 1 PID: 15534 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 533.064763][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.074864][T15534] Call Trace: [ 533.078253][T15534] dump_stack+0x24c/0x2e0 [ 533.082720][T15534] kmsan_internal_chain_origin+0x6f/0x130 [ 533.088832][T15534] ? kmsan_get_metadata+0x116/0x180 [ 533.094163][T15534] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 533.100314][T15534] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 533.106978][T15534] ? kmsan_get_metadata+0x116/0x180 [ 533.112350][T15534] ? kmsan_set_origin_checked+0xa2/0x100 [ 533.118027][T15534] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 533.124150][T15534] ? kmsan_unpoison_shadow+0x74/0xa0 [ 533.129825][T15534] ? _copy_from_user+0x1fd/0x300 [ 533.134906][T15534] __msan_chain_origin+0x54/0xa0 [ 533.139907][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.145257][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.150435][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.155655][T15534] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 533.161508][T15534] ? kmsan_get_metadata+0x116/0x180 [ 533.166783][T15534] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 533.172754][T15534] ? kmsan_get_metadata+0x116/0x180 [ 533.178538][T15534] ? kmsan_internal_set_origin+0x82/0xc0 [ 533.184565][T15534] ? __msan_poison_alloca+0xec/0x110 [ 533.189920][T15534] ? __sys_recvmmsg+0xb5/0x6f0 [ 533.194734][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.200332][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.206469][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.213213][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.218728][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.223621][T15534] do_SYSENTER_32+0x73/0x90 [ 533.228419][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.234850][T15534] RIP: 0023:0xf7f31549 [ 533.238954][T15534] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.258585][T15534] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 533.267052][T15534] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007d40 [ 533.275222][T15534] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000000 [ 533.283497][T15534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.291686][T15534] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 533.299687][T15534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.307693][T15534] Uninit was stored to memory at: [ 533.312843][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.318806][T15534] __msan_chain_origin+0x54/0xa0 [ 533.323930][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.329068][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.334126][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.338663][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.343392][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.349511][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.355833][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.361058][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.365951][T15534] do_SYSENTER_32+0x73/0x90 [ 533.370574][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.376946][T15534] [ 533.379269][T15534] Uninit was stored to memory at: [ 533.384292][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.390167][T15534] __msan_chain_origin+0x54/0xa0 [ 533.395139][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.400282][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.405247][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.409857][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.415011][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.421562][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.428119][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.433716][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.438884][T15534] do_SYSENTER_32+0x73/0x90 [ 533.443456][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.450193][T15534] [ 533.452521][T15534] Uninit was stored to memory at: [ 533.457639][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.463396][T15534] __msan_chain_origin+0x54/0xa0 [ 533.468552][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.473707][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.478743][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.483263][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.488213][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.494399][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.500603][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.505918][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.510802][T15534] do_SYSENTER_32+0x73/0x90 [ 533.515424][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.521949][T15534] [ 533.524274][T15534] Uninit was stored to memory at: [ 533.529392][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.535181][T15534] __msan_chain_origin+0x54/0xa0 [ 533.540354][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.545502][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.550651][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.555199][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.559990][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.566074][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.572244][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.577469][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.582341][T15534] do_SYSENTER_32+0x73/0x90 [ 533.586871][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.594039][T15534] [ 533.596357][T15534] Uninit was stored to memory at: [ 533.601390][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.607122][T15534] __msan_chain_origin+0x54/0xa0 [ 533.612082][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.617324][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.622301][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.627192][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.631906][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.637986][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.644154][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.649750][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.654815][T15534] do_SYSENTER_32+0x73/0x90 [ 533.659339][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.665859][T15534] [ 533.668181][T15534] Uninit was stored to memory at: [ 