Warning: Permanently added '10.128.0.84' (ECDSA) to the list of known hosts. 2018/11/07 23:07:40 fuzzer started 2018/11/07 23:07:45 dialing manager at 10.128.0.26:33091 syzkaller login: [ 82.697069] ld (6566) used greatest stack depth: 53232 bytes left 2018/11/07 23:07:45 syscalls: 1 2018/11/07 23:07:45 code coverage: enabled 2018/11/07 23:07:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/07 23:07:45 setuid sandbox: enabled 2018/11/07 23:07:45 namespace sandbox: enabled 2018/11/07 23:07:45 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/07 23:07:45 fault injection: enabled 2018/11/07 23:07:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/07 23:07:45 net packed injection: enabled 2018/11/07 23:07:45 net device setup: enabled 23:10:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) [ 263.770210] IPVS: ftp: loaded support on port[0] = 21 [ 266.258044] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.264681] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.273710] device bridge_slave_0 entered promiscuous mode [ 266.421419] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.428045] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.437122] device bridge_slave_1 entered promiscuous mode [ 266.581557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.726624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.185082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.333156] bond0: Enslaving bond_slave_1 as an active interface with an up link 23:10:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x0, 0x10}, &(0x7f0000000040)=0x18) [ 267.620847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.628004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.322025] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.330112] team0: Port device team_slave_0 added [ 268.460908] IPVS: ftp: loaded support on port[0] = 21 [ 268.482360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.490463] team0: Port device team_slave_1 added [ 268.743736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.750778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.760037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.998121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 269.005494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.014646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.333952] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.342394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.352005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.538290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.546142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.556905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.076749] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.083346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.090519] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.097146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.106147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.384831] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.391327] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.400179] device bridge_slave_0 entered promiscuous mode [ 272.422470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.644701] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.651175] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.660121] device bridge_slave_1 entered promiscuous mode [ 272.845643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.015184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.580207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.742095] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.056319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 274.063511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.317189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 274.324444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.889059] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 274.897296] team0: Port device team_slave_0 added 23:10:58 executing program 2: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000880)={0x0, @reserved}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000300)=""/101, 0xfffffdd7, 0x120, 0x0, 0x54fca8a0505bc1c8) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000001700)=@rc, 0x80, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/22, 0x16}}], 0x1, 0x40000001, &(0x7f0000005080)={0x0, 0x989680}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=""/40, &(0x7f0000001000)=0x28) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00002abd7000000000000a0000003000020008000800ffff000008000500ff0f0000080005000900000014000100e000000100000000000000000000000008000500"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40000) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000700)={0x80, 0x3, 0x3, 0x63f50061, &(0x7f00000005c0)=[{}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000031feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000780)={{0x2, @name="0de0ef5733887f0d044f78ff1567859bc888f4dcae51a36419437f526717e1c5"}, "8358b5cc31a1b27095b37fba6aec951c3cc231ffbc8f980b248a10c5990e81a4", 0x2}) [ 275.226814] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 275.234987] team0: Port device team_slave_1 added [ 275.560764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 275.568056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.577038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.891375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 275.898646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.907620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.929096] IPVS: ftp: loaded support on port[0] = 21 [ 276.196693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 276.204462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.213740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.603125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 276.610825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.620325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.018073] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.024613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.031606] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.038230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.047243] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 280.203184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.323491] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.329975] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.338774] device bridge_slave_0 entered promiscuous mode [ 280.661856] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.668322] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.677038] device bridge_slave_1 entered promiscuous mode [ 280.942147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 281.195557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 282.057024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.399756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.743150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 282.750318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.051513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 283.058834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.860099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.883872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.892206] team0: Port device team_slave_0 added [ 284.089938] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.098132] team0: Port device team_slave_1 added [ 284.451451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.458923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.467688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:11:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r3) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000003c0)=""/95) [ 284.753918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.761005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.769812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.052644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 285.134185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 285.142140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.151144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.509248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 285.517056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.527637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.955822] IPVS: ftp: loaded support on port[0] = 21 [ 286.514628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 286.520916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.529040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.801245] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.673781] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.680249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.687173] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.693704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.703280] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 289.709862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.869712] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.876478] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.885387] device bridge_slave_0 entered promiscuous mode [ 292.221170] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.227796] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.236807] device bridge_slave_1 entered promiscuous mode [ 292.295776] not chained 10000 origins [ 292.299635] CPU: 1 PID: 7120 Comm: ip Not tainted 4.19.0+ #78 [ 292.305533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.314967] Call Trace: [ 292.317587] dump_stack+0x32d/0x480 [ 292.321244] ? save_stack_trace+0xc6/0x110 [ 292.325537] kmsan_internal_chain_origin+0x222/0x240 [ 292.330688] ? br_port_fill_attrs+0x366/0x1ea0 [ 292.335323] ? do_syscall_64+0xcf/0x110 [ 292.339326] ? kmsan_internal_chain_origin+0x136/0x240 [ 292.344627] ? __msan_chain_origin+0x6d/0xd0 [ 292.349056] ? __save_stack_trace+0x8be/0xc60 [ 292.353575] ? save_stack_trace+0xc6/0x110 [ 292.357857] ? kmsan_internal_chain_origin+0x136/0x240 [ 292.363155] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 292.367857] ? __msan_memcpy+0x6f/0x80 [ 292.371783] ? nla_put+0x20a/0x2d0 [ 292.375349] ? br_port_fill_attrs+0x366/0x1ea0 [ 292.379989] ? br_port_fill_slave_info+0xff/0x120 [ 292.384867] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.389390] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.393822] ? netlink_dump+0xb09/0x1750 [ 292.397904] ? netlink_recvmsg+0xec2/0x19d0 [ 292.402257] ? sock_recvmsg+0x1d1/0x230 [ 292.406272] ? ___sys_recvmsg+0x444/0xae0 [ 292.410443] ? __se_sys_recvmsg+0x2fa/0x450 [ 292.414789] ? __x64_sys_recvmsg+0x4a/0x70 [ 292.419059] ? do_syscall_64+0xcf/0x110 [ 292.423073] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.428504] ? get_stack_info+0x863/0x9d0 [ 292.432712] __msan_chain_origin+0x6d/0xd0 [ 292.436972] ? __se_sys_recvmsg+0x2fa/0x450 [ 292.441313] __save_stack_trace+0x8be/0xc60 [ 292.445693] ? __se_sys_recvmsg+0x2fa/0x450 [ 292.450043] save_stack_trace+0xc6/0x110 [ 292.454134] kmsan_internal_chain_origin+0x136/0x240 [ 292.459280] ? kmsan_internal_chain_origin+0x136/0x240 [ 292.464589] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 292.469280] ? __msan_memcpy+0x6f/0x80 [ 292.473202] ? nla_put+0x20a/0x2d0 [ 292.476782] ? br_port_fill_attrs+0x366/0x1ea0 [ 292.481394] ? br_port_fill_slave_info+0xff/0x120 [ 292.486272] ? rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.490795] ? rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.495251] ? netlink_dump+0xb09/0x1750 [ 292.499337] ? netlink_recvmsg+0xec2/0x19d0 [ 292.503682] ? sock_recvmsg+0x1d1/0x230 [ 292.507687] ? ___sys_recvmsg+0x444/0xae0 [ 292.511874] ? __msan_poison_alloca+0x1e0/0x2b0 [ 292.516606] ? kmsan_set_origin+0x83/0x130 [ 292.520873] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 292.526342] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.530879] __msan_memcpy+0x6f/0x80 [ 292.534626] nla_put+0x20a/0x2d0 [ 292.538040] br_port_fill_attrs+0x366/0x1ea0 [ 292.542498] br_port_fill_slave_info+0xff/0x120 [ 292.547202] ? br_port_get_slave_size+0x30/0x30 [ 292.551923] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.556331] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.560720] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 292.566138] ? rtnl_getlink+0xde0/0xde0 [ 292.570133] netlink_dump+0xb09/0x1750 [ 292.574074] netlink_recvmsg+0xec2/0x19d0 [ 292.578306] sock_recvmsg+0x1d1/0x230 [ 292.582140] ? netlink_sendmsg+0x1440/0x1440 [ 292.586590] ___sys_recvmsg+0x444/0xae0 [ 292.590621] ? __msan_poison_alloca+0x1e0/0x2b0 [ 292.595351] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 292.600739] ? __fdget+0x23c/0x440 [ 292.604329] __se_sys_recvmsg+0x2fa/0x450 [ 292.608532] __x64_sys_recvmsg+0x4a/0x70 [ 292.612623] do_syscall_64+0xcf/0x110 [ 292.616457] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.621761] RIP: 0033:0x7fef250d2210 [ 292.625505] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 292.644428] RSP: 002b:00007ffcfeea3368 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 292.652180] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef250d2210 [ 292.659471] RDX: 0000000000000000 RSI: 00007ffcfeea33b0 RDI: 0000000000000003 [ 292.666776] RBP: 0000000000001c28 R08: 00007fef2537bec8 R09: 00007fef25118c00 [ 292.674073] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006395c0 [ 292.681363] R13: 00007ffcfeea7440 R14: 0000000000001c28 R15: 00007ffcfeea5018 [ 292.688687] Uninit was stored to memory at: [ 292.693059] kmsan_internal_chain_origin+0x136/0x240 [ 292.698209] __msan_chain_origin+0x6d/0xd0 [ 292.702469] __save_stack_trace+0x8be/0xc60 [ 292.706811] save_stack_trace+0xc6/0x110 [ 292.710897] kmsan_internal_chain_origin+0x136/0x240 [ 292.716022] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.720542] __msan_memcpy+0x6f/0x80 [ 292.724286] nla_put+0x20a/0x2d0 [ 292.727674] br_port_fill_attrs+0x366/0x1ea0 [ 292.732104] br_port_fill_slave_info+0xff/0x120 [ 292.736806] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.741159] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.745412] netlink_dump+0xb09/0x1750 [ 292.749319] netlink_recvmsg+0xec2/0x19d0 [ 292.753493] sock_recvmsg+0x1d1/0x230 [ 292.757317] ___sys_recvmsg+0x444/0xae0 [ 292.761310] __se_sys_recvmsg+0x2fa/0x450 [ 292.765479] __x64_sys_recvmsg+0x4a/0x70 [ 292.769557] do_syscall_64+0xcf/0x110 [ 292.773377] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.778575] [ 292.780214] Uninit was stored to memory at: [ 292.784558] kmsan_internal_chain_origin+0x136/0x240 [ 292.789682] __msan_chain_origin+0x6d/0xd0 [ 292.793936] __save_stack_trace+0x8be/0xc60 [ 292.798283] save_stack_trace+0xc6/0x110 [ 292.802372] kmsan_internal_chain_origin+0x136/0x240 [ 292.807506] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.812023] __msan_memcpy+0x6f/0x80 [ 292.815780] nla_put+0x20a/0x2d0 [ 292.819165] br_port_fill_attrs+0x366/0x1ea0 [ 292.823596] br_port_fill_slave_info+0xff/0x120 [ 292.828288] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.832632] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.836896] netlink_dump+0xb09/0x1750 [ 292.840826] netlink_recvmsg+0xec2/0x19d0 [ 292.845000] sock_recvmsg+0x1d1/0x230 [ 292.848825] ___sys_recvmsg+0x444/0xae0 [ 292.852833] __se_sys_recvmsg+0x2fa/0x450 [ 292.857016] __x64_sys_recvmsg+0x4a/0x70 [ 292.861096] do_syscall_64+0xcf/0x110 [ 292.864920] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.870124] [ 292.871766] Uninit was stored to memory at: [ 292.876110] kmsan_internal_chain_origin+0x136/0x240 [ 292.881233] __msan_chain_origin+0x6d/0xd0 [ 292.885492] __save_stack_trace+0x8be/0xc60 [ 292.889831] save_stack_trace+0xc6/0x110 [ 292.893919] kmsan_internal_chain_origin+0x136/0x240 [ 292.899048] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.903581] __msan_memcpy+0x6f/0x80 [ 292.907325] nla_put+0x20a/0x2d0 [ 292.910710] br_port_fill_attrs+0x366/0x1ea0 [ 292.915175] br_port_fill_slave_info+0xff/0x120 [ 292.919871] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 292.924215] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 292.928480] netlink_dump+0xb09/0x1750 [ 292.932391] netlink_recvmsg+0xec2/0x19d0 [ 292.936564] sock_recvmsg+0x1d1/0x230 [ 292.940409] ___sys_recvmsg+0x444/0xae0 [ 292.944429] __se_sys_recvmsg+0x2fa/0x450 [ 292.948599] __x64_sys_recvmsg+0x4a/0x70 [ 292.952696] do_syscall_64+0xcf/0x110 [ 292.956518] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.961720] [ 292.963368] Uninit was stored to memory at: [ 292.967714] kmsan_internal_chain_origin+0x136/0x240 [ 292.972844] __msan_chain_origin+0x6d/0xd0 [ 292.977097] __save_stack_trace+0x8be/0xc60 [ 292.981437] save_stack_trace+0xc6/0x110 [ 292.985529] kmsan_internal_chain_origin+0x136/0x240 [ 292.990665] kmsan_memcpy_origins+0x13d/0x1b0 [ 292.995191] __msan_memcpy+0x6f/0x80 [ 292.998926] nla_put+0x20a/0x2d0 [ 293.002316] br_port_fill_attrs+0x366/0x1ea0 [ 293.006745] br_port_fill_slave_info+0xff/0x120 [ 293.011455] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 293.015807] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 293.020059] netlink_dump+0xb09/0x1750 [ 293.023964] netlink_recvmsg+0xec2/0x19d0 [ 293.028174] sock_recvmsg+0x1d1/0x230 [ 293.032015] ___sys_recvmsg+0x444/0xae0 [ 293.036009] __se_sys_recvmsg+0x2fa/0x450 [ 293.040188] __x64_sys_recvmsg+0x4a/0x70 [ 293.044282] do_syscall_64+0xcf/0x110 [ 293.048115] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.053311] [ 293.054947] Uninit was stored to memory at: [ 293.059294] kmsan_internal_chain_origin+0x136/0x240 [ 293.064422] __msan_chain_origin+0x6d/0xd0 [ 293.068677] __save_stack_trace+0x8be/0xc60 [ 293.073018] save_stack_trace+0xc6/0x110 [ 293.077113] kmsan_internal_chain_origin+0x136/0x240 [ 293.082238] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.086776] __msan_memcpy+0x6f/0x80 [ 293.090514] nla_put+0x20a/0x2d0 [ 293.093935] br_port_fill_attrs+0x366/0x1ea0 [ 293.098368] br_port_fill_slave_info+0xff/0x120 [ 293.103055] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 293.107400] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 293.111670] netlink_dump+0xb09/0x1750 [ 293.115578] netlink_recvmsg+0xec2/0x19d0 [ 293.119757] sock_recvmsg+0x1d1/0x230 [ 293.123578] ___sys_recvmsg+0x444/0xae0 [ 293.127574] __se_sys_recvmsg+0x2fa/0x450 [ 293.131739] __x64_sys_recvmsg+0x4a/0x70 [ 293.135829] do_syscall_64+0xcf/0x110 [ 293.139654] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.144851] [ 293.146508] Uninit was stored to memory at: [ 293.150853] kmsan_internal_chain_origin+0x136/0x240 [ 293.155990] __msan_chain_origin+0x6d/0xd0 [ 293.160255] __save_stack_trace+0x8be/0xc60 [ 293.164598] save_stack_trace+0xc6/0x110 [ 293.168678] kmsan_internal_chain_origin+0x136/0x240 [ 293.173802] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.178322] __msan_memcpy+0x6f/0x80 [ 293.182054] nla_put+0x20a/0x2d0 [ 293.185443] br_port_fill_attrs+0x366/0x1ea0 [ 293.189873] br_port_fill_slave_info+0xff/0x120 [ 293.194582] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 293.198945] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 293.203196] netlink_dump+0xb09/0x1750 [ 293.207106] netlink_recvmsg+0xec2/0x19d0 [ 293.211295] sock_recvmsg+0x1d1/0x230 [ 293.215120] ___sys_recvmsg+0x444/0xae0 [ 293.219129] __se_sys_recvmsg+0x2fa/0x450 [ 293.223304] __x64_sys_recvmsg+0x4a/0x70 [ 293.227392] do_syscall_64+0xcf/0x110 [ 293.231221] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.236427] [ 293.238063] Uninit was stored to memory at: [ 293.242416] kmsan_internal_chain_origin+0x136/0x240 [ 293.247545] __msan_chain_origin+0x6d/0xd0 [ 293.251804] __save_stack_trace+0x8be/0xc60 [ 293.256147] save_stack_trace+0xc6/0x110 [ 293.260236] kmsan_internal_chain_origin+0x136/0x240 [ 293.265373] kmsan_memcpy_origins+0x13d/0x1b0 [ 293.269895] __msan_memcpy+0x6f/0x80 [ 293.273770] nla_put+0x20a/0x2d0 [ 293.277950] br_port_fill_attrs+0x366/0x1ea0 [ 293.282651] br_port_fill_slave_info+0xff/0x120 [ 293.288110] rtnl_fill_ifinfo+0x5b6e/0x6d80 [ 293.293021] rtnl_dump_ifinfo+0xbe5/0x19b0 [ 293.297980] netlink_dump+0xb09/0x1750 [ 293.301891] netlink_recvmsg+0xec2/0x19d0 [ 293.306069] sock_recvmsg+0x1d1/0x230 [ 293.309898] ___sys_recvmsg+0x444/0xae0 [ 293.313897] __se_sys_recvmsg+0x2fa/0x450 [ 293.318067] __x64_sys_recvmsg+0x4a/0x70 [ 293.322151] do_syscall_64+0xcf/0x110 [ 293.325979] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.331177] [ 293.332819] Local variable description: ----c.i.i@should_fail [ 293.339250] Variable was created at: [ 293.342994] should_fail+0x162/0x13c0 [ 293.346825] __alloc_pages_nodemask+0x6fd/0x6640 [ 293.372092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.749543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.899752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.153589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.342883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.706058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 295.713228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 23:11:18 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000007f00)={&(0x7f0000007cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000007ec0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000007f40)={0x0, 0x3, &(0x7f0000000440), &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000740)=""/215}, 0x48) getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)="47ff4c00", 0x0, 0x99, &(0x7f0000ce7000)=""/153}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffff7f00000000, 0xe, 0x34, &(0x7f00000000c0)="3b1163cd78b89e1ba101df682bb0", &(0x7f00007ec000)=""/52}, 0x28) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f00000002c0), &(0x7f0000000240)=""/9}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05e, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4) [ 296.215784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 296.222947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.800881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 297.470220] IPVS: ftp: loaded support on port[0] = 21 [ 297.501389] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 297.509530] team0: Port device team_slave_0 added [ 298.051006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 298.059191] team0: Port device team_slave_1 added 23:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x5e, 0x20800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 298.436907] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 298.450529] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 298.458172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.466123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.615533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 298.622705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.631411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:11:22 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xec43, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000080), &(0x7f0000013000)=0x4) close(r0) [ 299.081080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 299.088307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.097218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.541380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 299.549325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.558515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:11:22 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000290000004300000067dfd2feaac2ed26b75ee1d1"], 0x10}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x23) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000006dc0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000006ec0)=0xe8) pkey_alloc(0x0, 0x0) sendmmsg(r0, &(0x7f0000007280)=[{{&(0x7f0000000040)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="336cc2d01a1b5323554d3db38a9f418dc1a438095e0ceb1999be160499eec584cb72d7834d096cc83043995848757dfc"}], 0x0, &(0x7f0000000140), 0x0, 0x4000804}, 0xe6}, {{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x4, 0x2, 0x1, 0x2}}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="35a23173df43e24bb672c9be538b734aaab2fa4a4fe52d6efce6a9517ca5efd402b99b6eb277a2718b7cbeffd67a8de183a5920b216cdbf98361d207a11960f6ea02bb7a9b2dc6549392da22c3e30b51595ae7d9fc9628d56e6c7996bfea61cdf3c04e7eb7ae0308e1dff07d22bc53ea7e69b01538fe007eb06c045152ffd9d9b359c7a502ba0e470de9f825942429b053e976ecdc6e71f17bdfd3753608ea58bd9af2bf1e5dfa1464ee2bcbf2ad92d80afa92525fa6d5625104c568c8857592170d995bce29"}], 0x0, &(0x7f0000000540)=[{0x0, 0x11e, 0x5, "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"}, {0x0, 0x84, 0x9, "876613b533e340de9333bb8b6b4c9f85824cdbd39de7170d9b8058bd3723f0df8b6a03a85fafc99ebc1aa1c192ecd7e52fd1a47f7438d32080213ebbc9f99545be3888423975788d9c2b415a49728aa385886af7"}], 0x0, 0x24008005}, 0xfffffffffffff0d9}, {{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local}, 0x4, 0x4, 0x4, 0x4}}, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)="1122428df6e14806c884ab23537169e15f9eb7311b202b47288614e0812a9d6be51ba0918a3b39"}, {&(0x7f00000015c0)="3af2971d783ac85e72b709cb9be3a3674f1c8f3203510111cfa65bc7f4c097946968d0479bae186e4703c641a9d4858e16ab69319828cdd629654769f2039d107aa95ef7676779cdd09e62cc20728fc70942c424e0a3697873187147a7cc9e62997791c531573364f58154f4ebf48445f8d391494b853b5b937fddf0b8ec7c8c9120a046fe0ae8e76dbebea600c049faae849caaf47a2e37237dc54f26b09dc0d315ae4c2e12bf17b8b8e42cc820861b"}, {&(0x7f0000001680)="588c7cee02104633ebd7e7d7403d756c3b7ce9d8e3f71a05a538f75cae124859162703c43f8c78baba55c4ed3e70a5e5a7828f66ae6622bb7a8b535f5dfe1c1e30ed06a471ee9d750302b06c5dbd2c6a2a540129282299f780c605d7278fc14f9d080c16b267cda37a7f2760fe291dfc28f2b6b971623a0ed13f273ae0abd756e13592b61709a3c2ae969f94ea54ac293bd851f25fc82cb8bebd"}], 0x0, 0x0, 0x0, 0x4f62599358af1a7d}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001740)="d1f637a86fdf7d1909ddd0f06aca94ea0ad4e9c0c53468b9680e56424dcc0ea96a9ddb8fee6aceed6bf440f984b5303de7e59f198ad569913c6fd3d274d9e400288ee13f27164019b3ba705998ec0dc8ab5b536d6c8351039ea322bb8c8b77e925d7d7255ceb7954d332e2ebb35f0fbaf7c15fb42704757f1da22fa247dead6fea4b3e8ab460998e67c415e3b206e03ccdf17835502884c57c6d9c0b4604e69781b4f4e7dec1dc2b436056a2a64966733a47e5f47496b5cd32f7df7d41f4d221a4455f18adcb10543839c9f7f675"}, {&(0x7f0000000480)="502914c04f03d8fbfe581c56d808abe503"}, {&(0x7f0000001840)="c394316e4925c3edf5bf25a9cad6d6c7a6bd6c93f15268f19cf7569919d3b01153b0f9d2d8c475c83663401eee8669abc0e08ee9af3898e42b61295472a4315b744dd7006cd598ec22529dbf16070d271738a517d03caaeb875341b791449781f14f3761dad2a0f2e769ac0a6b530520cb7fb98ccc2bb700648b706122ed199fc3b7b5f81ff817a68010bde1f8692170e227d5e8530fd2a3a0dc9c4b1861a5b232ed5decdc61d6a30828a71d6ee7e87e2e8ed1b1e589650a63a4a00fe39fc563"}, {&(0x7f0000001900)="7d3451c8d4678a0155044f4d745bb0df3c8993427a8d20a7b1afb320705e6e99c54cfd85b538518134ed9f753fb1904fe1b0f4834cbb6328bcb735d1964fb6b23e1ebad3a8a93765aa02222f36c667061f0bbe28c69e611de2d534012bc8d0e58f2de8d32ef6731fe55b6870b91d6962619f7b3ef5ef9762693beaaf5c617951f024be0ad70b6542d42bc98566ee2b65e1a32f832e8bb63cf26b3f"}], 0x0, &(0x7f0000001a00)=[{0x0, 0x10f, 0x1f, "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"}], 0x0, 0x8840}, 0x9}, {{&(0x7f0000002a40)=@generic={0x1, "6e7c28f25adcaa46e89320d0e4e9274e7f73c1a70fa0f4fdba5c06ac8cfc98ed605d6516e66f16852e14a5c568e3c9ae0a25114ff8e332da7caec48b3cb35f8cb2cbe31482663fd6681159aa8232846b42331751c558c2795bbf77a0119a27b8e4fc1c18e4d0e08dcac83c30f9384824336aee38059156327aee0ca8731f"}, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002ac0)="c04b2f5af5079b5bbdb7c87a71c0660a40506e44001e068f8e21c666793ec8561d39e4a4d666eedd0e8f4fd70d8b1121467aabafa5ec5463232e2556005ef4970a28777ac3ae32e898d35b065fa314977aec6bdad925fd43f578b50dd7cc652a905bdd6a61d1e76f84ed2f0f2160992431df953668195c40bc7587f2d5e26ea898f8645f61ddf8472bab4710c2366c3962c8375d666f0c963b2e"}, {&(0x7f0000002b80)="15513539681594bc5ce6f0aca53ca535"}, {&(0x7f0000002bc0)="7608052ca077a782fa53ec578160ad6e9a4428dc717ed8abc5afb0be52fad13446334651f906e16021070d6e977ed3c0208909a0978ba6c2aa8cf728f1c5b5bc0d08f0"}, {&(0x7f0000002c40)="b045c35518bfeedc6a4f257044d69af9c0744d934398fd955cf22dd1fb38b1c93e985801feb59cc5aa1100c19406fa67a2773aa7e176a5e18e554a38975d6511eb8d6a3d9fd3ef5d25e485cb517aa40e83d1d466346f34a2cc5de872bc24e747c2ee4db1ab0a5c93bca8611df040ed4b25fe7430a9ca4a6acd2f73388750a9ef9be6e54372b390d0b19761f90e0b03b656d8994debc305d0e7cd1d91a90792ab76faddb21c1ded9c38082a990847b7101a9c19f85822743ced2a4f4c5b05d5b0b13ee80fd3cbe6e9e62d2ddeb0a414ebdb1e39e2d0bd000c48688047b53239763d35709440bb2dcf23c38f22de8d3a8d26b1450a2e5bed"}, {&(0x7f0000002d40)="cfc17d065bf392524ea624e4894f2bcca27c1e753c279c76ada71fc6ca13eeba4709a31f5248bd4cb100f3cf4bc97971749411d2a1c323e91a8a866af8d0dcfbd658830e62b9de4288d5ce995aa2fea73a1b1924282e4d1b86a286c406594c5dea172283f4921b2c44f327b4f4ab3c8da917ccb22c83a37fa6162b"}, {&(0x7f0000002dc0)="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"}], 0x0, 0x0, 0x0, 0x240008d4}, 0x1}, {{&(0x7f0000003e40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e21, 0x401, @loopback, 0xe61}}}, 0x0, &(0x7f0000005380)=[{&(0x7f0000003ec0)="c965b98b39decdb335920b9067f79bbf47171753378cfcdf3511e650a08ccd5a4c185b49b339fde217eb09dd2d9166d00c39378c73c01201cc50893b9101198aedac00e4671d12c37cd3635dbb853178416f3c3f41112add573c16bbfb5e7cc9af798d26c601caca53d002be1a1776ee35706c27df5727b88265817ed06775f659437c44ae3af0df1de926cc0d9d98a9a19161054e2118c1fd47aebbeb3e2c13d4cf072db998f3d1382595d4bccbdc57c03d07316476d273b89bff46a3b84aead828643cdd31283d48f71035b3704c3d49971803c8d8a70f29f278e08e2e302fc0fd48826c845d0a41d022163a6f588b51db06286ff251ef84"}, {&(0x7f0000003fc0)="cab55ae981097a0d5b949dad67f12f604dc3c4b112cefa93ee9170d9e33320f09546b3703979e76010e2889d5d88be1726fc8dc55db226f63064dab4105e96ae5e8da80a8690259a42095a55e0b9fac4a14b0ce9b6e226c27368b219a7112cde186a520632589e96c946f614d16497212f9f84182e16c6960ab38bc36a433fe2372e43bdbdea74f16f"}, {&(0x7f0000004080)="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"}, {&(0x7f0000005080)="87d6bb10ad485611be38a890ce0b099f38c4d22642b3da7a133806fe78791fa7e733fd33de1026"}, {&(0x7f00000050c0)="c061a145b5d36745d11da47600e3b0e57aae4e39af2403d48b51a2cce30907e04c9bd3edbcbfc4a853f168f2ed01c6cc1ed2b43dd978213fed38dc52e7fa13e2b2854526dde9cb62a0dfb0201f8f818be6822bfbdafba7c695631f0d8170dbe8eb5056fa38a8885aea258db87cb3715085d507e8daf5173438f2bb7795d76e79f76498cc178f236e0908e9a2157410fa0b8162ce0ca64b6e2974fdb0f9f8b003c78c1d485ac72b73b387ad92aeb15cf520364b7a54cdae0c3b48b7dc969297e7938b9acd53601b931881c68ae015412982f78cdb136ae737bce9"}, {&(0x7f00000051c0)="48404b68196911a42e4548af10828b1ca95fcb2da3e15354d4978b7cd128925c7cb8723eabfe779a1b7d6917cb08dd8dced876f7d72a7e228f3df28a20d671cad8ccf1c1aaba321ef2e14bf3fa3002ef964124afc5f2463e9e68aa4eee14feec85837b840f9e74910bcdac5438c30255c574171b01eb3f0d7d4710c93623bda1561bf4e9e853ad10a02b052baa30c84502966477f31f54b9d01b57bb37e2ed6275b8b97a99d7de000311cbbba31dce7c59a6df3ba14a192eb785e2bde90226dbf0383d4615f4dcf707970e8c836f71b871458846735d825452a3ca7ce55a4edf2387"}, {&(0x7f00000052c0)="8a2a53266b5fa981686dbb00fd37ab0a9fe680da809953eec9d0f96404eee1b84456092fae2630786b556210b6b2feee926b49d2c66371f142f71e41432630ea3cc4e75fcc25d12fe76f9e79dc86a7b63c9fb36529e9ed6d5b01b3b88b70f23ee1c80bbdfcdf94255a111f9a72091fa627b35aa5c89d5ca1428714aecfeab57dd0fce576623bd190a2ef79ffbd8979fc88bd1c793fca"}], 0x0, &(0x7f0000005400)=[{0x0, 0x1ff, 0x3f, "ad24a1523c95a3372203d21475b657ce7614d14de2e3ff4be1db137d796e49242acfef2841d78b2fd6b0572143fe0498f605c8903b596580c82702fa1925c26d0921b55d7b1fbf7110cfd79fce2c71ac90f0e2935931d89c6e962bdcad8ef0099dd60251730d93757e64206a5a"}, {0x0, 0x111, 0xfff, "d6b676a34989a13d91df44095f1070448650fd559dd89a2d29644e13137d3e1b36ec3275467aea1e83f1a97b37635c7c649092966c076e880b7d013661701141838fffcf"}], 0x0, 0x10}, 0x40}, {{&(0x7f0000005500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x1, 0x100000000, 0x1, 0x2}}, 0x0, &(0x7f0000005640)=[{&(0x7f0000005580)="e25796e910d7b82897980ca33b6a3150674d3903df77fc6d43fd405d6a40f5b46069b187d065aa137192a8f2911f7a7c28c75d5d22165472a3c5e72aa367bc24ce9737c79a4ccb3ca7575b51bfd5a54a0ae25be52baa78d0526408131f216f03a5fad6a274d6f278f7d125f7f02767463469c5d2f7004bbb0aeea66a547e673136164770337557ec09b597e65d056dfb860673a4636dcf7d47a6"}], 0x0, &(0x7f0000005680)=[{0x0, 0x102, 0xfffffffffffffffe, "939b5af19c9e8a3fd63fc260446c62143039a6f9e6a6b7b6fef51588d7f6c77eff6e0c7ab028036a80684c303385f2a01ce3c3c6acd52324e119253234af824e1011e4c9b5f3019fa9025f68f1d64ca17399aae7ca5bb8859da2d30ef369c17748b819b2711727880283d0c4f1eac39043998ad6ee6b47282d2ffc729315fe126f7662a46711c4e5bd51bd0af40fe51479fe270f79ee7695dcb8f957ff4d9c1512fb1dc170e7c0e0fbefaec981b1ea6d6b722014a2f2d14a68633750090accfdb466f59c2b16f135e5bafcc84cb64623d55cf61d06d3"}, {0x0, 0x111, 0x2, "288d92961d7d1baca0ab303aae3e75fb0593456e355f0e60ff872048737dc518ca4b9d06173534f71d25c1d5d5ecfa827530c573f65f33c967ec6430ccfe1b6fb3883ecc1c784bc62210a2487a80d53bf0f9f50a5050679ea7b30a0a89c112cafcff2c53074dfcd278c1bab4535b99fd95628e500000a12676e524ed7dece27fc7d8d7f6264b5aed4ef1a4115b1a716bf7d8b9ca5b360117f78243ed85bd2d02b772520108efe29e3a1de6f85592d1705df84b99eb5c34f464d335ff9c38543f588e778cbde09ebff397bcc4f37afdb9ce880e31963694c05ac3528597d958691305037ec34f"}, {0x0, 0x13f, 0x2, "6c8499b26059956705e8ae254d81cea712dbb006f658cc5279c0c1e5d7d06e426801498a4138aceba0c0f535b4aa0a697c2e9e283de91cb0a61a3756a4fbc32098774ac2edfb6c01ea6be7879b10"}, {0x0, 0x111, 0x5, "76e53770f7b3f85826e9b8adf62d28faae8cf1ad56d59a2eb97daeec2ee14743a651b928cb5466dbeb16bef33d6f9031bc80ed9f8ae1fcb6a78431ea4ef6b0007ed0dccd0310eb44072de852e1f06a65e5337b833a6c9860ce73200aafcd1e9b3618aedd1307805443182c04141f816fdd144edf5ed39d67339ef07284f5b3f2395e561899245c956acab85c3c750286a1c1a2ae5d1cc3dd941776829ce8acad8fd96d2e97365151ae2830502d9377b0a3560e64cc51c9f7535960937ec7"}], 0x0, 0x8000}, 0xdf97}, {{&(0x7f00000059c0)=@ax25={0x3, {"54ea14eaa882c6"}, 0x7}, 0x0, &(0x7f0000006d40)=[{&(0x7f0000005a40)="aaccff43b2c7801c0d42ba85396b25f150114cd130298b89b5bfe8e42d90e6c257631ff03eec2d7bc519e31aa4aa26f4bc549462531c985e2893d5282da9fbc16d69e4eb000d555cba772dfa7405f92ce54abd86ed20e97a28b0c102b875b29f56a4b3e02169f2cd60e674824d59027eeecd9a49289426218d8d82aebe8ed2ea5f703584e222e21fa26a573533d4abcd4aef3d65abb08bc83b089774c501a98210c0de15f005d5b8c254b08a"}, {&(0x7f0000005b00)="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"}, {&(0x7f0000006b00)="1b9b65515e68e19ae4a3b2f40e83d83dbac53dded6a4ce9b154e067ebcaa4a397180bd24e1c2dbb79d89cec50195c685faa0d45a98f72cc0e54718a16a4453286cd2b86f5a270c4d6900c1ff7dbae36973ecef09cc653082f6ec64f271a78295268b91f4bdc6a4332a04c08fcaae7ec03ea70dd98f97ee9d84170c9434065288c5870d2ad0272aba0f165ced73f2e7569e77ee8b0af20e68182fb0e67b79ec47a6a1a921450c319a17b115ce7b4ba840a7bf5d12c82e4fe264530aba0f7e04d9c27ea47593656c2b4ca93024b097cb19b9bcf4eee12fb371b1a596a69e708de537ae942c80f087564c285cea288f03"}, {&(0x7f0000006c00)="510ecfc73c38c4c60b7a168c5ca16eeea021362a99cda1368bb5f68b5b27a520bb123b1bf0357faaecbbdc36aa2aab2aec6358fa35d2278a1cd4121af4a4aa2c14"}, {&(0x7f0000006c80)="db8f5f691d7ef11fc558543e61cb41b4871bbeeb908a267ab07f491b2bf5d8e307163ef81f6259ee99090c"}, {&(0x7f0000006cc0)="85c3b8072878ebd540586cf3b78d0d2a9544143a5fae074c46f17d921c3b97c99c39c281d168b404a8378bd985f001716921b3743550b81e15e3351f0b4a3876049e253b4ffee64455f7ffe6823d61734d64d067cf"}], 0x0, 0x0, 0x0, 0x4000004000000}, 0x4}, {{&(0x7f0000006f00)=@hci={0x1f, r1, 0x1}, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006f80)="db2ff6f2a0bf52567c433bdb1eafa58ce1c09e34183a1d4b1dc4a67845b0d6a798e0a0796d7430f9f2"}, {&(0x7f0000007e40)="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"}], 0x0, &(0x7f0000007000)=ANY=[@ANYBLOB="00000000000000000000000002000000f469ea1e3da019983ee2f8c02edb5ebc31794c441ea55f6db99fe4af1ea89b8bcb6b5e1b2f4937178e00000000000000000000000000000012010000ff7f0000d9cb849af4dc68fb35521ed80a2c6c43e3dcf15538f6a7755e95915ca4ebec8d8e515345c02716bd2ad4bae7513c8a83389b9f5523c4d7b80cbe0b6b9af7c4611609ccd7d292397ffb0b65d119d4a7cc23f524d4974badcfcd55ac689ca4731f7eed691800f6e7470c5954f0e62b5d3d2c16a0cfb6e8d71b4fd23d09a38a7f964fc8daf35f3c2bdfcb557baba8ce09bab0377c07840ae5d144967c0000000000"], 0x0, 0x80}, 0x7}, {{&(0x7f0000007100)=@llc={0x1a, 0x206, 0x3, 0x3, 0x8, 0x101, @random="4376301b56d6"}, 0x0, &(0x7f0000007240)=[{&(0x7f0000007180)="32016e284e798a908e2e901b7c86ed65ddf06a43de5b270395ed122bcce2fc01795bc508515b1b422f4ee29454c6"}, {&(0x7f00000071c0)="d30f2d6a31d15cb87e191d944afefc131f6ee4390eb8140d41546004a026aebd0f1d180844808ac763f4d0ba89f4883fc7571e3461a13cb625ba748c2b1e8ddae0111aabda"}], 0x0, &(0x7f0000008e40)=[{0x0, 0x100, 0x2, "44c898d2d376ff2c6f0b41d048e4aee797a98feb2be4dcf93c34bb9b6e89becede627398aa110884ce5a5686c6913f6358a18c963d69fce4b3e9e5e0a60c3539884a16f5a4168f7dfe33d2f21a8fa2be580287ba97ee1047b1bda39f91290f85c30afe6c4da0868adc67216912319c2cd89de0bd61377b231b92d54e500660f55cfb50d04ed26b78201676e7cd13b2d63c304a3bc098044905166ebf62f8c53c9afc15576cdfd24c3a6c95dbc14dd612e86ac9aefc33faa4ef4983ea1331e8fc2b74e2d5d9cfcf3dd036cd8a0c71"}, {0x0, 0x11f, 0x200, "e7038703278120a460a2d7c87ab7d0e6fbf9d16b7980479b23de5a593b4ac62865ac7c78c70a23e3e9336146f818374380f9c7b234ac9efb9a204b733c059a0387f1c416d3cf08d6323133dc31fa031a1a73ca4f0126fb654d45f67114b19a4c26b4952c0fced809510778c09dec6518a1d4800f780cade3664f916c51a926f473d82caa53dd8d12e5defd6a736ce6d67722687e1eeb3b0a9e8ad34f69766c858c1304fb1dea77d74bda046af19e22446998e77be71f17ac5ed85c4155b2238f5d7f0a3905ebf7150bce10fb3f03f97580ae04afe9e12283598dcc17ac3238b56309162c530f4c9507b9946ffe95e714d1f625b75806f526"}, {0x0, 0x119, 