533.673215][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.678968][T15534] __msan_chain_origin+0x54/0xa0 [ 533.683918][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.689357][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.694520][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.699062][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.703764][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.709869][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.716823][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.722219][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.727274][T15534] do_SYSENTER_32+0x73/0x90 [ 533.731795][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.738159][T15534] [ 533.740484][T15534] Uninit was stored to memory at: [ 533.745921][T15534] kmsan_internal_chain_origin+0xad/0x130 [ 533.752301][T15534] __msan_chain_origin+0x54/0xa0 [ 533.757350][T15534] __get_compat_msghdr+0x6db/0x9d0 [ 533.762676][T15534] get_compat_msghdr+0x108/0x2b0 [ 533.767728][T15534] do_recvmmsg+0xdc1/0x22d0 [ 533.772356][T15534] __sys_recvmmsg+0x519/0x6f0 [ 533.777049][T15534] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 533.783330][T15534] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 533.789934][T15534] __do_fast_syscall_32+0x127/0x180 [ 533.795256][T15534] do_fast_syscall_32+0x77/0xd0 [ 533.800133][T15534] do_SYSENTER_32+0x73/0x90 [ 533.804648][T15534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.811118][T15534] [ 533.813459][T15534] Local variable ----msg_sys@do_recvmmsg created at: [ 533.820128][T15534] do_recvmmsg+0xbf/0x22d0 [ 533.824598][T15534] do_recvmmsg+0xbf/0x22d0 [ 533.902971][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:49 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000480), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:34:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) 15:34:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 534.801745][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 534.920289][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.933260][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:34:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a1c, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0x100000003, 0x0, 0x1fbfd) [ 535.560942][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 535.845932][ T35] audit: type=1800 audit(1625585691.422:14): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14419 res=0 errno=0 [ 536.121086][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 536.276230][ T35] audit: type=1800 audit(1625585691.852:15): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14595 res=0 errno=0 15:34:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:52 executing program 3: capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)) ioprio_set$pid(0x2, 0x0, 0x0) [ 536.771191][T15567] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 536.776414][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5449a249869dbc3c9318c03f2ff33d63f113d7a5c503e59a116edaf9fbf3876d4ca80a08", 0x24}], 0x1) 15:34:52 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0x4}, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000040)=@tcp}, 0x20) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001600)=""/4084}, 0x20) 15:34:53 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x2, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x420}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd55}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}}, 0x80400d0) [ 537.936885][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x5000) [ 538.489564][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:54 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x200800000000, 0xd6) 15:34:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:54 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 539.129456][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:34:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) getsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 539.378226][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:55 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f05", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@ptr, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x3a}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:34:55 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001800)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x88, 0x2}]}}}], 0x18}, 0x0) [ 540.211797][T15650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 15:34:56 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:56 executing program 1: get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x4) 15:34:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 540.920250][T15670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:56 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x5, 0x6d, 0x2, 0x0, 0x0}, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 15:34:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:57 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 541.640642][T15686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:57 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 543.040215][T15706] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000180)=0x400, 0x4) io_setup(0x2e, &(0x7f0000000400)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000000240)="c30e277a87245ecda1", 0x9}]) 15:34:58 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 15:34:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}, 0x80c1) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}], 0x2, 0x2a201d2c6c77e01a) 15:34:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:34:59 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) [ 544.048095][T15729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:34:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 15:34:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:34:59 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5f454c53065b05007311"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x100000000011, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 15:35:00 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:00 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xea00, 0x0) [ 545.176271][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:01 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 15:35:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 15:35:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 546.181573][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0\x00') 15:35:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:02 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40), 0x0, 0x2, 0x0) 15:35:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001500)='~', 0x1}, {&(0x7f0000000180)="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", 0x10a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 547.358787][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 547.513802][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0\x00') 15:35:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:03 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40), 0x0, 0x2, 0x0) 15:35:03 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) 15:35:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 548.418876][T15812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0\x00') [ 548.808281][T15830] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:04 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x174, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0xffffffffffffff75, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x174}}, 0x0) 15:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:05 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40), 0x0, 0x2, 0x0) [ 549.590727][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.634083][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 549.798521][T15845] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.849493][T15836] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0\x00') 15:35:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x80, 0x1, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x130, 0x1c8, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$inet_tcp(0x2, 0x1, 0x0) 15:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 550.869490][T15864] __nla_validate_parse: 2 callbacks suppressed [ 550.869556][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:06 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000a, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffc) 15:35:06 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:06 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) [ 551.309247][T15876] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x3, [@volatile, @datasec={0x0, 0xa, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "01"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "ed"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0xe7}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 551.561270][T15875] not chained 130000 origins [ 551.565911][T15875] CPU: 0 PID: 15875 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 551.574702][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.584797][T15875] Call Trace: [ 551.588103][T15875] dump_stack+0x24c/0x2e0 [ 551.592460][T15875] kmsan_internal_chain_origin+0x6f/0x130 [ 551.598205][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.603434][T15875] ? kmsan_set_origin_checked+0xa2/0x100 [ 551.609096][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.614323][T15875] ? kmsan_set_origin_checked+0xa2/0x100 [ 551.619983][T15875] ? __msan_instrument_asm_store+0x22/0x130 [ 551.625907][T15875] ? __msan_get_context_state+0x9/0x20 [ 551.631409][T15875] ? irqentry_exit+0x12/0x50 [ 551.636036][T15875] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 551.641900][T15875] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 551.648132][T15875] ? kmsan_unpoison_shadow+0x82/0xa0 [ 551.653488][T15875] ? _copy_from_user+0x1fd/0x300 [ 551.658470][T15875] __msan_chain_origin+0x54/0xa0 [ 551.663445][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 551.668633][T15875] get_compat_msghdr+0x108/0x2b0 [ 551.673645][T15875] __sys_sendmmsg+0x79d/0x1010 [ 551.678484][T15875] ? sysvec_call_function_single+0x87/0xf0 [ 551.684367][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.689621][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.694841][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.700060][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.705288][T15875] ? kmsan_set_origin_checked+0xa2/0x100 [ 551.710942][T15875] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 551.717036][T15875] ? __msan_instrument_asm_store+0x104/0x130 [ 551.723492][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.728743][T15875] ? kmsan_get_metadata+0x116/0x180 [ 551.734024][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.739491][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.745111][T15875] __do_fast_syscall_32+0x127/0x180 [ 551.750389][T15875] do_fast_syscall_32+0x77/0xd0 [ 551.755289][T15875] do_SYSENTER_32+0x73/0x90 [ 551.759846][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.766253][T15875] RIP: 0023:0xf7f5c549 [ 551.770412][T15875] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 551.790084][T15875] RSP: 002b:00000000f55565fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 551.798536][T15875] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 551.806528][T15875] RDX: 000000000000024a RSI: 0000000000000000 RDI: 0000000000000000 [ 551.814547][T15875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.822549][T15875] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 551.830551][T15875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.838563][T15875] Uninit was stored to memory at: [ 551.843693][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 551.849453][T15875] __msan_chain_origin+0x54/0xa0 [ 551.854438][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 551.859600][T15875] get_compat_msghdr+0x108/0x2b0 [ 551.864577][T15875] __sys_sendmmsg+0x79d/0x1010 [ 551.869380][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.874787][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.880358][T15875] __do_fast_syscall_32+0x127/0x180 [ 551.885578][T15875] do_fast_syscall_32+0x77/0xd0 [ 551.890453][T15875] do_SYSENTER_32+0x73/0x90 [ 551.894978][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.901331][T15875] [ 551.903760][T15875] Uninit was stored to memory at: [ 551.908776][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 551.914551][T15875] __msan_chain_origin+0x54/0xa0 [ 551.919533][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 551.924667][T15875] get_compat_msghdr+0x108/0x2b0 [ 551.929643][T15875] __sys_sendmmsg+0x79d/0x1010 [ 