0x100, "76512b464d150fa91240c94fbf622be2e22a2a170eb68b6fbac47c312cab034a2c86bcaf957db83320eb7e8f99379316ad4a24c3a1fc06c8ab44f42b57b26432d56b49bae050fa25ec99ebc3aa219ffa08965d966ccb02ecbcd1b939cb7139a82cf03edc2120c2d1218fa18b7b5d41607006baa07e9df2db48dce1fa335c696d53e3ef0bd952719161b436580d8c1d6718d638ba864f1a9a99d9fc2bb5b5d9"}, {0x0, 0x110, 0x75d, "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"}, {0x0, 0x117, 0x1ff, "2624954105cf6af50baf47dc84735aae681190386204f55dd1761675304dc427e9cee115e43cfdfcf881dac7ba140b59a35e06e11ec434e51c733f8aa1a109ca5d37940637340f18ac96635b7891fc07be0462d64ab5048080e24a5f7558492f151ed8d045a2fc6aeffbf2c994bae784c62eff3b5e6326bd6c6fae0f3a5e0d2a1b718e55f01539ce7cb4c7b64d2b422008754fbe0e1937"}, {0x0, 0x29, 0x8001, "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"}], 0x0, 0x4000}, 0xffffffffffffffff}], 0x136a88c8311587f, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x48000, 0x92) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000007500)=""/65) faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x41, 0x400) [ 299.891903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 299.899717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.908990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.271115] 8021q: adding VLAN 0 to HW filter on device team0 23:11:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 300.562432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 300.620767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 301.063802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 301.602529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 302.194264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 302.673373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 304.589857] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.596511] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.605353] device bridge_slave_0 entered promiscuous mode [ 304.715756] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.722306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.729363] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.736044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.744519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 304.752230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.964078] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.970542] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.979257] device bridge_slave_1 entered promiscuous mode [ 305.390766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 305.796720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.818744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 307.161284] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 307.250960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.492905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 307.499999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.820983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 307.828182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.697589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.924427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 308.932849] team0: Port device team_slave_0 added [ 309.328328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.337097] team0: Port device team_slave_1 added [ 309.669728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 309.677099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.686141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.018191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.027521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.036514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.057357] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 310.080135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.088382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 23:11:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x0, 0x10}, &(0x7f0000000040)=0x18) [ 310.358861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 310.367840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.377066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.657292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 310.665151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.674476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.086582] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.264601] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.271077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.278266] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.284810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.293527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 313.300088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.094811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.115237] not chained 20000 origins [ 316.119084] CPU: 1 PID: 17 Comm: ksoftirqd/1 Not tainted 4.19.0+ #78 [ 316.125604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.134976] Call Trace: [ 316.137601] dump_stack+0x32d/0x480 [ 316.141280] kmsan_internal_chain_origin+0x222/0x240 [ 316.146420] ? skb_copy+0x56c/0xbc0 [ 316.150083] ? ip_rcv+0x6b6/0x740 [ 316.153568] ? process_backlog+0x82b/0x11e0 [ 316.157921] ? net_rx_action+0x98f/0x1d50 [ 316.162102] ? __do_softirq+0x721/0xc5d [ 316.166103] ? run_ksoftirqd+0x37/0x60 [ 316.170012] ? smpboot_thread_fn+0x69c/0xb40 [ 316.174447] ? kthread+0x5e7/0x620 [ 316.178016] ? ret_from_fork+0x35/0x40 [ 316.181934] ? __save_stack_trace+0x8be/0xc60 [ 316.186460] ? save_stack_trace+0xc6/0x110 [ 316.190732] ? kmsan_internal_chain_origin+0x136/0x240 [ 316.196048] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 316.200753] ? __msan_memcpy+0x6f/0x80 [ 316.204676] ? skb_copy_bits+0x1d2/0xc90 [ 316.208754] ? skb_copy+0x56c/0xbc0 [ 316.212416] ? tcp_send_synack+0x7a3/0x18f0 [ 316.216765] ? tcp_rcv_state_process+0x29b5/0x6e50 [ 316.221731] ? tcp_v4_do_rcv+0xb25/0xd80 [ 316.225842] ? tcp_v4_rcv+0x5a33/0x6540 [ 316.230137] ? ip_local_deliver_finish+0x8cf/0xff0 [ 316.235093] ? ip_local_deliver+0x44b/0x510 [ 316.239442] ? ip_rcv+0x6b6/0x740 [ 316.242921] ? process_backlog+0x82b/0x11e0 [ 316.247265] ? net_rx_action+0x98f/0x1d50 [ 316.251451] ? __do_softirq+0x721/0xc5d [ 316.255445] ? run_ksoftirqd+0x37/0x60 [ 316.259365] ? smpboot_thread_fn+0x69c/0xb40 [ 316.263808] ? kthread+0x5e7/0x620 [ 316.267381] ? ret_from_fork+0x35/0x40 [ 316.271305] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 316.276807] ? get_stack_info+0x863/0x9d0 [ 316.281009] __msan_chain_origin+0x6d/0xd0 [ 316.285272] ? __msan_memcpy+0x6f/0x80 [ 316.289189] __save_stack_trace+0x8be/0xc60 [ 316.293614] ? __msan_memcpy+0x6f/0x80 [ 316.297550] save_stack_trace+0xc6/0x110 [ 316.301651] kmsan_internal_chain_origin+0x136/0x240 [ 316.306782] ? kthread+0x5e7/0x620 [ 316.310543] ? kmsan_internal_chain_origin+0x136/0x240 [ 316.315849] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 316.320554] ? __msan_memcpy+0x6f/0x80 [ 316.324458] ? skb_copy_bits+0x1d2/0xc90 [ 316.328536] ? skb_copy+0x56c/0xbc0 [ 316.332181] ? tcp_send_synack+0x7a3/0x18f0 [ 316.336519] ? tcp_rcv_state_process+0x29b5/0x6e50 [ 316.341461] ? tcp_v4_do_rcv+0xb25/0xd80 [ 316.345549] ? tcp_v4_rcv+0x5a33/0x6540 [ 316.349544] ? ip_local_deliver_finish+0x8cf/0xff0 [ 316.354495] ? ip_local_deliver+0x44b/0x510 [ 316.358834] ? ip_rcv+0x6b6/0x740 [ 316.362310] ? process_backlog+0x82b/0x11e0 [ 316.366663] ? net_rx_action+0x98f/0x1d50 [ 316.370832] ? __do_softirq+0x721/0xc5d [ 316.374831] ? run_ksoftirqd+0x37/0x60 [ 316.378747] ? smpboot_thread_fn+0x69c/0xb40 [ 316.383171] ? kthread+0x5e7/0x620 [ 316.386725] ? ret_from_fork+0x35/0x40 [ 316.390662] ? __msan_get_context_state+0x9/0x30 [ 316.395437] ? INIT_INT+0xc/0x30 [ 316.398828] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 316.404215] ? __msan_get_context_state+0x9/0x30 [ 316.409009] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.413541] __msan_memcpy+0x6f/0x80 [ 316.417272] skb_copy_bits+0x1d2/0xc90 [ 316.421200] skb_copy+0x56c/0xbc0 [ 316.424700] tcp_send_synack+0x7a3/0x18f0 [ 316.428869] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 316.434366] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.439177] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 316.444572] tcp_v4_do_rcv+0xb25/0xd80 [ 316.448497] tcp_v4_rcv+0x5a33/0x6540 [ 316.452391] ? tcp_filter+0x260/0x260 [ 316.456217] ip_local_deliver_finish+0x8cf/0xff0 [ 316.461021] ip_local_deliver+0x44b/0x510 [ 316.465200] ? ip_local_deliver+0x510/0x510 [ 316.469539] ? ip_call_ra_chain+0x7a0/0x7a0 [ 316.473884] ip_rcv+0x6b6/0x740 [ 316.477210] ? ip_rcv_core+0x1360/0x1360 [ 316.481295] process_backlog+0x82b/0x11e0 [ 316.485477] ? __msan_poison_alloca+0x1e0/0x2b0 [ 316.490184] ? ip_local_deliver_finish+0xff0/0xff0 [ 316.495164] ? rps_trigger_softirq+0x2e0/0x2e0 [ 316.499766] net_rx_action+0x98f/0x1d50 [ 316.503871] ? net_tx_action+0xf20/0xf20 [ 316.507961] __do_softirq+0x721/0xc5d [ 316.511799] ? ksoftirqd_should_run+0x50/0x50 [ 316.516316] run_ksoftirqd+0x37/0x60 [ 316.520058] smpboot_thread_fn+0x69c/0xb40 [ 316.524343] kthread+0x5e7/0x620 [ 316.527726] ? cpu_report_death+0x4a0/0x4a0 [ 316.532074] ? INIT_BOOL+0x30/0x30 [ 316.535639] ret_from_fork+0x35/0x40 [ 316.539387] Uninit was stored to memory at: [ 316.543730] kmsan_internal_chain_origin+0x136/0x240 [ 316.548855] __msan_chain_origin+0x6d/0xd0 [ 316.553114] __save_stack_trace+0x8be/0xc60 [ 316.557449] save_stack_trace+0xc6/0x110 [ 316.561529] kmsan_internal_chain_origin+0x136/0x240 [ 316.566651] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.571165] __msan_memcpy+0x6f/0x80 [ 316.574888] skb_copy_bits+0x1d2/0xc90 [ 316.578787] skb_copy+0x56c/0xbc0 [ 316.582262] tcp_send_synack+0x7a3/0x18f0 [ 316.586426] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.591193] tcp_v4_do_rcv+0xb25/0xd80 [ 316.595094] tcp_v4_rcv+0x5a33/0x6540 [ 316.598909] ip_local_deliver_finish+0x8cf/0xff0 [ 316.603682] ip_local_deliver+0x44b/0x510 [ 316.607845] ip_rcv+0x6b6/0x740 [ 316.611150] process_backlog+0x82b/0x11e0 [ 316.615332] net_rx_action+0x98f/0x1d50 [ 316.619319] __do_softirq+0x721/0xc5d [ 316.623123] [ 316.624754] Uninit was stored to memory at: [ 316.629096] kmsan_internal_chain_origin+0x136/0x240 [ 316.634214] __msan_chain_origin+0x6d/0xd0 [ 316.638464] __save_stack_trace+0x8be/0xc60 [ 316.642795] save_stack_trace+0xc6/0x110 [ 316.646875] kmsan_internal_chain_origin+0x136/0x240 [ 316.651997] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.656507] __msan_memcpy+0x6f/0x80 [ 316.660232] skb_copy_bits+0x1d2/0xc90 [ 316.664129] skb_copy+0x56c/0xbc0 [ 316.667596] tcp_send_synack+0x7a3/0x18f0 [ 316.671758] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.676538] tcp_v4_do_rcv+0xb25/0xd80 [ 316.680437] tcp_v4_rcv+0x5a33/0x6540 [ 316.684255] ip_local_deliver_finish+0x8cf/0xff0 [ 316.689025] ip_local_deliver+0x44b/0x510 [ 316.693186] ip_rcv+0x6b6/0x740 [ 316.696483] process_backlog+0x82b/0x11e0 [ 316.700643] net_rx_action+0x98f/0x1d50 [ 316.704637] __do_softirq+0x721/0xc5d [ 316.708441] [ 316.710073] Uninit was stored to memory at: [ 316.714413] kmsan_internal_chain_origin+0x136/0x240 [ 316.719534] __msan_chain_origin+0x6d/0xd0 [ 316.723782] __save_stack_trace+0x8be/0xc60 [ 316.728145] save_stack_trace+0xc6/0x110 [ 316.732235] kmsan_internal_chain_origin+0x136/0x240 [ 316.737356] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.741869] __msan_memcpy+0x6f/0x80 [ 316.745601] skb_copy_bits+0x1d2/0xc90 [ 316.749499] skb_copy+0x56c/0xbc0 [ 316.752966] tcp_send_synack+0x7a3/0x18f0 [ 316.757130] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.761898] tcp_v4_do_rcv+0xb25/0xd80 [ 316.765809] tcp_v4_rcv+0x5a33/0x6540 [ 316.769644] ip_local_deliver_finish+0x8cf/0xff0 [ 316.774427] ip_local_deliver+0x44b/0x510 [ 316.778595] ip_rcv+0x6b6/0x740 [ 316.781890] process_backlog+0x82b/0x11e0 [ 316.786052] net_rx_action+0x98f/0x1d50 [ 316.790040] __do_softirq+0x721/0xc5d [ 316.793864] [ 316.795516] Uninit was stored to memory at: [ 316.799861] kmsan_internal_chain_origin+0x136/0x240 [ 316.804979] __msan_chain_origin+0x6d/0xd0 [ 316.809232] __save_stack_trace+0x8be/0xc60 [ 316.813566] save_stack_trace+0xc6/0x110 [ 316.817644] kmsan_internal_chain_origin+0x136/0x240 [ 316.822761] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.827277] __msan_memcpy+0x6f/0x80 [ 316.831000] skb_copy_bits+0x1d2/0xc90 [ 316.834903] skb_copy+0x56c/0xbc0 [ 316.838372] tcp_send_synack+0x7a3/0x18f0 [ 316.842536] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.847300] tcp_v4_do_rcv+0xb25/0xd80 [ 316.851203] tcp_v4_rcv+0x5a33/0x6540 [ 316.855025] ip_local_deliver_finish+0x8cf/0xff0 [ 316.859793] ip_local_deliver+0x44b/0x510 [ 316.863961] ip_rcv+0x6b6/0x740 [ 316.867262] process_backlog+0x82b/0x11e0 [ 316.871426] net_rx_action+0x98f/0x1d50 [ 316.875419] __do_softirq+0x721/0xc5d [ 316.879224] [ 316.880854] Uninit was stored to memory at: [ 316.885190] kmsan_internal_chain_origin+0x136/0x240 [ 316.890312] __msan_chain_origin+0x6d/0xd0 [ 316.894568] __save_stack_trace+0x8be/0xc60 [ 316.898905] save_stack_trace+0xc6/0x110 [ 316.902984] kmsan_internal_chain_origin+0x136/0x240 [ 316.908103] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.912618] __msan_memcpy+0x6f/0x80 [ 316.916352] skb_copy_bits+0x1d2/0xc90 [ 316.920263] skb_copy+0x56c/0xbc0 [ 316.923746] tcp_send_synack+0x7a3/0x18f0 [ 316.927925] tcp_rcv_state_process+0x29b5/0x6e50 [ 316.932699] tcp_v4_do_rcv+0xb25/0xd80 [ 316.936599] tcp_v4_rcv+0x5a33/0x6540 [ 316.940419] ip_local_deliver_finish+0x8cf/0xff0 [ 316.945209] ip_local_deliver+0x44b/0x510 [ 316.949403] ip_rcv+0x6b6/0x740 [ 316.952700] process_backlog+0x82b/0x11e0 [ 316.956864] net_rx_action+0x98f/0x1d50 [ 316.960867] __do_softirq+0x721/0xc5d [ 316.964674] [ 316.966303] Uninit was stored to memory at: [ 316.970640] kmsan_internal_chain_origin+0x136/0x240 [ 316.975760] __msan_chain_origin+0x6d/0xd0 [ 316.980013] __save_stack_trace+0x8be/0xc60 [ 316.984350] save_stack_trace+0xc6/0x110 [ 316.988427] kmsan_internal_chain_origin+0x136/0x240 [ 316.993557] kmsan_memcpy_origins+0x13d/0x1b0 [ 316.998066] __msan_memcpy+0x6f/0x80 [ 317.001838] skb_copy_bits+0x1d2/0xc90 [ 317.005737] skb_copy+0x56c/0xbc0 [ 317.009203] tcp_send_synack+0x7a3/0x18f0 [ 317.013365] tcp_rcv_state_process+0x29b5/0x6e50 [ 317.018129] tcp_v4_do_rcv+0xb25/0xd80 [ 317.022032] tcp_v4_rcv+0x5a33/0x6540 [ 317.025854] ip_local_deliver_finish+0x8cf/0xff0 [ 317.030625] ip_local_deliver+0x44b/0x510 [ 317.034788] ip_rcv+0x6b6/0x740 [ 317.038085] process_backlog+0x82b/0x11e0 [ 317.042247] net_rx_action+0x98f/0x1d50 [ 317.046233] __do_softirq+0x721/0xc5d [ 317.050037] [ 317.051669] Uninit was stored to memory at: [ 317.056016] kmsan_internal_chain_origin+0x136/0x240 [ 317.061139] __msan_chain_origin+0x6d/0xd0 [ 317.065394] __save_stack_trace+0x8be/0xc60 [ 317.069732] save_stack_trace+0xc6/0x110 [ 317.073813] kmsan_internal_chain_origin+0x136/0x240 [ 317.078941] kmsan_memcpy_origins+0x13d/0x1b0 [ 317.083455] __msan_memcpy+0x6f/0x80 [ 317.087179] skb_copy_bits+0x1d2/0xc90 [ 317.091103] skb_copy+0x56c/0xbc0 [ 317.094572] tcp_send_synack+0x7a3/0x18f0 [ 317.098744] tcp_rcv_state_process+0x29b5/0x6e50 [ 317.103537] tcp_v4_do_rcv+0xb25/0xd80 [ 317.107440] tcp_v4_rcv+0x5a33/0x6540 [ 317.111269] ip_local_deliver_finish+0x8cf/0xff0 [ 317.116053] ip_local_deliver+0x44b/0x510 [ 317.120218] ip_rcv+0x6b6/0x740 [ 317.123515] process_backlog+0x82b/0x11e0 [ 317.127679] net_rx_action+0x98f/0x1d50 [ 317.131674] __do_softirq+0x721/0xc5d [ 317.135481] [ 317.137118] Local variable description: ----mdb.i.i@__br_mdb_notify [ 317.143524] Variable was created at: [ 317.147259] __br_mdb_notify+0xab/0x1bb0 [ 317.151333] br_mdb_notify+0x292/0x360 23:11:40 executing program 2: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000880)={0x0, @reserved}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000300)=""/101, 0xfffffdd7, 0x120, 0x0, 0x54fca8a0505bc1c8) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000001700)=@rc, 0x80, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/22, 0x16}}], 0x1, 0x40000001, &(0x7f0000005080)={0x0, 0x989680}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=""/40, &(0x7f0000001000)=0x28) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00002abd7000000000000a0000003000020008000800ffff000008000500ff0f0000080005000900000014000100e000000100000000000000000000000008000500"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40000) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000700)={0x80, 0x3, 0x3, 0x63f50061, &(0x7f00000005c0)=[{}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000031feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000780)={{0x2, @name="0de0ef5733887f0d044f78ff1567859bc888f4dcae51a36419437f526717e1c5"}, "8358b5cc31a1b27095b37fba6aec951c3cc231ffbc8f980b248a10c5990e81a4", 0x2}) [ 317.254355] hrtimer: interrupt took 63983 ns [ 317.732056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.283556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 318.838689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 318.846190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.854267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.417929] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.451159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.069228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 322.635639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 322.642951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.650736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.164528] 8021q: adding VLAN 0 to HW filter on device team0 23:11:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xfffffffffffffff0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000001900000000000000000000000000000020000000000000000800000000000000000000000000000000"], 0x1}, 0x8}, 0x0) 23:11:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 23:11:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) 23:11:48 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4080) ioctl$RTC_PIE_ON(r0, 0x7005) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x20120, 0x4) fcntl$setstatus(r0, 0x4, 0x400) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x402, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x808, 0x4) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x7d8, 0x8001, 0x3ff, 0x3, 0x3e, 0x7ff, 0x4, 0x38, 0x285, 0x101, 0x48a, 0x20, 0x1, 0xfffffffffffffffb, 0x8, 0x1}, [{0x6474e551, 0x3, 0x10000, 0x401, 0x0, 0x7, 0x5, 0xd9e}, {0x6474e557, 0x101, 0x7, 0x0, 0xffffffffffffffe1, 0x2, 0x9, 0x8}], "379be19733e35d640ead00096cea4a550cc82ca74060ab57699e15e5f1c160a6403e18c0e83834723b07d40718e4b7a020ef4610abda15fd39cdbf5864e15d57200b3ad19d7c50", [[], [], [], []]}, 0x4bf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)=@delqdisc={0xa4, 0x25, 0x630, 0x70bd25, 0x25dfdbfd, {0x0, r1, {0x0, 0xffff}, {0xf, 0x2}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xc, 0x1, 'multiq\x00'}, {0x8, 0x2, {0xffff, 0x1}}}, @TCA_STAB={0x8, 0x8, [@TCA_STAB_DATA={0x4}]}, @TCA_STAB={0x64, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x7fffffff, 0x6, 0x20, 0xfffffffffffffff8, 0x3, 0x6b, 0x1b0d, 0x4}}, @TCA_STAB_BASE={0x1c, 0x1, {0x5, 0x6c0, 0x101, 0x1, 0x2, 0x3, 0x9, 0x1}}, @TCA_STAB_DATA={0x18, 0x2, [0x6, 0x73, 0x9e0, 0x4, 0xc2, 0x17463335, 0xffffffffffffffff, 0x6, 0x5244]}, @TCA_STAB_DATA={0x10, 0x2, [0xfffffffffffffffb, 0x2, 0x340f, 0xfffffffffffffe00, 0x1000, 0x7]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) mknod$loop(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@delneigh={0x54, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r1, 0x80, 0x18, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x9, 0x100000000, 0x1}}, @NDA_PROBES={0x8, 0x4, 0x101}, @NDA_LLADDR={0xc}, @NDA_SRC_VNI={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={r0, r0, 0xc, 0x2}, 0x10) fcntl$setsig(r0, 0xa, 0xb) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000c80)=0x6, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'ip6tnl0\x00', r1}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000d00)=0x1022100, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000d40)={@local, 0x7, 0x0, 0xff, 0x5, 0x9, 0xca, 0xffffffff00000001}, 0x20) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000d80)={0x0, 0x6}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000dc0)={0x1, 0x6fe5, {0xfffffffffffffffc, 0x0, 0x2003, 0x7, 0x5, 0xc, 0x0, 0x5}}) r3 = add_key$keyring(&(0x7f0000000e40)='keyring\x00', &(0x7f0000000e80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r3, &(0x7f0000000ec0)="3657ce8c9eadf27a5337", 0xa) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000f00)=0xfffffffffffffffe) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000f40)) lsetxattr$security_smack_transmute(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001180)='TRUE', 0x4, 0x1) sendto$packet(r0, &(0x7f00000011c0)="13b3fa94381fe27119d7fca795438668930f742bb9090ff64e73eaf1d161c8c17e", 0x21, 0x20048041, &(0x7f0000001200)={0x11, 0x17, r2, 0x1, 0x8000, 0x6, @dev={[], 0x16}}, 0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20008040}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xc8, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x18fb524e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f6}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ae7fcad}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001440)={0x0, 0xa088}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001480)={0x3, r0}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000014c0)={0x2c, @local, 0x4e24, 0x4, 'wlc\x00', 0x21, 0x2, 0x2e}, 0x2c) 23:11:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], &(0x7f0000000340)}, 0x20) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x0, 0x2, 0x1, 0x0, r2, 0x9767}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 23:11:48 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000005c0)={0x7, 0x490}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000580)="70175ca3ddd4cf5904995ff69aab5dc45e0fd390b83d04acd32a5e42a0b0f2ab9ccd31551480a01e127e8d4f9e93", 0x2e) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x100, 0x5, 0x0, 0x81}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000540)={&(0x7f0000000380)}) vmsplice(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000700)="f71e5a576b98ba2ca39c8ad2e1", 0xd}], 0x1, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x80000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x4000001) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x2c, 0x8, 0xf567, 0x5, 0x0, 0x5}}, 0xa) mlockall(0x7) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000001900)='net/icmp\x00') ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockname$netlink(r5, &(0x7f0000000440), &(0x7f0000000500)=0xc) bind$alg(r3, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'speck64\x00'}, 0x58) prctl$seccomp(0x16, 0x3, &(0x7f0000000600)={0x1, &(0x7f0000000400)=[{0x736e, 0xa1f6, 0x9, 0x4}]}) r6 = gettid() getpeername$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) fcntl$setown(r3, 0x8, r6) semget$private(0x0, 0x59b227b103f542bb, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$inet6_int(r5, 0x29, 0x3f, &(0x7f0000000240), &(0x7f0000000280)=0x4) 23:11:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400060000f00004bbf1ffff770d00000000000014000100fe8000000000000000000000000000aa0ef753e798fc4223926373a4aa469d5bfc6fdbe9d1ccf1e7dfbe75d98f8b25bad93dc9e6b3783799369f58ce38e5a98e7bf84ed9d8d552e823ac6bc1f4683a3f813108e514a1"], 0x1}}, 0x0) [ 325.544104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:48 executing program 3: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000040)={0x3}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:11:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000180001030000000000000000160000000c0003000000000000000004003c1ba2491073cc9c58b550572e67d5cf15cc10d063e94e10fa92f2f9a4a3003a34cb52b483537f878a1cdd5b6b9730274eacc4fb6d57c12501b9905f0000000000000000000000"], 0x1}}, 0x0) 23:11:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 326.161042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:11:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000680)=[{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)='=', 0x1}], 0x1, &(0x7f0000000000)=ANY=[]}], 0x1, 0x0) 23:11:49 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000005c0)={0x7, 0x490}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000580)="70175ca3ddd4cf5904995ff69aab5dc45e0fd390b83d04acd32a5e42a0b0f2ab9ccd31551480a01e127e8d4f9e93", 0x2e) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x100, 0x5, 0x0, 0x81}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000540)={&(0x7f0000000380)}) vmsplice(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000700)="f71e5a576b98ba2ca39c8ad2e1", 0xd}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x4000001) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x2c, 0x8, 0xf567, 0x5, 0x0, 0x5}}, 0xa) mlockall(0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001900)='net/icmp\x00') ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000500)=0xc) bind$alg(r3, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'speck64\x00'}, 0x58) r5 = gettid() fcntl$setown(r3, 0x8, r5) semget$private(0x0, 0x59b227b103f542bb, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000240), &(0x7f0000000280)=0x4) 23:11:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x81) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x102, 0x4) sendto$inet6(r1, &(0x7f0000000240)="03040000070000000000000093951b4302933207d9fb3780", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x8, @ipv4={[], [], @multicast1}}, 0x1c) 23:11:49 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) 23:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000003f00)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x301}, 0x26}}, 0x0) read(r0, &(0x7f0000003f40)=""/4096, 0x1000) [ 327.148833] IPVS: ftp: loaded support on port[0] = 21 [ 328.651473] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.658068] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.666759] device bridge_slave_0 entered promiscuous mode [ 328.749273] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.755741] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.764079] device bridge_slave_1 entered promiscuous mode [ 328.846378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 328.927262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 329.166148] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.249645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.332320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.339290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.420765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.427878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.665430] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.673151] team0: Port device team_slave_0 added [ 329.751892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 329.759566] team0: Port device team_slave_1 added [ 329.838274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.922828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.002391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 330.009981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.019325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.100345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 330.107764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.117162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.415072] ip (8060) used greatest stack depth: 53216 bytes left [ 331.005335] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.011949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.018756] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.025312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.033288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 331.322121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.433424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.734671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 335.035171] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 335.041446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.049710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.349641] 8021q: adding VLAN 0 to HW filter on device team0 23:12:00 executing program 5: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000340)={r1}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@local, 0x28, r3}) write$P9_RAUTH(r2, &(0x7f0000000380)={0x14, 0x67, 0x2, {0x80, 0x3, 0x6}}, 0x14) getpid() 23:12:00 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2763, 0x0) 23:12:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) 23:12:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:00 executing program 1: r0 = gettid() socketpair(0x10, 0x0, 0x4, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x9, 0x2, 0x5, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x6b7f, 0x4f, 0x80000001, 0x0, 0x8000, 0x0, 0x0, 0x8, 0x7fffffff, 0x0, 0x0, 0x5, @perf_config_ext={0x10000}, 0x0, 0x7, 0x0, 0x0, 0xa6b, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x6) socketpair(0x1d, 0x0, 0x2, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x9, 0x0, 0x5, 0x6, 0x0, 0x0, 0xb57692a5a90db4d8, 0x8, 0x6, 0x1, 0x0, 0x4, 0x0, 0x9, 0x0, 0x8, 0x2, 0xe7d, 0x4, 0xe0, 0x1, 0x1ff, 0x200, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x2, 0x4d, 0x0, 0x6, 0x653d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0)}, 0x10000, 0x1, 0xc1c, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x8, 0x209e22, 0x8000000001}, 0x2c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000000)="ea", &(0x7f0000000540)=""/4096}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 23:12:00 executing program 2: clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f0000000440)) waitid(0x0, 0x0, &(0x7f0000000240), 0x4000000c, &(0x7f0000000280)) [ 337.575701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:12:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f00000074c0)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1}}], 0x1, 0x0, &(0x7f0000007680)={0x77359400}) 23:12:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) 23:12:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newroute={0x20, 0x18, 0x501, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 23:12:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) [ 338.185976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:12:01 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[]}}, 0x20000080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 23:12:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) [ 338.719914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.726891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.737547] not chained 30000 origins [ 338.737574] CPU: 1 PID: 8293 Comm: syz-executor4 Not tainted 4.19.0+ #78 [ 338.737587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.737596] Call Trace: [ 338.737609] [ 338.737638] dump_stack+0x32d/0x480 [ 338.737675] ? kmsan_internal_chain_origin+0x136/0x240 [ 338.737709] kmsan_internal_chain_origin+0x222/0x240 [ 338.737735] ? ip6_finish_output+0xc13/0xca0 [ 338.737765] ? __do_softirq+0x721/0xc5d [ 338.737791] ? irq_exit+0x305/0x340 [ 338.737813] ? exiting_irq+0xe/0x10 [ 338.737836] ? smp_apic_timer_interrupt+0x64/0x90 [ 338.737860] ? apic_timer_interrupt+0xf/0x20 [ 338.737895] ? console_unlock+0x2049/0x2430 [ 338.737919] ? vprintk_emit+0x3e9/0x790 [ 338.737943] ? vprintk_default+0x90/0xa0 [ 338.737964] ? vprintk_func+0x26b/0x2a0 [ 338.737987] ? printk+0x1a3/0x1f0 [ 338.738007] ? addrconf_notify+0x40d2/0x6200 [ 338.738034] ? raw_notifier_call_chain+0x13d/0x240 [ 338.738060] ? netdev_state_change+0x1b0/0x2f0 [ 338.738082] ? do_setlink+0x1df2/0x5d30 [ 338.738103] ? rtnl_newlink+0x20c8/0x3450 [ 338.738125] ? rtnetlink_rcv_msg+0x1148/0x1540 [ 338.738147] ? netlink_rcv_skb+0x394/0x640 [ 338.738168] ? rtnetlink_rcv+0x50/0x60 [ 338.738190] ? netlink_unicast+0x1699/0x1740 [ 338.738209] ? netlink_sendmsg+0x13c7/0x1440 [ 338.738230] ? ___sys_sendmsg+0xe68/0x1250 [ 338.738250] ? __se_sys_sendmsg+0x305/0x460 [ 338.738269] ? __x64_sys_sendmsg+0x4a/0x70 [ 338.738291] ? do_syscall_64+0xcf/0x110 [ 338.738313] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 338.738335] ? netlink_sendmsg+0x13c7/0x1440 [ 338.738355] ? ___sys_sendmsg+0xe68/0x1250 [ 338.738375] ? __se_sys_sendmsg+0x305/0x460 [ 338.738397] ? __x64_sys_sendmsg+0x4a/0x70 23:12:02 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x41, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x803, 0x0) write(r0, &(0x7f0000e86000)="2400000024007ffc00001200000046000003f6ff010000000000f312f1ffffff9277ff10", 0x24) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000180)) [ 338.738418] ? do_syscall_64+0xcf/0x110 [ 338.738440] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 338.738488] ? get_stack_info+0x863/0x9d0 [ 338.738538] __msan_chain_origin+0x6d/0xd0 [ 338.738565] ? netlink_unicast+0x1699/0x1740 [ 338.738590] __save_stack_trace+0x8be/0xc60 [ 338.738613] ? __x64_sys_sendmsg+0x4a/0x70 [ 338.738634] ? do_syscall_64+0xcf/0x110 [ 338.738686] ? netlink_unicast+0x1699/0x1740 [ 338.738717] save_stack_trace+0xc6/0x110 [ 338.738751] kmsan_internal_chain_origin+0x136/0x240 23:12:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) readv(r0, &(0x7f00000002c0), 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040), 0x10000000000443) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)}, 0x0) [ 338.738775] ? run_timer_softirq+0x55/0xa0 [ 338.738813] ? netdev_state_change+0x1b0/0x2f0 [ 338.738837] ? kmsan_internal_chain_origin+0x136/0x240 [ 338.738860] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 338.738891] ? __msan_memcpy+0x6f/0x80 [ 338.738912] ? pskb_expand_head+0x43b/0x1d20 [ 338.738932] ? gre_tap_xmit+0x4e3/0x910 [ 338.738953] ? dev_hard_start_xmit+0x6dc/0xe00 [ 338.738973] ? sch_direct_xmit+0x59b/0x890 [ 338.738993] ? __qdisc_run+0x1bac/0x3600 [ 338.739014] ? __dev_queue_xmit+0x2131/0x3e00 [ 338.739034] ? dev_queue_xmit+0x4b/0x60 [ 338.739057] ? ip6_finish_output2+0x1a5b/0x22d0 [ 338.739080] ? ip6_finish_output+0xc13/0xca0 [ 338.739101] ? ip6_output+0x5e4/0x720 [ 338.739123] ? mld_sendpack+0xf2e/0x17b0 [ 338.739145] ? mld_ifc_timer_expire+0x115c/0x1680 [ 338.739167] ? call_timer_fn+0x356/0x7c0 [ 338.739190] ? __run_timers+0xe95/0x1300 [ 338.739212] ? run_timer_softirq+0x55/0xa0 [ 338.739238] ? __do_softirq+0x721/0xc5d [ 338.739261] ? irq_exit+0x305/0x340 [ 338.739282] ? exiting_irq+0xe/0x10 [ 338.739304] ? smp_apic_timer_interrupt+0x64/0x90 [ 338.739326] ? apic_timer_interrupt+0xf/0x20 [ 338.739349] ? console_unlock+0x2049/0x2430 [ 338.739372] ? vprintk_emit+0x3e9/0x790 [ 338.739395] ? vprintk_default+0x90/0xa0 [ 338.739415] ? vprintk_func+0x26b/0x2a0 [ 338.739437] ? printk+0x1a3/0x1f0 [ 338.739458] ? addrconf_notify+0x40d2/0x6200 [ 338.739482] ? raw_notifier_call_chain+0x13d/0x240 [ 338.739506] ? netdev_state_change+0x1b0/0x2f0 [ 338.739528] ? do_setlink+0x1df2/0x5d30 [ 338.739550] ? rtnl_newlink+0x20c8/0x3450 [ 338.739572] ? rtnetlink_rcv_msg+0x1148/0x1540 [ 338.739593] ? netlink_rcv_skb+0x394/0x640 [ 338.739614] ? rtnetlink_rcv+0x50/0x60 [ 338.739635] ? netlink_unicast+0x1699/0x1740 [ 338.739656] ? netlink_sendmsg+0x13c7/0x1440 [ 338.739676] ? ___sys_sendmsg+0xe68/0x1250 [ 338.739697] ? __se_sys_sendmsg+0x305/0x460 [ 338.739717] ? __x64_sys_sendmsg+0x4a/0x70 [ 338.739738] ? do_syscall_64+0xcf/0x110 [ 338.739761] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 338.739792] ? __msan_get_context_state+0x9/0x30 [ 338.739813] ? INIT_INT+0xc/0x30 [ 338.739837] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 338.739887] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.739926] __msan_memcpy+0x6f/0x80 [ 338.739951] pskb_expand_head+0x43b/0x1d20 [ 338.740009] gre_tap_xmit+0x4e3/0x910 [ 338.740047] ? gre_tap_init+0x650/0x650 [ 338.740070] dev_hard_start_xmit+0x6dc/0xe00 [ 338.740126] sch_direct_xmit+0x59b/0x890 [ 338.740172] __qdisc_run+0x1bac/0x3600 [ 338.740220] ? __msan_get_context_state+0x9/0x30 [ 338.740265] __dev_queue_xmit+0x2131/0x3e00 [ 338.740333] dev_queue_xmit+0x4b/0x60 [ 338.740360] ip6_finish_output2+0x1a5b/0x22d0 [ 338.740423] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 338.740446] ? ip6_mtu+0x289/0x330 [ 338.740478] ip6_finish_output+0xc13/0xca0 [ 338.740526] ip6_output+0x5e4/0x720 [ 338.740567] ? ip6_output+0x720/0x720 [ 338.740591] ? ac6_seq_show+0x200/0x200 [ 338.740617] mld_sendpack+0xf2e/0x17b0 [ 338.740675] ? mld_send_report+0x4b0/0x4b0 [ 338.740718] mld_ifc_timer_expire+0x115c/0x1680 [ 338.740752] ? __msan_poison_alloca+0x1e0/0x2b0 [ 338.740798] call_timer_fn+0x356/0x7c0 [ 338.740822] ? mld_gq_timer_expire+0xf0/0xf0 [ 338.740858] __run_timers+0xe95/0x1300 [ 338.740890] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 338.740915] ? mld_gq_timer_expire+0xf0/0xf0 [ 338.740975] run_timer_softirq+0x55/0xa0 [ 338.740998] ? timers_dead_cpu+0xb90/0xb90 [ 338.741022] __do_softirq+0x721/0xc5d [ 338.741073] irq_exit+0x305/0x340 [ 338.741131] exiting_irq+0xe/0x10 [ 338.741155] smp_apic_timer_interrupt+0x64/0x90 [ 338.741181] apic_timer_interrupt+0xf/0x20 [ 338.741193] [ 338.741220] RIP: 0010:console_unlock+0x2049/0x2430 [ 338.741241] Code: 31 f6 4c 8b 7d 98 e8 46 d3 00 00 48 83 bd b8 fe ff ff 00 75 3f 48 8b 85 b0 fe ff ff 48 89 85 80 fe ff ff ff b5 80 fe ff ff 9d <44> 89 f3 0a 5d ab 44 89 f0 34 01 22 45 87 3c 01 74 25 f6 c3 01 74 [ 338.741256] RSP: 0018:ffff88017f84e658 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 338.741281] RAX: 0000000000000286 RBX: 0000000000000000 RCX: 0000000000040000 [ 338.741295] RDX: ffffc9001f0b9000 RSI: 0000000000000004 RDI: 0000000000034428 23:12:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) [ 338.741311] RBP: ffff88017f84e7d8 R08: ffff880000000000 R09: ffff8801fb4db038 [ 338.741325] R10: 0000000000000000 R11: ffffffff8632b450 R12: 