551.934478][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.939889][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.945659][T15875] __do_fast_syscall_32+0x127/0x180 [ 551.950921][T15875] do_fast_syscall_32+0x77/0xd0 [ 551.955817][T15875] do_SYSENTER_32+0x73/0x90 [ 551.960385][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.966756][T15875] [ 551.969189][T15875] Uninit was stored to memory at: [ 551.974208][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 551.979957][T15875] __msan_chain_origin+0x54/0xa0 [ 551.984911][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 551.990041][T15875] get_compat_msghdr+0x108/0x2b0 [ 551.995005][T15875] __sys_sendmmsg+0x79d/0x1010 [ 551.999789][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 552.005268][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 552.010831][T15875] __do_fast_syscall_32+0x127/0x180 [ 552.016051][T15875] do_fast_syscall_32+0x77/0xd0 [ 552.020929][T15875] do_SYSENTER_32+0x73/0x90 [ 552.025455][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.031826][T15875] [ 552.034164][T15875] Uninit was stored to memory at: [ 552.039189][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 552.044947][T15875] __msan_chain_origin+0x54/0xa0 [ 552.049923][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 552.055081][T15875] get_compat_msghdr+0x108/0x2b0 [ 552.060060][T15875] __sys_sendmmsg+0x79d/0x1010 [ 552.064873][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 552.070311][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 552.075892][T15875] __do_fast_syscall_32+0x127/0x180 [ 552.081119][T15875] do_fast_syscall_32+0x77/0xd0 [ 552.085986][T15875] do_SYSENTER_32+0x73/0x90 [ 552.090507][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.096857][T15875] [ 552.099182][T15875] Uninit was stored to memory at: [ 552.104193][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 552.109925][T15875] __msan_chain_origin+0x54/0xa0 [ 552.114869][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 552.119988][T15875] get_compat_msghdr+0x108/0x2b0 [ 552.124940][T15875] __sys_sendmmsg+0x79d/0x1010 [ 552.129742][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 552.135150][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 552.140734][T15875] __do_fast_syscall_32+0x127/0x180 [ 552.145973][T15875] do_fast_syscall_32+0x77/0xd0 [ 552.150877][T15875] do_SYSENTER_32+0x73/0x90 [ 552.155443][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.161816][T15875] [ 552.164156][T15875] Uninit was stored to memory at: [ 552.169200][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 552.174955][T15875] __msan_chain_origin+0x54/0xa0 [ 552.179907][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 552.185027][T15875] get_compat_msghdr+0x108/0x2b0 [ 552.189978][T15875] __sys_sendmmsg+0x79d/0x1010 [ 552.194770][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 552.200173][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 552.205751][T15875] __do_fast_syscall_32+0x127/0x180 [ 552.211070][T15875] do_fast_syscall_32+0x77/0xd0 [ 552.215935][T15875] do_SYSENTER_32+0x73/0x90 [ 552.220459][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.226919][T15875] [ 552.229252][T15875] Uninit was stored to memory at: [ 552.234875][T15875] kmsan_internal_chain_origin+0xad/0x130 [ 552.240648][T15875] __msan_chain_origin+0x54/0xa0 [ 552.245645][T15875] __get_compat_msghdr+0x6db/0x9d0 [ 552.250806][T15875] get_compat_msghdr+0x108/0x2b0 [ 552.255800][T15875] __sys_sendmmsg+0x79d/0x1010 [ 552.260613][T15875] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 552.266021][T15875] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 552.271606][T15875] __do_fast_syscall_32+0x127/0x180 [ 552.276864][T15875] do_fast_syscall_32+0x77/0xd0 [ 552.281751][T15875] do_SYSENTER_32+0x73/0x90 [ 552.286277][T15875] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.292620][T15875] [ 552.294938][T15875] Local variable ----msg_sys@__sys_sendmmsg created at: [ 552.301859][T15875] __sys_sendmmsg+0xbd/0x1010 [ 552.306549][T15875] __sys_sendmmsg+0xbd/0x1010 [ 552.364138][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 15:35:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffff9}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 553.089009][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:08 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000029001f4d", 0x8, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cbae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0xe585, 0x800, 0x0, 0x4b6ae4f95a5de371) [ 553.442332][ T35] audit: type=1326 audit(1625585709.012:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15919 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0549 code=0xffff0000 15:35:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x4401, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xffff) dup2(r2, r0) fcntl$setstatus(r0, 0x4, 0xc6400) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 15:35:09 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) [ 553.840057][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@updsa={0xf0, 0x1a, 0x529, 0x0, 0x0, {{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {@in=@multicast1, 0x0, 0x2b}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 15:35:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:10 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="a5", 0x1}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xf6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7f, {0x0, 0x8000, 0x80000000, 0x0, 0x4}}) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) [ 554.633483][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:35:10 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x4401, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xffff) dup2(r2, r0) fcntl$setstatus(r0, 0x4, 0xc6400) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 554.875551][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) dup2(r2, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x2, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x40) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 555.117698][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000820}, 0x104406582c25e846) [ 556.470515][T15977] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x4401, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xffff) dup2(r2, r0) fcntl$setstatus(r0, 0x4, 0xc6400) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 