0000000000000000 [ 338.741339] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88019b20c588 [ 338.741370] ? write_ext_msg+0x8b0/0x8b0 [ 338.741412] ? __msan_get_context_state+0x9/0x30 [ 338.741433] ? INIT_INT+0xc/0x30 [ 338.741494] ? write_ext_msg+0x8b0/0x8b0 [ 338.741527] vprintk_emit+0x3e9/0x790 [ 338.741580] vprintk_default+0x90/0xa0 [ 338.741614] vprintk_func+0x26b/0x2a0 [ 338.741647] printk+0x1a3/0x1f0 [ 338.741734] ? raw_notifier_call_chain+0x13d/0x240 [ 338.741763] addrconf_notify+0x40d2/0x6200 [ 338.741791] ? kmsan_set_origin+0x83/0x130 [ 338.741848] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 338.741888] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 338.741911] ? ip6mr_device_event+0x35e/0x3d0 [ 338.741940] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 338.741969] ? dev_forward_change+0xb90/0xb90 [ 338.741999] raw_notifier_call_chain+0x13d/0x240 [ 338.742040] netdev_state_change+0x1b0/0x2f0 [ 338.742077] do_setlink+0x1df2/0x5d30 [ 338.742123] ? validate_nla+0xb85/0xe20 [ 338.742178] ? kmsan_set_origin+0x83/0x130 [ 338.742216] rtnl_newlink+0x20c8/0x3450 [ 338.742340] ? kmsan_set_origin+0x83/0x130 [ 338.742375] ? kmsan_set_origin+0x83/0x130 [ 338.742405] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 338.742440] ? __msan_get_context_state+0x9/0x30 [ 338.742462] ? INIT_BOOL+0x17/0x30 [ 338.742488] ? refcount_sub_and_test_checked+0x5ef/0x710 [ 338.742599] ? rtnl_setlink+0x700/0x700 [ 338.742622] rtnetlink_rcv_msg+0x1148/0x1540 [ 338.742660] ? ___sys_sendmsg+0xe68/0x1250 [ 338.742695] ? __msan_poison_alloca+0x1e0/0x2b0 [ 338.742727] ? should_fail+0x162/0x13c0 [ 338.742781] ? kmsan_set_origin+0x83/0x130 [ 338.742819] netlink_rcv_skb+0x394/0x640 [ 338.742845] ? rtnetlink_bind+0x120/0x120 [ 338.742896] rtnetlink_rcv+0x50/0x60 [ 338.742924] netlink_unicast+0x1699/0x1740 [ 338.742976] ? rtnetlink_net_exit+0x90/0x90 [ 338.743015] netlink_sendmsg+0x13c7/0x1440 [ 338.743075] ___sys_sendmsg+0xe68/0x1250 [ 338.743100] ? netlink_getsockopt+0x16b0/0x16b0 [ 338.743177] ? __fdget+0x329/0x440 [ 338.743214] __se_sys_sendmsg+0x305/0x460 [ 338.743267] __x64_sys_sendmsg+0x4a/0x70 [ 338.743292] do_syscall_64+0xcf/0x110 [ 338.743319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 338.743337] RIP: 0033:0x457569 [ 338.743357] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:12:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000100)='./file0/file0\x00') rmdir(&(0x7f0000000140)='./file0/file0\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) [ 338.743370] RSP: 002b:00007f4787c41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.743394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 338.743408] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 338.743421] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.743435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4787c426d4 [ 338.743450] R13: 00000000004c3b16 R14: 00000000004d5c08 R15: 00000000ffffffff [ 338.743483] Uninit was stored to memory at: [ 338.743508] kmsan_internal_chain_origin+0x136/0x240 [ 338.743530] __msan_chain_origin+0x6d/0xd0 [ 338.743549] __save_stack_trace+0x8be/0xc60 [ 338.743568] save_stack_trace+0xc6/0x110 [ 338.743590] kmsan_internal_chain_origin+0x136/0x240 [ 338.743612] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.743633] __msan_memcpy+0x6f/0x80 [ 338.743652] pskb_expand_head+0x43b/0x1d20 [ 338.743669] gre_tap_xmit+0x4e3/0x910 [ 338.743687] dev_hard_start_xmit+0x6dc/0xe00 [ 338.743704] sch_direct_xmit+0x59b/0x890 [ 338.743722] __qdisc_run+0x1bac/0x3600 [ 338.743740] __dev_queue_xmit+0x2131/0x3e00 [ 338.743757] dev_queue_xmit+0x4b/0x60 [ 338.743777] ip6_finish_output2+0x1a5b/0x22d0 [ 338.743798] ip6_finish_output+0xc13/0xca0 [ 338.743816] ip6_output+0x5e4/0x720 [ 338.743836] mld_sendpack+0xf2e/0x17b0 [ 338.743855] mld_ifc_timer_expire+0x115c/0x1680 [ 338.743874] call_timer_fn+0x356/0x7c0 [ 338.743903] __run_timers+0xe95/0x1300 [ 338.743924] run_timer_softirq+0x55/0xa0 [ 338.743944] __do_softirq+0x721/0xc5d [ 338.743952] [ 338.743960] Uninit was stored to memory at: [ 338.743982] kmsan_internal_chain_origin+0x136/0x240 [ 338.744003] __msan_chain_origin+0x6d/0xd0 [ 338.744023] __save_stack_trace+0x8be/0xc60 [ 338.744042] save_stack_trace+0xc6/0x110 [ 338.744064] kmsan_internal_chain_origin+0x136/0x240 [ 338.744085] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.744104] __msan_memcpy+0x6f/0x80 [ 338.744120] pskb_expand_head+0x43b/0x1d20 [ 338.744137] gre_tap_xmit+0x4e3/0x910 [ 338.744155] dev_hard_start_xmit+0x6dc/0xe00 [ 338.744172] sch_direct_xmit+0x59b/0x890 [ 338.744189] __qdisc_run+0x1bac/0x3600 [ 338.744208] __dev_queue_xmit+0x2131/0x3e00 [ 338.744226] dev_queue_xmit+0x4b/0x60 [ 338.744247] ip6_finish_output2+0x1a5b/0x22d0 [ 338.744268] ip6_finish_output+0xc13/0xca0 [ 338.744288] ip6_output+0x5e4/0x720 [ 338.744307] mld_sendpack+0xf2e/0x17b0 [ 338.744327] mld_ifc_timer_expire+0x115c/0x1680 [ 338.744348] call_timer_fn+0x356/0x7c0 [ 338.744367] __run_timers+0xe95/0x1300 [ 338.744386] run_timer_softirq+0x55/0xa0 [ 338.744405] __do_softirq+0x721/0xc5d [ 338.744413] [ 338.744421] Uninit was stored to memory at: [ 338.744443] kmsan_internal_chain_origin+0x136/0x240 [ 338.744464] __msan_chain_origin+0x6d/0xd0 [ 338.744483] __save_stack_trace+0x8be/0xc60 [ 338.744502] save_stack_trace+0xc6/0x110 [ 338.744524] kmsan_internal_chain_origin+0x136/0x240 [ 338.744545] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.744565] __msan_memcpy+0x6f/0x80 [ 338.744583] pskb_expand_head+0x43b/0x1d20 [ 338.744600] gre_tap_xmit+0x4e3/0x910 [ 338.744618] dev_hard_start_xmit+0x6dc/0xe00 [ 338.744635] sch_direct_xmit+0x59b/0x890 [ 338.744652] __qdisc_run+0x1bac/0x3600 [ 338.744671] __dev_queue_xmit+0x2131/0x3e00 [ 338.744689] dev_queue_xmit+0x4b/0x60 [ 338.744710] ip6_finish_output2+0x1a5b/0x22d0 [ 338.744730] ip6_finish_output+0xc13/0xca0 [ 338.744749] ip6_output+0x5e4/0x720 [ 338.744768] mld_sendpack+0xf2e/0x17b0 [ 338.744787] mld_ifc_timer_expire+0x115c/0x1680 [ 338.744808] call_timer_fn+0x356/0x7c0 [ 338.744828] __run_timers+0xe95/0x1300 [ 338.744848] run_timer_softirq+0x55/0xa0 [ 338.744867] __do_softirq+0x721/0xc5d [ 338.744875] [ 338.744891] Uninit was stored to memory at: [ 338.744914] kmsan_internal_chain_origin+0x136/0x240 [ 338.744936] __msan_chain_origin+0x6d/0xd0 [ 338.744955] __save_stack_trace+0x8be/0xc60 [ 338.744975] save_stack_trace+0xc6/0x110 [ 338.744996] kmsan_internal_chain_origin+0x136/0x240 [ 338.745017] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.745038] __msan_memcpy+0x6f/0x80 [ 338.745055] pskb_expand_head+0x43b/0x1d20 [ 338.745071] gre_tap_xmit+0x4e3/0x910 [ 338.745090] dev_hard_start_xmit+0x6dc/0xe00 [ 338.745106] sch_direct_xmit+0x59b/0x890 [ 338.745123] __qdisc_run+0x1bac/0x3600 [ 338.745140] __dev_queue_xmit+0x2131/0x3e00 [ 338.745158] dev_queue_xmit+0x4b/0x60 [ 338.745178] ip6_finish_output2+0x1a5b/0x22d0 [ 338.745198] ip6_finish_output+0xc13/0xca0 [ 338.745218] ip6_output+0x5e4/0x720 [ 338.745238] mld_sendpack+0xf2e/0x17b0 [ 338.745256] mld_ifc_timer_expire+0x115c/0x1680 [ 338.745275] call_timer_fn+0x356/0x7c0 [ 338.745295] __run_timers+0xe95/0x1300 [ 338.745314] run_timer_softirq+0x55/0xa0 [ 338.745335] __do_softirq+0x721/0xc5d [ 338.745342] [ 338.745351] Uninit was stored to memory at: [ 338.745373] kmsan_internal_chain_origin+0x136/0x240 [ 338.745394] __msan_chain_origin+0x6d/0xd0 [ 338.745413] __save_stack_trace+0x8be/0xc60 [ 338.745432] save_stack_trace+0xc6/0x110 [ 338.745453] kmsan_internal_chain_origin+0x136/0x240 [ 338.745475] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.745496] __msan_memcpy+0x6f/0x80 [ 338.745514] pskb_expand_head+0x43b/0x1d20 [ 338.745531] gre_tap_xmit+0x4e3/0x910 [ 338.745550] dev_hard_start_xmit+0x6dc/0xe00 [ 338.745568] sch_direct_xmit+0x59b/0x890 [ 338.745586] __qdisc_run+0x1bac/0x3600 [ 338.745604] __dev_queue_xmit+0x2131/0x3e00 [ 338.745622] dev_queue_xmit+0x4b/0x60 [ 338.745642] ip6_finish_output2+0x1a5b/0x22d0 [ 338.745664] ip6_finish_output+0xc13/0xca0 [ 338.745683] ip6_output+0x5e4/0x720 [ 338.745701] mld_sendpack+0xf2e/0x17b0 [ 338.745720] mld_ifc_timer_expire+0x115c/0x1680 [ 338.745739] call_timer_fn+0x356/0x7c0 [ 338.745759] __run_timers+0xe95/0x1300 [ 338.745780] run_timer_softirq+0x55/0xa0 [ 338.745800] __do_softirq+0x721/0xc5d [ 338.745808] [ 338.745816] Uninit was stored to memory at: [ 338.745837] kmsan_internal_chain_origin+0x136/0x240 [ 338.745858] __msan_chain_origin+0x6d/0xd0 [ 338.745878] __save_stack_trace+0x8be/0xc60 [ 338.745906] save_stack_trace+0xc6/0x110 [ 338.745927] kmsan_internal_chain_origin+0x136/0x240 [ 338.745948] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.745969] __msan_memcpy+0x6f/0x80 [ 338.745987] pskb_expand_head+0x43b/0x1d20 [ 338.746004] gre_tap_xmit+0x4e3/0x910 [ 338.746022] dev_hard_start_xmit+0x6dc/0xe00 [ 338.746040] sch_direct_xmit+0x59b/0x890 [ 338.746058] __qdisc_run+0x1bac/0x3600 [ 338.746077] __dev_queue_xmit+0x2131/0x3e00 [ 338.746095] dev_queue_xmit+0x4b/0x60 [ 338.746115] ip6_finish_output2+0x1a5b/0x22d0 [ 338.746135] ip6_finish_output+0xc13/0xca0 [ 338.746155] ip6_output+0x5e4/0x720 [ 338.746175] mld_sendpack+0xf2e/0x17b0 [ 338.746194] mld_ifc_timer_expire+0x115c/0x1680 [ 338.746215] call_timer_fn+0x356/0x7c0 [ 338.746235] __run_timers+0xe95/0x1300 [ 338.746254] run_timer_softirq+0x55/0xa0 [ 338.746274] __do_softirq+0x721/0xc5d [ 338.746282] [ 338.746290] Uninit was stored to memory at: [ 338.746312] kmsan_internal_chain_origin+0x136/0x240 [ 338.746334] __msan_chain_origin+0x6d/0xd0 [ 338.746353] __save_stack_trace+0x8be/0xc60 [ 338.746371] save_stack_trace+0xc6/0x110 [ 338.746393] kmsan_internal_chain_origin+0x136/0x240 [ 338.746414] kmsan_memcpy_origins+0x13d/0x1b0 [ 338.746434] __msan_memcpy+0x6f/0x80 [ 338.746452] pskb_expand_head+0x43b/0x1d20 [ 338.746469] gre_tap_xmit+0x4e3/0x910 [ 338.746488] dev_hard_start_xmit+0x6dc/0xe00 [ 338.746505] sch_direct_xmit+0x59b/0x890 [ 338.746523] __qdisc_run+0x1bac/0x3600 [ 338.746542] __dev_queue_xmit+0x2131/0x3e00 [ 338.746559] dev_queue_xmit+0x4b/0x60 [ 338.746579] ip6_finish_output2+0x1a5b/0x22d0 [ 338.746600] ip6_finish_output+0xc13/0xca0 [ 338.746631] ip6_output+0x5e4/0x720 [ 338.746651] mld_sendpack+0xf2e/0x17b0 [ 338.746671] mld_ifc_timer_expire+0x115c/0x1680 [ 338.746690] call_timer_fn+0x356/0x7c0 [ 338.746710] __run_timers+0xe95/0x1300 [ 338.746729] run_timer_softirq+0x55/0xa0 [ 338.746749] __do_softirq+0x721/0xc5d [ 338.746757] [ 338.746767] Local variable description: ----ipc6@icmp6_send [ 338.746775] Variable was created at: [ 338.746792] icmp6_send+0x201/0x3ca0 [ 338.746813] icmpv6_send+0xe5/0x110 [ 340.518686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 23:12:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/72, 0x100000205) 23:12:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x34}}, 0x0) 23:12:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0xc04e27d3b523e3e1}) 23:12:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) dup2(r0, 0xffffffffffffffff) 23:12:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") close(r0) 23:12:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 23:12:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1], 0x2}}, 0x0) 23:12:04 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={r0, 0x3, 0x1, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="cf19742400000000"]) r3 = socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000840)=ANY=[@ANYBLOB="2a14ad671823fa25807e280d3b0adc4e6d993490c6336a9b66845de6a3d40b93745217b55348212a7baa263d267efbf8c87af5127340b621a1d05e54db28a59876053187a81d9f88fa740cb491447320280000db52daa3bbb010b4448118c8dbb2b4769f49e85c34fc295cc3c2538c9b4dc144a9dd4f3a3f4bdedefa8290f7263fd0b9c7138b4c61c027dd7cba2489bed60bcee388d5832dd8e3f69388a5dff347d7ba53b61b0bdfe40ddeb40ee57cd4f779931bbb3fa969bc734b0519e8feb0bf367317997c7a4ee0b5b6fd5d99ecaf219ef1390a22ebdac292750f785c39b9ee38284a0f57467f4ea163c49382ec9a51ace253"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="332d63b7032e2c6d000000000000000000000000d75dc123d315f5fb3065786ed0ffca259c870db3b223ed9c7a58913ec4f3542c7888dac6f729426dc464fa6881e42997bdd920f6b98eb48cbba26f3f3ec475f4bf8c80aab4fafcfb4c9f512a7cc0fb"], 0x63) openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890c, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r1, &(0x7f0000000a00)="a2d0dde5562e9c132f8a49169af39dd70bfd7820c84a244295c98e385e4ca7cac3c9b8e034c981eda51b8ca8d23b64369f1624c006e0003560d5531bfd40169ad38d84742b64418a46a699046079ad9ea8d6313ca874f676c699c86af068474f24e912789c27f27f7e5f03f6ac39e72bdbf049c5d21e33db051ce772fec5872a199638217de0a99438123bec6b2efb0c1d018ab7e12a", &(0x7f0000000ac0)="3ccbf25dd4f0158658143a8cc7146016b36dd6dfb120c1b5df9ee3045d118b35ea97051032560146eec62f2bea1d718a8917"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="0180791b26aefc8df1c084104336db0a000000000300000000000000"]) openat$cgroup_type(r1, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) openat$cgroup_ro(r1, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r2, 0x0, 0x1, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r5 = gettid() sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x421, &(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffe60, 0x4}, 0x8080) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)="2e2f000200007a30000563622392a3df2738f3cf70af8cf5229d02e74b298d5d81d77545b64f46d8921641e9ded215582da8b0c89cd4eff8a4288cc1091691f5757ad4b7090b0068f3890935a9b7bee23db5c1ec875a2a5283efaa441ec57c94eda0eba596d0a9808eb11136262b5a96e16408560d2b9a466d740606ab0215bbc9bb81b1a4d1119876fc8813f84ffa95ec2f", 0x200002, 0x0) perf_event_open(&(0x7f0000000540)={0x139f605562ecba0b, 0x70, 0x9, 0x6, 0x7fff, 0x4, 0x0, 0x5, 0x400, 0x2, 0x0, 0x4, 0x7, 0x9, 0x1, 0x5, 0x80, 0x5, 0x9, 0x4, 0x9, 0xb61c, 0x7f, 0xffff, 0x7fff, 0xfff, 0x6, 0xfffffffffffffffb, 0x8, 0x6, 0x6, 0xfffffffffffffffd, 0x8, 0x80000001, 0x1ff, 0x1000, 0x4dfc, 0x80, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000500), 0x4}, 0x10020, 0x3f, 0x3, 0x4, 0x8000, 0x7fffffff, 0x5}, r5, 0x6, r1, 0x8) 23:12:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x3) [ 341.584187] device lo entered promiscuous mode 23:12:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1], 0x2}}, 0x0) 23:12:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0xfffffffffffffffd, 0x32b) [ 341.655724] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 341.830910] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 23:12:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(0xffffffffffffffff, r0) 23:12:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x8, 0x12, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x1) 23:12:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f00009dd000), 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10}, 0x10}}, 0x0) 23:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1], 0x2}}, 0x0) 23:12:05 executing program 2: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000340)={r1}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@local, 0x0, r3}) write$P9_RAUTH(r2, &(0x7f0000000380)={0x14, 0x67, 0x0, {0x80, 0x3, 0x6}}, 0x14) getpid() 23:12:05 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={r0, 0x3, 0x1, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="cf19742400000000"]) r3 = socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000840)=ANY=[@ANYBLOB="2a14ad671823fa25807e280d3b0adc4e6d993490c6336a9b66845de6a3d40b93745217b55348212a7baa263d267efbf8c87af5127340b621a1d05e54db28a59876053187a81d9f88fa740cb491447320280000db52daa3bbb010b4448118c8dbb2b4769f49e85c34fc295cc3c2538c9b4dc144a9dd4f3a3f4bdedefa8290f7263fd0b9c7138b4c61c027dd7cba2489bed60bcee388d5832dd8e3f69388a5dff347d7ba53b61b0bdfe40ddeb40ee57cd4f779931bbb3fa969bc734b0519e8feb0bf367317997c7a4ee0b5b6fd5d99ecaf219ef1390a22ebdac292750f785c39b9ee38284a0f57467f4ea163c49382ec9a51ace253"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="332d63b7032e2c6d000000000000000000000000d75dc123d315f5fb3065786ed0ffca259c870db3b223ed9c7a58913ec4f3542c7888dac6f729426dc464fa6881e42997bdd920f6b98eb48cbba26f3f3ec475f4bf8c80aab4fafcfb4c9f512a7cc0fb"], 0x63) openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890c, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r1, &(0x7f0000000a00)="a2d0dde5562e9c132f8a49169af39dd70bfd7820c84a244295c98e385e4ca7cac3c9b8e034c981eda51b8ca8d23b64369f1624c006e0003560d5531bfd40169ad38d84742b64418a46a699046079ad9ea8d6313ca874f676c699c86af068474f24e912789c27f27f7e5f03f6ac39e72bdbf049c5d21e33db051ce772fec5872a199638217de0a99438123bec6b2efb0c1d018ab7e12a", &(0x7f0000000ac0)="3ccbf25dd4f0158658143a8cc7146016b36dd6dfb120c1b5df9ee3045d118b35ea97051032560146eec62f2bea1d718a8917"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="0180791b26aefc8df1c084104336db0a000000000300000000000000"]) openat$cgroup_type(r1, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) openat$cgroup_ro(r1, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r2, 0x0, 0x1, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r5 = gettid() sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x421, &(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffe60, 0x4}, 0x8080) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)="2e2f000200007a30000563622392a3df2738f3cf70af8cf5229d02e74b298d5d81d77545b64f46d8921641e9ded215582da8b0c89cd4eff8a4288cc1091691f5757ad4b7090b0068f3890935a9b7bee23db5c1ec875a2a5283efaa441ec57c94eda0eba596d0a9808eb11136262b5a96e16408560d2b9a466d740606ab0215bbc9bb81b1a4d1119876fc8813f84ffa95ec2f", 0x200002, 0x0) perf_event_open(&(0x7f0000000540)={0x139f605562ecba0b, 0x70, 0x9, 0x6, 0x7fff, 0x4, 0x0, 0x5, 0x400, 0x2, 0x0, 0x4, 0x7, 0x9, 0x1, 0x5, 0x80, 0x5, 0x9, 0x4, 0x9, 0xb61c, 0x7f, 0xffff, 0x7fff, 0xfff, 0x6, 0xfffffffffffffffb, 0x8, 0x6, 0x6, 0xfffffffffffffffd, 0x8, 0x80000001, 0x1ff, 0x1000, 0x4dfc, 0x80, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000500), 0x4}, 0x10020, 0x3f, 0x3, 0x4, 0x8000, 0x7fffffff, 0x5}, r5, 0x6, r1, 0x8) [ 342.282433] ion_buffer_destroy: buffer still mapped in the kernel [ 342.500415] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 23:12:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:05 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000480)=@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @calipso={0x7, 0x8}]}, 0x28) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=""/128, 0x80}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), &(0x7f0000000640)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) open$dir(&(0x7f0000000380)='./file0\x00', 0x68802, 0x0) r2 = dup(r1) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)) write(r0, &(0x7f0000000440), 0x0) 23:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) 23:12:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f00009dd000), 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10}, 0x10}}, 0x0) 23:12:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f00009dd000), 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10}, 0x10}}, 0x0) 23:12:06 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180)=@sco, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000980)=""/92, 0x5c}, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6, 0x80, &(0x7f0000000180)}, 0x200008c4) 23:12:06 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, &(0x7f0000000100)) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 23:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) 23:12:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x0, r1}) 23:12:06 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f5e00fe01b2a4a280930a600800ffa84302910000002d00090023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 23:12:06 executing program 2: [ 343.661616] netlink: 9 bytes leftover after parsing attributes in process `syz-executor4'. 23:12:06 executing program 5: 23:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) 23:12:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:07 executing program 1: 23:12:07 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f5e00fe01b2a4a280930a600800ffa84302910000002d00090023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 23:12:07 executing program 2: [ 344.261163] netlink: 9 bytes leftover after parsing attributes in process `syz-executor4'. 23:12:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c00010677"], 0x3}}, 0x0) 23:12:07 executing program 5: 23:12:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:07 executing program 1: 23:12:07 executing program 4: 23:12:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c00010677"], 0x3}}, 0x0) 23:12:07 executing program 2: 23:12:07 executing program 5: 23:12:08 executing program 1: 23:12:08 executing program 4: 23:12:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:08 executing program 1: 23:12:08 executing program 2: 23:12:08 executing program 5: 23:12:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c00010677"], 0x3}}, 0x0) 23:12:08 executing program 1: 23:12:08 executing program 4: 23:12:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x3}}, 0x0) 23:12:09 executing program 2: 23:12:09 executing program 4: 23:12:09 executing program 5: 23:12:09 executing program 1: 23:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x3}}, 0x0) 23:12:09 executing program 2: 23:12:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095000200000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:09 executing program 1: 23:12:09 executing program 4: 23:12:09 executing program 5: 23:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x3}}, 0x0) 23:12:10 executing program 2: 23:12:10 executing program 4: 23:12:10 executing program 1: 23:12:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, r1) 23:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x3}}, 0x0) 23:12:10 executing program 5: 23:12:10 executing program 1: 23:12:10 executing program 4: 23:12:10 executing program 2: 23:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x3}}, 0x0) 23:12:10 executing program 1: 23:12:11 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(0xffffffffffffffff, r0) 23:12:11 executing program 5: 23:12:11 executing program 4: 23:12:11 executing program 1: 23:12:11 executing program 2: 23:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x3}}, 0x0) 23:12:11 executing program 5: 23:12:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) dup2(r0, 0xffffffffffffffff) 23:12:11 executing program 1: 23:12:11 executing program 4: 23:12:11 executing program 2: 23:12:12 executing program 5: 23:12:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x3}}, 0x0) 23:12:12 executing program 2: 23:12:12 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4, 0x4, 0x2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000740)=[{0x68, 0x0, 0x462, "9bed1da9a8e96e479696e04932005659537d6c8191bfb1788facd502c5c2a751aafd53e501d3741d27bdf394d4acd7e5e565d7a12c6f4fccaddeb84d8bf9ec0c4b58e73ea2e8e87d83631dd2b82597dfdc"}], 0x68, 0x8000}, 0x20000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e80)=""/76, 0x4c}, {&(0x7f0000003f00)=""/21, 0x15}], 0x2, &(0x7f0000004040)=""/165, 0xa5, 0x805}, 0x2) 23:12:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000300)='./file0\x00') 23:12:12 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x168fc9d8}], 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) read(r0, &(0x7f0000000240)=""/72, 0x48) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)={0x0, 0x4, [0x0]}) 23:12:12 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) [ 349.571530] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 349.580361] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x3}}, 0x0) 23:12:12 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:12:13 executing program 2: r0 = msgget(0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000b40)) 23:12:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 23:12:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x121) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) close(r0) 23:12:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)}, 0x20) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x7d, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x9767}, 0x2c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x11) socket$kcm(0x2, 0x0, 0x2) write$cgroup_int(r2, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) socket$kcm(0xa, 0x0, 0x11) 23:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x3}}, 0x0) [ 350.615418] sctp: failed to load transform for md5: -2 23:12:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) 23:12:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x168fc9d8}], 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) read(r0, &(0x7f0000000240)=""/72, 0x48) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)={0x0, 0x4, [0x0]}) 23:12:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') 23:12:14 executing program 3: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup2(r0, r0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) 23:12:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x3}}, 0x0) 23:12:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 23:12:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086602, &(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 23:12:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000001c, 0x0) 23:12:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 351.765736] program syz-executor5 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:12:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") msgrcv(0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) 23:12:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x3}}, 0x0) [ 351.844789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.879540] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 23:12:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086602, &(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 23:12:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000000180)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0xfffffdeb, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x7}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 23:12:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) sendto$inet(r0, &(0x7f0000000100)="11", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 23:12:15 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x0, 0x2, 0x0, 0x0, r3, 0x9767}, 0x2c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) socket$kcm(0xa, 0x522000000003, 0x11) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000340)) 23:12:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x28b) 23:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x3}}, 0x0) [ 352.554503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:12:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_map}) 23:12:15 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="110427bd7000ffdbdf25030000000c000600010000000000000008000100000000000c0002000900100000000000"], 0x1}}, 0x20000080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 23:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x2}}, 0x0) 23:12:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x34, 0x20, 0x0, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) 23:12:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x3e9, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 23:12:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0xf0, 0x0) recvmsg$kcm(r0, &(0x7f0000009fc0)={&(0x7f0000009d40)=@hci, 0x80, &(0x7f0000009ec0), 0x0, &(0x7f0000009f00)=""/177, 0xb1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f000000b480)={&(0x7f000000a000)=@can, 0x80, &(0x7f000000b340), 0x0, &(0x7f000000b3c0)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x80087601, &(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 23:12:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x2}}, 0x0) [ 353.256661] device lo left promiscuous mode [ 353.280540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.287454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.464159] device team0 entered promiscuous mode [ 353.469094] device team_slave_0 entered promiscuous mode [ 353.475021] device team_slave_1 entered promiscuous mode 23:12:16 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) 23:12:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x2}}, 0x0) [ 354.816648] team0 (unregistering): Port device team_slave_0 removed [ 355.242834] team0 (unregistering): Port device team_slave_1 removed [ 355.719852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:12:19 executing program 2: request_key(&(0x7f0000000300)="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", &(0x7f0000000100)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) 23:12:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="410f01ca660ff90348b800100000000000000f23d80f21f835400000700f23f866b8d3000f00d8b9b0080000b8a0000000ba000000000f30f30f2c6475000f20d835080000000f22d8400f2081b9e2020000b8fc970000ba000000000f300f73f07d", 0x62}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 23:12:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) 23:12:19 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) [ 356.664997] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 356.673863] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 356.686931] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:19 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="110427bd7000ffdbdf25030000000c000600010000000000000008000100000000000c0002000900100000000000"], 0x1}}, 0x20000080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 23:12:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x40045436, 0x3) 23:12:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) 23:12:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) futex(&(0x7f0000000040)=0x1, 0x0, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180), 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) 23:12:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000f0ff48000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x48, &(0x7f0000000140)="dadba119cee97ef705bd00f2ff9f841a", &(0x7f0000000080)=""/72, 0x1948}, 0x28) 23:12:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:20 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x2, 0x5) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000000) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x5, 0x7fff, 0x6, '\x00', 0x8}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)=ANY=[], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) [ 357.197351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:12:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) [ 357.317822] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 357.326749] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:20 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) [ 357.535801] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 357.695604] not chained 40000 origins [ 357.699488] CPU: 1 PID: 8797 Comm: syz-executor5 Not tainted 4.19.0+ #78 [ 357.706340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.715734] Call Trace: [ 357.718330] [ 357.720509] dump_stack+0x32d/0x480 [ 357.724186] ? kmsan_internal_chain_origin+0x136/0x240 [ 357.729496] kmsan_internal_chain_origin+0x222/0x240 [ 357.734625] ? ip6_input+0x29d/0x340 [ 357.738370] ? __local_bh_enable_ip+0x228/0x260 23:12:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c00010677"], 0x2}}, 0x0) 23:12:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000f0ff48000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x48, &(0x7f0000000140)="dadba119cee97ef705bd00f2ff9f841a", &(0x7f0000000080)=""/72, 0x1948}, 0x28) [ 357.743067] ? local_bh_enable+0x36/0x40 [ 357.747155] ? ip6_finish_output2+0x1b1a/0x22d0 [ 357.751845] ? ip6_finish_output+0xc13/0xca0 [ 357.756280] ? ip6_output+0x5e4/0x720 [ 357.760138] ? ip6_xmit+0x216d/0x26a0 [ 357.763980] ? inet6_csk_xmit+0x3e0/0x4f0 [ 357.768179] ? dccp_transmit_skb+0x1599/0x18a0 [ 357.772782] ? dccp_connect+0x96d/0xd80 [ 357.776778] ? dccp_v6_connect+0x1c47/0x1f20 [ 357.781221] ? __inet_stream_connect+0x3f1/0x15d0 [ 357.786094] ? inet_stream_connect+0xff/0x170 [ 357.790609] ? __sys_connect+0x745/0x860 [ 357.794686] ? __se_sys_connect+0x8d/0xb0 [ 357.798856] ? __x64_sys_connect+0x4a/0x70 [ 357.803112] ? do_syscall_64+0xcf/0x110 [ 357.807114] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 357.812503] ? dccp_v6_do_rcv+0x567/0x1610 [ 357.816764] ? __sk_receive_skb+0x9e1/0x1120 [ 357.821213] ? dccp_v6_rcv+0x21aa/0x2390 [ 357.825310] ? ip6_input_finish+0xb53/0x2450 [ 357.829743] ? ip6_input+0x29d/0x340 [ 357.833499] ? ip6_rcv_finish+0x4d2/0x710 [ 357.837668] ? ipv6_rcv+0x34b/0x3f0 [ 357.841315] ? process_backlog+0x82b/0x11e0 23:12:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0xf0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f000000b480)={&(0x7f000000a000)=@can, 0x80, &(0x7f000000b340)=[{&(0x7f000000b200)}], 0x1, &(0x7f000000b3c0)=ANY=[], 0x0, 0x800}, 0x20000004) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086602, &(0x7f0000000180)={0xffffff7f00000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 357.845662] ? net_rx_action+0x98f/0x1d50 [ 357.849832] ? __do_softirq+0x721/0xc5d [ 357.853842] ? do_softirq_own_stack+0x49/0x80 [ 357.858377] ? __local_bh_enable_ip+0x228/0x260 [ 357.863075] ? local_bh_enable+0x36/0x40 [ 357.867168] ? ip6_finish_output2+0x1b1a/0x22d0 [ 357.871874] ? ip6_finish_output+0xc13/0xca0 [ 357.876336] ? get_stack_info+0x863/0x9d0 [ 357.880544] __msan_chain_origin+0x6d/0xd0 [ 357.884827] ? dccp_v6_connect+0x1c47/0x1f20 [ 357.889270] __save_stack_trace+0x8be/0xc60 [ 357.893626] ? _raw_spin_lock_irqsave+0x237/0x340 [ 357.898540] ? dccp_v6_connect+0x1c47/0x1f20 [ 357.902992] save_stack_trace+0xc6/0x110 [ 357.907090] kmsan_internal_chain_origin+0x136/0x240 [ 357.912257] ? net_rx_action+0x98f/0x1d50 [ 357.916439] ? dccp_connect+0x96d/0xd80 [ 357.920439] ? dccp_v6_connect+0x1c47/0x1f20 [ 357.924879] ? __inet_stream_connect+0x3f1/0x15d0 [ 357.929749] ? kmsan_internal_chain_origin+0x136/0x240 [ 357.935050] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 357.939777] ? __msan_memcpy+0x6f/0x80 [ 357.943697] ? dccp_feat_parse_options+0x2657/0x5bb0 [ 357.948823] ? dccp_parse_options+0xe0e/0x2ea0 [ 357.953435] ? dccp_v6_conn_request+0x8a3/0x1bb0 [ 357.958220] ? dccp_rcv_state_process+0x2f4/0x2400 [ 357.963178] ? dccp_v6_do_rcv+0x567/0x1610 [ 357.967449] ? __sk_receive_skb+0x9e1/0x1120 [ 357.971899] ? dccp_v6_rcv+0x21aa/0x2390 [ 357.975998] ? ip6_input_finish+0xb53/0x2450 [ 357.980433] ? ip6_input+0x29d/0x340 [ 357.984174] ? ip6_rcv_finish+0x4d2/0x710 [ 357.988352] ? ipv6_rcv+0x34b/0x3f0 [ 357.992004] ? process_backlog+0x82b/0x11e0 [ 357.996352] ? net_rx_action+0x98f/0x1d50 [ 358.000529] ? __do_softirq+0x721/0xc5d [ 358.004532] ? do_softirq_own_stack+0x49/0x80 [ 358.009055] ? __local_bh_enable_ip+0x228/0x260 [ 358.013769] ? local_bh_enable+0x36/0x40 [ 358.017855] ? ip6_finish_output2+0x1b1a/0x22d0 [ 358.022547] ? ip6_finish_output+0xc13/0xca0 [ 358.026984] ? ip6_output+0x5e4/0x720 [ 358.030831] ? ip6_xmit+0x216d/0x26a0 [ 358.034663] ? inet6_csk_xmit+0x3e0/0x4f0 [ 358.038837] ? dccp_transmit_skb+0x1599/0x18a0 [ 358.043441] ? dccp_connect+0x96d/0xd80 [ 358.047452] ? __msan_get_context_state+0x9/0x30 [ 358.052237] ? INIT_INT+0xc/0x30 [ 358.055643] ? trace_kmalloc+0x13c/0x380 [ 358.059754] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 358.065142] ? __list_add_valid+0xb8/0x480 [ 358.069419] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.073965] __msan_memcpy+0x6f/0x80 [ 358.077722] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.082687] ? ktime_get_with_offset+0x290/0x4e0 [ 358.087506] dccp_parse_options+0xe0e/0x2ea0 [ 358.092003] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.096625] ? depot_save_stack+0x398/0x4b0 [ 358.101003] ? ip_queue_xmit+0xf0/0xf0 [ 358.104916] dccp_rcv_state_process+0x2f4/0x2400 [ 358.109721] ? dccp_v6_do_rcv+0xb7/0x1610 [ 358.113893] ? __sk_receive_skb+0x9e1/0x1120 [ 358.118340] dccp_v6_do_rcv+0x567/0x1610 [ 358.122463] ? dccp_v6_destroy_sock+0x60/0x60 [ 358.127000] __sk_receive_skb+0x9e1/0x1120 [ 358.131287] dccp_v6_rcv+0x21aa/0x2390 [ 358.135268] ? ip_queue_xmit+0xf0/0xf0 [ 358.139187] ? ip_queue_xmit+0xf0/0xf0 [ 358.143124] ip6_input_finish+0xb53/0x2450 [ 358.147427] ? ip6_input_finish+0x13d1/0x2450 [ 358.151970] ip6_input+0x29d/0x340 [ 358.155557] ? ip6_input+0x340/0x340 [ 358.159303] ? ip6_sublist_rcv+0x1ab0/0x1ab0 [ 358.163733] ip6_rcv_finish+0x4d2/0x710 [ 358.167740] ipv6_rcv+0x34b/0x3f0 [ 358.171237] ? dst_hold+0x5e0/0x5e0 [ 358.174887] process_backlog+0x82b/0x11e0 [ 358.179055] ? __msan_poison_alloca+0x1e0/0x2b0 [ 358.183753] ? ip6_rcv_finish+0x710/0x710 [ 358.187950] ? rps_trigger_softirq+0x2e0/0x2e0 [ 358.192565] net_rx_action+0x98f/0x1d50 [ 358.196591] ? net_tx_action+0xf20/0xf20 [ 358.200672] __do_softirq+0x721/0xc5d [ 358.204515] do_softirq_own_stack+0x49/0x80 [ 358.208841] [ 358.211110] __local_bh_enable_ip+0x228/0x260 [ 358.215631] local_bh_enable+0x36/0x40 [ 358.219535] ip6_finish_output2+0x1b1a/0x22d0 [ 358.224084] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 358.229643] ? ip6_mtu+0x289/0x330 [ 358.233209] ip6_finish_output+0xc13/0xca0 [ 358.237488] ip6_output+0x5e4/0x720 [ 358.241149] ? ip6_output+0x720/0x720 [ 358.244984] ? ac6_seq_show+0x200/0x200 [ 358.248988] ip6_xmit+0x216d/0x26a0 [ 358.252679] ? ip6_xmit+0x26a0/0x26a0 [ 358.256524] inet6_csk_xmit+0x3e0/0x4f0 [ 358.260547] ? inet6_csk_addr2sockaddr+0x2c0/0x2c0 [ 358.265501] dccp_transmit_skb+0x1599/0x18a0 [ 358.269966] dccp_connect+0x96d/0xd80 [ 358.273813] dccp_v6_connect+0x1c47/0x1f20 [ 358.278101] ? __msan_poison_alloca+0x1e0/0x2b0 [ 358.282805] ? dccp_v6_exit_batch+0x40/0x40 [ 358.287147] __inet_stream_connect+0x3f1/0x15d0 [ 358.291847] ? __local_bh_enable_ip+0x11f/0x260 [ 358.296566] inet_stream_connect+0xff/0x170 [ 358.300916] ? __inet_stream_connect+0x15d0/0x15d0 [ 358.305882] __sys_connect+0x745/0x860 [ 358.309804] ? put_timespec64+0x162/0x220 [ 358.314012] __se_sys_connect+0x8d/0xb0 [ 358.318029] __x64_sys_connect+0x4a/0x70 [ 358.322114] do_syscall_64+0xcf/0x110 [ 358.325954] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 358.331157] RIP: 0033:0x457569 [ 358.334370] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.353290] RSP: 002b:00007ff51a547c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 358.361071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 358.368369] RDX: 000000000000001c RSI: 0000000020419000 RDI: 000000000000000c [ 358.375660] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 358.382952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff51a5486d4 [ 358.390238] R13: 00000000004bda50 R14: 00000000004cc7a0 R15: 00000000ffffffff [ 358.397542] Uninit was stored to memory at: [ 358.401884] kmsan_internal_chain_origin+0x136/0x240 [ 358.407005] __msan_chain_origin+0x6d/0xd0 [ 358.411253] __save_stack_trace+0x8be/0xc60 [ 358.415589] save_stack_trace+0xc6/0x110 [ 358.419669] kmsan_internal_chain_origin+0x136/0x240 [ 358.424796] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.429309] __msan_memcpy+0x6f/0x80 [ 358.433045] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.438004] dccp_parse_options+0xe0e/0x2ea0 [ 358.442429] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.447025] dccp_rcv_state_process+0x2f4/0x2400 [ 358.451798] dccp_v6_do_rcv+0x567/0x1610 [ 358.455875] __sk_receive_skb+0x9e1/0x1120 [ 358.460130] dccp_v6_rcv+0x21aa/0x2390 [ 358.464039] ip6_input_finish+0xb53/0x2450 [ 358.468293] ip6_input+0x29d/0x340 [ 358.471852] ip6_rcv_finish+0x4d2/0x710 [ 358.475845] ipv6_rcv+0x34b/0x3f0 [ 358.479315] process_backlog+0x82b/0x11e0 [ 358.483484] net_rx_action+0x98f/0x1d50 [ 358.487476] __do_softirq+0x721/0xc5d [ 358.491279] [ 358.492915] Uninit was stored to memory at: [ 358.497265] kmsan_internal_chain_origin+0x136/0x240 [ 358.502387] __msan_chain_origin+0x6d/0xd0 [ 358.506638] __save_stack_trace+0x8be/0xc60 [ 358.510980] save_stack_trace+0xc6/0x110 [ 358.515061] kmsan_internal_chain_origin+0x136/0x240 [ 358.520189] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.524701] __msan_memcpy+0x6f/0x80 [ 358.528434] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.533379] dccp_parse_options+0xe0e/0x2ea0 [ 358.537808] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.542404] dccp_rcv_state_process+0x2f4/0x2400 [ 358.547205] dccp_v6_do_rcv+0x567/0x1610 [ 358.551283] __sk_receive_skb+0x9e1/0x1120 [ 358.555533] dccp_v6_rcv+0x21aa/0x2390 [ 358.559446] ip6_input_finish+0xb53/0x2450 [ 358.563711] ip6_input+0x29d/0x340 [ 358.567272] ip6_rcv_finish+0x4d2/0x710 [ 358.571264] ipv6_rcv+0x34b/0x3f0 [ 358.574736] process_backlog+0x82b/0x11e0 [ 358.578898] net_rx_action+0x98f/0x1d50 [ 358.582894] __do_softirq+0x721/0xc5d [ 358.586698] [ 358.588333] Uninit was stored to memory at: [ 358.592674] kmsan_internal_chain_origin+0x136/0x240 [ 358.597793] __msan_chain_origin+0x6d/0xd0 [ 358.602050] __save_stack_trace+0x8be/0xc60 [ 358.606391] save_stack_trace+0xc6/0x110 [ 358.610473] kmsan_internal_chain_origin+0x136/0x240 [ 358.615598] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.620112] __msan_memcpy+0x6f/0x80 [ 358.623845] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.628790] dccp_parse_options+0xe0e/0x2ea0 [ 358.633217] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.637815] dccp_rcv_state_process+0x2f4/0x2400 [ 358.642585] dccp_v6_do_rcv+0x567/0x1610 [ 358.646663] __sk_receive_skb+0x9e1/0x1120 [ 358.650925] dccp_v6_rcv+0x21aa/0x2390 [ 358.654832] ip6_input_finish+0xb53/0x2450 [ 358.659085] ip6_input+0x29d/0x340 [ 358.662645] ip6_rcv_finish+0x4d2/0x710 [ 358.666640] ipv6_rcv+0x34b/0x3f0 [ 358.670114] process_backlog+0x82b/0x11e0 [ 358.674282] net_rx_action+0x98f/0x1d50 [ 358.678271] __do_softirq+0x721/0xc5d [ 358.682071] [ 358.683704] Uninit was stored to memory at: [ 358.688048] kmsan_internal_chain_origin+0x136/0x240 [ 358.693173] __msan_chain_origin+0x6d/0xd0 [ 358.697424] __save_stack_trace+0x8be/0xc60 [ 358.701772] save_stack_trace+0xc6/0x110 [ 358.705856] kmsan_internal_chain_origin+0x136/0x240 [ 358.710977] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.715488] __msan_memcpy+0x6f/0x80 [ 358.719221] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.724163] dccp_parse_options+0xe0e/0x2ea0 [ 358.728591] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.733191] dccp_rcv_state_process+0x2f4/0x2400 [ 358.737966] dccp_v6_do_rcv+0x567/0x1610 [ 358.742048] __sk_receive_skb+0x9e1/0x1120 [ 358.746296] dccp_v6_rcv+0x21aa/0x2390 [ 358.750197] ip6_input_finish+0xb53/0x2450 [ 358.754451] ip6_input+0x29d/0x340 [ 358.758006] ip6_rcv_finish+0x4d2/0x710 [ 358.762003] ipv6_rcv+0x34b/0x3f0 [ 358.765479] process_backlog+0x82b/0x11e0 [ 358.769646] net_rx_action+0x98f/0x1d50 [ 358.773640] __do_softirq+0x721/0xc5d [ 358.777440] [ 358.779071] Uninit was stored to memory at: [ 358.783414] kmsan_internal_chain_origin+0x136/0x240 [ 358.788540] __msan_chain_origin+0x6d/0xd0 [ 358.792795] __save_stack_trace+0x8be/0xc60 [ 358.797133] save_stack_trace+0xc6/0x110 [ 358.801211] kmsan_internal_chain_origin+0x136/0x240 [ 358.806330] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.810847] __msan_memcpy+0x6f/0x80 [ 358.814583] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.819525] dccp_parse_options+0xe0e/0x2ea0 [ 358.823961] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.828563] dccp_rcv_state_process+0x2f4/0x2400 [ 358.833333] dccp_v6_do_rcv+0x567/0x1610 [ 358.837410] __sk_receive_skb+0x9e1/0x1120 [ 358.841677] dccp_v6_rcv+0x21aa/0x2390 [ 358.845585] ip6_input_finish+0xb53/0x2450 [ 358.849834] ip6_input+0x29d/0x340 [ 358.853415] ip6_rcv_finish+0x4d2/0x710 [ 358.857406] ipv6_rcv+0x34b/0x3f0 [ 358.860880] process_backlog+0x82b/0x11e0 [ 358.865067] net_rx_action+0x98f/0x1d50 [ 358.869057] __do_softirq+0x721/0xc5d [ 358.872861] [ 358.874495] Uninit was stored to memory at: [ 358.878834] kmsan_internal_chain_origin+0x136/0x240 [ 358.883960] __msan_chain_origin+0x6d/0xd0 [ 358.888224] __save_stack_trace+0x8be/0xc60 [ 358.892561] save_stack_trace+0xc6/0x110 [ 358.896641] kmsan_internal_chain_origin+0x136/0x240 [ 358.901766] kmsan_memcpy_origins+0x13d/0x1b0 [ 358.906279] __msan_memcpy+0x6f/0x80 [ 358.910010] dccp_feat_parse_options+0x2657/0x5bb0 [ 358.914959] dccp_parse_options+0xe0e/0x2ea0 [ 358.919386] dccp_v6_conn_request+0x8a3/0x1bb0 [ 358.923984] dccp_rcv_state_process+0x2f4/0x2400 [ 358.928757] dccp_v6_do_rcv+0x567/0x1610 [ 358.932836] __sk_receive_skb+0x9e1/0x1120 [ 358.937089] dccp_v6_rcv+0x21aa/0x2390 [ 358.941001] ip6_input_finish+0xb53/0x2450 [ 358.945253] ip6_input+0x29d/0x340 [ 358.948807] ip6_rcv_finish+0x4d2/0x710 [ 358.952798] ipv6_rcv+0x34b/0x3f0 [ 358.956268] process_backlog+0x82b/0x11e0 [ 358.960434] net_rx_action+0x98f/0x1d50 [ 358.964429] __do_softirq+0x721/0xc5d [ 358.968231] [ 358.969878] Uninit was stored to memory at: [ 358.974230] kmsan_internal_chain_origin+0x136/0x240 [ 358.979355] __msan_chain_origin+0x6d/0xd0 [ 358.983605] __save_stack_trace+0x8be/0xc60 [ 358.987948] save_stack_trace+0xc6/0x110 [ 358.992051] kmsan_internal_chain_origin+0x136/0x240 [ 358.997162] kmsan_memcpy_origins+0x13d/0x1b0 [ 359.001678] __msan_memcpy+0x6f/0x80 [ 359.005416] dccp_feat_parse_options+0x2657/0x5bb0 [ 359.010364] dccp_parse_options+0xe0e/0x2ea0 [ 359.014795] dccp_v6_conn_request+0x8a3/0x1bb0 [ 359.019391] dccp_rcv_state_process+0x2f4/0x2400 [ 359.024163] dccp_v6_do_rcv+0x567/0x1610 [ 359.028238] __sk_receive_skb+0x9e1/0x1120 [ 359.032489] dccp_v6_rcv+0x21aa/0x2390 [ 359.036394] ip6_input_finish+0xb53/0x2450 [ 359.040648] ip6_input+0x29d/0x340 [ 359.044223] ip6_rcv_finish+0x4d2/0x710 [ 359.048214] ipv6_rcv+0x34b/0x3f0 [ 359.051684] process_backlog+0x82b/0x11e0 [ 359.055855] net_rx_action+0x98f/0x1d50 [ 359.059848] __do_softirq+0x721/0xc5d [ 359.063650] [ 359.065285] Local variable description: ----arg@fib6_rule_lookup [ 359.071433] Variable was created at: [ 359.075169] fib6_rule_lookup+0xab/0x6d0 [ 359.079244] ip6_route_input+0xb66/0xc90 23:12:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23:12:22 executing program 2: r0 = socket$inet6(0xa, 0x4000000003, 0x9) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000534000), &(0x7f0000000180)=0xfe9d) 23:12:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c00010677"], 0x2}}, 0x0) 23:12:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000005c0)={0x7, 0x490}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000580)="70175ca3ddd4cf5904995ff69aab5dc45e0fd390b83d04acd32a5e42a0b0f2ab9ccd31551480a01e127e8d4f9e93", 0x2e) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000200)={0x100, 0x5, 0x0, 0x81}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000540)={&(0x7f0000000380)}) vmsplice(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000700)="f71e5a576b98ba2ca39c8ad2e1", 0xd}], 0x1, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x80000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x4000001) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x2c, 0x8, 0xf567, 0x5, 0x0, 0x5}}, 0xa) mlockall(0x7) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000001900)='net/icmp\x00') ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) getsockname$netlink(r3, &(0x7f0000000440), &(0x7f0000000500)=0xc) bind$alg(r1, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'speck64\x00'}, 0x58) prctl$seccomp(0x16, 0x3, &(0x7f0000000600)={0x1, &(0x7f0000000400)=[{0x736e, 0xa1f6, 0x9, 0x4}]}) r4 = gettid() getpeername$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) fcntl$setown(r1, 0x8, r4) semget$private(0x0, 0x59b227b103f542bb, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3f, &(0x7f0000000240), &(0x7f0000000280)=0x4) 23:12:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000f0ff48000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x48, &(0x7f0000000140)="dadba119cee97ef705bd00f2ff9f841a", &(0x7f0000000080)=""/72, 0x1948}, 0x28) [ 359.980243] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 359.989153] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 360.084321] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:23 executing program 4: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000001f37), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 23:12:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 23:12:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c00010677"], 0x2}}, 0x0) 23:12:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) [ 360.702720] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:23 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000140), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0xfffffffffffffffd, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:12:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x2}}, 0x0) 23:12:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x8000) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) [ 360.933235] ptrace attach of "/root/syz-executor2"[8857] was attempted by "/root/syz-executor2"[8858] 23:12:24 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000600)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xffffff7f) 23:12:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x2}}, 0x0) 23:12:24 executing program 1: r0 = getpgid(0x0) prctl$setptracer(0x59616d61, r0) [ 361.678918] binder: undelivered death notification, 0000000000000000 23:12:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = epoll_create(0x9) r2 = epoll_create(0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = epoll_create(0x5b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r5, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[{0x6, 0x1}, {0x3, 0x200}, {}, {0x8, 0xd7d}, {0x4, 0x6}, {0x8, 0x6}, {0x3, 0x5}, {0x4, 0xffffffffffff7fff}, {0x0, 0x4}], 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800)) getpeername(r3, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) 23:12:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000600)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xffffff7f) 23:12:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x2}}, 0x0) 23:12:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(wp512-generic,xts-serpent-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x61) 23:12:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:25 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) [ 362.116079] binder: undelivered death notification, 0000000000000000 23:12:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x378) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:12:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x2}}, 0x0) 23:12:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = epoll_create(0x9) r2 = epoll_create(0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = epoll_create(0x5b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r5, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[{0x6, 0x1}, {0x3, 0x200}, {}, {0x8, 0xd7d}, {0x4, 0x6}, {0x8, 0x6}, {0x3, 0x5}, {0x4, 0xffffffffffff7fff}, {0x0, 0x4}], 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800)) getpeername(r3, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) 23:12:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 23:12:26 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 23:12:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x2}}, 0x0) 23:12:26 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:26 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 23:12:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x2}}, 0x0) 23:12:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffc01) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:12:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) [ 364.024283] nla_parse: 5 callbacks suppressed [ 364.024311] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 364.037733] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:27 executing program 5: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='./file1\x00') mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'syzkaller0\x00'}) [ 364.114752] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x2}}, 0x0) 23:12:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/107) 23:12:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:27 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:27 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:12:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x2}}, 0x0) 23:12:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0xfffffffffffffffd, 0x32b) 23:12:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:12:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x2}}, 0x0) 23:12:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xfffffffffffffffe}) 23:12:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x2}}, 0x0) 23:12:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x20000080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x3) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 23:12:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1, [0xffe7]}) [ 366.146522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:12:29 executing program 5: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/43}, 0x33, 0x0, 0xffffffffffffffff) 23:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x2}}, 0x0) 23:12:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:12:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0x32b) 23:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003100000000000000000000000000", @ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x2}}, 0x0) [ 366.919774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:12:30 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x1}}, 0x0) 23:12:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0xfffffffffffffffd, 0x32b) 23:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, [0x706000]}) 23:12:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) close(r0) 23:12:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x1}}, 0x0) 23:12:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x1b, 0x1080000003) 23:12:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c109900627269646765000004000200"], 0x1}}, 0x0) 23:12:31 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000080)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f0000000fc0)=@ipx, 0x80, &(0x7f0000001200), 0x0, &(0x7f0000001240)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f00000064c0)={0x77359400}) 23:12:31 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000f0ff48000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x48, &(0x7f0000000140)="dadba119cee97ef705bd00f2ff9f", &(0x7f0000000080)=""/72, 0x1948}, 0x28) 23:12:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) close(r0) 23:12:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x1080000003) 23:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) 23:12:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f00000000c0)) close(0xffffffffffffffff) socket$bt_bnep(0x1f, 0x3, 0x4) 23:12:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='3'], 0x1) 23:12:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008b", 0x12}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) 23:12:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) close(r0) 23:12:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x0, [0xffe7]}) 23:12:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 23:12:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000b05afc6a65a7f7c3ae585729497c3bc96459eb12f593a117264f4aacf748826c8be394e3e2b027bfcabff86b5ce8a885bee83c4fc29494019a0ef1745d1b6d694fc1f3b9aa7d5b835548ccfaec9ab273d7f7f6442f984cc539d66be1dc4cd78b95d51b6824e1a9d415f1e68e5de99b6926776b"], &(0x7f0000000200)="22b1a57e"}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000080)}, 0x10) 23:12:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 23:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) 23:12:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 23:12:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="000000004000000254030000005018a35e678fdf2fd40a37d61c0c7ef4938a34e37595e276e40e80c33a05657c326daf421a7846859748fd98a853b36303bbb6f158108b9ac8871a9c4c2f73066eb528611f661ef5b03b67e6cdd6ba00b7beb2ad76c1c50aa5f6156010ce7d466fe577a67a4475424c5f424d86490f6af84f3c9bf02a4990394ffafb8ce011264ce9d4a74be1867bd3868ecab6c854f09ae46ef146678bc357e9eda42f56725b8eab3a0e2b00efa4ec781f00000000000000954a7d78b983d340d9d833a4d533096dea4242a1b7bc3fb6ce6fea48727502c034abc8275ece234060bb628341fcc7b3d2a27b7637930ba34a6a07a4f39a81da290b9a96f20419fa5709acf85516a629ab41b4d490592896a4f86109fc71cc503ca0b0513ac3a4f007b46bb79326b840a08bd435b766ae457ff58cd6711211e169c5dbd1b4490fb2c82f8c32af4c2a4ad0e1b6d04a7b6eaf128334ad657de4c1c93b25e34d80ea9f63d2d1ed58e26f3e78660095df4ce589b2b7b94061b544a3e13ee4ed2d532b0f4c257619f7b839e69cb5beae3c42968ed4a5bbe4f9b8be75e10ec30253574980977dcb7272fc68a56c92e03d165eefc94603c0f75ea8bcb33a50b0ae1b959866a7d68eec05f379fa52fc0e38b8cbed0f89d23e4a51f09f4e2b57d36f752873ebf7ac3c9656b683afd50c"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x3685, 0x5, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x101, 0x40000) fcntl$getown(r1, 0x9) getgid() getpgid(0xffffffffffffffff) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000002240)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000023c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) fstat(r4, &(0x7f0000000400)) getpgrp(0xffffffffffffffff) getgid() socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000002cc0)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80), &(0x7f00000003c0)=0xfffffffffffffe44) gettid() getgid() sendmmsg$unix(r7, &(0x7f0000003680)=[{&(0x7f0000002f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000034c0)}], 0x1, &(0x7f0000003600), 0x0, 0x8810}], 0x1, 0x40084) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 23:12:33 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 23:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c00010677"], 0x1}}, 0x0) 23:12:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={"62726f75746500008802006811007a6c0000000000000200", 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x7400, 0x0, 0x200006c0], 0x0, &(0x7f00000000c0), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'vlan0\x00', 'vcan0\x00', 'yam0\x00', 'erspan0\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'bond_slave_1\x00', 'ip6gretap0\x00', 'bond_slave_1\x00', 'veth0\x00', @broadcast, [], @link_local, [], 0xb0, 0xb0, 0xe0, [@connbytes={'connbytes\x00', 0x18}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x288) 23:12:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c00010677"], 0x1}}, 0x0) 23:12:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x3}) 23:12:34 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 371.298533] xt_connbytes: cannot load conntrack support for proto=7 [ 371.306642] xt_connbytes: Forcing CT accounting to be enabled 23:12:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(wp512-generic,xts-serpent-avx)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 23:12:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="07f2f84938d18afefe24eeca7fcf1cdd8b55b062950b86bc018bc8464d4f8a9061", 0x21) 23:12:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c00010677"], 0x1}}, 0x0) 23:12:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x3685, 0x5, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x101, 0x40000) fcntl$getown(r1, 0x9) getgid() getpgid(0xffffffffffffffff) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000002240)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000023c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) fstat(r4, &(0x7f0000000400)) getpgrp(0xffffffffffffffff) getgid() socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000002cc0)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80), &(0x7f00000003c0)=0xfffffffffffffe44) gettid() getgid() sendmmsg$unix(r7, &(0x7f0000003680)=[{&(0x7f0000002f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000034c0)}], 0x1, &(0x7f0000003600), 0x0, 0x8810}], 0x1, 0x40084) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 23:12:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b740324", 0x1f}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x1}}, 0x0) [ 372.472202] dccp_close: ABORT with 1061 bytes unread 23:12:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) sendto$inet(r0, &(0x7f0000000100)="11", 0x1, 0x35, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 23:12:35 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0x7) 23:12:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:12:35 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f00000000c0)) 23:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x1}}, 0x0) [ 372.960810] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:12:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xff80000000000001) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964"], 0x1}}, 0x0) 23:12:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189", 0x21}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0xb) syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000000c0)=0x30) ioctl$KDSKBLED(r0, 0x4b65, 0x0) prctl$setmm(0x23, 0x6, &(0x7f0000ffb000/0x2000)=nil) 23:12:36 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:12:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) sendto$inet(r0, &(0x7f0000000100)="11", 0x1, 0x35, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 23:12:36 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x124) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000b05afc6a65a7f7c3ae585729497c3bc96459eb12f593a117264f4aacf748826c8be394e3e2b027bfcabff86b5ce8a885bee83c4fc29494019a0ef1745d1b6d694fc1f3b9aa7d5b835548ccfaec9ab273d7f7f6442f984cc539d66be1dc4cd78b95d51b6824e1a9d415f1e68e5de99b6926776b"], &(0x7f0000000200)="22b1a57e"}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000080)}, 0x10) 23:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x1}}, 0x0) 23:12:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getegid() sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f00000000c0)) socket$bt_bnep(0x1f, 0x3, 0x4) rmdir(&(0x7f0000000300)='./file0\x00') 23:12:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180), 0x4) 23:12:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x1}}, 0x0) 23:12:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c6", 0x22}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:37 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x20}, 0x20}}, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0x7) 23:12:37 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000080)}, 0x0) 23:12:38 executing program 5: socket$kcm(0x2, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) socket$kcm(0x11, 0x0, 0x300) 23:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000"], 0x1}}, 0x0) 23:12:38 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', @ifru_mtu}) 23:12:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x8, 0x209e22, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 23:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x1}}, 0x0) 23:12:38 executing program 4: 23:12:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:38 executing program 1: 23:12:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:12:39 executing program 5: 23:12:39 executing program 1: [ 375.970699] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 375.979719] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 23:12:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x1}}, 0x0) 23:12:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 23:12:39 executing program 1: 23:12:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x0) 23:12:39 executing program 4: [ 376.737526] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 376.746746] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c10990062726964676500000400"], 0x1}}, 0x0) 23:12:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 376.847443] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:12:40 executing program 1: 23:12:40 executing program 5: 23:12:40 executing program 4: 23:12:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/165, 0xa5}, 0x0) 23:12:40 executing program 1: 23:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x1}}, 0x0) 23:12:40 executing program 5: 23:12:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:40 executing program 1: 23:12:40 executing program 4: 23:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x1}}, 0x0) 23:12:41 executing program 1: 23:12:41 executing program 5: 23:12:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:41 executing program 4: 23:12:41 executing program 1: 23:12:41 executing program 3: 23:12:41 executing program 5: 23:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000140012000c000106779c1099006272696467650000040002"], 0x1}}, 0x0) 23:12:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:41 executing program 4: 23:12:42 executing program 3: 23:12:42 executing program 1: 23:12:42 executing program 5: 23:12:42 executing program 4: 23:12:42 executing program 0: 23:12:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:42 executing program 3: 23:12:42 executing program 1: 23:12:42 executing program 5: 23:12:43 executing program 4: 23:12:43 executing program 3: 23:12:43 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:43 executing program 1: 23:12:43 executing program 0: 23:12:43 executing program 5: 23:12:43 executing program 4: 23:12:43 executing program 1: 23:12:43 executing program 3: 23:12:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:44 executing program 5: 23:12:44 executing program 0: 23:12:44 executing program 4: 23:12:44 executing program 1: 23:12:44 executing program 4: 23:12:44 executing program 0: 23:12:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 23:12:44 executing program 5: 23:12:44 executing program 3: 23:12:44 executing program 4: 23:12:44 executing program 1: 23:12:44 executing program 3: 23:12:45 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:45 executing program 5: 23:12:45 executing program 0: 23:12:45 executing program 4: 23:12:45 executing program 3: 23:12:45 executing program 1: 23:12:45 executing program 5: unshare(0x28020000) 23:12:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x4, 0x4) 23:12:45 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:45 executing program 4: 23:12:45 executing program 0: 23:12:45 executing program 1: 23:12:46 executing program 0: 23:12:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 23:12:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f75703d73742e2e003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) 23:12:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) lstat(&(0x7f0000004b00)='./bus\x00', &(0x7f0000004b40)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f00000000c0)) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)="060000000000000000") getpgid(0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977fdff81769f02b0d480541b2a9ac71841de8ad68c806b99761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc41422e523a30f77c6ae0a15bc4d0a2034cf87ca261700dbc5da76448c5c7fed5e3dc21e53187b025a89f1f6ffc4ffceb10d4c9aeaea96920a684adf7266319cabe73561897cbbf3dd0c9b11837ab44a08d143fa2506d2383df4586573e77829062046f00700000081c2411d8053b16edaad812bce6bfb57e05c14b580f78b9977b1108cb0a6a500000000530796dc89778ebafa40ceb55c8d0ac5c53f000000bc5605c3a4ec27640c5b3476942a9caafe977ee8977e0569352e64c7b7aae67b564081072dae7c9dd777e4b634696bc108c36f7ca600753145ded20809c0a65270dd66f41c87db05f6e172eb1941576189b6ecea73214afa3fdb06c9164a277926a43478ca76eceef960620fd8dd2ac8e3950129a819c7b6aaaba46cf9d61079c5cbc6727ef2d83589f09d77ddc16b97f8f074bf02131e5e3713695aa60e0d7c74663aaa5539dc5949c782eec63f0b18233568c2e7b20c03cf5851000fc5dc141fb00ae4d9df17103f64f932039dcb9900be48ce8c3940807fca21eecfdff30349ff38efc963a7126bde751226ebed9c"], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000100)="03") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d) rmdir(&(0x7f0000000300)='./file0\x00') write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 23:12:46 executing program 3: clone(0x70024100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000240)) 23:12:46 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) syslog(0x2, &(0x7f0000000300)=""/242, 0xf2) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x8}, 0x5) pipe(&(0x7f00000001c0)) 23:12:46 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f00000000c0)) close(r0) getpgid(0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000100)="03") rmdir(&(0x7f0000000300)='./file0\x00') write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 23:12:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f75703d7374612e003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) 23:12:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc0585604, &(0x7f0000000040)={0x3}) 23:12:46 executing program 4: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0), &(0x7f00000002c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], &(0x7f0000000000)=""/133, 0x0, 0x85}, 0x20) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000000)) 23:12:47 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 384.102767] QAT: Device 0 not found 23:12:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000100)="11fa50", 0x3, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) [ 384.129613] QAT: Device 0 not found 23:12:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)) 23:12:47 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f00000000c0)) close(r0) getpgid(0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000100)="03") rmdir(&(0x7f0000000300)='./file0\x00') write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 23:12:47 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000140), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x28}) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/fuse\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:12:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000001c0)=0x6, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0xcb}}], 0x40001ab, 0x8080) [ 384.569796] ptrace attach of "/root/syz-executor5"[9634] was attempted by "/root/syz-executor5"[9635] 23:12:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) 23:12:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f00000003c0)=ANY=[]) 23:12:47 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:47 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) pwrite64(r0, &(0x7f0000000000), 0x0, 0x0) 23:12:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x41}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0xdc, &(0x7f0000000280)="585fde1e00000000000000000000", &(0x7f0000000380)=""/220}, 0x28) 23:12:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001840), 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740)}}], 0x209, 0x0) 23:12:48 executing program 4: [ 385.325196] not chained 50000 origins [ 385.329078] CPU: 0 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 385.335935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.345756] Call Trace: [ 385.348377] dump_stack+0x32d/0x480 [ 385.352043] ? save_stack_trace+0xc6/0x110 [ 385.356326] kmsan_internal_chain_origin+0x222/0x240 [ 385.361459] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 385.365647] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.371047] ? kmsan_internal_chain_origin+0x136/0x240 [ 385.376357] ? __msan_chain_origin+0x6d/0xd0 [ 385.380795] ? __save_stack_trace+0x8be/0xc60 [ 385.385318] ? save_stack_trace+0xc6/0x110 [ 385.389588] ? kmsan_internal_chain_origin+0x136/0x240 [ 385.394900] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 385.399607] ? __msan_memcpy+0x6f/0x80 [ 385.403535] ? pskb_expand_head+0x43b/0x1d20 [ 385.407979] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 385.412163] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 385.416529] ? ___sys_sendmsg+0xe68/0x1250 [ 385.420796] ? __sys_sendmmsg+0x56b/0xa90 [ 385.424979] ? __se_sys_sendmmsg+0xbd/0xe0 [ 385.429244] ? __x64_sys_sendmmsg+0x56/0x70 [ 385.433597] ? do_syscall_64+0xcf/0x110 [ 385.437614] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.443017] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 385.448416] ? is_bpf_text_address+0x49e/0x4d0 [ 385.453040] ? kmsan_internal_chain_origin+0x90/0x240 [ 385.458303] ? get_stack_info+0x863/0x9d0 [ 385.462506] __msan_chain_origin+0x6d/0xd0 [ 385.466786] ? __se_sys_sendmmsg+0xbd/0xe0 [ 385.471060] __save_stack_trace+0x8be/0xc60 23:12:48 executing program 3: 23:12:48 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:12:48 executing program 5: [ 385.475450] ? __se_sys_sendmmsg+0xbd/0xe0 [ 385.479727] save_stack_trace+0xc6/0x110 [ 385.483834] kmsan_internal_chain_origin+0x136/0x240 [ 385.488995] ? kmsan_internal_chain_origin+0x136/0x240 [ 385.494311] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 385.499014] ? __msan_memcpy+0x6f/0x80 [ 385.502937] ? pskb_expand_head+0x43b/0x1d20 [ 385.507388] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 385.511570] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 385.515922] ? ___sys_sendmsg+0xe68/0x1250 [ 385.520194] ? __sys_sendmmsg+0x56b/0xa90 [ 385.524373] ? __se_sys_sendmmsg+0xbd/0xe0 [ 385.528648] ? __x64_sys_sendmmsg+0x56/0x70 [ 385.533002] ? do_syscall_64+0xcf/0x110 [ 385.537021] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.542426] ? __msan_poison_alloca+0x1e0/0x2b0 [ 385.547170] ? __msan_get_context_state+0x9/0x30 [ 385.553582] ? INIT_INT+0xc/0x30 [ 385.557445] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 385.562877] kmsan_memcpy_origins+0x13d/0x1b0 [ 385.567427] __msan_memcpy+0x6f/0x80 [ 385.571181] pskb_expand_head+0x43b/0x1d20 [ 385.575486] l2tp_xmit_skb+0x5a7/0x24b0 [ 385.579574] pppol2tp_sendmsg+0x7a6/0xba0 [ 385.583805] ___sys_sendmsg+0xe68/0x1250 [ 385.587911] ? pppol2tp_getsockopt+0x1060/0x1060 [ 385.592736] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 385.598145] ? kmsan_set_origin+0x83/0x130 [ 385.602427] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 385.607836] ? _cond_resched+0xc7/0x120 [ 385.611851] __sys_sendmmsg+0x56b/0xa90 [ 385.615920] __se_sys_sendmmsg+0xbd/0xe0 [ 385.620027] __x64_sys_sendmmsg+0x56/0x70 23:12:48 executing program 0: [ 385.625087] do_syscall_64+0xcf/0x110 [ 385.628936] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.634150] RIP: 0033:0x457569 [ 385.637376] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.656307] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.664050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 385.671356] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 385.678654] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.685945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 385.693237] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 385.700564] Uninit was stored to memory at: [ 385.704933] kmsan_internal_chain_origin+0x136/0x240 [ 385.710072] __msan_chain_origin+0x6d/0xd0 [ 385.714335] __save_stack_trace+0x8be/0xc60 [ 385.718688] save_stack_trace+0xc6/0x110 [ 385.722804] kmsan_internal_chain_origin+0x136/0x240 [ 385.727947] kmsan_memcpy_origins+0x13d/0x1b0 [ 385.732476] __msan_memcpy+0x6f/0x80 [ 385.736236] pskb_expand_head+0x43b/0x1d20 [ 385.740507] l2tp_xmit_skb+0x5a7/0x24b0 [ 385.744531] pppol2tp_sendmsg+0x7a6/0xba0 [ 385.748706] ___sys_sendmsg+0xe68/0x1250 [ 385.752791] __sys_sendmmsg+0x56b/0xa90 [ 385.756786] __se_sys_sendmmsg+0xbd/0xe0 [ 385.760880] __x64_sys_sendmmsg+0x56/0x70 [ 385.765062] do_syscall_64+0xcf/0x110 [ 385.768890] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.774096] [ 385.775748] Uninit was stored to memory at: [ 