556.670213][T15979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 15:35:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:12 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000600)=ANY=[], 0x74) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005600)={0x0}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) [ 557.525948][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.643762][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:13 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x4401, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xffff) dup2(r2, r0) fcntl$setstatus(r0, 0x4, 0xc6400) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 15:35:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:13 executing program 3: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xa9a60aa72e82a7f8) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) 15:35:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x10010fc) lseek(r2, 0x0, 0x3) 15:35:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 558.794895][T16032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 558.932829][ T35] audit: type=1800 audit(1625585714.502:17): pid=16034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14241 res=0 errno=0 15:35:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000000)="cd1ec4b2", 0x4) 15:35:14 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x5a) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) [ 559.118599][ T35] audit: type=1800 audit(1625585714.602:18): pid=16037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=13846 res=0 errno=0 15:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 15:35:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x4, 0x7, 0x301}, 0x14}}, 0x0) 15:35:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) [ 560.098703][T16051] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=[{&(0x7f00000024c0)=""/78, 0x4e}, {0x0}], 0x2, 0x0) 15:35:15 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x7000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f000000d000/0x2000)=nil) shmat(r1, &(0x7f000000b000/0x1000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0xe000, 0x1000, &(0x7f0000000000/0xe000)=nil) shmat(r2, &(0x7f0000006000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 15:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 15:35:16 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x7000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f000000d000/0x2000)=nil) shmat(r1, &(0x7f000000b000/0x1000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0xe000, 0x1000, &(0x7f0000000000/0xe000)=nil) shmat(r2, &(0x7f0000006000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) [ 561.211597][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\xe6\xff\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xca\x00\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') fcntl$setlease(r1, 0x400, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0xff}, 'syz1\x00', 0x22}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x500c1, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ntfs\x00', 0x932051, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) dup2(r2, r3) ioctl$UI_DEV_DESTROY(r0, 0x5502) 15:35:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 15:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:17 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x7000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f000000d000/0x2000)=nil) shmat(r1, &(0x7f000000b000/0x1000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0xe000, 0x1000, &(0x7f0000000000/0xe000)=nil) shmat(r2, &(0x7f0000006000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 15:35:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 15:35:17 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4005132, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 562.230906][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:18 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x7000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f000000d000/0x2000)=nil) shmat(r1, &(0x7f000000b000/0x1000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0xe000, 0x1000, &(0x7f0000000000/0xe000)=nil) shmat(r2, &(0x7f0000006000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 15:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 15:35:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x7}]}, 0x30}}, 0x0) 15:35:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 563.182800][T16111] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:18 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) mprotect(&(0x7f0000128000/0x2000)=nil, 0x2000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @broadcast, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x4000}, 0x2c) 15:35:19 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 15:35:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "852432db99baeb0600b60200a400743dcff100"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x3ff) ioctl$TCXONC(r2, 0x540a, 0x3) 15:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:19 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 564.256987][T16131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xc40001e1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:35:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) 15:35:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000200)={'ipvlan0\x00', @ifru_hwaddr=@link_local}) 15:35:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') close(r0) 15:35:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x2, [@volatile, @array, @array, @fwd, @array, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @int, @var]}}, 0x0, 0x102}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:35:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 565.706596][T16157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') close(r0) [ 566.262146][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.409705][T16174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000009402036128", @ANYRES32=r4, @ANYBLOB="080002008b"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') close(r0) 15:35:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 15:35:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 567.060227][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 567.437217][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') close(r0) 15:35:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 