385.780102] kmsan_internal_chain_origin+0x136/0x240 [ 385.785236] __msan_chain_origin+0x6d/0xd0 [ 385.789510] __save_stack_trace+0x8be/0xc60 [ 385.793870] save_stack_trace+0xc6/0x110 [ 385.797963] kmsan_internal_chain_origin+0x136/0x240 [ 385.803091] kmsan_memcpy_origins+0x13d/0x1b0 [ 385.807618] __msan_memcpy+0x6f/0x80 [ 385.811360] pskb_expand_head+0x43b/0x1d20 [ 385.815624] l2tp_xmit_skb+0x5a7/0x24b0 [ 385.819627] pppol2tp_sendmsg+0x7a6/0xba0 [ 385.823804] ___sys_sendmsg+0xe68/0x1250 [ 385.827885] __sys_sendmmsg+0x56b/0xa90 [ 385.831887] __se_sys_sendmmsg+0xbd/0xe0 [ 385.835976] __x64_sys_sendmmsg+0x56/0x70 [ 385.840155] do_syscall_64+0xcf/0x110 [ 385.843989] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.849213] [ 385.850852] Uninit was stored to memory at: [ 385.855206] kmsan_internal_chain_origin+0x136/0x240 [ 385.860340] __msan_chain_origin+0x6d/0xd0 [ 385.864605] __save_stack_trace+0x8be/0xc60 [ 385.868951] save_stack_trace+0xc6/0x110 [ 385.873037] kmsan_internal_chain_origin+0x136/0x240 [ 385.878171] kmsan_memcpy_origins+0x13d/0x1b0 [ 385.882694] __msan_memcpy+0x6f/0x80 [ 385.886432] pskb_expand_head+0x43b/0x1d20 [ 385.890697] l2tp_xmit_skb+0x5a7/0x24b0 [ 385.894696] pppol2tp_sendmsg+0x7a6/0xba0 [ 385.898869] ___sys_sendmsg+0xe68/0x1250 [ 385.902973] __sys_sendmmsg+0x56b/0xa90 [ 385.906977] __se_sys_sendmmsg+0xbd/0xe0 [ 385.911068] __x64_sys_sendmmsg+0x56/0x70 [ 385.915243] do_syscall_64+0xcf/0x110 [ 385.919104] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.924311] [ 385.925953] Uninit was stored to memory at: [ 385.930307] kmsan_internal_chain_origin+0x136/0x240 [ 385.935443] __msan_chain_origin+0x6d/0xd0 [ 385.939717] __save_stack_trace+0x8be/0xc60 [ 385.944072] save_stack_trace+0xc6/0x110 [ 385.948164] kmsan_internal_chain_origin+0x136/0x240 [ 385.953299] kmsan_memcpy_origins+0x13d/0x1b0 [ 385.957821] __msan_memcpy+0x6f/0x80 [ 385.961560] pskb_expand_head+0x43b/0x1d20 [ 385.965824] l2tp_xmit_skb+0x5a7/0x24b0 [ 385.969824] pppol2tp_sendmsg+0x7a6/0xba0 [ 385.973994] ___sys_sendmsg+0xe68/0x1250 [ 385.978084] __sys_sendmmsg+0x56b/0xa90 [ 385.982084] __se_sys_sendmmsg+0xbd/0xe0 [ 385.986175] __x64_sys_sendmmsg+0x56/0x70 [ 385.990370] do_syscall_64+0xcf/0x110 [ 385.994204] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.999401] [ 386.001049] Uninit was stored to memory at: [ 386.005410] kmsan_internal_chain_origin+0x136/0x240 [ 386.010550] __msan_chain_origin+0x6d/0xd0 [ 386.014811] __save_stack_trace+0x8be/0xc60 [ 386.019163] save_stack_trace+0xc6/0x110 [ 386.023250] kmsan_internal_chain_origin+0x136/0x240 [ 386.028381] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.032904] __msan_memcpy+0x6f/0x80 [ 386.036639] pskb_expand_head+0x43b/0x1d20 [ 386.040901] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.044899] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.049069] ___sys_sendmsg+0xe68/0x1250 [ 386.053160] __sys_sendmmsg+0x56b/0xa90 [ 386.057161] __se_sys_sendmmsg+0xbd/0xe0 [ 386.061248] __x64_sys_sendmmsg+0x56/0x70 [ 386.065425] do_syscall_64+0xcf/0x110 [ 386.069254] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.074456] [ 386.076107] Uninit was stored to memory at: [ 386.080460] kmsan_internal_chain_origin+0x136/0x240 [ 386.085599] __msan_chain_origin+0x6d/0xd0 [ 386.089865] __save_stack_trace+0x8be/0xc60 [ 386.094226] save_stack_trace+0xc6/0x110 [ 386.098311] kmsan_internal_chain_origin+0x136/0x240 [ 386.103437] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.107957] __msan_memcpy+0x6f/0x80 [ 386.111693] pskb_expand_head+0x43b/0x1d20 [ 386.115954] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.119951] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.124127] ___sys_sendmsg+0xe68/0x1250 [ 386.128212] __sys_sendmmsg+0x56b/0xa90 [ 386.132208] __se_sys_sendmmsg+0xbd/0xe0 [ 386.136290] __x64_sys_sendmmsg+0x56/0x70 [ 386.140466] do_syscall_64+0xcf/0x110 [ 386.144308] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.149511] [ 386.151156] Uninit was stored to memory at: [ 386.155515] kmsan_internal_chain_origin+0x136/0x240 [ 386.160655] __msan_chain_origin+0x6d/0xd0 [ 386.164913] __save_stack_trace+0x8be/0xc60 [ 386.169265] save_stack_trace+0xc6/0x110 [ 386.173361] kmsan_internal_chain_origin+0x136/0x240 [ 386.178504] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.183037] __msan_memcpy+0x6f/0x80 [ 386.186783] pskb_expand_head+0x43b/0x1d20 [ 386.191051] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.195059] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.199235] ___sys_sendmsg+0xe68/0x1250 [ 386.203325] __sys_sendmmsg+0x56b/0xa90 [ 386.207324] __se_sys_sendmmsg+0xbd/0xe0 [ 386.211414] __x64_sys_sendmmsg+0x56/0x70 [ 386.215591] do_syscall_64+0xcf/0x110 [ 386.219434] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.224639] 23:12:48 executing program 3: 23:12:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x168fc9d8}], 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xc82, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040)=0x7300, 0x10000000000443) read(r0, &(0x7f0000000240)=""/72, 0x48) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)={0x0, 0x4, [0x0]}) 23:12:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000080000000ff010000e767efb11e7adf84da310360facf5810e594c143c77f77000e273811e2ee752833c41c32f3c0ffa97ca9ad82183539e63c325ce5678d478047fbe0a61d978870efcb372dfa9a48e896077413ae925e9d673ab16ad928679ec6b20db53f3a1474db5b6944097905dc116bd5dcdb92998053979579000000005db5c331786d6288e0e4619f83533d430385b6a7258e4f0bf2e2968ee386dd71e8bd7b4ad584d922b31f5f5c2435fdc8e353d242e9a3ca294f15511f68732954c7e5a3cca28bad5cd15d14ae5b6fd959d6d328ab890d076b296b7a78b80811f65f70b1b0826810a58463d350f219f2aeb3867d09d5c14acf11571c6e0e1a00"], &(0x7f0000000340), 0x10f}, 0x20) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x0, 0x2, 0x1, 0x0, r2, 0x9767}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0xa, 0x0, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)}, 0xffffffffffffff13) socket$kcm(0x2, 0x3, 0x2) write$cgroup_int(r1, &(0x7f0000000000)=0x9295, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x7, 0x11) 23:12:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f0000000600)}, 0x85) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xffffff7f) [ 386.226290] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 386.234174] Variable was created at: [ 386.237920] __local_bh_enable_ip+0x46/0x260 [ 386.242350] local_bh_enable+0x36/0x40 [ 386.464548] binder: undelivered death notification, 0000000000000000 [ 386.479586] not chained 60000 origins [ 386.483433] CPU: 0 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 386.490291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.499663] Call Trace: [ 386.502285] dump_stack+0x32d/0x480 [ 386.505952] ? save_stack_trace+0xc6/0x110 [ 386.510228] kmsan_internal_chain_origin+0x222/0x240 [ 386.515359] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 386.519548] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.524955] ? kmsan_internal_chain_origin+0x136/0x240 [ 386.530263] ? __msan_chain_origin+0x6d/0xd0 [ 386.534700] ? __save_stack_trace+0x8be/0xc60 [ 386.539226] ? save_stack_trace+0xc6/0x110 [ 386.543495] ? kmsan_internal_chain_origin+0x136/0x240 [ 386.548804] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 386.554203] ? __msan_memcpy+0x6f/0x80 [ 386.558122] ? pskb_expand_head+0x43b/0x1d20 [ 386.562567] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 386.566745] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 386.571097] ? ___sys_sendmsg+0xe68/0x1250 [ 386.575359] ? __sys_sendmmsg+0x56b/0xa90 [ 386.580267] ? __se_sys_sendmmsg+0xbd/0xe0 [ 386.584546] ? __x64_sys_sendmmsg+0x56/0x70 [ 386.588895] ? do_syscall_64+0xcf/0x110 [ 386.592898] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.598305] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 386.603706] ? is_bpf_text_address+0x49e/0x4d0 [ 386.608323] ? kmsan_internal_chain_origin+0x90/0x240 [ 386.613583] ? get_stack_info+0x863/0x9d0 [ 386.617783] __msan_chain_origin+0x6d/0xd0 [ 386.622059] __save_stack_trace+0x833/0xc60 [ 386.626442] ? save_stack_trace+0xc6/0x110 [ 386.630721] save_stack_trace+0xc6/0x110 [ 386.634820] kmsan_internal_chain_origin+0x136/0x240 [ 386.639975] ? kmsan_internal_chain_origin+0x136/0x240 [ 386.645283] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 386.649985] ? __msan_memcpy+0x6f/0x80 [ 386.653904] ? pskb_expand_head+0x43b/0x1d20 [ 386.658341] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 386.662535] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 386.666886] ? ___sys_sendmsg+0xe68/0x1250 [ 386.671144] ? __sys_sendmmsg+0x56b/0xa90 [ 386.675316] ? __se_sys_sendmmsg+0xbd/0xe0 [ 386.679576] ? __x64_sys_sendmmsg+0x56/0x70 [ 386.683926] ? do_syscall_64+0xcf/0x110 [ 386.687927] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.693326] ? __msan_poison_alloca+0x1e0/0x2b0 [ 386.698069] ? __msan_get_context_state+0x9/0x30 [ 386.702851] ? INIT_INT+0xc/0x30 [ 386.706248] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 386.711660] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.716202] __msan_memcpy+0x6f/0x80 [ 386.719952] pskb_expand_head+0x43b/0x1d20 [ 386.724250] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.728298] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.732532] ___sys_sendmsg+0xe68/0x1250 [ 386.736626] ? pppol2tp_getsockopt+0x1060/0x1060 [ 386.741440] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 386.746841] ? kmsan_set_origin+0x83/0x130 [ 386.751116] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 386.756546] ? _cond_resched+0xc7/0x120 [ 386.760557] __sys_sendmmsg+0x56b/0xa90 [ 386.764624] __se_sys_sendmmsg+0xbd/0xe0 [ 386.768730] __x64_sys_sendmmsg+0x56/0x70 [ 386.772907] do_syscall_64+0xcf/0x110 [ 386.776740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.781959] RIP: 0033:0x457569 [ 386.785177] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.804467] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 386.812229] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 386.819536] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 386.826826] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.834114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 386.841403] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 386.848737] Uninit was stored to memory at: [ 386.853094] kmsan_internal_chain_origin+0x136/0x240 [ 386.858225] __msan_chain_origin+0x6d/0xd0 [ 386.862487] save_stack_trace+0xfa/0x110 [ 386.866590] kmsan_internal_chain_origin+0x136/0x240 [ 386.871736] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.876270] __msan_memcpy+0x6f/0x80 [ 386.880011] pskb_expand_head+0x43b/0x1d20 [ 386.884270] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.888272] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.892442] ___sys_sendmsg+0xe68/0x1250 [ 386.896538] __sys_sendmmsg+0x56b/0xa90 [ 386.900545] __se_sys_sendmmsg+0xbd/0xe0 [ 386.904630] __x64_sys_sendmmsg+0x56/0x70 [ 386.908804] do_syscall_64+0xcf/0x110 [ 386.912631] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.917834] [ 386.919471] Uninit was stored to memory at: [ 386.923830] kmsan_internal_chain_origin+0x136/0x240 [ 386.928979] __msan_chain_origin+0x6d/0xd0 [ 386.933239] __save_stack_trace+0x833/0xc60 [ 386.937587] save_stack_trace+0xc6/0x110 [ 386.941675] kmsan_internal_chain_origin+0x136/0x240 [ 386.946804] kmsan_memcpy_origins+0x13d/0x1b0 [ 386.951330] __msan_memcpy+0x6f/0x80 [ 386.955071] pskb_expand_head+0x43b/0x1d20 [ 386.959332] l2tp_xmit_skb+0x5a7/0x24b0 [ 386.963335] pppol2tp_sendmsg+0x7a6/0xba0 [ 386.967518] ___sys_sendmsg+0xe68/0x1250 [ 386.971607] __sys_sendmmsg+0x56b/0xa90 [ 386.975613] __se_sys_sendmmsg+0xbd/0xe0 [ 386.979703] __x64_sys_sendmmsg+0x56/0x70 [ 386.983878] do_syscall_64+0xcf/0x110 [ 386.987711] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.992912] [ 386.994555] Uninit was stored to memory at: [ 386.998905] kmsan_internal_chain_origin+0x136/0x240 [ 387.004037] __msan_chain_origin+0x6d/0xd0 [ 387.008301] save_stack_trace+0xfa/0x110 [ 387.012394] kmsan_internal_chain_origin+0x136/0x240 [ 387.017535] kmsan_memcpy_origins+0x13d/0x1b0 [ 387.022055] __msan_memcpy+0x6f/0x80 [ 387.025793] pskb_expand_head+0x43b/0x1d20 [ 387.030052] l2tp_xmit_skb+0x5a7/0x24b0 [ 387.034054] pppol2tp_sendmsg+0x7a6/0xba0 [ 387.038229] ___sys_sendmsg+0xe68/0x1250 [ 387.042318] __sys_sendmmsg+0x56b/0xa90 [ 387.046316] __se_sys_sendmmsg+0xbd/0xe0 [ 387.050408] __x64_sys_sendmmsg+0x56/0x70 [ 387.054591] do_syscall_64+0xcf/0x110 [ 387.058417] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.063622] [ 387.065264] Uninit was stored to memory at: [ 387.069611] kmsan_internal_chain_origin+0x136/0x240 [ 387.074745] __msan_chain_origin+0x6d/0xd0 [ 387.079006] __save_stack_trace+0x833/0xc60 [ 387.083358] save_stack_trace+0xc6/0x110 [ 387.087452] kmsan_internal_chain_origin+0x136/0x240 [ 387.092588] kmsan_memcpy_origins+0x13d/0x1b0 [ 387.097113] __msan_memcpy+0x6f/0x80 [ 387.100852] pskb_expand_head+0x43b/0x1d20 [ 387.105111] l2tp_xmit_skb+0x5a7/0x24b0 [ 387.109111] pppol2tp_sendmsg+0x7a6/0xba0 [ 387.113282] ___sys_sendmsg+0xe68/0x1250 [ 387.117365] __sys_sendmmsg+0x56b/0xa90 [ 387.121363] __se_sys_sendmmsg+0xbd/0xe0 [ 387.125466] __x64_sys_sendmmsg+0x56/0x70 [ 387.129654] do_syscall_64+0xcf/0x110 [ 387.133481] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.138696] [ 387.140335] Uninit was stored to memory at: [ 387.144688] kmsan_internal_chain_origin+0x136/0x240 [ 387.149823] __msan_chain_origin+0x6d/0xd0 [ 387.154088] save_stack_trace+0xfa/0x110 [ 387.158176] kmsan_internal_chain_origin+0x136/0x240 [ 387.163307] kmsan_memcpy_origins+0x13d/0x1b0 23:12:50 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) [ 387.167866] __msan_memcpy+0x6f/0x80 [ 387.171607] pskb_expand_head+0x43b/0x1d20 [ 387.175873] l2tp_xmit_skb+0x5a7/0x24b0 [ 387.179870] pppol2tp_sendmsg+0x7a6/0xba0 [ 387.184038] ___sys_sendmsg+0xe68/0x1250 [ 387.188132] __sys_sendmmsg+0x56b/0xa90 [ 387.192137] __se_sys_sendmmsg+0xbd/0xe0 [ 387.196224] __x64_sys_sendmmsg+0x56/0x70 [ 387.200394] do_syscall_64+0xcf/0x110 [ 387.204223] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.209422] [ 387.211076] Uninit was stored to memory at: 23:12:50 executing program 0: [ 387.215435] kmsan_internal_chain_origin+0x136/0x240 [ 387.220575] __msan_chain_origin+0x6d/0xd0 [ 387.225032] __save_stack_trace+0x833/0xc60 [ 387.229386] save_stack_trace+0xc6/0x110 [ 387.233483] kmsan_internal_chain_origin+0x136/0x240 [ 387.238635] kmsan_memcpy_origins+0x13d/0x1b0 [ 387.243168] __msan_memcpy+0x6f/0x80 [ 387.246906] pskb_expand_head+0x43b/0x1d20 [ 387.251170] l2tp_xmit_skb+0x5a7/0x24b0 [ 387.255169] pppol2tp_sendmsg+0x7a6/0xba0 [ 387.259345] ___sys_sendmsg+0xe68/0x1250 [ 387.263438] __sys_sendmmsg+0x56b/0xa90 [ 387.267441] __se_sys_sendmmsg+0xbd/0xe0 [ 387.271555] __x64_sys_sendmmsg+0x56/0x70 [ 387.275736] do_syscall_64+0xcf/0x110 [ 387.279579] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.284782] [ 387.286424] Uninit was stored to memory at: [ 387.290777] kmsan_internal_chain_origin+0x136/0x240 [ 387.295910] __msan_chain_origin+0x6d/0xd0 [ 387.300176] save_stack_trace+0xfa/0x110 [ 387.304269] kmsan_internal_chain_origin+0x136/0x240 [ 387.309403] kmsan_memcpy_origins+0x13d/0x1b0 [ 387.313931] __msan_memcpy+0x6f/0x80 [ 387.317671] pskb_expand_head+0x43b/0x1d20 [ 387.321935] l2tp_xmit_skb+0x5a7/0x24b0 [ 387.325946] pppol2tp_sendmsg+0x7a6/0xba0 [ 387.330128] ___sys_sendmsg+0xe68/0x1250 [ 387.334216] __sys_sendmmsg+0x56b/0xa90 [ 387.338422] __se_sys_sendmmsg+0xbd/0xe0 [ 387.342509] __x64_sys_sendmmsg+0x56/0x70 [ 387.346695] do_syscall_64+0xcf/0x110 [ 387.350537] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.355741] [ 387.357390] Local variable description: ----i.addr.i@propagate_protected_usage [ 387.364769] Variable was created at: [ 387.368510] propagate_protected_usage+0x10b/0xcb0 [ 387.373481] page_counter_cancel+0x1f3/0x2d0 [ 387.832480] not chained 70000 origins [ 387.836363] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 387.843245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.852616] Call Trace: [ 387.855234] dump_stack+0x32d/0x480 [ 387.858905] ? save_stack_trace+0xc6/0x110 [ 387.863197] kmsan_internal_chain_origin+0x222/0x240 [ 387.868337] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 387.872525] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.877933] ? kmsan_internal_chain_origin+0x136/0x240 [ 387.883244] ? __msan_chain_origin+0x6d/0xd0 [ 387.887686] ? __save_stack_trace+0x8be/0xc60 [ 387.892220] ? save_stack_trace+0xc6/0x110 [ 387.896493] ? kmsan_internal_chain_origin+0x136/0x240 [ 387.901808] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 387.906509] ? __msan_memcpy+0x6f/0x80 [ 387.910432] ? pskb_expand_head+0x43b/0x1d20 [ 387.914873] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 387.919057] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 387.923409] ? ___sys_sendmsg+0xe68/0x1250 [ 387.927670] ? __sys_sendmmsg+0x56b/0xa90 [ 387.931851] ? __se_sys_sendmmsg+0xbd/0xe0 [ 387.936114] ? __x64_sys_sendmmsg+0x56/0x70 [ 387.940470] ? do_syscall_64+0xcf/0x110 [ 387.944483] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.949886] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 387.955279] ? is_bpf_text_address+0x49e/0x4d0 [ 387.959896] ? kmsan_internal_chain_origin+0x90/0x240 [ 387.965156] ? get_stack_info+0x863/0x9d0 [ 387.969356] __msan_chain_origin+0x6d/0xd0 [ 387.973630] ? __x64_sys_sendmmsg+0x56/0x70 [ 387.977992] __save_stack_trace+0x8be/0xc60 [ 387.982374] ? __x64_sys_sendmmsg+0x56/0x70 [ 387.986742] save_stack_trace+0xc6/0x110 [ 387.990845] kmsan_internal_chain_origin+0x136/0x240 [ 387.996000] ? kmsan_internal_chain_origin+0x136/0x240 [ 388.001326] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 388.006036] ? __msan_memcpy+0x6f/0x80 [ 388.009960] ? pskb_expand_head+0x43b/0x1d20 [ 388.014398] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.018573] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 388.022942] ? ___sys_sendmsg+0xe68/0x1250 [ 388.027225] ? __sys_sendmmsg+0x56b/0xa90 [ 388.031410] ? __se_sys_sendmmsg+0xbd/0xe0 [ 388.035677] ? __x64_sys_sendmmsg+0x56/0x70 [ 388.040038] ? do_syscall_64+0xcf/0x110 [ 388.044050] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.049448] ? __msan_poison_alloca+0x1e0/0x2b0 [ 388.054190] ? __msan_get_context_state+0x9/0x30 [ 388.058972] ? INIT_INT+0xc/0x30 [ 388.062372] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 388.067785] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.072329] __msan_memcpy+0x6f/0x80 [ 388.076083] pskb_expand_head+0x43b/0x1d20 [ 388.080390] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.084442] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.088676] ___sys_sendmsg+0xe68/0x1250 [ 388.092787] ? kmsan_set_origin+0x83/0x130 [ 388.097061] ? pppol2tp_getsockopt+0x1060/0x1060 [ 388.101896] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 388.107297] ? kmsan_set_origin+0x83/0x130 [ 388.111575] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 388.116993] ? _cond_resched+0xc7/0x120 [ 388.121014] __sys_sendmmsg+0x56b/0xa90 [ 388.125096] __se_sys_sendmmsg+0xbd/0xe0 [ 388.129203] __x64_sys_sendmmsg+0x56/0x70 [ 388.133386] do_syscall_64+0xcf/0x110 [ 388.137226] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.142442] RIP: 0033:0x457569 [ 388.145663] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.164595] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.172336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 388.179628] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 388.186920] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.194214] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 388.201503] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 388.208823] Uninit was stored to memory at: [ 388.213178] kmsan_internal_chain_origin+0x136/0x240 [ 388.218309] __msan_chain_origin+0x6d/0xd0 [ 388.222575] __save_stack_trace+0x8be/0xc60 [ 388.226924] save_stack_trace+0xc6/0x110 [ 388.231235] kmsan_internal_chain_origin+0x136/0x240 [ 388.236371] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.240912] __msan_memcpy+0x6f/0x80 [ 388.244668] pskb_expand_head+0x43b/0x1d20 [ 388.248921] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.252894] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.257044] ___sys_sendmsg+0xe68/0x1250 [ 388.261101] __sys_sendmmsg+0x56b/0xa90 [ 388.265069] __se_sys_sendmmsg+0xbd/0xe0 [ 388.269126] __x64_sys_sendmmsg+0x56/0x70 [ 388.273272] do_syscall_64+0xcf/0x110 [ 388.277068] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.282247] [ 388.283861] Uninit was stored to memory at: [ 388.288178] kmsan_internal_chain_origin+0x136/0x240 [ 388.293280] __msan_chain_origin+0x6d/0xd0 [ 388.297527] __save_stack_trace+0x8be/0xc60 [ 388.301851] save_stack_trace+0xc6/0x110 [ 388.305907] kmsan_internal_chain_origin+0x136/0x240 [ 388.311007] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.315513] __msan_memcpy+0x6f/0x80 [ 388.319226] pskb_expand_head+0x43b/0x1d20 [ 388.323459] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.327432] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.331571] ___sys_sendmsg+0xe68/0x1250 [ 388.335628] __sys_sendmmsg+0x56b/0xa90 [ 388.339697] __se_sys_sendmmsg+0xbd/0xe0 [ 388.343751] __x64_sys_sendmmsg+0x56/0x70 [ 388.347893] do_syscall_64+0xcf/0x110 [ 388.351704] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.356884] [ 388.358502] Uninit was stored to memory at: [ 388.362821] kmsan_internal_chain_origin+0x136/0x240 [ 388.367918] __msan_chain_origin+0x6d/0xd0 [ 388.372151] __save_stack_trace+0x8be/0xc60 [ 388.376489] save_stack_trace+0xc6/0x110 [ 388.380562] kmsan_internal_chain_origin+0x136/0x240 [ 388.385681] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.390192] __msan_memcpy+0x6f/0x80 [ 388.393904] pskb_expand_head+0x43b/0x1d20 [ 388.398133] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.402103] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.406246] ___sys_sendmsg+0xe68/0x1250 [ 388.410298] __sys_sendmmsg+0x56b/0xa90 [ 388.414277] __se_sys_sendmmsg+0xbd/0xe0 [ 388.418354] __x64_sys_sendmmsg+0x56/0x70 [ 388.422503] do_syscall_64+0xcf/0x110 [ 388.426304] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.431481] [ 388.433101] Uninit was stored to memory at: [ 388.437418] kmsan_internal_chain_origin+0x136/0x240 [ 388.442540] __msan_chain_origin+0x6d/0xd0 [ 388.446772] __save_stack_trace+0x8be/0xc60 [ 388.451086] save_stack_trace+0xc6/0x110 [ 388.455146] kmsan_internal_chain_origin+0x136/0x240 [ 388.460252] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.464745] __msan_memcpy+0x6f/0x80 [ 388.468490] pskb_expand_head+0x43b/0x1d20 [ 388.472721] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.476721] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.480883] ___sys_sendmsg+0xe68/0x1250 [ 388.484947] __sys_sendmmsg+0x56b/0xa90 [ 388.488913] __se_sys_sendmmsg+0xbd/0xe0 [ 388.492970] __x64_sys_sendmmsg+0x56/0x70 [ 388.497112] do_syscall_64+0xcf/0x110 [ 388.500906] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.506082] [ 388.507702] Uninit was stored to memory at: [ 388.512020] kmsan_internal_chain_origin+0x136/0x240 [ 388.517131] __msan_chain_origin+0x6d/0xd0 [ 388.521360] __save_stack_trace+0x8be/0xc60 [ 388.525678] save_stack_trace+0xc6/0x110 [ 388.529753] kmsan_internal_chain_origin+0x136/0x240 [ 388.534851] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.539343] __msan_memcpy+0x6f/0x80 [ 388.543061] pskb_expand_head+0x43b/0x1d20 [ 388.547321] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.551317] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.555463] ___sys_sendmsg+0xe68/0x1250 [ 388.559520] __sys_sendmmsg+0x56b/0xa90 [ 388.563515] __se_sys_sendmmsg+0xbd/0xe0 [ 388.567593] __x64_sys_sendmmsg+0x56/0x70 [ 388.571738] do_syscall_64+0xcf/0x110 [ 388.575537] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.580712] [ 388.582328] Uninit was stored to memory at: [ 388.586644] kmsan_internal_chain_origin+0x136/0x240 [ 388.591742] __msan_chain_origin+0x6d/0xd0 [ 388.595973] __save_stack_trace+0x8be/0xc60 [ 388.600291] save_stack_trace+0xc6/0x110 [ 388.604349] kmsan_internal_chain_origin+0x136/0x240 [ 388.609446] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.613938] __msan_memcpy+0x6f/0x80 [ 388.617646] pskb_expand_head+0x43b/0x1d20 [ 388.621876] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.625878] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.630046] ___sys_sendmsg+0xe68/0x1250 [ 388.634106] __sys_sendmmsg+0x56b/0xa90 [ 388.638074] __se_sys_sendmmsg+0xbd/0xe0 [ 388.642127] __x64_sys_sendmmsg+0x56/0x70 [ 388.646269] do_syscall_64+0xcf/0x110 [ 388.650067] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.655254] [ 388.656869] Uninit was stored to memory at: [ 388.661182] kmsan_internal_chain_origin+0x136/0x240 [ 388.666304] __msan_chain_origin+0x6d/0xd0 [ 388.670534] __save_stack_trace+0x8be/0xc60 [ 388.674858] save_stack_trace+0xc6/0x110 [ 388.678910] kmsan_internal_chain_origin+0x136/0x240 [ 388.684037] kmsan_memcpy_origins+0x13d/0x1b0 [ 388.688532] __msan_memcpy+0x6f/0x80 [ 388.692244] pskb_expand_head+0x43b/0x1d20 [ 388.696470] l2tp_xmit_skb+0x5a7/0x24b0 [ 388.700442] pppol2tp_sendmsg+0x7a6/0xba0 [ 388.704585] ___sys_sendmsg+0xe68/0x1250 [ 388.708641] __sys_sendmmsg+0x56b/0xa90 [ 388.712612] __se_sys_sendmmsg+0xbd/0xe0 [ 388.716693] __x64_sys_sendmmsg+0x56/0x70 [ 388.720840] do_syscall_64+0xcf/0x110 [ 388.724638] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.729813] [ 388.731436] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 388.738781] Variable was created at: [ 388.742491] __local_bh_enable_ip+0x46/0x260 [ 388.746904] local_bh_enable+0x36/0x40 [ 388.784710] not chained 80000 origins [ 388.788566] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 388.795424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.804797] Call Trace: [ 388.807416] dump_stack+0x32d/0x480 [ 388.811090] ? save_stack_trace+0xc6/0x110 [ 388.815368] kmsan_internal_chain_origin+0x222/0x240 [ 388.820506] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.824699] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.830111] ? kmsan_internal_chain_origin+0x136/0x240 [ 388.835423] ? __msan_chain_origin+0x6d/0xd0 [ 388.839848] ? __save_stack_trace+0x8be/0xc60 [ 388.844351] ? save_stack_trace+0xc6/0x110 [ 388.848625] ? kmsan_internal_chain_origin+0x136/0x240 [ 388.853937] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 388.858608] ? __msan_memcpy+0x6f/0x80 [ 388.862494] ? pskb_expand_head+0x43b/0x1d20 [ 388.866923] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.871090] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 388.875423] ? ___sys_sendmsg+0xe68/0x1250 [ 388.879702] ? __sys_sendmmsg+0x56b/0xa90 [ 388.883851] ? __se_sys_sendmmsg+0xbd/0xe0 [ 388.888092] ? __x64_sys_sendmmsg+0x56/0x70 [ 388.892429] ? do_syscall_64+0xcf/0x110 [ 388.896421] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.901815] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 388.907195] ? is_bpf_text_address+0x49e/0x4d0 [ 388.911785] ? kmsan_internal_chain_origin+0x90/0x240 [ 388.917000] ? get_stack_info+0x863/0x9d0 [ 388.921165] __msan_chain_origin+0x6d/0xd0 [ 388.925423] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.929591] __save_stack_trace+0x8be/0xc60 [ 388.933934] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.938085] save_stack_trace+0xc6/0x110 [ 388.942156] kmsan_internal_chain_origin+0x136/0x240 [ 388.947269] ? kmsan_internal_chain_origin+0x136/0x240 [ 388.952573] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 388.957242] ? __msan_memcpy+0x6f/0x80 [ 388.961122] ? pskb_expand_head+0x43b/0x1d20 [ 388.965526] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 388.969671] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 388.973989] ? ___sys_sendmsg+0xe68/0x1250 [ 388.978241] ? __sys_sendmmsg+0x56b/0xa90 [ 388.982386] ? __se_sys_sendmmsg+0xbd/0xe0 [ 388.986619] ? __x64_sys_sendmmsg+0x56/0x70 [ 388.990938] ? do_syscall_64+0xcf/0x110 [ 388.994912] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.000276] ? __msan_poison_alloca+0x1e0/0x2b0 [ 389.004967] ? __msan_get_context_state+0x9/0x30 [ 389.009718] ? INIT_INT+0xc/0x30 [ 389.013083] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 389.018465] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.022969] __msan_memcpy+0x6f/0x80 [ 389.026682] pskb_expand_head+0x43b/0x1d20 [ 389.030936] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.034936] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.039105] ___sys_sendmsg+0xe68/0x1250 [ 389.043165] ? kmsan_set_origin+0x83/0x130 [ 389.047400] ? pppol2tp_getsockopt+0x1060/0x1060 [ 389.052175] ? __msan_poison_alloca+0x1e0/0x2b0 [ 389.056844] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 389.062240] ? rcu_all_qs+0x3b/0x310 [ 389.065950] ? _cond_resched+0x59/0x120 [ 389.069933] ? rcu_all_qs+0x53/0x310 [ 389.073661] ? _cond_resched+0x37/0x120 [ 389.077632] ? __sys_sendmmsg+0x7c9/0xa90 [ 389.081807] ? _cond_resched+0x59/0x120 [ 389.085786] __sys_sendmmsg+0x56b/0xa90 [ 389.089797] __se_sys_sendmmsg+0xbd/0xe0 [ 389.093866] __x64_sys_sendmmsg+0x56/0x70 [ 389.098014] do_syscall_64+0xcf/0x110 [ 389.101839] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.107063] RIP: 0033:0x457569 [ 389.110252] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.129148] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.136854] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 389.144137] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 389.151400] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.158665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 389.165930] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 389.173211] Uninit was stored to memory at: [ 389.177536] kmsan_internal_chain_origin+0x136/0x240 [ 389.182639] __msan_chain_origin+0x6d/0xd0 [ 389.186870] __save_stack_trace+0x8be/0xc60 [ 389.191185] save_stack_trace+0xc6/0x110 [ 389.195241] kmsan_internal_chain_origin+0x136/0x240 [ 389.200342] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.204833] __msan_memcpy+0x6f/0x80 [ 389.208546] pskb_expand_head+0x43b/0x1d20 [ 389.212782] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.216756] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.220902] ___sys_sendmsg+0xe68/0x1250 [ 389.224963] __sys_sendmmsg+0x56b/0xa90 [ 389.228929] __se_sys_sendmmsg+0xbd/0xe0 [ 389.232982] __x64_sys_sendmmsg+0x56/0x70 [ 389.237126] do_syscall_64+0xcf/0x110 [ 389.240922] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.246097] [ 389.247734] Uninit was stored to memory at: [ 389.252059] kmsan_internal_chain_origin+0x136/0x240 [ 389.257157] __msan_chain_origin+0x6d/0xd0 [ 389.261407] __save_stack_trace+0x8be/0xc60 [ 389.265729] save_stack_trace+0xc6/0x110 [ 389.269789] kmsan_internal_chain_origin+0x136/0x240 [ 389.274889] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.279379] __msan_memcpy+0x6f/0x80 [ 389.283091] pskb_expand_head+0x43b/0x1d20 [ 389.287337] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.291306] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.295451] ___sys_sendmsg+0xe68/0x1250 [ 389.299508] __sys_sendmmsg+0x56b/0xa90 [ 389.303482] __se_sys_sendmmsg+0xbd/0xe0 [ 389.307544] __x64_sys_sendmmsg+0x56/0x70 [ 389.311702] do_syscall_64+0xcf/0x110 [ 389.315505] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.320682] [ 389.322320] Uninit was stored to memory at: [ 389.326638] kmsan_internal_chain_origin+0x136/0x240 [ 389.331760] __msan_chain_origin+0x6d/0xd0 [ 389.335990] __save_stack_trace+0x8be/0xc60 [ 389.340652] save_stack_trace+0xc6/0x110 [ 389.344711] kmsan_internal_chain_origin+0x136/0x240 [ 389.349805] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.354295] __msan_memcpy+0x6f/0x80 [ 389.358013] pskb_expand_head+0x43b/0x1d20 [ 389.362249] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.366217] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.370357] ___sys_sendmsg+0xe68/0x1250 [ 389.374410] __sys_sendmmsg+0x56b/0xa90 [ 389.378388] __se_sys_sendmmsg+0xbd/0xe0 [ 389.382445] __x64_sys_sendmmsg+0x56/0x70 [ 389.386590] do_syscall_64+0xcf/0x110 [ 389.390391] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.395568] [ 389.397185] Uninit was stored to memory at: [ 389.401504] kmsan_internal_chain_origin+0x136/0x240 [ 389.406607] __msan_chain_origin+0x6d/0xd0 [ 389.410842] __save_stack_trace+0x8be/0xc60 [ 389.415159] save_stack_trace+0xc6/0x110 [ 389.419215] kmsan_internal_chain_origin+0x136/0x240 [ 389.424317] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.428817] __msan_memcpy+0x6f/0x80 [ 389.432530] pskb_expand_head+0x43b/0x1d20 [ 389.436782] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.440757] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.444899] ___sys_sendmsg+0xe68/0x1250 [ 389.448952] __sys_sendmmsg+0x56b/0xa90 [ 389.452923] __se_sys_sendmmsg+0xbd/0xe0 [ 389.456981] __x64_sys_sendmmsg+0x56/0x70 [ 389.461124] do_syscall_64+0xcf/0x110 [ 389.464921] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.470095] [ 389.471718] Uninit was stored to memory at: [ 389.476065] kmsan_internal_chain_origin+0x136/0x240 [ 389.481166] __msan_chain_origin+0x6d/0xd0 [ 389.485398] __save_stack_trace+0x8be/0xc60 [ 389.489713] save_stack_trace+0xc6/0x110 [ 389.493773] kmsan_internal_chain_origin+0x136/0x240 [ 389.498868] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.503360] __msan_memcpy+0x6f/0x80 [ 389.507087] pskb_expand_head+0x43b/0x1d20 [ 389.511329] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.515299] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.519442] ___sys_sendmsg+0xe68/0x1250 [ 389.523495] __sys_sendmmsg+0x56b/0xa90 [ 389.527463] __se_sys_sendmmsg+0xbd/0xe0 [ 389.531543] __x64_sys_sendmmsg+0x56/0x70 [ 389.535688] do_syscall_64+0xcf/0x110 [ 389.539484] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.544661] [ 389.546314] Uninit was stored to memory at: [ 389.550637] kmsan_internal_chain_origin+0x136/0x240 [ 389.555736] __msan_chain_origin+0x6d/0xd0 [ 389.559967] __save_stack_trace+0x8be/0xc60 [ 389.564286] save_stack_trace+0xc6/0x110 [ 389.568352] kmsan_internal_chain_origin+0x136/0x240 [ 389.573451] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.577964] __msan_memcpy+0x6f/0x80 [ 389.581689] pskb_expand_head+0x43b/0x1d20 [ 389.585926] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.589893] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.594037] ___sys_sendmsg+0xe68/0x1250 [ 389.598093] __sys_sendmmsg+0x56b/0xa90 [ 389.602061] __se_sys_sendmmsg+0xbd/0xe0 [ 389.606117] __x64_sys_sendmmsg+0x56/0x70 [ 389.610259] do_syscall_64+0xcf/0x110 [ 389.614061] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.619238] [ 389.620855] Uninit was stored to memory at: [ 389.625174] kmsan_internal_chain_origin+0x136/0x240 [ 389.630270] __msan_chain_origin+0x6d/0xd0 [ 389.634498] __save_stack_trace+0x8be/0xc60 [ 389.638812] save_stack_trace+0xc6/0x110 [ 389.642891] kmsan_internal_chain_origin+0x136/0x240 [ 389.647999] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.652493] __msan_memcpy+0x6f/0x80 [ 389.656204] pskb_expand_head+0x43b/0x1d20 [ 389.660436] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.664408] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.668572] ___sys_sendmsg+0xe68/0x1250 [ 389.672629] __sys_sendmmsg+0x56b/0xa90 [ 389.676595] __se_sys_sendmmsg+0xbd/0xe0 [ 389.680649] __x64_sys_sendmmsg+0x56/0x70 [ 389.684797] do_syscall_64+0xcf/0x110 [ 389.688594] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.693770] [ 389.695387] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 389.702732] Variable was created at: [ 389.706440] __local_bh_enable_ip+0x46/0x260 [ 389.710843] local_bh_enable+0x36/0x40 [ 389.740805] not chained 90000 origins [ 389.744624] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 389.751469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.760815] Call Trace: [ 389.763404] dump_stack+0x32d/0x480 [ 389.767048] ? save_stack_trace+0xc6/0x110 [ 389.771320] kmsan_internal_chain_origin+0x222/0x240 [ 389.776449] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 389.780609] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.785982] ? kmsan_internal_chain_origin+0x136/0x240 [ 389.791257] ? __msan_chain_origin+0x6d/0xd0 [ 389.795663] ? __save_stack_trace+0x8be/0xc60 [ 389.800155] ? save_stack_trace+0xc6/0x110 [ 389.804388] ? kmsan_internal_chain_origin+0x136/0x240 [ 389.809665] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 389.814331] ? __msan_memcpy+0x6f/0x80 [ 389.818233] ? pskb_expand_head+0x43b/0x1d20 [ 389.822639] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 389.826782] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 389.831101] ? ___sys_sendmsg+0xe68/0x1250 [ 389.835333] ? __sys_sendmmsg+0x56b/0xa90 [ 389.839479] ? __se_sys_sendmmsg+0xbd/0xe0 [ 389.843709] ? __x64_sys_sendmmsg+0x56/0x70 [ 389.848025] ? do_syscall_64+0xcf/0x110 [ 389.852000] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.857367] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 389.862762] ? is_bpf_text_address+0x49e/0x4d0 [ 389.867371] ? kmsan_internal_chain_origin+0x90/0x240 [ 389.872584] ? get_stack_info+0x863/0x9d0 [ 389.876742] __msan_chain_origin+0x6d/0xd0 [ 389.880977] __save_stack_trace+0x833/0xc60 [ 389.885322] ? save_stack_trace+0xc6/0x110 [ 389.889567] save_stack_trace+0xc6/0x110 [ 389.893634] kmsan_internal_chain_origin+0x136/0x240 [ 389.898749] ? kmsan_internal_chain_origin+0x136/0x240 [ 389.904049] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 389.908718] ? __msan_memcpy+0x6f/0x80 [ 389.912602] ? pskb_expand_head+0x43b/0x1d20 [ 389.917027] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 389.921201] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 389.925524] ? ___sys_sendmsg+0xe68/0x1250 [ 389.929756] ? __sys_sendmmsg+0x56b/0xa90 [ 389.933903] ? __se_sys_sendmmsg+0xbd/0xe0 [ 389.938160] ? __x64_sys_sendmmsg+0x56/0x70 [ 389.942479] ? do_syscall_64+0xcf/0x110 [ 389.946453] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.951821] ? __msan_poison_alloca+0x1e0/0x2b0 [ 389.956511] ? __msan_get_context_state+0x9/0x30 [ 389.961262] ? INIT_INT+0xc/0x30 [ 389.964627] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 389.969998] kmsan_memcpy_origins+0x13d/0x1b0 [ 389.974505] __msan_memcpy+0x6f/0x80 [ 389.978224] pskb_expand_head+0x43b/0x1d20 [ 389.982482] l2tp_xmit_skb+0x5a7/0x24b0 [ 389.986486] pppol2tp_sendmsg+0x7a6/0xba0 [ 389.990655] ___sys_sendmsg+0xe68/0x1250 [ 389.994711] ? kmsan_set_origin+0x83/0x130 [ 389.998947] ? pppol2tp_getsockopt+0x1060/0x1060 [ 390.003723] ? __msan_poison_alloca+0x1e0/0x2b0 [ 390.008402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 390.013769] ? rcu_all_qs+0x3b/0x310 [ 390.017485] ? _cond_resched+0x59/0x120 [ 390.021463] ? rcu_all_qs+0x53/0x310 [ 390.025176] ? _cond_resched+0x37/0x120 [ 390.029151] ? __sys_sendmmsg+0x7c9/0xa90 [ 390.033303] ? _cond_resched+0x59/0x120 [ 390.037287] __sys_sendmmsg+0x56b/0xa90 [ 390.041314] __se_sys_sendmmsg+0xbd/0xe0 [ 390.045392] __x64_sys_sendmmsg+0x56/0x70 [ 390.049540] do_syscall_64+0xcf/0x110 [ 390.053344] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.058528] RIP: 0033:0x457569 [ 390.061721] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.080640] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.088350] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 390.095660] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 390.102929] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 390.110202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 390.117467] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 390.124750] Uninit was stored to memory at: [ 390.129070] kmsan_internal_chain_origin+0x136/0x240 [ 390.134169] __msan_chain_origin+0x6d/0xd0 [ 390.138402] save_stack_trace+0xfa/0x110 [ 390.142458] kmsan_internal_chain_origin+0x136/0x240 [ 390.147569] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.152064] __msan_memcpy+0x6f/0x80 [ 390.155771] pskb_expand_head+0x43b/0x1d20 [ 390.160000] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.163974] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.168116] ___sys_sendmsg+0xe68/0x1250 [ 390.172173] __sys_sendmmsg+0x56b/0xa90 [ 390.176141] __se_sys_sendmmsg+0xbd/0xe0 [ 390.180199] __x64_sys_sendmmsg+0x56/0x70 [ 390.184345] do_syscall_64+0xcf/0x110 [ 390.188148] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.193329] [ 390.194944] Uninit was stored to memory at: [ 390.199267] kmsan_internal_chain_origin+0x136/0x240 [ 390.204370] __msan_chain_origin+0x6d/0xd0 [ 390.208605] __save_stack_trace+0x833/0xc60 [ 390.212924] save_stack_trace+0xc6/0x110 [ 390.216982] kmsan_internal_chain_origin+0x136/0x240 [ 390.222080] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.226572] __msan_memcpy+0x6f/0x80 [ 390.230544] pskb_expand_head+0x43b/0x1d20 [ 390.234775] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.238748] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.243068] ___sys_sendmsg+0xe68/0x1250 [ 390.247125] __sys_sendmmsg+0x56b/0xa90 [ 390.251095] __se_sys_sendmmsg+0xbd/0xe0 [ 390.255172] __x64_sys_sendmmsg+0x56/0x70 [ 390.259312] do_syscall_64+0xcf/0x110 [ 390.263113] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.268290] [ 390.269903] Uninit was stored to memory at: [ 390.274219] kmsan_internal_chain_origin+0x136/0x240 [ 390.279333] __msan_chain_origin+0x6d/0xd0 [ 390.283568] save_stack_trace+0xfa/0x110 [ 390.287654] kmsan_internal_chain_origin+0x136/0x240 [ 390.292774] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.297269] __msan_memcpy+0x6f/0x80 [ 390.300985] pskb_expand_head+0x43b/0x1d20 [ 390.305214] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.309184] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.313338] ___sys_sendmsg+0xe68/0x1250 [ 390.317405] __sys_sendmmsg+0x56b/0xa90 [ 390.321373] __se_sys_sendmmsg+0xbd/0xe0 [ 390.325432] __x64_sys_sendmmsg+0x56/0x70 [ 390.329590] do_syscall_64+0xcf/0x110 [ 390.333390] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.338566] [ 390.340186] Uninit was stored to memory at: [ 390.344501] kmsan_internal_chain_origin+0x136/0x240 [ 390.349602] __msan_chain_origin+0x6d/0xd0 [ 390.353835] __save_stack_trace+0x833/0xc60 [ 390.358152] save_stack_trace+0xc6/0x110 [ 390.362210] kmsan_internal_chain_origin+0x136/0x240 [ 390.367304] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.371815] __msan_memcpy+0x6f/0x80 [ 390.375523] pskb_expand_head+0x43b/0x1d20 [ 390.379757] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.383725] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.387867] ___sys_sendmsg+0xe68/0x1250 [ 390.391923] __sys_sendmmsg+0x56b/0xa90 [ 390.395889] __se_sys_sendmmsg+0xbd/0xe0 [ 390.399943] __x64_sys_sendmmsg+0x56/0x70 [ 390.404085] do_syscall_64+0xcf/0x110 [ 390.407902] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.413098] [ 390.414716] Uninit was stored to memory at: [ 390.419041] kmsan_internal_chain_origin+0x136/0x240 [ 390.424142] __msan_chain_origin+0x6d/0xd0 [ 390.428369] save_stack_trace+0xfa/0x110 [ 390.432424] kmsan_internal_chain_origin+0x136/0x240 [ 390.437555] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.442062] __msan_memcpy+0x6f/0x80 [ 390.445767] pskb_expand_head+0x43b/0x1d20 [ 390.449995] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.453967] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.458111] ___sys_sendmsg+0xe68/0x1250 [ 390.462170] __sys_sendmmsg+0x56b/0xa90 [ 390.466138] __se_sys_sendmmsg+0xbd/0xe0 [ 390.470189] __x64_sys_sendmmsg+0x56/0x70 [ 390.474329] do_syscall_64+0xcf/0x110 [ 390.478125] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.483300] [ 390.484916] Uninit was stored to memory at: [ 390.489235] kmsan_internal_chain_origin+0x136/0x240 [ 390.494354] __msan_chain_origin+0x6d/0xd0 [ 390.498595] __save_stack_trace+0x833/0xc60 [ 390.502912] save_stack_trace+0xc6/0x110 [ 390.506970] kmsan_internal_chain_origin+0x136/0x240 [ 390.512070] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.516690] __msan_memcpy+0x6f/0x80 [ 390.520401] pskb_expand_head+0x43b/0x1d20 [ 390.524631] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.528602] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.532747] ___sys_sendmsg+0xe68/0x1250 [ 390.536799] __sys_sendmmsg+0x56b/0xa90 [ 390.540764] __se_sys_sendmmsg+0xbd/0xe0 [ 390.544821] __x64_sys_sendmmsg+0x56/0x70 [ 390.548962] do_syscall_64+0xcf/0x110 [ 390.552765] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.557966] [ 390.559582] Uninit was stored to memory at: [ 390.563904] kmsan_internal_chain_origin+0x136/0x240 [ 390.569002] __msan_chain_origin+0x6d/0xd0 [ 390.573264] save_stack_trace+0xfa/0x110 [ 390.577320] kmsan_internal_chain_origin+0x136/0x240 [ 390.582416] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.586905] __msan_memcpy+0x6f/0x80 [ 390.590610] pskb_expand_head+0x43b/0x1d20 [ 390.594852] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.598843] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.602988] ___sys_sendmsg+0xe68/0x1250 [ 390.607045] __sys_sendmmsg+0x56b/0xa90 [ 390.611015] __se_sys_sendmmsg+0xbd/0xe0 [ 390.615097] __x64_sys_sendmmsg+0x56/0x70 [ 390.619254] do_syscall_64+0xcf/0x110 [ 390.623054] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.628229] [ 390.629849] Local variable description: ----i.addr.i@propagate_protected_usage [ 390.637197] Variable was created at: [ 390.640912] propagate_protected_usage+0x10b/0xcb0 [ 390.645837] page_counter_cancel+0x1f3/0x2d0 [ 390.677349] not chained 100000 origins [ 390.681251] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 390.688081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.697428] Call Trace: [ 390.700015] dump_stack+0x32d/0x480 [ 390.703654] ? save_stack_trace+0xc6/0x110 [ 390.707911] kmsan_internal_chain_origin+0x222/0x240 [ 390.713019] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 390.717175] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.722545] ? kmsan_internal_chain_origin+0x136/0x240 [ 390.727821] ? __msan_chain_origin+0x6d/0xd0 [ 390.732239] ? __save_stack_trace+0x8be/0xc60 [ 390.736729] ? save_stack_trace+0xc6/0x110 [ 390.740961] ? kmsan_internal_chain_origin+0x136/0x240 [ 390.746238] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 390.750905] ? __msan_memcpy+0x6f/0x80 [ 390.754788] ? pskb_expand_head+0x43b/0x1d20 [ 390.759190] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 390.763334] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 390.767651] ? ___sys_sendmsg+0xe68/0x1250 [ 390.771880] ? __sys_sendmmsg+0x56b/0xa90 [ 390.776043] ? __se_sys_sendmmsg+0xbd/0xe0 [ 390.780279] ? __x64_sys_sendmmsg+0x56/0x70 [ 390.784597] ? do_syscall_64+0xcf/0x110 [ 390.788569] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.793954] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 390.799317] ? is_bpf_text_address+0x49e/0x4d0 [ 390.803897] ? kmsan_internal_chain_origin+0x90/0x240 [ 390.809127] ? get_stack_info+0x863/0x9d0 [ 390.813285] __msan_chain_origin+0x6d/0xd0 [ 390.817518] ? __msan_memcpy+0x6f/0x80 [ 390.821406] __save_stack_trace+0x8be/0xc60 [ 390.825751] ? __msan_memcpy+0x6f/0x80 [ 390.829639] save_stack_trace+0xc6/0x110 [ 390.833707] kmsan_internal_chain_origin+0x136/0x240 [ 390.838816] ? kmsan_internal_chain_origin+0x136/0x240 [ 390.844088] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 390.848752] ? __msan_memcpy+0x6f/0x80 [ 390.852638] ? pskb_expand_head+0x43b/0x1d20 [ 390.857049] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 390.861196] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 390.865518] ? ___sys_sendmsg+0xe68/0x1250 [ 390.869749] ? __sys_sendmmsg+0x56b/0xa90 [ 390.873894] ? __se_sys_sendmmsg+0xbd/0xe0 [ 390.878125] ? __x64_sys_sendmmsg+0x56/0x70 [ 390.882445] ? do_syscall_64+0xcf/0x110 [ 390.886417] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.891779] ? __msan_poison_alloca+0x1e0/0x2b0 [ 390.896471] ? __msan_get_context_state+0x9/0x30 [ 390.901221] ? INIT_INT+0xc/0x30 [ 390.904586] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 390.909962] kmsan_memcpy_origins+0x13d/0x1b0 [ 390.914467] __msan_memcpy+0x6f/0x80 [ 390.918183] pskb_expand_head+0x43b/0x1d20 [ 390.922441] l2tp_xmit_skb+0x5a7/0x24b0 [ 390.926462] pppol2tp_sendmsg+0x7a6/0xba0 [ 390.930632] ___sys_sendmsg+0xe68/0x1250 [ 390.934689] ? kmsan_set_origin+0x83/0x130 [ 390.938919] ? pppol2tp_getsockopt+0x1060/0x1060 [ 390.943702] ? __msan_poison_alloca+0x1e0/0x2b0 [ 390.948368] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 390.953744] ? rcu_all_qs+0x3b/0x310 [ 390.957454] ? _cond_resched+0x59/0x120 [ 390.961448] ? rcu_all_qs+0x53/0x310 [ 390.965159] ? _cond_resched+0x37/0x120 [ 390.969129] ? __sys_sendmmsg+0x7c9/0xa90 [ 390.973288] ? _cond_resched+0x59/0x120 [ 390.977264] __sys_sendmmsg+0x56b/0xa90 [ 390.981274] __se_sys_sendmmsg+0xbd/0xe0 [ 390.985342] __x64_sys_sendmmsg+0x56/0x70 [ 390.989494] do_syscall_64+0xcf/0x110 [ 390.993304] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.998491] RIP: 0033:0x457569 [ 391.001697] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.020600] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.028307] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 391.035576] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 391.042842] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 391.050125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 391.057418] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 391.064713] Uninit was stored to memory at: [ 391.069053] kmsan_internal_chain_origin+0x136/0x240 [ 391.074155] __msan_chain_origin+0x6d/0xd0 [ 391.078385] __save_stack_trace+0x8be/0xc60 [ 391.082702] save_stack_trace+0xc6/0x110 [ 391.086761] kmsan_internal_chain_origin+0x136/0x240 [ 391.091863] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.096352] __msan_memcpy+0x6f/0x80 [ 391.100063] pskb_expand_head+0x43b/0x1d20 [ 391.104315] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.108321] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.112467] ___sys_sendmsg+0xe68/0x1250 [ 391.116524] __sys_sendmmsg+0x56b/0xa90 [ 391.120494] __se_sys_sendmmsg+0xbd/0xe0 [ 391.124559] __x64_sys_sendmmsg+0x56/0x70 [ 391.128698] do_syscall_64+0xcf/0x110 [ 391.132496] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.137678] [ 391.139298] Uninit was stored to memory at: [ 391.143621] kmsan_internal_chain_origin+0x136/0x240 [ 391.148730] __msan_chain_origin+0x6d/0xd0 [ 391.152958] __save_stack_trace+0x8be/0xc60 [ 391.157276] save_stack_trace+0xc6/0x110 [ 391.161331] kmsan_internal_chain_origin+0x136/0x240 [ 391.166429] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.170918] __msan_memcpy+0x6f/0x80 [ 391.174626] pskb_expand_head+0x43b/0x1d20 [ 391.178875] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.182861] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.187106] ___sys_sendmsg+0xe68/0x1250 [ 391.191160] __sys_sendmmsg+0x56b/0xa90 [ 391.195131] __se_sys_sendmmsg+0xbd/0xe0 [ 391.199188] __x64_sys_sendmmsg+0x56/0x70 [ 391.203331] do_syscall_64+0xcf/0x110 [ 391.207128] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.212303] [ 391.213916] Uninit was stored to memory at: [ 391.218234] kmsan_internal_chain_origin+0x136/0x240 [ 391.223331] __msan_chain_origin+0x6d/0xd0 [ 391.227567] __save_stack_trace+0x8be/0xc60 [ 391.231886] save_stack_trace+0xc6/0x110 [ 391.235948] kmsan_internal_chain_origin+0x136/0x240 [ 391.241055] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.245575] __msan_memcpy+0x6f/0x80 [ 391.249294] pskb_expand_head+0x43b/0x1d20 [ 391.253526] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.257500] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.261662] ___sys_sendmsg+0xe68/0x1250 [ 391.265737] __sys_sendmmsg+0x56b/0xa90 [ 391.269707] __se_sys_sendmmsg+0xbd/0xe0 [ 391.273770] __x64_sys_sendmmsg+0x56/0x70 [ 391.277913] do_syscall_64+0xcf/0x110 [ 391.281720] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.286898] [ 391.288515] Uninit was stored to memory at: [ 391.292838] kmsan_internal_chain_origin+0x136/0x240 [ 391.297935] __msan_chain_origin+0x6d/0xd0 [ 391.302185] __save_stack_trace+0x8be/0xc60 [ 391.306505] save_stack_trace+0xc6/0x110 [ 391.310580] kmsan_internal_chain_origin+0x136/0x240 [ 391.315679] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.320169] __msan_memcpy+0x6f/0x80 [ 391.323877] pskb_expand_head+0x43b/0x1d20 [ 391.328115] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.332087] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.336229] ___sys_sendmsg+0xe68/0x1250 [ 391.340460] __sys_sendmmsg+0x56b/0xa90 [ 391.344433] __se_sys_sendmmsg+0xbd/0xe0 [ 391.348490] __x64_sys_sendmmsg+0x56/0x70 [ 391.352633] do_syscall_64+0xcf/0x110 [ 391.356427] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.361604] [ 391.363244] Uninit was stored to memory at: [ 391.367563] kmsan_internal_chain_origin+0x136/0x240 [ 391.372663] __msan_chain_origin+0x6d/0xd0 [ 391.376889] __save_stack_trace+0x8be/0xc60 [ 391.381201] save_stack_trace+0xc6/0x110 [ 391.385280] kmsan_internal_chain_origin+0x136/0x240 [ 391.390380] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.394870] __msan_memcpy+0x6f/0x80 [ 391.398585] pskb_expand_head+0x43b/0x1d20 [ 391.402813] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.406781] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.410938] ___sys_sendmsg+0xe68/0x1250 [ 391.414993] __sys_sendmmsg+0x56b/0xa90 [ 391.418961] __se_sys_sendmmsg+0xbd/0xe0 [ 391.423017] __x64_sys_sendmmsg+0x56/0x70 [ 391.427163] do_syscall_64+0xcf/0x110 [ 391.430954] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.436131] [ 391.437750] Uninit was stored to memory at: [ 391.442070] kmsan_internal_chain_origin+0x136/0x240 [ 391.447167] __msan_chain_origin+0x6d/0xd0 [ 391.451395] __save_stack_trace+0x8be/0xc60 [ 391.455711] save_stack_trace+0xc6/0x110 [ 391.459764] kmsan_internal_chain_origin+0x136/0x240 [ 391.464861] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.469354] __msan_memcpy+0x6f/0x80 [ 391.473062] pskb_expand_head+0x43b/0x1d20 [ 391.477292] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.481256] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.485416] ___sys_sendmsg+0xe68/0x1250 [ 391.489479] __sys_sendmmsg+0x56b/0xa90 [ 391.493447] __se_sys_sendmmsg+0xbd/0xe0 [ 391.497503] __x64_sys_sendmmsg+0x56/0x70 [ 391.501661] do_syscall_64+0xcf/0x110 [ 391.505473] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.510668] [ 391.512288] Uninit was stored to memory at: [ 391.516608] kmsan_internal_chain_origin+0x136/0x240 [ 391.521715] __msan_chain_origin+0x6d/0xd0 [ 391.525946] __save_stack_trace+0x8be/0xc60 [ 391.530259] save_stack_trace+0xc6/0x110 [ 391.534314] kmsan_internal_chain_origin+0x136/0x240 [ 391.539414] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.543929] __msan_memcpy+0x6f/0x80 [ 391.547656] pskb_expand_head+0x43b/0x1d20 [ 391.551888] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.555871] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.560014] ___sys_sendmsg+0xe68/0x1250 [ 391.564071] __sys_sendmmsg+0x56b/0xa90 [ 391.568063] __se_sys_sendmmsg+0xbd/0xe0 [ 391.572123] __x64_sys_sendmmsg+0x56/0x70 [ 391.576262] do_syscall_64+0xcf/0x110 [ 391.580082] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.585292] [ 391.586935] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 391.594285] Variable was created at: [ 391.597997] __local_bh_enable_ip+0x46/0x260 [ 391.602421] local_bh_enable+0x36/0x40 [ 391.632682] not chained 110000 origins [ 391.636587] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 391.643427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.652789] Call Trace: [ 391.655377] dump_stack+0x32d/0x480 [ 391.659008] ? save_stack_trace+0xc6/0x110 [ 391.663251] kmsan_internal_chain_origin+0x222/0x240 [ 391.668356] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 391.672527] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.677903] ? kmsan_internal_chain_origin+0x136/0x240 [ 391.683178] ? __msan_chain_origin+0x6d/0xd0 [ 391.687600] ? __save_stack_trace+0x8be/0xc60 [ 391.692092] ? save_stack_trace+0xc6/0x110 [ 391.696340] ? kmsan_internal_chain_origin+0x136/0x240 [ 391.701627] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 391.706315] ? __msan_memcpy+0x6f/0x80 [ 391.710202] ? pskb_expand_head+0x43b/0x1d20 [ 391.714637] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 391.718784] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 391.723102] ? ___sys_sendmsg+0xe68/0x1250 [ 391.727333] ? __sys_sendmmsg+0x56b/0xa90 [ 391.731474] ? __se_sys_sendmmsg+0xbd/0xe0 [ 391.735704] ? __x64_sys_sendmmsg+0x56/0x70 [ 391.740019] ? do_syscall_64+0xcf/0x110 [ 391.743993] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.749368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 391.754729] ? is_bpf_text_address+0x49e/0x4d0 [ 391.759315] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 391.764676] ? __module_address+0x6a/0x610 [ 391.768918] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 391.774297] ? is_bpf_text_address+0x49e/0x4d0 [ 391.778885] ? INIT_INT+0xc/0x30 [ 391.782264] __msan_chain_origin+0x6d/0xd0 [ 391.786501] __save_stack_trace+0xaff/0xc60 [ 391.790852] save_stack_trace+0xc6/0x110 [ 391.794929] kmsan_internal_chain_origin+0x136/0x240 [ 391.800044] ? kmsan_internal_chain_origin+0x136/0x240 [ 391.805328] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 391.810014] ? __msan_memcpy+0x6f/0x80 [ 391.813903] ? pskb_expand_head+0x43b/0x1d20 [ 391.818309] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 391.822501] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 391.826819] ? ___sys_sendmsg+0xe68/0x1250 [ 391.831049] ? __sys_sendmmsg+0x56b/0xa90 [ 391.835208] ? __se_sys_sendmmsg+0xbd/0xe0 [ 391.839456] ? __x64_sys_sendmmsg+0x56/0x70 [ 391.843807] ? do_syscall_64+0xcf/0x110 [ 391.847815] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.853221] ? __msan_poison_alloca+0x1e0/0x2b0 [ 391.857965] ? __msan_get_context_state+0x9/0x30 [ 391.862785] ? INIT_INT+0xc/0x30 [ 391.866191] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 391.871607] kmsan_memcpy_origins+0x13d/0x1b0 [ 391.876146] __msan_memcpy+0x6f/0x80 [ 391.879894] pskb_expand_head+0x43b/0x1d20 [ 391.884216] l2tp_xmit_skb+0x5a7/0x24b0 [ 391.888263] pppol2tp_sendmsg+0x7a6/0xba0 [ 391.892456] ___sys_sendmsg+0xe68/0x1250 [ 391.896512] ? kmsan_set_origin+0x83/0x130 [ 391.900747] ? pppol2tp_getsockopt+0x1060/0x1060 [ 391.905519] ? __msan_poison_alloca+0x1e0/0x2b0 [ 391.910187] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 391.915567] ? rcu_all_qs+0x3b/0x310 [ 391.919279] ? _cond_resched+0x59/0x120 [ 391.923257] ? rcu_all_qs+0x53/0x310 [ 391.926965] ? _cond_resched+0x37/0x120 [ 391.930935] ? __sys_sendmmsg+0x7c9/0xa90 [ 391.935089] ? _cond_resched+0x59/0x120 [ 391.939068] __sys_sendmmsg+0x56b/0xa90 [ 391.943079] __se_sys_sendmmsg+0xbd/0xe0 [ 391.947145] __x64_sys_sendmmsg+0x56/0x70 [ 391.951290] do_syscall_64+0xcf/0x110 [ 391.955087] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.960319] RIP: 0033:0x457569 [ 391.963508] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.982409] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.990115] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 391.997394] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 392.004658] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.011923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 392.019202] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 392.026477] Uninit was stored to memory at: [ 392.030800] kmsan_internal_chain_origin+0x136/0x240 [ 392.035899] __msan_chain_origin+0x6d/0xd0 [ 392.040129] __save_stack_trace+0x8be/0xc60 [ 392.044464] save_stack_trace+0xc6/0x110 [ 392.048520] kmsan_internal_chain_origin+0x136/0x240 [ 392.053644] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.058137] __msan_memcpy+0x6f/0x80 [ 392.061848] pskb_expand_head+0x43b/0x1d20 [ 392.066079] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.070052] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.074193] ___sys_sendmsg+0xe68/0x1250 [ 392.078248] __sys_sendmmsg+0x56b/0xa90 [ 392.082218] __se_sys_sendmmsg+0xbd/0xe0 [ 392.086307] __x64_sys_sendmmsg+0x56/0x70 [ 392.090457] do_syscall_64+0xcf/0x110 [ 392.094256] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.099430] [ 392.101048] Uninit was stored to memory at: [ 392.105365] kmsan_internal_chain_origin+0x136/0x240 [ 392.110462] __msan_chain_origin+0x6d/0xd0 [ 392.114690] __save_stack_trace+0x8be/0xc60 [ 392.119006] save_stack_trace+0xc6/0x110 [ 392.123067] kmsan_internal_chain_origin+0x136/0x240 [ 392.128166] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.132659] __msan_memcpy+0x6f/0x80 [ 392.136366] pskb_expand_head+0x43b/0x1d20 [ 392.140604] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.144577] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.148716] ___sys_sendmsg+0xe68/0x1250 [ 392.152770] __sys_sendmmsg+0x56b/0xa90 [ 392.156740] __se_sys_sendmmsg+0xbd/0xe0 [ 392.160793] __x64_sys_sendmmsg+0x56/0x70 [ 392.164935] do_syscall_64+0xcf/0x110 [ 392.168733] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.173925] [ 392.175547] Uninit was stored to memory at: [ 392.179876] kmsan_internal_chain_origin+0x136/0x240 [ 392.184996] __msan_chain_origin+0x6d/0xd0 [ 392.189224] __save_stack_trace+0x8be/0xc60 [ 392.193545] save_stack_trace+0xc6/0x110 [ 392.197601] kmsan_internal_chain_origin+0x136/0x240 [ 392.202711] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.207204] __msan_memcpy+0x6f/0x80 [ 392.210911] pskb_expand_head+0x43b/0x1d20 [ 392.215144] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.219119] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.223260] ___sys_sendmsg+0xe68/0x1250 [ 392.227335] __sys_sendmmsg+0x56b/0xa90 [ 392.231306] __se_sys_sendmmsg+0xbd/0xe0 [ 392.235606] __x64_sys_sendmmsg+0x56/0x70 [ 392.239748] do_syscall_64+0xcf/0x110 [ 392.243547] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.248813] [ 392.250426] Uninit was stored to memory at: [ 392.254753] kmsan_internal_chain_origin+0x136/0x240 [ 392.259850] __msan_chain_origin+0x6d/0xd0 [ 392.264080] __save_stack_trace+0x8be/0xc60 [ 392.268401] save_stack_trace+0xc6/0x110 [ 392.272458] kmsan_internal_chain_origin+0x136/0x240 [ 392.277562] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.282059] __msan_memcpy+0x6f/0x80 [ 392.285766] pskb_expand_head+0x43b/0x1d20 [ 392.289996] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.293969] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.298130] ___sys_sendmsg+0xe68/0x1250 [ 392.302189] __sys_sendmmsg+0x56b/0xa90 [ 392.306160] __se_sys_sendmmsg+0xbd/0xe0 [ 392.310213] __x64_sys_sendmmsg+0x56/0x70 [ 392.314354] do_syscall_64+0xcf/0x110 [ 392.318146] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.323324] [ 392.324941] Uninit was stored to memory at: [ 392.329276] kmsan_internal_chain_origin+0x136/0x240 [ 392.334396] __msan_chain_origin+0x6d/0xd0 [ 392.338625] __save_stack_trace+0x8be/0xc60 [ 392.342964] save_stack_trace+0xc6/0x110 [ 392.347024] kmsan_internal_chain_origin+0x136/0x240 [ 392.352129] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.356621] __msan_memcpy+0x6f/0x80 [ 392.360340] pskb_expand_head+0x43b/0x1d20 [ 392.364570] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.368540] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.372682] ___sys_sendmsg+0xe68/0x1250 [ 392.376737] __sys_sendmmsg+0x56b/0xa90 [ 392.380722] __se_sys_sendmmsg+0xbd/0xe0 [ 392.384778] __x64_sys_sendmmsg+0x56/0x70 [ 392.388921] do_syscall_64+0xcf/0x110 [ 392.392719] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.397896] [ 392.399511] Uninit was stored to memory at: [ 392.403830] kmsan_internal_chain_origin+0x136/0x240 [ 392.408939] __msan_chain_origin+0x6d/0xd0 [ 392.413186] __save_stack_trace+0x8be/0xc60 [ 392.417499] save_stack_trace+0xc6/0x110 [ 392.421557] kmsan_internal_chain_origin+0x136/0x240 [ 392.426678] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.431170] __msan_memcpy+0x6f/0x80 [ 392.434920] pskb_expand_head+0x43b/0x1d20 [ 392.439150] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.443405] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.447547] ___sys_sendmsg+0xe68/0x1250 [ 392.451738] __sys_sendmmsg+0x56b/0xa90 [ 392.455759] __se_sys_sendmmsg+0xbd/0xe0 [ 392.459834] __x64_sys_sendmmsg+0x56/0x70 [ 392.463999] do_syscall_64+0xcf/0x110 [ 392.467795] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.472972] [ 392.474587] Uninit was stored to memory at: [ 392.478902] kmsan_internal_chain_origin+0x136/0x240 [ 392.483999] __msan_chain_origin+0x6d/0xd0 [ 392.488230] __save_stack_trace+0x8be/0xc60 [ 392.492551] save_stack_trace+0xc6/0x110 [ 392.496611] kmsan_internal_chain_origin+0x136/0x240 [ 392.501939] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.506593] __msan_memcpy+0x6f/0x80 [ 392.510300] pskb_expand_head+0x43b/0x1d20 [ 392.514533] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.518508] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.522655] ___sys_sendmsg+0xe68/0x1250 [ 392.526709] __sys_sendmmsg+0x56b/0xa90 [ 392.530692] __se_sys_sendmmsg+0xbd/0xe0 [ 392.534747] __x64_sys_sendmmsg+0x56/0x70 [ 392.538891] do_syscall_64+0xcf/0x110 [ 392.542742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.548012] [ 392.549636] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 392.556981] Variable was created at: [ 392.560692] __local_bh_enable_ip+0x46/0x260 [ 392.565104] local_bh_enable+0x36/0x40 [ 392.598014] not chained 120000 origins [ 392.601922] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 392.608752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.618097] Call Trace: [ 392.620745] dump_stack+0x32d/0x480 [ 392.624449] ? save_stack_trace+0xc6/0x110 [ 392.628744] kmsan_internal_chain_origin+0x222/0x240 [ 392.633845] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 392.638630] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.644003] ? kmsan_internal_chain_origin+0x136/0x240 [ 392.649280] ? __msan_chain_origin+0x6d/0xd0 [ 392.653721] ? __save_stack_trace+0x8be/0xc60 [ 392.658218] ? save_stack_trace+0xc6/0x110 [ 392.662448] ? kmsan_internal_chain_origin+0x136/0x240 [ 392.667723] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 392.672388] ? __msan_memcpy+0x6f/0x80 [ 392.676269] ? pskb_expand_head+0x43b/0x1d20 [ 392.680796] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 392.684940] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 392.689258] ? ___sys_sendmsg+0xe68/0x1250 [ 392.693490] ? __sys_sendmmsg+0x56b/0xa90 [ 392.697633] ? __se_sys_sendmmsg+0xbd/0xe0 [ 392.701861] ? __x64_sys_sendmmsg+0x56/0x70 [ 392.706176] ? do_syscall_64+0xcf/0x110 [ 392.710145] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.715521] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 392.720883] ? is_bpf_text_address+0x49e/0x4d0 [ 392.725462] ? kmsan_internal_chain_origin+0x90/0x240 [ 392.730670] ? get_stack_info+0x863/0x9d0 [ 392.734830] __msan_chain_origin+0x6d/0xd0 [ 392.739090] ? kmsan_internal_chain_origin+0x136/0x240 [ 392.744384] __save_stack_trace+0x8be/0xc60 [ 392.748727] ? kmsan_internal_chain_origin+0x136/0x240 [ 392.754027] save_stack_trace+0xc6/0x110 [ 392.758100] kmsan_internal_chain_origin+0x136/0x240 [ 392.763216] ? kmsan_internal_chain_origin+0x136/0x240 [ 392.768528] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 392.773205] ? __msan_memcpy+0x6f/0x80 [ 392.777081] ? pskb_expand_head+0x43b/0x1d20 [ 392.781487] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 392.785628] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 392.789944] ? ___sys_sendmsg+0xe68/0x1250 [ 392.794170] ? __sys_sendmmsg+0x56b/0xa90 [ 392.798317] ? __se_sys_sendmmsg+0xbd/0xe0 [ 392.802547] ? __x64_sys_sendmmsg+0x56/0x70 [ 392.806859] ? do_syscall_64+0xcf/0x110 [ 392.810846] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.816232] ? __msan_poison_alloca+0x1e0/0x2b0 [ 392.820915] ? __msan_get_context_state+0x9/0x30 [ 392.825664] ? INIT_INT+0xc/0x30 [ 392.829023] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 392.834407] kmsan_memcpy_origins+0x13d/0x1b0 [ 392.838920] __msan_memcpy+0x6f/0x80 [ 392.842650] pskb_expand_head+0x43b/0x1d20 [ 392.846925] l2tp_xmit_skb+0x5a7/0x24b0 [ 392.850941] pppol2tp_sendmsg+0x7a6/0xba0 [ 392.855107] ___sys_sendmsg+0xe68/0x1250 [ 392.859164] ? kmsan_set_origin+0x83/0x130 [ 392.863396] ? pppol2tp_getsockopt+0x1060/0x1060 [ 392.868178] ? __msan_poison_alloca+0x1e0/0x2b0 [ 392.872844] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 392.878207] ? rcu_all_qs+0x3b/0x310 [ 392.881917] ? _cond_resched+0x59/0x120 [ 392.885888] ? rcu_all_qs+0x53/0x310 [ 392.889604] ? _cond_resched+0x37/0x120 [ 392.893572] ? __sys_sendmmsg+0x7c9/0xa90 [ 392.897735] ? _cond_resched+0x59/0x120 [ 392.901721] __sys_sendmmsg+0x56b/0xa90 [ 392.905752] __se_sys_sendmmsg+0xbd/0xe0 [ 392.909820] __x64_sys_sendmmsg+0x56/0x70 [ 392.913986] do_syscall_64+0xcf/0x110 [ 392.917785] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.922992] RIP: 0033:0x457569 [ 392.926189] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.945085] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 392.952804] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 392.960087] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 392.967350] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.974632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 392.981925] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 392.989211] Uninit was stored to memory at: [ 392.993550] kmsan_internal_chain_origin+0x136/0x240 [ 392.998660] __msan_chain_origin+0x6d/0xd0 [ 393.002893] __save_stack_trace+0x8be/0xc60 [ 393.007207] save_stack_trace+0xc6/0x110 [ 393.011292] kmsan_internal_chain_origin+0x136/0x240 [ 393.016390] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.020876] __msan_memcpy+0x6f/0x80 [ 393.024610] pskb_expand_head+0x43b/0x1d20 [ 393.028840] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.032809] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.036951] ___sys_sendmsg+0xe68/0x1250 [ 393.041020] __sys_sendmmsg+0x56b/0xa90 [ 393.044994] __se_sys_sendmmsg+0xbd/0xe0 [ 393.049051] __x64_sys_sendmmsg+0x56/0x70 [ 393.053219] do_syscall_64+0xcf/0x110 [ 393.057043] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.062229] [ 393.063854] Uninit was stored to memory at: [ 393.068199] kmsan_internal_chain_origin+0x136/0x240 [ 393.073306] __msan_chain_origin+0x6d/0xd0 [ 393.077533] __save_stack_trace+0x8be/0xc60 [ 393.081852] save_stack_trace+0xc6/0x110 [ 393.085925] kmsan_internal_chain_origin+0x136/0x240 [ 393.091019] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.095519] __msan_memcpy+0x6f/0x80 [ 393.099233] pskb_expand_head+0x43b/0x1d20 [ 393.103459] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.107425] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.111576] ___sys_sendmsg+0xe68/0x1250 [ 393.115629] __sys_sendmmsg+0x56b/0xa90 [ 393.119593] __se_sys_sendmmsg+0xbd/0xe0 [ 393.123658] __x64_sys_sendmmsg+0x56/0x70 [ 393.127796] do_syscall_64+0xcf/0x110 [ 393.131625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.136836] [ 393.138451] Uninit was stored to memory at: [ 393.142768] kmsan_internal_chain_origin+0x136/0x240 [ 393.147883] __msan_chain_origin+0x6d/0xd0 [ 393.152110] __save_stack_trace+0x8be/0xc60 [ 393.156422] save_stack_trace+0xc6/0x110 [ 393.160476] kmsan_internal_chain_origin+0x136/0x240 [ 393.165595] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.170114] __msan_memcpy+0x6f/0x80 [ 393.173841] pskb_expand_head+0x43b/0x1d20 [ 393.178069] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.182035] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.186181] ___sys_sendmsg+0xe68/0x1250 [ 393.190232] __sys_sendmmsg+0x56b/0xa90 [ 393.194196] __se_sys_sendmmsg+0xbd/0xe0 [ 393.198247] __x64_sys_sendmmsg+0x56/0x70 [ 393.202386] do_syscall_64+0xcf/0x110 [ 393.206179] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.211351] [ 393.212969] Uninit was stored to memory at: [ 393.217284] kmsan_internal_chain_origin+0x136/0x240 [ 393.222379] __msan_chain_origin+0x6d/0xd0 [ 393.226605] __save_stack_trace+0x8be/0xc60 [ 393.230942] save_stack_trace+0xc6/0x110 [ 393.235000] kmsan_internal_chain_origin+0x136/0x240 [ 393.240094] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.244582] __msan_memcpy+0x6f/0x80 [ 393.248287] pskb_expand_head+0x43b/0x1d20 [ 393.252512] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.256508] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.260648] ___sys_sendmsg+0xe68/0x1250 [ 393.264712] __sys_sendmmsg+0x56b/0xa90 [ 393.268688] __se_sys_sendmmsg+0xbd/0xe0 [ 393.272743] __x64_sys_sendmmsg+0x56/0x70 [ 393.276884] do_syscall_64+0xcf/0x110 [ 393.280690] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.285865] [ 393.287480] Uninit was stored to memory at: [ 393.291834] kmsan_internal_chain_origin+0x136/0x240 [ 393.296932] __msan_chain_origin+0x6d/0xd0 [ 393.301159] __save_stack_trace+0x8be/0xc60 [ 393.305489] save_stack_trace+0xc6/0x110 [ 393.309589] kmsan_internal_chain_origin+0x136/0x240 [ 393.314689] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.319175] __msan_memcpy+0x6f/0x80 [ 393.322896] pskb_expand_head+0x43b/0x1d20 [ 393.327123] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.331119] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.335262] ___sys_sendmsg+0xe68/0x1250 [ 393.339349] __sys_sendmmsg+0x56b/0xa90 [ 393.343978] __se_sys_sendmmsg+0xbd/0xe0 [ 393.348033] __x64_sys_sendmmsg+0x56/0x70 [ 393.352179] do_syscall_64+0xcf/0x110 [ 393.355976] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.361150] [ 393.362764] Uninit was stored to memory at: [ 393.367079] kmsan_internal_chain_origin+0x136/0x240 [ 393.372185] __msan_chain_origin+0x6d/0xd0 [ 393.376412] __save_stack_trace+0x8be/0xc60 [ 393.380727] save_stack_trace+0xc6/0x110 [ 393.384781] kmsan_internal_chain_origin+0x136/0x240 [ 393.389875] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.394362] __msan_memcpy+0x6f/0x80 [ 393.398068] pskb_expand_head+0x43b/0x1d20 [ 393.402314] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.406278] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.410429] ___sys_sendmsg+0xe68/0x1250 [ 393.414484] __sys_sendmmsg+0x56b/0xa90 [ 393.418448] __se_sys_sendmmsg+0xbd/0xe0 [ 393.422499] __x64_sys_sendmmsg+0x56/0x70 [ 393.426656] do_syscall_64+0xcf/0x110 [ 393.430449] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.435632] [ 393.437262] Uninit was stored to memory at: [ 393.441579] kmsan_internal_chain_origin+0x136/0x240 [ 393.446681] __msan_chain_origin+0x6d/0xd0 [ 393.450907] __save_stack_trace+0x8be/0xc60 [ 393.455224] save_stack_trace+0xc6/0x110 [ 393.459291] kmsan_internal_chain_origin+0x136/0x240 [ 393.464387] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.468893] __msan_memcpy+0x6f/0x80 [ 393.472630] pskb_expand_head+0x43b/0x1d20 [ 393.476858] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.480836] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.484992] ___sys_sendmsg+0xe68/0x1250 [ 393.489051] __sys_sendmmsg+0x56b/0xa90 [ 393.493017] __se_sys_sendmmsg+0xbd/0xe0 [ 393.497094] __x64_sys_sendmmsg+0x56/0x70 [ 393.501233] do_syscall_64+0xcf/0x110 [ 393.505030] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.510211] [ 393.511831] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 393.519176] Variable was created at: [ 393.522886] __local_bh_enable_ip+0x46/0x260 [ 393.527287] local_bh_enable+0x36/0x40 [ 393.558205] not chained 130000 origins [ 393.562108] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 