568.222937][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 568.233818][T16204] not chained 140000 origins [ 568.238432][T16204] CPU: 1 PID: 16204 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 568.247213][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.257289][T16204] Call Trace: [ 568.260604][T16204] dump_stack+0x24c/0x2e0 [ 568.264993][T16204] kmsan_internal_chain_origin+0x6f/0x130 [ 568.270822][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.276038][T16204] ? kmsan_set_origin_checked+0xa2/0x100 [ 568.281688][T16204] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.287806][T16204] ? __msan_instrument_asm_store+0x104/0x130 [ 568.293816][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.299033][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.304243][T16204] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 568.310064][T16204] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 568.316156][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.321382][T16204] ? kmsan_set_origin_checked+0xa2/0x100 [ 568.327050][T16204] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.333143][T16204] ? kmsan_unpoison_shadow+0x74/0xa0 [ 568.338453][T16204] ? _copy_from_user+0x1fd/0x300 [ 568.343407][T16204] __msan_chain_origin+0x54/0xa0 [ 568.348372][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.353508][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.358467][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.363257][T16204] ? alloc_file_pseudo+0x4a7/0x4e0 [ 568.368385][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.373597][T16204] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 568.379418][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.384629][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.389842][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.395056][T16204] ? kmsan_set_origin_checked+0xa2/0x100 [ 568.400701][T16204] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.406781][T16204] ? __msan_instrument_asm_store+0x104/0x130 [ 568.412775][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.417982][T16204] ? kmsan_get_metadata+0x116/0x180 [ 568.423200][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.428603][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.434173][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.439397][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.444287][T16204] do_SYSENTER_32+0x73/0x90 [ 568.448809][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.455157][T16204] RIP: 0023:0xf7f5c549 [ 568.459232][T16204] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 568.478882][T16204] RSP: 002b:00000000f55565fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 568.487335][T16204] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 568.495343][T16204] RDX: 000000000000024a RSI: 0000000000000000 RDI: 0000000000000000 [ 568.503342][T16204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.511339][T16204] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.519337][T16204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.527338][T16204] Uninit was stored to memory at: [ 568.532372][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.538127][T16204] __msan_chain_origin+0x54/0xa0 [ 568.543092][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.548234][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.553198][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.557989][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.563489][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.569070][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.574297][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.579174][T16204] do_SYSENTER_32+0x73/0x90 [ 568.583702][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.590060][T16204] [ 568.592383][T16204] Uninit was stored to memory at: [ 568.597399][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.603138][T16204] __msan_chain_origin+0x54/0xa0 [ 568.608093][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.613251][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.618202][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.622977][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.628492][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.634073][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.639289][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.644157][T16204] do_SYSENTER_32+0x73/0x90 [ 568.648759][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.655099][T16204] [ 568.657438][T16204] Uninit was stored to memory at: [ 568.662450][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.668183][T16204] __msan_chain_origin+0x54/0xa0 [ 568.673136][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.678255][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.683226][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.687999][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.693391][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.698961][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.704178][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.709042][T16204] do_SYSENTER_32+0x73/0x90 [ 568.713554][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.719910][T16204] [ 568.722225][T16204] Uninit was stored to memory at: [ 568.727240][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.732976][T16204] __msan_chain_origin+0x54/0xa0 [ 568.737923][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.743053][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.748001][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.752777][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.758184][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.763750][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.768960][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.773826][T16204] do_SYSENTER_32+0x73/0x90 [ 568.778337][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.784677][T16204] [ 568.786998][T16204] Uninit was stored to memory at: [ 568.792015][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.797747][T16204] __msan_chain_origin+0x54/0xa0 [ 568.802696][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.807818][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.812765][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.817568][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.822958][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.828520][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.833729][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.838592][T16204] do_SYSENTER_32+0x73/0x90 [ 568.843102][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.849443][T16204] [ 568.851760][T16204] Uninit was stored to memory at: [ 568.856771][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.862502][T16204] __msan_chain_origin+0x54/0xa0 [ 568.867449][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.872572][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.877516][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.882291][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.887673][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.893233][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.898445][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.903306][T16204] do_SYSENTER_32+0x73/0x90 [ 568.907819][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.914183][T16204] [ 568.916505][T16204] Uninit was stored to memory at: [ 568.921540][T16204] kmsan_internal_chain_origin+0xad/0x130 [ 568.927279][T16204] __msan_chain_origin+0x54/0xa0 [ 568.932231][T16204] __get_compat_msghdr+0x6db/0x9d0 [ 568.937360][T16204] get_compat_msghdr+0x108/0x2b0 [ 568.942322][T16204] __sys_sendmmsg+0x79d/0x1010 [ 568.947113][T16204] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 568.952517][T16204] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 568.958092][T16204] __do_fast_syscall_32+0x127/0x180 [ 568.963321][T16204] do_fast_syscall_32+0x77/0xd0 [ 568.968194][T16204] do_SYSENTER_32+0x73/0x90 [ 568.972717][T16204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.979066][T16204] [ 568.981390][T16204] Local variable ----msg_sys@__sys_sendmmsg created at: [ 568.988402][T16204] __sys_sendmmsg+0xbd/0x1010 [ 568.993103][T16204] __sys_sendmmsg+0xbd/0x1010 [ 569.106356][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.155328][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.226403][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080), 0x4) 15:35:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 15:35:25 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 15:35:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 570.196104][T16228] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 570.331866][T16234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 570.403836][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71009000000ffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 15:35:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:35:26 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:35:26 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:35:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 571.211945][T16252] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 571.299491][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.306257][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 15:35:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r0, 0x20, 0x0, 0xffffffff000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) 15:35:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000000080)) 15:35:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 571.629349][T16261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 571.875165][ T35] audit: type=1326 audit(1625585727.452:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0549 code=0xffff0000 15:35:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'nr0\x00', 'macsec0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wlan0\x00', {0x0, 0x0, 0xd901, 0x0, 0x0, 0x10005, 0xfffffffd}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1f8, 0x1f8, 0x128, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wlan0\x00', {0x0, 0x0, 0xd901, 0x0, 0x0, 0x10005, 0xfffffffd}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff2b) 15:35:27 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000960], 0x2, 0x0, &(0x7f0000000900)=[{}, {}, {}]}, 0xe0) 15:35:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210156000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:35:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000400)="3d9c7e9dd799fe2bb80020307877a48044b9f07025b476cc9127b6e1eff4f9fa6fa5537f1aea08d69d9bcdf479048f3555947e65a377a8001e3d8bf10f2e7a5daf50d19abf72a0cc32ff58e90d413f6351ea9269253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000480)="ddbf2011806e6720f319cf7328576c5012720676d84a2850003de9db12cfcf678d019c76b79320582d67d9d9e571b973616e6b40781ec3f1b435b3f02989f94c0f97948d7eb40fa30d34ab7b60e54947269ebf42004d943feb7c6aaf40e305797c4d8ee502250ecfa8969a5e46512b84d3910adadd7baf16836512e01c6600bf3dba330f622a890b81cfe7e3f5198eaa479f8fb4bb6cb29da01738d3c731118d05cc82b7018f2fb6b312aad5a940880f1c43ecb052624e41d8cbc7a05194ce7de7c588ea428b45cdc50c07b5fceb3f16ff584cb3e676a5ebf4113730733e88e1f9fa3fc220dc2ee0233d", 0xea}], 0x3, 0xf1, 0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x20000401) r4 = dup(r3) write$nbd(r4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c80)="a85e2ee4619fdebb42dec9e5fd6a63541d0b6a2cd8572f61a3a36c52b87eb43afa0240dd8793e2bd2daee1902275da55eceb3870dc8bf4ca25f022061aa5e6945a83df3f3b67a4326e99cbd5e1ac91ca1cc2a071d3d6f163d90100001000000000b1492d6b0cff875a2f044cdab789c10004000013a15d5d99059a6d30ee1147982e5448ba62daff2a5069403fb21875c41b0233cd2e886cd51e8a7b7180fc15161342fc0775", 0xa6}, {&(0x7f0000000680)="3a75b19fb2be2d5b3fd46b18754c3c1aba9086251e7c4d40751093005e4e5d9c1ef3421eee1a7d73c14f83ff56382c3433778b25d2c36bf6bff13a2a662dd9557bb0f5217133c7d80dc25e0afcd4841103f5da4af2a86d392615aefbbccc632afd0626c3a37278c4be50aca0b5974b8c56669e079fc331b1175e04b45f6a2054b60aa3ccececf117a4b8b3ef6f818014854d", 0x92}, {&(0x7f0000002e00)="b201c54f415df9915611b8f46a", 0xd}], 0x3, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00000000069e4f64000200000000000000000000795b5c0d1311d5a318974b5720bfe1db0f17d130f0000075f337049d3af285a2df03f95ff8616f49b0e0e6", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003400003f17d197ea73b7f9980608f87c1594000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES64, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0af949c1d6e96d88f4cb3c8a123333758eabab20017ab5b5f2d7771279a30485cd614c8b0add0234bec83234bf6392fc19b1ad1294ca6b86fa7ce427a46c377aa08c3d15749278ba809bf5b9ecd5d439c7ba86c1358733813f4cdf8ceb30", @ANYBLOB="000000001c0000000000af1048045e2f703a000018d865dcb2c9699d200e49ed912422be992642630cbcaef478c8f118e97f4e8cd9aced00a3cc4abfd75531312fb70a24a4b0941f34e9aa8069f2824e3186fa360d5252a04259bb78be104ba465a7f3b3bcddff478c63decfd8db45ac0baba66fed4a0cafd1a738d07689eda4b04f77ee910079699b9ea05abf17f7b04e9fa6996b22360ea1d6d02b199d839032", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r3, @ANYRES16, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00090400"], 