393.568933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.578322] Call Trace: [ 393.580941] dump_stack+0x32d/0x480 [ 393.584577] ? save_stack_trace+0xc6/0x110 [ 393.588817] kmsan_internal_chain_origin+0x222/0x240 [ 393.593915] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 393.598079] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.603472] ? kmsan_internal_chain_origin+0x136/0x240 [ 393.608747] ? __msan_chain_origin+0x6d/0xd0 [ 393.613151] ? __save_stack_trace+0x8be/0xc60 [ 393.617655] ? save_stack_trace+0xc6/0x110 [ 393.621906] ? kmsan_internal_chain_origin+0x136/0x240 [ 393.627190] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 393.631852] ? __msan_memcpy+0x6f/0x80 [ 393.635753] ? pskb_expand_head+0x43b/0x1d20 [ 393.640169] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 393.644324] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 393.648652] ? ___sys_sendmsg+0xe68/0x1250 [ 393.652883] ? __sys_sendmmsg+0x56b/0xa90 [ 393.657027] ? __se_sys_sendmmsg+0xbd/0xe0 [ 393.661263] ? __x64_sys_sendmmsg+0x56/0x70 [ 393.665583] ? do_syscall_64+0xcf/0x110 [ 393.669564] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.674930] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 393.680297] ? is_bpf_text_address+0x49e/0x4d0 [ 393.684892] ? kmsan_internal_chain_origin+0x90/0x240 [ 393.690117] ? get_stack_info+0x863/0x9d0 [ 393.694271] __msan_chain_origin+0x6d/0xd0 [ 393.698511] ? do_syscall_64+0xcf/0x110 [ 393.702485] __save_stack_trace+0x8be/0xc60 [ 393.706825] ? do_syscall_64+0xcf/0x110 [ 393.710796] save_stack_trace+0xc6/0x110 [ 393.714887] kmsan_internal_chain_origin+0x136/0x240 [ 393.719997] ? kmsan_internal_chain_origin+0x136/0x240 [ 393.725275] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 393.729964] ? __msan_memcpy+0x6f/0x80 [ 393.733847] ? pskb_expand_head+0x43b/0x1d20 [ 393.738252] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 393.742658] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 393.746977] ? ___sys_sendmsg+0xe68/0x1250 [ 393.751222] ? __sys_sendmmsg+0x56b/0xa90 [ 393.755363] ? __se_sys_sendmmsg+0xbd/0xe0 [ 393.759593] ? __x64_sys_sendmmsg+0x56/0x70 [ 393.763911] ? do_syscall_64+0xcf/0x110 [ 393.767878] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.773256] ? __msan_poison_alloca+0x1e0/0x2b0 [ 393.777963] ? __msan_get_context_state+0x9/0x30 [ 393.782715] ? INIT_INT+0xc/0x30 [ 393.786075] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 393.791457] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.795970] __msan_memcpy+0x6f/0x80 [ 393.799678] pskb_expand_head+0x43b/0x1d20 [ 393.803939] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.807942] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.812108] ___sys_sendmsg+0xe68/0x1250 [ 393.816172] ? kmsan_set_origin+0x83/0x130 [ 393.820404] ? pppol2tp_getsockopt+0x1060/0x1060 [ 393.825199] ? __msan_poison_alloca+0x1e0/0x2b0 [ 393.829873] ? rcu_all_qs+0x3b/0x310 [ 393.833586] ? _cond_resched+0x59/0x120 [ 393.837568] ? rcu_all_qs+0x53/0x310 [ 393.841278] ? _cond_resched+0x37/0x120 [ 393.845248] ? __sys_sendmmsg+0x7c9/0xa90 [ 393.849397] ? _cond_resched+0x59/0x120 [ 393.853371] __sys_sendmmsg+0x56b/0xa90 [ 393.857379] __se_sys_sendmmsg+0xbd/0xe0 [ 393.861447] __x64_sys_sendmmsg+0x56/0x70 [ 393.865595] do_syscall_64+0xcf/0x110 [ 393.869585] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.874787] RIP: 0033:0x457569 [ 393.877975] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.896871] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 393.904635] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 393.911900] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 393.919188] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 393.926468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 393.933729] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 393.941017] Uninit was stored to memory at: [ 393.945351] kmsan_internal_chain_origin+0x136/0x240 [ 393.950448] __msan_chain_origin+0x6d/0xd0 [ 393.954674] __save_stack_trace+0x8be/0xc60 [ 393.959008] save_stack_trace+0xc6/0x110 [ 393.963085] kmsan_internal_chain_origin+0x136/0x240 [ 393.968193] kmsan_memcpy_origins+0x13d/0x1b0 [ 393.972686] __msan_memcpy+0x6f/0x80 [ 393.976387] pskb_expand_head+0x43b/0x1d20 [ 393.980626] l2tp_xmit_skb+0x5a7/0x24b0 [ 393.984596] pppol2tp_sendmsg+0x7a6/0xba0 [ 393.988740] ___sys_sendmsg+0xe68/0x1250 [ 393.992792] __sys_sendmmsg+0x56b/0xa90 [ 393.996758] __se_sys_sendmmsg+0xbd/0xe0 [ 394.000809] __x64_sys_sendmmsg+0x56/0x70 [ 394.004961] do_syscall_64+0xcf/0x110 [ 394.008772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.013957] [ 394.015571] Uninit was stored to memory at: [ 394.019890] kmsan_internal_chain_origin+0x136/0x240 [ 394.025001] __msan_chain_origin+0x6d/0xd0 [ 394.029229] __save_stack_trace+0x8be/0xc60 [ 394.033564] save_stack_trace+0xc6/0x110 [ 394.037619] kmsan_internal_chain_origin+0x136/0x240 [ 394.042734] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.047240] __msan_memcpy+0x6f/0x80 [ 394.050973] pskb_expand_head+0x43b/0x1d20 [ 394.055202] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.059186] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.063326] ___sys_sendmsg+0xe68/0x1250 [ 394.067384] __sys_sendmmsg+0x56b/0xa90 [ 394.071351] __se_sys_sendmmsg+0xbd/0xe0 [ 394.075406] __x64_sys_sendmmsg+0x56/0x70 [ 394.079549] do_syscall_64+0xcf/0x110 [ 394.083353] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.088553] [ 394.090166] Uninit was stored to memory at: [ 394.094482] kmsan_internal_chain_origin+0x136/0x240 [ 394.099577] __msan_chain_origin+0x6d/0xd0 [ 394.103809] __save_stack_trace+0x8be/0xc60 [ 394.108122] save_stack_trace+0xc6/0x110 [ 394.112183] kmsan_internal_chain_origin+0x136/0x240 [ 394.117278] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.121766] __msan_memcpy+0x6f/0x80 [ 394.125471] pskb_expand_head+0x43b/0x1d20 [ 394.129698] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.133682] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.137827] ___sys_sendmsg+0xe68/0x1250 [ 394.141880] __sys_sendmmsg+0x56b/0xa90 [ 394.145851] __se_sys_sendmmsg+0xbd/0xe0 [ 394.149902] __x64_sys_sendmmsg+0x56/0x70 [ 394.154046] do_syscall_64+0xcf/0x110 [ 394.157843] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.163017] [ 394.164638] Uninit was stored to memory at: [ 394.168951] kmsan_internal_chain_origin+0x136/0x240 [ 394.174053] __msan_chain_origin+0x6d/0xd0 [ 394.178300] __save_stack_trace+0x8be/0xc60 [ 394.182631] save_stack_trace+0xc6/0x110 [ 394.186684] kmsan_internal_chain_origin+0x136/0x240 [ 394.191780] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.196268] __msan_memcpy+0x6f/0x80 [ 394.199971] pskb_expand_head+0x43b/0x1d20 [ 394.204226] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.208224] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.212375] ___sys_sendmsg+0xe68/0x1250 [ 394.216429] __sys_sendmmsg+0x56b/0xa90 [ 394.220393] __se_sys_sendmmsg+0xbd/0xe0 [ 394.224447] __x64_sys_sendmmsg+0x56/0x70 [ 394.228591] do_syscall_64+0xcf/0x110 [ 394.232385] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.237558] [ 394.239191] Uninit was stored to memory at: [ 394.243507] kmsan_internal_chain_origin+0x136/0x240 [ 394.248604] __msan_chain_origin+0x6d/0xd0 [ 394.252851] __save_stack_trace+0x8be/0xc60 [ 394.257165] save_stack_trace+0xc6/0x110 [ 394.261229] kmsan_internal_chain_origin+0x136/0x240 [ 394.266326] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.270811] __msan_memcpy+0x6f/0x80 [ 394.274533] pskb_expand_head+0x43b/0x1d20 [ 394.278762] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.282741] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.286880] ___sys_sendmsg+0xe68/0x1250 [ 394.290946] __sys_sendmmsg+0x56b/0xa90 [ 394.294932] __se_sys_sendmmsg+0xbd/0xe0 [ 394.299017] __x64_sys_sendmmsg+0x56/0x70 [ 394.303180] do_syscall_64+0xcf/0x110 [ 394.307001] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.312205] [ 394.313831] Uninit was stored to memory at: [ 394.318147] kmsan_internal_chain_origin+0x136/0x240 [ 394.323242] __msan_chain_origin+0x6d/0xd0 [ 394.327469] __save_stack_trace+0x8be/0xc60 [ 394.331781] save_stack_trace+0xc6/0x110 [ 394.335833] kmsan_internal_chain_origin+0x136/0x240 [ 394.340926] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.345416] __msan_memcpy+0x6f/0x80 [ 394.349119] pskb_expand_head+0x43b/0x1d20 [ 394.353345] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.357311] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.361449] ___sys_sendmsg+0xe68/0x1250 [ 394.365504] __sys_sendmmsg+0x56b/0xa90 [ 394.369471] __se_sys_sendmmsg+0xbd/0xe0 [ 394.373521] __x64_sys_sendmmsg+0x56/0x70 [ 394.377660] do_syscall_64+0xcf/0x110 [ 394.381474] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.386650] [ 394.388276] Uninit was stored to memory at: [ 394.392621] kmsan_internal_chain_origin+0x136/0x240 [ 394.397718] __msan_chain_origin+0x6d/0xd0 [ 394.401947] __save_stack_trace+0x8be/0xc60 [ 394.406260] save_stack_trace+0xc6/0x110 [ 394.410310] kmsan_internal_chain_origin+0x136/0x240 [ 394.415420] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.419905] __msan_memcpy+0x6f/0x80 [ 394.423612] pskb_expand_head+0x43b/0x1d20 [ 394.427839] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.431821] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.435957] ___sys_sendmsg+0xe68/0x1250 [ 394.440030] __sys_sendmmsg+0x56b/0xa90 [ 394.444006] __se_sys_sendmmsg+0xbd/0xe0 [ 394.448058] __x64_sys_sendmmsg+0x56/0x70 [ 394.452224] do_syscall_64+0xcf/0x110 [ 394.456038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.461216] [ 394.462853] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 394.470196] Variable was created at: [ 394.473919] __local_bh_enable_ip+0x46/0x260 [ 394.478348] local_bh_enable+0x36/0x40 [ 394.507997] not chained 140000 origins [ 394.511923] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 394.518755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.528101] Call Trace: [ 394.530684] dump_stack+0x32d/0x480 [ 394.534315] ? save_stack_trace+0xc6/0x110 [ 394.538565] kmsan_internal_chain_origin+0x222/0x240 [ 394.543683] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 394.547840] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.553217] ? kmsan_internal_chain_origin+0x136/0x240 [ 394.558506] ? __msan_chain_origin+0x6d/0xd0 [ 394.562910] ? __save_stack_trace+0x8be/0xc60 [ 394.567394] ? save_stack_trace+0xc6/0x110 [ 394.571657] ? kmsan_internal_chain_origin+0x136/0x240 [ 394.576946] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 394.581633] ? __msan_memcpy+0x6f/0x80 [ 394.585534] ? pskb_expand_head+0x43b/0x1d20 [ 394.589971] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 394.594115] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 394.598615] ? ___sys_sendmsg+0xe68/0x1250 [ 394.602867] ? __sys_sendmmsg+0x56b/0xa90 [ 394.607008] ? __se_sys_sendmmsg+0xbd/0xe0 [ 394.611234] ? __x64_sys_sendmmsg+0x56/0x70 [ 394.615554] ? do_syscall_64+0xcf/0x110 [ 394.619558] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.624928] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 394.630288] ? is_bpf_text_address+0x49e/0x4d0 [ 394.634868] ? kmsan_internal_chain_origin+0x90/0x240 [ 394.640079] ? get_stack_info+0x863/0x9d0 [ 394.644235] __msan_chain_origin+0x6d/0xd0 [ 394.648482] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 394.652800] __save_stack_trace+0x8be/0xc60 [ 394.657137] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 394.661455] save_stack_trace+0xc6/0x110 [ 394.665539] kmsan_internal_chain_origin+0x136/0x240 [ 394.670651] ? kmsan_internal_chain_origin+0x136/0x240 [ 394.675925] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 394.680599] ? __msan_memcpy+0x6f/0x80 [ 394.684483] ? pskb_expand_head+0x43b/0x1d20 [ 394.688882] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 394.693024] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 394.697341] ? ___sys_sendmsg+0xe68/0x1250 [ 394.701586] ? __sys_sendmmsg+0x56b/0xa90 [ 394.705746] ? __se_sys_sendmmsg+0xbd/0xe0 [ 394.709990] ? __x64_sys_sendmmsg+0x56/0x70 [ 394.714308] ? do_syscall_64+0xcf/0x110 [ 394.718287] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.723650] ? __msan_poison_alloca+0x1e0/0x2b0 [ 394.728336] ? __msan_get_context_state+0x9/0x30 [ 394.733084] ? INIT_INT+0xc/0x30 [ 394.736448] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 394.741822] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.746331] __msan_memcpy+0x6f/0x80 [ 394.750064] pskb_expand_head+0x43b/0x1d20 [ 394.754320] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.758314] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.762490] ___sys_sendmsg+0xe68/0x1250 [ 394.766567] ? kmsan_set_origin+0x83/0x130 [ 394.770797] ? pppol2tp_getsockopt+0x1060/0x1060 [ 394.775579] ? __msan_poison_alloca+0x1e0/0x2b0 [ 394.780240] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.785632] ? rcu_all_qs+0x3b/0x310 [ 394.789354] ? _cond_resched+0x59/0x120 [ 394.793330] ? rcu_all_qs+0x53/0x310 [ 394.797038] ? _cond_resched+0x37/0x120 [ 394.801036] ? __sys_sendmmsg+0x7c9/0xa90 [ 394.805227] ? _cond_resched+0x59/0x120 [ 394.809197] __sys_sendmmsg+0x56b/0xa90 [ 394.813198] __se_sys_sendmmsg+0xbd/0xe0 [ 394.817269] __x64_sys_sendmmsg+0x56/0x70 [ 394.821444] do_syscall_64+0xcf/0x110 [ 394.825244] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.830453] RIP: 0033:0x457569 [ 394.833640] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.852537] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 394.860259] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 394.867538] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 394.874804] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 394.882083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 394.889345] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 394.896630] Uninit was stored to memory at: [ 394.900972] kmsan_internal_chain_origin+0x136/0x240 [ 394.906083] __msan_chain_origin+0x6d/0xd0 [ 394.910308] __save_stack_trace+0x8be/0xc60 [ 394.914624] save_stack_trace+0xc6/0x110 [ 394.918677] kmsan_internal_chain_origin+0x136/0x240 [ 394.923782] kmsan_memcpy_origins+0x13d/0x1b0 [ 394.928270] __msan_memcpy+0x6f/0x80 [ 394.931996] pskb_expand_head+0x43b/0x1d20 [ 394.936241] l2tp_xmit_skb+0x5a7/0x24b0 [ 394.940225] pppol2tp_sendmsg+0x7a6/0xba0 [ 394.944367] ___sys_sendmsg+0xe68/0x1250 [ 394.948426] __sys_sendmmsg+0x56b/0xa90 [ 394.952405] __se_sys_sendmmsg+0xbd/0xe0 [ 394.956460] __x64_sys_sendmmsg+0x56/0x70 [ 394.960599] do_syscall_64+0xcf/0x110 [ 394.964393] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.969575] [ 394.971201] Uninit was stored to memory at: [ 394.975519] kmsan_internal_chain_origin+0x136/0x240 [ 394.980631] __msan_chain_origin+0x6d/0xd0 [ 394.984868] __save_stack_trace+0x8be/0xc60 [ 394.989185] save_stack_trace+0xc6/0x110 [ 394.993240] kmsan_internal_chain_origin+0x136/0x240 [ 394.998337] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.002828] __msan_memcpy+0x6f/0x80 [ 395.006534] pskb_expand_head+0x43b/0x1d20 [ 395.010761] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.014726] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.018868] ___sys_sendmsg+0xe68/0x1250 [ 395.022922] __sys_sendmmsg+0x56b/0xa90 [ 395.026886] __se_sys_sendmmsg+0xbd/0xe0 [ 395.030938] __x64_sys_sendmmsg+0x56/0x70 [ 395.035083] do_syscall_64+0xcf/0x110 [ 395.038895] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.044334] [ 395.045953] Uninit was stored to memory at: [ 395.050278] kmsan_internal_chain_origin+0x136/0x240 [ 395.055398] __msan_chain_origin+0x6d/0xd0 [ 395.059639] __save_stack_trace+0x8be/0xc60 [ 395.063967] save_stack_trace+0xc6/0x110 [ 395.068021] kmsan_internal_chain_origin+0x136/0x240 [ 395.073122] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.077612] __msan_memcpy+0x6f/0x80 [ 395.081318] pskb_expand_head+0x43b/0x1d20 [ 395.085561] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.089541] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.093700] ___sys_sendmsg+0xe68/0x1250 [ 395.097755] __sys_sendmmsg+0x56b/0xa90 [ 395.101739] __se_sys_sendmmsg+0xbd/0xe0 [ 395.105809] __x64_sys_sendmmsg+0x56/0x70 [ 395.109951] do_syscall_64+0xcf/0x110 [ 395.113745] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.118916] [ 395.120527] Uninit was stored to memory at: [ 395.124869] kmsan_internal_chain_origin+0x136/0x240 [ 395.129987] __msan_chain_origin+0x6d/0xd0 [ 395.134216] __save_stack_trace+0x8be/0xc60 [ 395.138527] save_stack_trace+0xc6/0x110 [ 395.142599] kmsan_internal_chain_origin+0x136/0x240 [ 395.147694] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.152191] __msan_memcpy+0x6f/0x80 [ 395.155907] pskb_expand_head+0x43b/0x1d20 [ 395.160136] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.164101] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.168240] ___sys_sendmsg+0xe68/0x1250 [ 395.172311] __sys_sendmmsg+0x56b/0xa90 [ 395.176279] __se_sys_sendmmsg+0xbd/0xe0 [ 395.180331] __x64_sys_sendmmsg+0x56/0x70 [ 395.184473] do_syscall_64+0xcf/0x110 [ 395.188265] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.193452] [ 395.195066] Uninit was stored to memory at: [ 395.199409] kmsan_internal_chain_origin+0x136/0x240 [ 395.204536] __msan_chain_origin+0x6d/0xd0 [ 395.208766] __save_stack_trace+0x8be/0xc60 [ 395.213097] save_stack_trace+0xc6/0x110 [ 395.217165] kmsan_internal_chain_origin+0x136/0x240 [ 395.222288] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.226786] __msan_memcpy+0x6f/0x80 [ 395.230494] pskb_expand_head+0x43b/0x1d20 [ 395.234735] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.238705] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.242846] ___sys_sendmsg+0xe68/0x1250 [ 395.246911] __sys_sendmmsg+0x56b/0xa90 [ 395.250890] __se_sys_sendmmsg+0xbd/0xe0 [ 395.254951] __x64_sys_sendmmsg+0x56/0x70 [ 395.259088] do_syscall_64+0xcf/0x110 [ 395.262901] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.268077] [ 395.269691] Uninit was stored to memory at: [ 395.274025] kmsan_internal_chain_origin+0x136/0x240 [ 395.279138] __msan_chain_origin+0x6d/0xd0 [ 395.283367] __save_stack_trace+0x8be/0xc60 [ 395.287698] save_stack_trace+0xc6/0x110 [ 395.291764] kmsan_internal_chain_origin+0x136/0x240 [ 395.296858] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.301348] __msan_memcpy+0x6f/0x80 [ 395.305079] pskb_expand_head+0x43b/0x1d20 [ 395.309309] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.313280] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.317422] ___sys_sendmsg+0xe68/0x1250 [ 395.321471] __sys_sendmmsg+0x56b/0xa90 [ 395.325434] __se_sys_sendmmsg+0xbd/0xe0 [ 395.329507] __x64_sys_sendmmsg+0x56/0x70 [ 395.333654] do_syscall_64+0xcf/0x110 [ 395.337445] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.342881] [ 395.344508] Uninit was stored to memory at: [ 395.348821] kmsan_internal_chain_origin+0x136/0x240 [ 395.353940] __msan_chain_origin+0x6d/0xd0 [ 395.358180] __save_stack_trace+0x8be/0xc60 [ 395.362492] save_stack_trace+0xc6/0x110 [ 395.366580] kmsan_internal_chain_origin+0x136/0x240 [ 395.371705] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.376211] __msan_memcpy+0x6f/0x80 [ 395.379917] pskb_expand_head+0x43b/0x1d20 [ 395.384144] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.388120] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.392266] ___sys_sendmsg+0xe68/0x1250 [ 395.396318] __sys_sendmmsg+0x56b/0xa90 [ 395.400284] __se_sys_sendmmsg+0xbd/0xe0 [ 395.404351] __x64_sys_sendmmsg+0x56/0x70 [ 395.408493] do_syscall_64+0xcf/0x110 [ 395.412308] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.417484] [ 395.419100] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 395.426462] Variable was created at: [ 395.430171] __local_bh_enable_ip+0x46/0x260 [ 395.434576] local_bh_enable+0x36/0x40 [ 395.464231] not chained 150000 origins [ 395.468136] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 395.474975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.484334] Call Trace: [ 395.486954] dump_stack+0x32d/0x480 [ 395.490579] ? save_stack_trace+0xc6/0x110 [ 395.494819] kmsan_internal_chain_origin+0x222/0x240 [ 395.499923] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 395.504078] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.509465] ? kmsan_internal_chain_origin+0x136/0x240 [ 395.514738] ? __msan_chain_origin+0x6d/0xd0 [ 395.519141] ? __save_stack_trace+0x8be/0xc60 [ 395.523654] ? save_stack_trace+0xc6/0x110 [ 395.527884] ? kmsan_internal_chain_origin+0x136/0x240 [ 395.533158] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 395.537831] ? __msan_memcpy+0x6f/0x80 [ 395.542084] ? pskb_expand_head+0x43b/0x1d20 [ 395.546505] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 395.550655] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 395.554973] ? ___sys_sendmsg+0xe68/0x1250 [ 395.559197] ? __sys_sendmmsg+0x56b/0xa90 [ 395.563349] ? __se_sys_sendmmsg+0xbd/0xe0 [ 395.567605] ? __x64_sys_sendmmsg+0x56/0x70 [ 395.571985] ? do_syscall_64+0xcf/0x110 [ 395.575954] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.581340] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 395.586705] ? is_bpf_text_address+0x49e/0x4d0 [ 395.591292] ? kmsan_internal_chain_origin+0x90/0x240 [ 395.596497] ? get_stack_info+0x863/0x9d0 [ 395.600651] __msan_chain_origin+0x6d/0xd0 [ 395.604883] ? __se_sys_sendmmsg+0xbd/0xe0 [ 395.609111] __save_stack_trace+0x8be/0xc60 [ 395.613449] ? __se_sys_sendmmsg+0xbd/0xe0 [ 395.617703] save_stack_trace+0xc6/0x110 [ 395.621778] kmsan_internal_chain_origin+0x136/0x240 [ 395.626898] ? kmsan_internal_chain_origin+0x136/0x240 [ 395.632169] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 395.636835] ? __msan_memcpy+0x6f/0x80 [ 395.640714] ? pskb_expand_head+0x43b/0x1d20 [ 395.645129] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 395.649272] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 395.653591] ? ___sys_sendmsg+0xe68/0x1250 [ 395.657819] ? __sys_sendmmsg+0x56b/0xa90 [ 395.661960] ? __se_sys_sendmmsg+0xbd/0xe0 [ 395.666210] ? __x64_sys_sendmmsg+0x56/0x70 [ 395.670546] ? do_syscall_64+0xcf/0x110 [ 395.674535] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.679923] ? __msan_poison_alloca+0x1e0/0x2b0 [ 395.684622] ? __msan_get_context_state+0x9/0x30 [ 395.689372] ? INIT_INT+0xc/0x30 [ 395.692750] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 395.698131] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.702683] __msan_memcpy+0x6f/0x80 [ 395.706399] pskb_expand_head+0x43b/0x1d20 [ 395.710669] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.714677] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.718850] ___sys_sendmsg+0xe68/0x1250 [ 395.722910] ? kmsan_set_origin+0x83/0x130 [ 395.727145] ? pppol2tp_getsockopt+0x1060/0x1060 [ 395.731945] ? __msan_poison_alloca+0x1e0/0x2b0 [ 395.736635] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 395.742006] ? rcu_all_qs+0x3b/0x310 [ 395.745717] ? _cond_resched+0x59/0x120 [ 395.749695] ? rcu_all_qs+0x53/0x310 [ 395.753426] ? _cond_resched+0x37/0x120 [ 395.757408] ? __sys_sendmmsg+0x7c9/0xa90 [ 395.761560] ? _cond_resched+0x59/0x120 [ 395.765537] __sys_sendmmsg+0x56b/0xa90 [ 395.769543] __se_sys_sendmmsg+0xbd/0xe0 [ 395.773612] __x64_sys_sendmmsg+0x56/0x70 [ 395.777758] do_syscall_64+0xcf/0x110 [ 395.781566] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.786753] RIP: 0033:0x457569 [ 395.789957] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.809262] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 395.816986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 395.824274] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 395.831541] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 395.838807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 395.846070] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 395.853348] Uninit was stored to memory at: [ 395.857671] kmsan_internal_chain_origin+0x136/0x240 [ 395.863553] __msan_chain_origin+0x6d/0xd0 [ 395.867783] __save_stack_trace+0x8be/0xc60 [ 395.872101] save_stack_trace+0xc6/0x110 [ 395.876188] kmsan_internal_chain_origin+0x136/0x240 [ 395.881301] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.885793] __msan_memcpy+0x6f/0x80 [ 395.889500] pskb_expand_head+0x43b/0x1d20 [ 395.893739] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.897706] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.901853] ___sys_sendmsg+0xe68/0x1250 [ 395.905919] __sys_sendmmsg+0x56b/0xa90 [ 395.909886] __se_sys_sendmmsg+0xbd/0xe0 [ 395.913940] __x64_sys_sendmmsg+0x56/0x70 [ 395.918083] do_syscall_64+0xcf/0x110 [ 395.921881] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.927056] [ 395.928670] Uninit was stored to memory at: [ 395.932992] kmsan_internal_chain_origin+0x136/0x240 [ 395.938090] __msan_chain_origin+0x6d/0xd0 [ 395.942320] __save_stack_trace+0x8be/0xc60 [ 395.946637] save_stack_trace+0xc6/0x110 [ 395.950703] kmsan_internal_chain_origin+0x136/0x240 [ 395.955800] kmsan_memcpy_origins+0x13d/0x1b0 [ 395.960287] __msan_memcpy+0x6f/0x80 [ 395.963993] pskb_expand_head+0x43b/0x1d20 [ 395.968222] l2tp_xmit_skb+0x5a7/0x24b0 [ 395.972194] pppol2tp_sendmsg+0x7a6/0xba0 [ 395.976351] ___sys_sendmsg+0xe68/0x1250 [ 395.980406] __sys_sendmmsg+0x56b/0xa90 [ 395.984373] __se_sys_sendmmsg+0xbd/0xe0 [ 395.988426] __x64_sys_sendmmsg+0x56/0x70 [ 395.992575] do_syscall_64+0xcf/0x110 [ 395.996371] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.001548] [ 396.003176] Uninit was stored to memory at: [ 396.007505] kmsan_internal_chain_origin+0x136/0x240 [ 396.012608] __msan_chain_origin+0x6d/0xd0 [ 396.016840] __save_stack_trace+0x8be/0xc60 [ 396.021154] save_stack_trace+0xc6/0x110 [ 396.025227] kmsan_internal_chain_origin+0x136/0x240 [ 396.030325] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.034814] __msan_memcpy+0x6f/0x80 [ 396.038523] pskb_expand_head+0x43b/0x1d20 [ 396.042757] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.046722] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.050861] ___sys_sendmsg+0xe68/0x1250 [ 396.054916] __sys_sendmmsg+0x56b/0xa90 [ 396.058887] __se_sys_sendmmsg+0xbd/0xe0 [ 396.062943] __x64_sys_sendmmsg+0x56/0x70 [ 396.067088] do_syscall_64+0xcf/0x110 [ 396.070891] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.076067] [ 396.077683] Uninit was stored to memory at: [ 396.082005] kmsan_internal_chain_origin+0x136/0x240 [ 396.087101] __msan_chain_origin+0x6d/0xd0 [ 396.091334] __save_stack_trace+0x8be/0xc60 [ 396.095653] save_stack_trace+0xc6/0x110 [ 396.099711] kmsan_internal_chain_origin+0x136/0x240 [ 396.104829] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.109317] __msan_memcpy+0x6f/0x80 [ 396.113025] pskb_expand_head+0x43b/0x1d20 [ 396.117257] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.121225] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.125364] ___sys_sendmsg+0xe68/0x1250 [ 396.129429] __sys_sendmmsg+0x56b/0xa90 [ 396.133417] __se_sys_sendmmsg+0xbd/0xe0 [ 396.137482] __x64_sys_sendmmsg+0x56/0x70 [ 396.141631] do_syscall_64+0xcf/0x110 [ 396.145453] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.150627] [ 396.152241] Uninit was stored to memory at: [ 396.156560] kmsan_internal_chain_origin+0x136/0x240 [ 396.161686] __msan_chain_origin+0x6d/0xd0 [ 396.165924] __save_stack_trace+0x8be/0xc60 [ 396.170236] save_stack_trace+0xc6/0x110 [ 396.174289] kmsan_internal_chain_origin+0x136/0x240 [ 396.179384] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.183873] __msan_memcpy+0x6f/0x80 [ 396.187584] pskb_expand_head+0x43b/0x1d20 [ 396.191811] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.195778] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.199919] ___sys_sendmsg+0xe68/0x1250 [ 396.203989] __sys_sendmmsg+0x56b/0xa90 [ 396.207960] __se_sys_sendmmsg+0xbd/0xe0 [ 396.212014] __x64_sys_sendmmsg+0x56/0x70 [ 396.216158] do_syscall_64+0xcf/0x110 [ 396.219953] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.225128] [ 396.226745] Uninit was stored to memory at: [ 396.231066] kmsan_internal_chain_origin+0x136/0x240 [ 396.236416] __msan_chain_origin+0x6d/0xd0 [ 396.240830] __save_stack_trace+0x8be/0xc60 [ 396.245147] save_stack_trace+0xc6/0x110 [ 396.249204] kmsan_internal_chain_origin+0x136/0x240 [ 396.254319] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.258810] __msan_memcpy+0x6f/0x80 [ 396.262526] pskb_expand_head+0x43b/0x1d20 [ 396.266761] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.270734] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.274878] ___sys_sendmsg+0xe68/0x1250 [ 396.278932] __sys_sendmmsg+0x56b/0xa90 [ 396.282899] __se_sys_sendmmsg+0xbd/0xe0 [ 396.286960] __x64_sys_sendmmsg+0x56/0x70 [ 396.291144] do_syscall_64+0xcf/0x110 [ 396.294941] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.300118] [ 396.301736] Uninit was stored to memory at: [ 396.306060] kmsan_internal_chain_origin+0x136/0x240 [ 396.311170] __msan_chain_origin+0x6d/0xd0 [ 396.315396] __save_stack_trace+0x8be/0xc60 [ 396.319711] save_stack_trace+0xc6/0x110 [ 396.323770] kmsan_internal_chain_origin+0x136/0x240 [ 396.328865] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.333353] __msan_memcpy+0x6f/0x80 [ 396.337064] pskb_expand_head+0x43b/0x1d20 [ 396.341292] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.345263] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.349403] ___sys_sendmsg+0xe68/0x1250 [ 396.353486] __sys_sendmmsg+0x56b/0xa90 [ 396.357462] __se_sys_sendmmsg+0xbd/0xe0 [ 396.361527] __x64_sys_sendmmsg+0x56/0x70 [ 396.365690] do_syscall_64+0xcf/0x110 [ 396.369483] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.374654] [ 396.376283] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 396.383646] Variable was created at: [ 396.387352] __local_bh_enable_ip+0x46/0x260 [ 396.391750] local_bh_enable+0x36/0x40 [ 396.422131] not chained 160000 origins [ 396.426035] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 396.432866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.442210] Call Trace: [ 396.444835] dump_stack+0x32d/0x480 [ 396.448466] ? save_stack_trace+0xc6/0x110 [ 396.452713] kmsan_internal_chain_origin+0x222/0x240 [ 396.457820] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 396.461981] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.467372] ? kmsan_internal_chain_origin+0x136/0x240 [ 396.472645] ? __msan_chain_origin+0x6d/0xd0 [ 396.477062] ? __save_stack_trace+0x8be/0xc60 [ 396.481550] ? save_stack_trace+0xc6/0x110 [ 396.485781] ? kmsan_internal_chain_origin+0x136/0x240 [ 396.491058] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 396.495723] ? __msan_memcpy+0x6f/0x80 [ 396.499610] ? pskb_expand_head+0x43b/0x1d20 [ 396.504017] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 396.508180] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 396.512514] ? ___sys_sendmsg+0xe68/0x1250 [ 396.516746] ? __sys_sendmmsg+0x56b/0xa90 [ 396.520892] ? __se_sys_sendmmsg+0xbd/0xe0 [ 396.525137] ? __x64_sys_sendmmsg+0x56/0x70 [ 396.529453] ? do_syscall_64+0xcf/0x110 [ 396.533426] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.538789] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 396.544158] ? is_bpf_text_address+0x49e/0x4d0 [ 396.548750] ? kmsan_internal_chain_origin+0x90/0x240 [ 396.553956] ? get_stack_info+0x863/0x9d0 [ 396.558110] __msan_chain_origin+0x6d/0xd0 [ 396.562343] ? pskb_expand_head+0x43b/0x1d20 [ 396.566747] __save_stack_trace+0x8be/0xc60 [ 396.571083] ? pskb_expand_head+0x43b/0x1d20 [ 396.575502] save_stack_trace+0xc6/0x110 [ 396.579567] kmsan_internal_chain_origin+0x136/0x240 [ 396.584676] ? kmsan_internal_chain_origin+0x136/0x240 [ 396.589959] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 396.594635] ? __msan_memcpy+0x6f/0x80 [ 396.598515] ? pskb_expand_head+0x43b/0x1d20 [ 396.602919] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 396.607067] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 396.611387] ? ___sys_sendmsg+0xe68/0x1250 [ 396.615642] ? __sys_sendmmsg+0x56b/0xa90 [ 396.619786] ? __se_sys_sendmmsg+0xbd/0xe0 [ 396.624014] ? __x64_sys_sendmmsg+0x56/0x70 [ 396.628349] ? do_syscall_64+0xcf/0x110 [ 396.632322] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.637687] ? __msan_poison_alloca+0x1e0/0x2b0 [ 396.642375] ? __msan_get_context_state+0x9/0x30 [ 396.647138] ? INIT_INT+0xc/0x30 [ 396.650515] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 396.655911] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.660411] __msan_memcpy+0x6f/0x80 [ 396.664135] pskb_expand_head+0x43b/0x1d20 [ 396.668388] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.672398] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.676568] ___sys_sendmsg+0xe68/0x1250 [ 396.680624] ? kmsan_set_origin+0x83/0x130 [ 396.684853] ? pppol2tp_getsockopt+0x1060/0x1060 [ 396.689620] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 396.694998] ? kmsan_set_origin+0x83/0x130 [ 396.699246] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 396.704618] ? _cond_resched+0xc7/0x120 [ 396.708590] __sys_sendmmsg+0x56b/0xa90 [ 396.712614] __se_sys_sendmmsg+0xbd/0xe0 [ 396.716675] __x64_sys_sendmmsg+0x56/0x70 [ 396.720818] do_syscall_64+0xcf/0x110 [ 396.724616] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.729795] RIP: 0033:0x457569 [ 396.732984] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.751881] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 396.759595] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 396.766856] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 396.774121] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 396.781385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 396.788647] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 396.795926] Uninit was stored to memory at: [ 396.800259] kmsan_internal_chain_origin+0x136/0x240 [ 396.805378] __msan_chain_origin+0x6d/0xd0 [ 396.809619] __save_stack_trace+0x8be/0xc60 [ 396.813932] save_stack_trace+0xc6/0x110 [ 396.818076] kmsan_internal_chain_origin+0x136/0x240 [ 396.823184] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.827682] __msan_memcpy+0x6f/0x80 [ 396.831386] pskb_expand_head+0x43b/0x1d20 [ 396.835613] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.839580] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.843757] ___sys_sendmsg+0xe68/0x1250 [ 396.847811] __sys_sendmmsg+0x56b/0xa90 [ 396.851798] __se_sys_sendmmsg+0xbd/0xe0 [ 396.855855] __x64_sys_sendmmsg+0x56/0x70 [ 396.860006] do_syscall_64+0xcf/0x110 [ 396.863826] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.869023] [ 396.870649] Uninit was stored to memory at: [ 396.874967] kmsan_internal_chain_origin+0x136/0x240 [ 396.880069] __msan_chain_origin+0x6d/0xd0 [ 396.884311] __save_stack_trace+0x8be/0xc60 [ 396.888637] save_stack_trace+0xc6/0x110 [ 396.892692] kmsan_internal_chain_origin+0x136/0x240 [ 396.897788] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.902298] __msan_memcpy+0x6f/0x80 [ 396.906006] pskb_expand_head+0x43b/0x1d20 [ 396.910233] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.914218] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.918357] ___sys_sendmsg+0xe68/0x1250 [ 396.922409] __sys_sendmmsg+0x56b/0xa90 [ 396.926373] __se_sys_sendmmsg+0xbd/0xe0 [ 396.930446] __x64_sys_sendmmsg+0x56/0x70 [ 396.934590] do_syscall_64+0xcf/0x110 [ 396.938386] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.943559] [ 396.945175] Uninit was stored to memory at: [ 396.949505] kmsan_internal_chain_origin+0x136/0x240 [ 396.954607] __msan_chain_origin+0x6d/0xd0 [ 396.958836] __save_stack_trace+0x8be/0xc60 [ 396.963152] save_stack_trace+0xc6/0x110 [ 396.967208] kmsan_internal_chain_origin+0x136/0x240 [ 396.972308] kmsan_memcpy_origins+0x13d/0x1b0 [ 396.976796] __msan_memcpy+0x6f/0x80 [ 396.980524] pskb_expand_head+0x43b/0x1d20 [ 396.984765] l2tp_xmit_skb+0x5a7/0x24b0 [ 396.988735] pppol2tp_sendmsg+0x7a6/0xba0 [ 396.992874] ___sys_sendmsg+0xe68/0x1250 [ 396.996931] __sys_sendmmsg+0x56b/0xa90 [ 397.000894] __se_sys_sendmmsg+0xbd/0xe0 [ 397.004949] __x64_sys_sendmmsg+0x56/0x70 [ 397.009088] do_syscall_64+0xcf/0x110 [ 397.012886] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.018060] [ 397.019672] Uninit was stored to memory at: [ 397.023988] kmsan_internal_chain_origin+0x136/0x240 [ 397.029113] __msan_chain_origin+0x6d/0xd0 [ 397.033341] __save_stack_trace+0x8be/0xc60 [ 397.037709] save_stack_trace+0xc6/0x110 [ 397.041768] kmsan_internal_chain_origin+0x136/0x240 [ 397.046862] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.051351] __msan_memcpy+0x6f/0x80 [ 397.055062] pskb_expand_head+0x43b/0x1d20 [ 397.059302] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.063307] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.067454] ___sys_sendmsg+0xe68/0x1250 [ 397.071510] __sys_sendmmsg+0x56b/0xa90 [ 397.075486] __se_sys_sendmmsg+0xbd/0xe0 [ 397.079543] __x64_sys_sendmmsg+0x56/0x70 [ 397.083688] do_syscall_64+0xcf/0x110 [ 397.087482] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.092679] [ 397.094299] Uninit was stored to memory at: [ 397.098616] kmsan_internal_chain_origin+0x136/0x240 [ 397.103738] __msan_chain_origin+0x6d/0xd0 [ 397.107967] __save_stack_trace+0x8be/0xc60 [ 397.112282] save_stack_trace+0xc6/0x110 [ 397.116338] kmsan_internal_chain_origin+0x136/0x240 [ 397.121443] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.125970] __msan_memcpy+0x6f/0x80 [ 397.129676] pskb_expand_head+0x43b/0x1d20 [ 397.133911] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.137887] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.142038] ___sys_sendmsg+0xe68/0x1250 [ 397.146098] __sys_sendmmsg+0x56b/0xa90 [ 397.150086] __se_sys_sendmmsg+0xbd/0xe0 [ 397.154151] __x64_sys_sendmmsg+0x56/0x70 [ 397.158305] do_syscall_64+0xcf/0x110 [ 397.162112] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.167286] [ 397.168912] Uninit was stored to memory at: [ 397.173243] kmsan_internal_chain_origin+0x136/0x240 [ 