0x158}, 0x884) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4020000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fbdbdf2501000000ff00000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x404c894) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x30, r5, 0x200, 0x70bd27, 0x25dfdb7c, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x200040d0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2866b0867cfa0afaab66a7c66b8d933233ba145738da464263d147fec676a2e5d803534999906571f2e1ad5a708ff2e66b823d68ea18f8119909faf7c3", @ANYRES16=r5, @ANYBLOB="00022abd7000ffdbdf25010000000000000002410000000c001369623a6c6f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 15:35:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010004507000000000000004000000000", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 572.854996][T16288] __nla_validate_parse: 2 callbacks suppressed [ 572.855061][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 572.926612][T16285] ===================================================== [ 572.933587][T16285] BUG: KMSAN: uninit-value in ppp_async_push+0xd0b/0x21a0 [ 572.940874][T16285] CPU: 1 PID: 16285 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 572.949657][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.959823][T16285] Call Trace: [ 572.963133][T16285] dump_stack+0x24c/0x2e0 [ 572.966761][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 572.967499][T16285] kmsan_report+0xfb/0x1e0 [ 572.967542][T16285] __msan_warning+0x5c/0xa0 [ 572.967575][T16285] ppp_async_push+0xd0b/0x21a0 [ 572.967614][T16285] ? kmsan_get_metadata+0x116/0x180 [ 572.995641][T16285] ? kmsan_set_origin_checked+0xa2/0x100 [ 573.001307][T16285] ppp_async_send+0x144/0x1e0 [ 573.006042][T16285] ? async_lcp_peek+0xe20/0xe20 [ 573.010952][T16285] __ppp_channel_push+0x1a7/0x3b0 [ 573.016001][T16285] ppp_write+0x785/0x810 [ 573.020275][T16285] ? ppp_read+0xde0/0xde0 [ 573.024637][T16285] vfs_write+0x6cc/0x1b00 [ 573.028994][T16285] ? __msan_instrument_asm_store+0x104/0x130 [ 573.035005][T16285] ? kmsan_internal_set_origin+0x82/0xc0 [ 573.040665][T16285] ? kmsan_get_metadata+0x116/0x180 [ 573.045893][T16285] ksys_write+0x275/0x500 [ 573.050253][T16285] __se_sys_write+0x92/0xb0 [ 573.054787][T16285] __ia32_sys_write+0x4a/0x70 [ 573.059498][T16285] __do_fast_syscall_32+0x127/0x180 [ 573.064729][T16285] do_fast_syscall_32+0x77/0xd0 [ 573.069609][T16285] do_SYSENTER_32+0x73/0x90 [ 573.074136][T16285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.080492][T16285] RIP: 0023:0xf7f31549 [ 573.084574][T16285] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 573.104206][T16285] RSP: 002b:00000000f552b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 573.112832][T16285] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 573.120831][T16285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.128830][T16285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.136827][T16285] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.144924][T16285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.152924][T16285] [ 573.155255][T16285] Uninit was created at: [ 573.159578][T16285] kmsan_internal_poison_shadow+0x66/0xd0 [ 573.165335][T16285] kmsan_slab_alloc+0x8e/0xe0 [ 573.170032][T16285] __kmalloc_node_track_caller+0xa4f/0x1470 [ 573.175951][T16285] __alloc_skb+0x4dd/0xe90 [ 573.180452][T16285] ppp_write+0x11f/0x810 [ 573.184721][T16285] vfs_write+0x6cc/0x1b00 [ 573.189077][T16285] ksys_write+0x275/0x500 [ 573.193431][T16285] __se_sys_write+0x92/0xb0 [ 573.197963][T16285] __ia32_sys_write+0x4a/0x70 [ 573.202665][T16285] __do_fast_syscall_32+0x127/0x180 [ 573.207888][T16285] do_fast_syscall_32+0x77/0xd0 [ 573.212760][T16285] do_SYSENTER_32+0x73/0x90 [ 573.217282][T16285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.223640][T16285] ===================================================== [ 573.230624][T16285] Disabling lock debugging due to kernel taint [ 573.236786][T16285] Kernel panic - not syncing: panic_on_kmsan set ... [ 573.243606][T16285] CPU: 1 PID: 16285 Comm: syz-executor.4 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 573.253795][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.264006][T16285] Call Trace: [ 573.267367][T16285] dump_stack+0x24c/0x2e0 [ 573.271735][T16285] panic+0x4c6/0xea7 [ 573.275735][T16285] ? add_taint+0x17c/0x210 [ 573.280173][T16285] kmsan_report+0x1de/0x1e0 [ 573.284713][T16285] __msan_warning+0x5c/0xa0 [ 573.289251][T16285] ppp_async_push+0xd0b/0x21a0 [ 573.294044][T16285] ? kmsan_get_metadata+0x116/0x180 [ 573.299266][T16285] ? kmsan_set_origin_checked+0xa2/0x100 [ 573.304922][T16285] ppp_async_send+0x144/0x1e0 [ 573.309625][T16285] ? async_lcp_peek+0xe20/0xe20 [ 573.314586][T16285] __ppp_channel_push+0x1a7/0x3b0 [ 573.319632][T16285] ppp_write+0x785/0x810 [ 573.323936][T16285] ? ppp_read+0xde0/0xde0 [ 573.328294][T16285] vfs_write+0x6cc/0x1b00 [ 573.332690][T16285] ? __msan_instrument_asm_store+0x104/0x130 [ 573.338718][T16285] ? kmsan_internal_set_origin+0x82/0xc0 [ 573.344418][T16285] ? kmsan_get_metadata+0x116/0x180 [ 573.349648][T16285] ksys_write+0x275/0x500 [ 573.354065][T16285] __se_sys_write+0x92/0xb0 [ 573.358606][T16285] __ia32_sys_write+0x4a/0x70 [ 573.363309][T16285] __do_fast_syscall_32+0x127/0x180 [ 573.368536][T16285] do_fast_syscall_32+0x77/0xd0 [ 573.373410][T16285] do_SYSENTER_32+0x73/0x90 [ 573.377942][T16285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.384301][T16285] RIP: 0023:0xf7f31549 [ 573.388412][T16285] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 573.408052][T16285] RSP: 002b:00000000f552b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 573.416505][T16285] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 573.424509][T16285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.432502][T16285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.440490][T16285] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.448482][T16285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.457537][T16285] Kernel Offset: disabled [ 573.461863][T16285] Rebooting in 86400 seconds..