397.178340] __msan_chain_origin+0x6d/0xd0 [ 397.182591] __save_stack_trace+0x8be/0xc60 [ 397.186910] save_stack_trace+0xc6/0x110 [ 397.190965] kmsan_internal_chain_origin+0x136/0x240 [ 397.196068] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.200570] __msan_memcpy+0x6f/0x80 [ 397.204293] pskb_expand_head+0x43b/0x1d20 [ 397.208521] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.212489] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.216639] ___sys_sendmsg+0xe68/0x1250 [ 397.220721] __sys_sendmmsg+0x56b/0xa90 [ 397.224704] __se_sys_sendmmsg+0xbd/0xe0 [ 397.228755] __x64_sys_sendmmsg+0x56/0x70 [ 397.232894] do_syscall_64+0xcf/0x110 [ 397.236703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.241898] [ 397.243517] Uninit was stored to memory at: [ 397.247852] kmsan_internal_chain_origin+0x136/0x240 [ 397.252949] __msan_chain_origin+0x6d/0xd0 [ 397.257180] __save_stack_trace+0x8be/0xc60 [ 397.261494] save_stack_trace+0xc6/0x110 [ 397.265550] kmsan_internal_chain_origin+0x136/0x240 [ 397.270658] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.275171] __msan_memcpy+0x6f/0x80 [ 397.278876] pskb_expand_head+0x43b/0x1d20 [ 397.283100] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.287095] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.291233] ___sys_sendmsg+0xe68/0x1250 [ 397.295299] __sys_sendmmsg+0x56b/0xa90 [ 397.299267] __se_sys_sendmmsg+0xbd/0xe0 [ 397.303320] __x64_sys_sendmmsg+0x56/0x70 [ 397.307503] do_syscall_64+0xcf/0x110 [ 397.311319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.316495] [ 397.318115] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 397.325473] Variable was created at: [ 397.329183] __local_bh_enable_ip+0x46/0x260 [ 397.333584] local_bh_enable+0x36/0x40 [ 397.368129] not chained 170000 origins [ 397.372061] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 397.378905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.388266] Call Trace: [ 397.390861] dump_stack+0x32d/0x480 [ 397.394488] ? save_stack_trace+0xc6/0x110 [ 397.398737] kmsan_internal_chain_origin+0x222/0x240 [ 397.403837] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 397.407983] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.413348] ? kmsan_internal_chain_origin+0x136/0x240 [ 397.418623] ? __msan_chain_origin+0x6d/0xd0 [ 397.423027] ? __save_stack_trace+0x8be/0xc60 [ 397.427530] ? save_stack_trace+0xc6/0x110 [ 397.431765] ? kmsan_internal_chain_origin+0x136/0x240 [ 397.437058] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 397.441744] ? __msan_memcpy+0x6f/0x80 [ 397.445625] ? pskb_expand_head+0x43b/0x1d20 [ 397.450027] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 397.454172] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 397.458489] ? ___sys_sendmsg+0xe68/0x1250 [ 397.462719] ? __sys_sendmmsg+0x56b/0xa90 [ 397.466858] ? __se_sys_sendmmsg+0xbd/0xe0 [ 397.471117] ? __x64_sys_sendmmsg+0x56/0x70 [ 397.475433] ? do_syscall_64+0xcf/0x110 [ 397.479403] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.484775] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 397.490133] ? is_bpf_text_address+0x49e/0x4d0 [ 397.494712] ? kmsan_internal_chain_origin+0x90/0x240 [ 397.499918] ? get_stack_info+0x863/0x9d0 [ 397.504075] __msan_chain_origin+0x6d/0xd0 [ 397.508311] ? ___sys_sendmsg+0xe68/0x1250 [ 397.512542] __save_stack_trace+0x8be/0xc60 [ 397.516894] ? ___sys_sendmsg+0xe68/0x1250 [ 397.521136] save_stack_trace+0xc6/0x110 [ 397.525203] kmsan_internal_chain_origin+0x136/0x240 [ 397.530333] ? kmsan_internal_chain_origin+0x136/0x240 [ 397.535618] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 397.540297] ? __msan_memcpy+0x6f/0x80 [ 397.544181] ? pskb_expand_head+0x43b/0x1d20 [ 397.548586] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 397.552756] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 397.557076] ? ___sys_sendmsg+0xe68/0x1250 [ 397.561304] ? __sys_sendmmsg+0x56b/0xa90 [ 397.565458] ? __se_sys_sendmmsg+0xbd/0xe0 [ 397.569684] ? __x64_sys_sendmmsg+0x56/0x70 [ 397.574001] ? do_syscall_64+0xcf/0x110 [ 397.577968] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.583328] ? __msan_poison_alloca+0x1e0/0x2b0 [ 397.588020] ? __msan_get_context_state+0x9/0x30 [ 397.592777] ? INIT_INT+0xc/0x30 [ 397.596166] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 397.601561] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.606069] __msan_memcpy+0x6f/0x80 [ 397.609793] pskb_expand_head+0x43b/0x1d20 [ 397.614055] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.618056] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.622248] ___sys_sendmsg+0xe68/0x1250 [ 397.626337] ? kmsan_set_origin+0x83/0x130 [ 397.630581] ? pppol2tp_getsockopt+0x1060/0x1060 [ 397.635358] ? __msan_poison_alloca+0x1e0/0x2b0 [ 397.640028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.645399] ? rcu_all_qs+0x3b/0x310 [ 397.649107] ? _cond_resched+0x59/0x120 [ 397.653094] ? rcu_all_qs+0x53/0x310 [ 397.656806] ? _cond_resched+0x37/0x120 [ 397.660772] ? __sys_sendmmsg+0x7c9/0xa90 [ 397.664942] ? _cond_resched+0x59/0x120 [ 397.668914] __sys_sendmmsg+0x56b/0xa90 [ 397.672933] __se_sys_sendmmsg+0xbd/0xe0 [ 397.676996] __x64_sys_sendmmsg+0x56/0x70 [ 397.681150] do_syscall_64+0xcf/0x110 [ 397.684949] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.690166] RIP: 0033:0x457569 [ 397.693380] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.712295] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 397.720001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 397.727289] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 397.734555] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.741819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 397.749090] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 397.756373] Uninit was stored to memory at: [ 397.760704] kmsan_internal_chain_origin+0x136/0x240 [ 397.765801] __msan_chain_origin+0x6d/0xd0 [ 397.770027] __save_stack_trace+0x8be/0xc60 [ 397.774357] save_stack_trace+0xc6/0x110 [ 397.778416] kmsan_internal_chain_origin+0x136/0x240 [ 397.783525] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.788039] __msan_memcpy+0x6f/0x80 [ 397.791749] pskb_expand_head+0x43b/0x1d20 [ 397.795975] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.799941] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.804082] ___sys_sendmsg+0xe68/0x1250 [ 397.808135] __sys_sendmmsg+0x56b/0xa90 [ 397.812121] __se_sys_sendmmsg+0xbd/0xe0 [ 397.816175] __x64_sys_sendmmsg+0x56/0x70 [ 397.820328] do_syscall_64+0xcf/0x110 [ 397.824168] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.829343] [ 397.830958] Uninit was stored to memory at: [ 397.835275] kmsan_internal_chain_origin+0x136/0x240 [ 397.840382] __msan_chain_origin+0x6d/0xd0 [ 397.844613] __save_stack_trace+0x8be/0xc60 [ 397.848927] save_stack_trace+0xc6/0x110 [ 397.852981] kmsan_internal_chain_origin+0x136/0x240 [ 397.858081] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.862574] __msan_memcpy+0x6f/0x80 [ 397.866279] pskb_expand_head+0x43b/0x1d20 [ 397.870516] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.874483] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.878626] ___sys_sendmsg+0xe68/0x1250 [ 397.882685] __sys_sendmmsg+0x56b/0xa90 [ 397.886653] __se_sys_sendmmsg+0xbd/0xe0 [ 397.890706] __x64_sys_sendmmsg+0x56/0x70 [ 397.894848] do_syscall_64+0xcf/0x110 [ 397.898657] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.903843] [ 397.905460] Uninit was stored to memory at: [ 397.909774] kmsan_internal_chain_origin+0x136/0x240 [ 397.914871] __msan_chain_origin+0x6d/0xd0 [ 397.919103] __save_stack_trace+0x8be/0xc60 [ 397.923420] save_stack_trace+0xc6/0x110 [ 397.927472] kmsan_internal_chain_origin+0x136/0x240 [ 397.932571] kmsan_memcpy_origins+0x13d/0x1b0 [ 397.937076] __msan_memcpy+0x6f/0x80 [ 397.940788] pskb_expand_head+0x43b/0x1d20 [ 397.945016] l2tp_xmit_skb+0x5a7/0x24b0 [ 397.948982] pppol2tp_sendmsg+0x7a6/0xba0 [ 397.953124] ___sys_sendmsg+0xe68/0x1250 [ 397.957176] __sys_sendmmsg+0x56b/0xa90 [ 397.961145] __se_sys_sendmmsg+0xbd/0xe0 [ 397.965200] __x64_sys_sendmmsg+0x56/0x70 [ 397.969340] do_syscall_64+0xcf/0x110 [ 397.973135] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.978320] [ 397.979943] Uninit was stored to memory at: [ 397.984260] kmsan_internal_chain_origin+0x136/0x240 [ 397.989354] __msan_chain_origin+0x6d/0xd0 [ 397.993583] __save_stack_trace+0x8be/0xc60 [ 397.997953] save_stack_trace+0xc6/0x110 [ 398.002021] kmsan_internal_chain_origin+0x136/0x240 [ 398.007119] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.011609] __msan_memcpy+0x6f/0x80 [ 398.015333] pskb_expand_head+0x43b/0x1d20 [ 398.019584] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.023552] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.027696] ___sys_sendmsg+0xe68/0x1250 [ 398.031754] __sys_sendmmsg+0x56b/0xa90 [ 398.035717] __se_sys_sendmmsg+0xbd/0xe0 [ 398.039789] __x64_sys_sendmmsg+0x56/0x70 [ 398.043932] do_syscall_64+0xcf/0x110 [ 398.047738] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.052915] [ 398.054542] Uninit was stored to memory at: [ 398.058864] kmsan_internal_chain_origin+0x136/0x240 [ 398.063964] __msan_chain_origin+0x6d/0xd0 [ 398.068195] __save_stack_trace+0x8be/0xc60 [ 398.072519] save_stack_trace+0xc6/0x110 [ 398.076577] kmsan_internal_chain_origin+0x136/0x240 [ 398.081686] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.086195] __msan_memcpy+0x6f/0x80 [ 398.089920] pskb_expand_head+0x43b/0x1d20 [ 398.094170] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.098148] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.102289] ___sys_sendmsg+0xe68/0x1250 [ 398.106343] __sys_sendmmsg+0x56b/0xa90 [ 398.110308] __se_sys_sendmmsg+0xbd/0xe0 [ 398.114363] __x64_sys_sendmmsg+0x56/0x70 [ 398.118501] do_syscall_64+0xcf/0x110 [ 398.122295] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.127487] [ 398.129102] Uninit was stored to memory at: [ 398.133422] kmsan_internal_chain_origin+0x136/0x240 [ 398.138530] __msan_chain_origin+0x6d/0xd0 [ 398.142762] __save_stack_trace+0x8be/0xc60 [ 398.147093] save_stack_trace+0xc6/0x110 [ 398.151147] kmsan_internal_chain_origin+0x136/0x240 [ 398.156244] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.160734] __msan_memcpy+0x6f/0x80 [ 398.164440] pskb_expand_head+0x43b/0x1d20 [ 398.168688] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.172680] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.176822] ___sys_sendmsg+0xe68/0x1250 [ 398.180875] __sys_sendmmsg+0x56b/0xa90 [ 398.184845] __se_sys_sendmmsg+0xbd/0xe0 [ 398.188896] __x64_sys_sendmmsg+0x56/0x70 [ 398.193039] do_syscall_64+0xcf/0x110 [ 398.196835] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.202009] [ 398.203624] Uninit was stored to memory at: [ 398.207936] kmsan_internal_chain_origin+0x136/0x240 [ 398.213032] __msan_chain_origin+0x6d/0xd0 [ 398.217261] __save_stack_trace+0x8be/0xc60 [ 398.221588] save_stack_trace+0xc6/0x110 [ 398.225655] kmsan_internal_chain_origin+0x136/0x240 [ 398.230925] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.235413] __msan_memcpy+0x6f/0x80 [ 398.239126] pskb_expand_head+0x43b/0x1d20 [ 398.243615] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.247586] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.251730] ___sys_sendmsg+0xe68/0x1250 [ 398.255788] __sys_sendmmsg+0x56b/0xa90 [ 398.259776] __se_sys_sendmmsg+0xbd/0xe0 [ 398.263829] __x64_sys_sendmmsg+0x56/0x70 [ 398.267993] do_syscall_64+0xcf/0x110 [ 398.271809] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.276982] [ 398.278608] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 398.285964] Variable was created at: [ 398.289678] __local_bh_enable_ip+0x46/0x260 [ 398.294079] local_bh_enable+0x36/0x40 [ 398.331193] not chained 180000 origins [ 398.335165] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 398.342048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.351418] Call Trace: [ 398.354006] dump_stack+0x32d/0x480 [ 398.357631] ? save_stack_trace+0xc6/0x110 [ 398.361891] kmsan_internal_chain_origin+0x222/0x240 [ 398.366990] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 398.371137] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.376529] ? kmsan_internal_chain_origin+0x136/0x240 [ 398.381807] ? __msan_chain_origin+0x6d/0xd0 [ 398.386408] ? __save_stack_trace+0x8be/0xc60 [ 398.391418] ? save_stack_trace+0xc6/0x110 [ 398.395678] ? kmsan_internal_chain_origin+0x136/0x240 [ 398.400960] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 398.405625] ? __msan_memcpy+0x6f/0x80 [ 398.409534] ? pskb_expand_head+0x43b/0x1d20 [ 398.413944] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 398.418084] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 398.422412] ? ___sys_sendmsg+0xe68/0x1250 [ 398.426695] ? __sys_sendmmsg+0x56b/0xa90 [ 398.430837] ? __se_sys_sendmmsg+0xbd/0xe0 [ 398.435071] ? __x64_sys_sendmmsg+0x56/0x70 [ 398.439397] ? do_syscall_64+0xcf/0x110 [ 398.443368] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.448734] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 398.454095] ? is_bpf_text_address+0x49e/0x4d0 [ 398.458676] ? kmsan_internal_chain_origin+0x90/0x240 [ 398.463883] ? get_stack_info+0x863/0x9d0 [ 398.468035] __msan_chain_origin+0x6d/0xd0 [ 398.472278] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 398.476946] __save_stack_trace+0x8be/0xc60 [ 398.481286] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 398.485974] save_stack_trace+0xc6/0x110 [ 398.490036] kmsan_internal_chain_origin+0x136/0x240 [ 398.495159] ? kmsan_internal_chain_origin+0x136/0x240 [ 398.500431] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 398.505099] ? __msan_memcpy+0x6f/0x80 [ 398.509004] ? pskb_expand_head+0x43b/0x1d20 [ 398.513409] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 398.517570] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 398.521890] ? ___sys_sendmsg+0xe68/0x1250 [ 398.526117] ? __sys_sendmmsg+0x56b/0xa90 [ 398.530257] ? __se_sys_sendmmsg+0xbd/0xe0 [ 398.534488] ? __x64_sys_sendmmsg+0x56/0x70 [ 398.538804] ? do_syscall_64+0xcf/0x110 [ 398.542775] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.548134] ? __msan_poison_alloca+0x1e0/0x2b0 [ 398.552823] ? __msan_get_context_state+0x9/0x30 [ 398.557574] ? INIT_INT+0xc/0x30 [ 398.560936] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 398.566308] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.570818] __msan_memcpy+0x6f/0x80 [ 398.574528] pskb_expand_head+0x43b/0x1d20 [ 398.578783] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.582782] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.586947] ___sys_sendmsg+0xe68/0x1250 [ 398.590999] ? kmsan_set_origin+0x83/0x130 [ 398.595228] ? pppol2tp_getsockopt+0x1060/0x1060 [ 398.599998] ? __msan_poison_alloca+0x1e0/0x2b0 [ 398.604666] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 398.610030] ? rcu_all_qs+0x3b/0x310 [ 398.613744] ? _cond_resched+0x59/0x120 [ 398.617716] ? rcu_all_qs+0x53/0x310 [ 398.621425] ? _cond_resched+0x37/0x120 [ 398.625390] ? __sys_sendmmsg+0x7c9/0xa90 [ 398.629536] ? _cond_resched+0x59/0x120 [ 398.633524] __sys_sendmmsg+0x56b/0xa90 [ 398.637531] __se_sys_sendmmsg+0xbd/0xe0 [ 398.641599] __x64_sys_sendmmsg+0x56/0x70 [ 398.645757] do_syscall_64+0xcf/0x110 [ 398.649551] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.654739] RIP: 0033:0x457569 [ 398.657923] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.676818] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.684541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 398.691810] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 398.699081] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 398.706341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 398.713620] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 398.720895] Uninit was stored to memory at: [ 398.725222] kmsan_internal_chain_origin+0x136/0x240 [ 398.730315] __msan_chain_origin+0x6d/0xd0 [ 398.734542] __save_stack_trace+0x8be/0xc60 [ 398.738854] save_stack_trace+0xc6/0x110 [ 398.742911] kmsan_internal_chain_origin+0x136/0x240 [ 398.748022] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.752545] __msan_memcpy+0x6f/0x80 [ 398.756308] pskb_expand_head+0x43b/0x1d20 [ 398.760533] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.764503] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.768663] ___sys_sendmsg+0xe68/0x1250 [ 398.772718] __sys_sendmmsg+0x56b/0xa90 [ 398.776685] __se_sys_sendmmsg+0xbd/0xe0 [ 398.780736] __x64_sys_sendmmsg+0x56/0x70 [ 398.784878] do_syscall_64+0xcf/0x110 [ 398.788673] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.793849] [ 398.795475] Uninit was stored to memory at: [ 398.799786] kmsan_internal_chain_origin+0x136/0x240 [ 398.804886] __msan_chain_origin+0x6d/0xd0 [ 398.809113] __save_stack_trace+0x8be/0xc60 [ 398.813445] save_stack_trace+0xc6/0x110 [ 398.817515] kmsan_internal_chain_origin+0x136/0x240 [ 398.822622] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.827135] __msan_memcpy+0x6f/0x80 [ 398.830857] pskb_expand_head+0x43b/0x1d20 [ 398.835103] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.839083] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.843250] ___sys_sendmsg+0xe68/0x1250 [ 398.847325] __sys_sendmmsg+0x56b/0xa90 [ 398.851293] __se_sys_sendmmsg+0xbd/0xe0 [ 398.855402] __x64_sys_sendmmsg+0x56/0x70 [ 398.859545] do_syscall_64+0xcf/0x110 [ 398.863344] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.868514] [ 398.870148] Uninit was stored to memory at: [ 398.874478] kmsan_internal_chain_origin+0x136/0x240 [ 398.879574] __msan_chain_origin+0x6d/0xd0 [ 398.883802] __save_stack_trace+0x8be/0xc60 [ 398.888131] save_stack_trace+0xc6/0x110 [ 398.892197] kmsan_internal_chain_origin+0x136/0x240 [ 398.897294] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.901794] __msan_memcpy+0x6f/0x80 [ 398.905501] pskb_expand_head+0x43b/0x1d20 [ 398.909746] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.913718] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.917859] ___sys_sendmsg+0xe68/0x1250 [ 398.921929] __sys_sendmmsg+0x56b/0xa90 [ 398.925895] __se_sys_sendmmsg+0xbd/0xe0 [ 398.929965] __x64_sys_sendmmsg+0x56/0x70 [ 398.934124] do_syscall_64+0xcf/0x110 [ 398.937921] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.943094] [ 398.944707] Uninit was stored to memory at: [ 398.949023] kmsan_internal_chain_origin+0x136/0x240 [ 398.954148] __msan_chain_origin+0x6d/0xd0 [ 398.958372] __save_stack_trace+0x8be/0xc60 [ 398.962719] save_stack_trace+0xc6/0x110 [ 398.966778] kmsan_internal_chain_origin+0x136/0x240 [ 398.971876] kmsan_memcpy_origins+0x13d/0x1b0 [ 398.976364] __msan_memcpy+0x6f/0x80 [ 398.980077] pskb_expand_head+0x43b/0x1d20 [ 398.984304] l2tp_xmit_skb+0x5a7/0x24b0 [ 398.988270] pppol2tp_sendmsg+0x7a6/0xba0 [ 398.992422] ___sys_sendmsg+0xe68/0x1250 [ 398.996488] __sys_sendmmsg+0x56b/0xa90 [ 399.000451] __se_sys_sendmmsg+0xbd/0xe0 [ 399.004506] __x64_sys_sendmmsg+0x56/0x70 [ 399.008663] do_syscall_64+0xcf/0x110 [ 399.012458] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.017630] [ 399.019255] Uninit was stored to memory at: [ 399.023587] kmsan_internal_chain_origin+0x136/0x240 [ 399.028685] __msan_chain_origin+0x6d/0xd0 [ 399.032911] __save_stack_trace+0x8be/0xc60 [ 399.037224] save_stack_trace+0xc6/0x110 [ 399.041277] kmsan_internal_chain_origin+0x136/0x240 [ 399.046375] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.050862] __msan_memcpy+0x6f/0x80 [ 399.054573] pskb_expand_head+0x43b/0x1d20 [ 399.058837] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.062804] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.066946] ___sys_sendmsg+0xe68/0x1250 [ 399.071002] __sys_sendmmsg+0x56b/0xa90 [ 399.074966] __se_sys_sendmmsg+0xbd/0xe0 [ 399.079032] __x64_sys_sendmmsg+0x56/0x70 [ 399.083174] do_syscall_64+0xcf/0x110 [ 399.086968] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.092141] [ 399.093757] Uninit was stored to memory at: [ 399.098074] kmsan_internal_chain_origin+0x136/0x240 [ 399.103177] __msan_chain_origin+0x6d/0xd0 [ 399.107432] __save_stack_trace+0x8be/0xc60 [ 399.111775] save_stack_trace+0xc6/0x110 [ 399.115831] kmsan_internal_chain_origin+0x136/0x240 [ 399.120934] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.125423] __msan_memcpy+0x6f/0x80 [ 399.129128] pskb_expand_head+0x43b/0x1d20 [ 399.133364] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.137331] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.141474] ___sys_sendmsg+0xe68/0x1250 [ 399.145524] __sys_sendmmsg+0x56b/0xa90 [ 399.149503] __se_sys_sendmmsg+0xbd/0xe0 [ 399.153562] __x64_sys_sendmmsg+0x56/0x70 [ 399.157702] do_syscall_64+0xcf/0x110 [ 399.161494] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.166666] [ 399.168277] Uninit was stored to memory at: [ 399.172622] kmsan_internal_chain_origin+0x136/0x240 [ 399.177726] __msan_chain_origin+0x6d/0xd0 [ 399.181974] __save_stack_trace+0x8be/0xc60 [ 399.186289] save_stack_trace+0xc6/0x110 [ 399.190341] kmsan_internal_chain_origin+0x136/0x240 [ 399.195453] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.199953] __msan_memcpy+0x6f/0x80 [ 399.203674] pskb_expand_head+0x43b/0x1d20 [ 399.207914] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.211881] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.216017] ___sys_sendmsg+0xe68/0x1250 [ 399.220073] __sys_sendmmsg+0x56b/0xa90 [ 399.224039] __se_sys_sendmmsg+0xbd/0xe0 [ 399.228094] __x64_sys_sendmmsg+0x56/0x70 [ 399.232237] do_syscall_64+0xcf/0x110 [ 399.236030] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.241208] [ 399.242825] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 399.250193] Variable was created at: [ 399.253934] __local_bh_enable_ip+0x46/0x260 [ 399.258355] local_bh_enable+0x36/0x40 [ 399.288355] not chained 190000 origins [ 399.292263] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 399.299091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.308435] Call Trace: [ 399.311019] dump_stack+0x32d/0x480 [ 399.314649] ? save_stack_trace+0xc6/0x110 [ 399.318909] kmsan_internal_chain_origin+0x222/0x240 [ 399.324010] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 399.328162] ? kmsan_internal_chain_origin+0x136/0x240 [ 399.333434] ? __msan_chain_origin+0x6d/0xd0 [ 399.337849] ? __save_stack_trace+0x8be/0xc60 [ 399.342599] ? save_stack_trace+0xc6/0x110 [ 399.346831] ? kmsan_internal_chain_origin+0x136/0x240 [ 399.352112] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 399.356776] ? __msan_memcpy+0x6f/0x80 [ 399.360659] ? pskb_expand_head+0x43b/0x1d20 [ 399.365067] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 399.369211] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 399.373584] ? ___sys_sendmsg+0xe68/0x1250 [ 399.377812] ? __sys_sendmmsg+0x56b/0xa90 [ 399.381968] ? __se_sys_sendmmsg+0xbd/0xe0 [ 399.386213] ? __x64_sys_sendmmsg+0x56/0x70 [ 399.390538] ? do_syscall_64+0xcf/0x110 [ 399.394509] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.399872] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 399.405237] ? is_bpf_text_address+0x49e/0x4d0 [ 399.409819] ? kmsan_internal_chain_origin+0x90/0x240 [ 399.415025] ? get_stack_info+0x863/0x9d0 [ 399.419184] __msan_chain_origin+0x6d/0xd0 [ 399.423420] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.428778] __save_stack_trace+0x8be/0xc60 [ 399.433119] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.438506] save_stack_trace+0xc6/0x110 [ 399.442575] kmsan_internal_chain_origin+0x136/0x240 [ 399.447688] ? kmsan_internal_chain_origin+0x136/0x240 [ 399.452959] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 399.457621] ? __msan_memcpy+0x6f/0x80 [ 399.461537] ? pskb_expand_head+0x43b/0x1d20 [ 399.465988] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 399.470134] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 399.474451] ? ___sys_sendmsg+0xe68/0x1250 [ 399.478677] ? __sys_sendmmsg+0x56b/0xa90 [ 399.482818] ? __se_sys_sendmmsg+0xbd/0xe0 [ 399.487048] ? __x64_sys_sendmmsg+0x56/0x70 [ 399.491364] ? do_syscall_64+0xcf/0x110 [ 399.495339] ? __msan_poison_alloca+0x1e0/0x2b0 [ 399.500026] ? __msan_get_context_state+0x9/0x30 [ 399.504780] ? INIT_INT+0xc/0x30 [ 399.508142] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 399.513515] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.518037] __msan_memcpy+0x6f/0x80 [ 399.521761] pskb_expand_head+0x43b/0x1d20 [ 399.526016] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.530014] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.534182] ___sys_sendmsg+0xe68/0x1250 [ 399.538236] ? kmsan_set_origin+0x83/0x130 [ 399.542476] ? pppol2tp_getsockopt+0x1060/0x1060 [ 399.547242] ? __msan_poison_alloca+0x1e0/0x2b0 [ 399.551927] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 399.557292] ? rcu_all_qs+0x3b/0x310 [ 399.560999] ? _cond_resched+0x59/0x120 [ 399.564991] ? rcu_all_qs+0x53/0x310 [ 399.568707] ? _cond_resched+0x37/0x120 [ 399.572676] ? __sys_sendmmsg+0x7c9/0xa90 [ 399.576823] ? _cond_resched+0x59/0x120 [ 399.580792] __sys_sendmmsg+0x56b/0xa90 [ 399.584798] __se_sys_sendmmsg+0xbd/0xe0 [ 399.588873] __x64_sys_sendmmsg+0x56/0x70 [ 399.593021] do_syscall_64+0xcf/0x110 [ 399.596825] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.602017] RIP: 0033:0x457569 [ 399.605204] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.624101] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 399.631812] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 399.639077] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 399.646338] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.653603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 399.660899] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 399.668180] Uninit was stored to memory at: [ 399.672502] kmsan_internal_chain_origin+0x136/0x240 [ 399.677599] __msan_chain_origin+0x6d/0xd0 [ 399.681831] __save_stack_trace+0x8be/0xc60 [ 399.686142] save_stack_trace+0xc6/0x110 [ 399.690196] kmsan_internal_chain_origin+0x136/0x240 [ 399.695297] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.699786] __msan_memcpy+0x6f/0x80 [ 399.703497] pskb_expand_head+0x43b/0x1d20 [ 399.707754] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.711739] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.715886] ___sys_sendmsg+0xe68/0x1250 [ 399.719942] __sys_sendmmsg+0x56b/0xa90 [ 399.723910] __se_sys_sendmmsg+0xbd/0xe0 [ 399.727963] __x64_sys_sendmmsg+0x56/0x70 [ 399.732105] do_syscall_64+0xcf/0x110 [ 399.735900] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.741097] [ 399.742715] Uninit was stored to memory at: [ 399.747037] kmsan_internal_chain_origin+0x136/0x240 [ 399.752139] __msan_chain_origin+0x6d/0xd0 [ 399.756368] __save_stack_trace+0x8be/0xc60 [ 399.760706] save_stack_trace+0xc6/0x110 [ 399.764764] kmsan_internal_chain_origin+0x136/0x240 [ 399.769876] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.774368] __msan_memcpy+0x6f/0x80 [ 399.778101] pskb_expand_head+0x43b/0x1d20 [ 399.782332] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.786317] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.790475] ___sys_sendmsg+0xe68/0x1250 [ 399.794530] __sys_sendmmsg+0x56b/0xa90 [ 399.798506] __se_sys_sendmmsg+0xbd/0xe0 [ 399.802563] __x64_sys_sendmmsg+0x56/0x70 [ 399.806710] do_syscall_64+0xcf/0x110 [ 399.810508] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.815684] [ 399.817301] Uninit was stored to memory at: [ 399.821677] kmsan_internal_chain_origin+0x136/0x240 [ 399.826791] __msan_chain_origin+0x6d/0xd0 [ 399.831019] __save_stack_trace+0x8be/0xc60 [ 399.835338] save_stack_trace+0xc6/0x110 [ 399.839390] kmsan_internal_chain_origin+0x136/0x240 [ 399.844499] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.848986] __msan_memcpy+0x6f/0x80 [ 399.852692] pskb_expand_head+0x43b/0x1d20 [ 399.856940] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.860907] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.865048] ___sys_sendmsg+0xe68/0x1250 [ 399.869107] __sys_sendmmsg+0x56b/0xa90 [ 399.873078] __se_sys_sendmmsg+0xbd/0xe0 [ 399.877129] __x64_sys_sendmmsg+0x56/0x70 [ 399.881272] do_syscall_64+0xcf/0x110 [ 399.885070] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.890245] [ 399.891860] Uninit was stored to memory at: [ 399.896177] kmsan_internal_chain_origin+0x136/0x240 [ 399.901271] __msan_chain_origin+0x6d/0xd0 [ 399.905501] __save_stack_trace+0x8be/0xc60 [ 399.909829] save_stack_trace+0xc6/0x110 [ 399.913887] kmsan_internal_chain_origin+0x136/0x240 [ 399.918984] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.923475] __msan_memcpy+0x6f/0x80 [ 399.927182] pskb_expand_head+0x43b/0x1d20 [ 399.931411] l2tp_xmit_skb+0x5a7/0x24b0 [ 399.935381] pppol2tp_sendmsg+0x7a6/0xba0 [ 399.939541] ___sys_sendmsg+0xe68/0x1250 [ 399.943608] __sys_sendmmsg+0x56b/0xa90 [ 399.947586] __se_sys_sendmmsg+0xbd/0xe0 [ 399.951657] __x64_sys_sendmmsg+0x56/0x70 [ 399.955854] do_syscall_64+0xcf/0x110 [ 399.959652] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.964825] [ 399.966441] Uninit was stored to memory at: [ 399.970756] kmsan_internal_chain_origin+0x136/0x240 [ 399.975852] __msan_chain_origin+0x6d/0xd0 [ 399.980084] __save_stack_trace+0x8be/0xc60 [ 399.984399] save_stack_trace+0xc6/0x110 [ 399.988463] kmsan_internal_chain_origin+0x136/0x240 [ 399.993561] kmsan_memcpy_origins+0x13d/0x1b0 [ 399.998047] __msan_memcpy+0x6f/0x80 [ 400.001758] pskb_expand_head+0x43b/0x1d20 [ 400.005997] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.009966] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.014107] ___sys_sendmsg+0xe68/0x1250 [ 400.018161] __sys_sendmmsg+0x56b/0xa90 [ 400.022153] __se_sys_sendmmsg+0xbd/0xe0 [ 400.026205] __x64_sys_sendmmsg+0x56/0x70 [ 400.030346] do_syscall_64+0xcf/0x110 [ 400.034144] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.039319] [ 400.040930] Uninit was stored to memory at: [ 400.045249] kmsan_internal_chain_origin+0x136/0x240 [ 400.050349] __msan_chain_origin+0x6d/0xd0 [ 400.054579] __save_stack_trace+0x8be/0xc60 [ 400.058893] save_stack_trace+0xc6/0x110 [ 400.062968] kmsan_internal_chain_origin+0x136/0x240 [ 400.068089] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.072600] __msan_memcpy+0x6f/0x80 [ 400.076312] pskb_expand_head+0x43b/0x1d20 [ 400.080541] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.084508] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.088670] ___sys_sendmsg+0xe68/0x1250 [ 400.092727] __sys_sendmmsg+0x56b/0xa90 [ 400.096694] __se_sys_sendmmsg+0xbd/0xe0 [ 400.100747] __x64_sys_sendmmsg+0x56/0x70 [ 400.104889] do_syscall_64+0xcf/0x110 [ 400.108686] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.113861] [ 400.115475] Uninit was stored to memory at: [ 400.119802] kmsan_internal_chain_origin+0x136/0x240 [ 400.124902] __msan_chain_origin+0x6d/0xd0 [ 400.129134] __save_stack_trace+0x8be/0xc60 [ 400.133450] save_stack_trace+0xc6/0x110 [ 400.137504] kmsan_internal_chain_origin+0x136/0x240 [ 400.142606] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.147098] __msan_memcpy+0x6f/0x80 [ 400.150801] pskb_expand_head+0x43b/0x1d20 [ 400.155030] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.159000] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.163144] ___sys_sendmsg+0xe68/0x1250 [ 400.167213] __sys_sendmmsg+0x56b/0xa90 [ 400.171178] __se_sys_sendmmsg+0xbd/0xe0 [ 400.175245] __x64_sys_sendmmsg+0x56/0x70 [ 400.179395] do_syscall_64+0xcf/0x110 [ 400.183192] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.188381] [ 400.190000] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 400.197345] Variable was created at: [ 400.201052] __local_bh_enable_ip+0x46/0x260 [ 400.205456] local_bh_enable+0x36/0x40 [ 400.234927] not chained 200000 origins [ 400.238836] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 400.245723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.255219] Call Trace: [ 400.257807] dump_stack+0x32d/0x480 [ 400.261442] ? save_stack_trace+0xc6/0x110 [ 400.265683] kmsan_internal_chain_origin+0x222/0x240 [ 400.270779] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 400.274939] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.280303] ? kmsan_internal_chain_origin+0x136/0x240 [ 400.285577] ? __msan_chain_origin+0x6d/0xd0 [ 400.289980] ? __save_stack_trace+0x8be/0xc60 [ 400.294470] ? save_stack_trace+0xc6/0x110 [ 400.298710] ? kmsan_internal_chain_origin+0x136/0x240 [ 400.303982] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 400.308649] ? __msan_memcpy+0x6f/0x80 [ 400.312545] ? pskb_expand_head+0x43b/0x1d20 [ 400.316962] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 400.321107] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 400.325425] ? ___sys_sendmsg+0xe68/0x1250 [ 400.329655] ? __sys_sendmmsg+0x56b/0xa90 [ 400.333807] ? __se_sys_sendmmsg+0xbd/0xe0 [ 400.338037] ? __x64_sys_sendmmsg+0x56/0x70 [ 400.342362] ? do_syscall_64+0xcf/0x110 [ 400.346331] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.351709] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 400.357088] ? is_bpf_text_address+0x49e/0x4d0 [ 400.361689] ? kmsan_internal_chain_origin+0x90/0x240 [ 400.366920] ? get_stack_info+0x863/0x9d0 [ 400.371086] __msan_chain_origin+0x6d/0xd0 [ 400.375325] __save_stack_trace+0x833/0xc60 [ 400.379666] ? save_stack_trace+0xc6/0x110 [ 400.383904] save_stack_trace+0xc6/0x110 [ 400.387967] kmsan_internal_chain_origin+0x136/0x240 [ 400.393082] ? kmsan_internal_chain_origin+0x136/0x240 [ 400.398354] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 400.403016] ? __msan_memcpy+0x6f/0x80 [ 400.406898] ? pskb_expand_head+0x43b/0x1d20 [ 400.411318] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 400.415480] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 400.419796] ? ___sys_sendmsg+0xe68/0x1250 [ 400.424026] ? __sys_sendmmsg+0x56b/0xa90 [ 400.428182] ? __se_sys_sendmmsg+0xbd/0xe0 [ 400.432413] ? __x64_sys_sendmmsg+0x56/0x70 [ 400.436731] ? do_syscall_64+0xcf/0x110 [ 400.440724] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.446094] ? __msan_poison_alloca+0x1e0/0x2b0 [ 400.450783] ? __msan_get_context_state+0x9/0x30 [ 400.455537] ? INIT_INT+0xc/0x30 [ 400.458902] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 400.464275] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.468773] __msan_memcpy+0x6f/0x80 [ 400.472489] pskb_expand_head+0x43b/0x1d20 [ 400.476765] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.480764] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.484950] ___sys_sendmsg+0xe68/0x1250 [ 400.489006] ? kmsan_set_origin+0x83/0x130 [ 400.493246] ? pppol2tp_getsockopt+0x1060/0x1060 [ 400.498035] ? __msan_poison_alloca+0x1e0/0x2b0 [ 400.502706] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 400.508075] ? rcu_all_qs+0x3b/0x310 [ 400.511807] ? _cond_resched+0x59/0x120 [ 400.515783] ? rcu_all_qs+0x53/0x310 [ 400.519502] ? _cond_resched+0x37/0x120 [ 400.523470] ? __sys_sendmmsg+0x7c9/0xa90 [ 400.527620] ? _cond_resched+0x59/0x120 [ 400.531596] __sys_sendmmsg+0x56b/0xa90 [ 400.535622] __se_sys_sendmmsg+0xbd/0xe0 [ 400.539681] __x64_sys_sendmmsg+0x56/0x70 [ 400.543828] do_syscall_64+0xcf/0x110 [ 400.547625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.552811] RIP: 0033:0x457569 [ 400.556020] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.574935] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.582646] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 400.589908] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 400.597213] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 400.604490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 400.611770] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 400.619044] Uninit was stored to memory at: [ 400.623364] kmsan_internal_chain_origin+0x136/0x240 [ 400.628469] __msan_chain_origin+0x6d/0xd0 [ 400.632732] save_stack_trace+0xfa/0x110 [ 400.636785] kmsan_internal_chain_origin+0x136/0x240 [ 400.641884] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.646376] __msan_memcpy+0x6f/0x80 [ 400.650111] pskb_expand_head+0x43b/0x1d20 [ 400.654339] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.658303] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.662453] ___sys_sendmsg+0xe68/0x1250 [ 400.666538] __sys_sendmmsg+0x56b/0xa90 [ 400.670507] __se_sys_sendmmsg+0xbd/0xe0 [ 400.674558] __x64_sys_sendmmsg+0x56/0x70 [ 400.678712] do_syscall_64+0xcf/0x110 [ 400.682518] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.687693] [ 400.689310] Uninit was stored to memory at: [ 400.693628] kmsan_internal_chain_origin+0x136/0x240 [ 400.698752] __msan_chain_origin+0x6d/0xd0 [ 400.703004] __save_stack_trace+0x833/0xc60 [ 400.707348] save_stack_trace+0xc6/0x110 [ 400.711439] kmsan_internal_chain_origin+0x136/0x240 [ 400.716535] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.721036] __msan_memcpy+0x6f/0x80 [ 400.724744] pskb_expand_head+0x43b/0x1d20 [ 400.728974] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.732950] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.737091] ___sys_sendmsg+0xe68/0x1250 [ 400.741143] __sys_sendmmsg+0x56b/0xa90 [ 400.745133] __se_sys_sendmmsg+0xbd/0xe0 [ 400.749206] __x64_sys_sendmmsg+0x56/0x70 [ 400.753366] do_syscall_64+0xcf/0x110 [ 400.757161] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.762334] [ 400.763981] Uninit was stored to memory at: [ 400.768299] kmsan_internal_chain_origin+0x136/0x240 [ 400.773425] __msan_chain_origin+0x6d/0xd0 [ 400.777656] save_stack_trace+0xfa/0x110 [ 400.781718] kmsan_internal_chain_origin+0x136/0x240 [ 400.786816] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.791301] __msan_memcpy+0x6f/0x80 [ 400.795022] pskb_expand_head+0x43b/0x1d20 [ 400.799256] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.803234] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.807375] ___sys_sendmsg+0xe68/0x1250 [ 400.811449] __sys_sendmmsg+0x56b/0xa90 [ 400.815419] __se_sys_sendmmsg+0xbd/0xe0 [ 400.819490] __x64_sys_sendmmsg+0x56/0x70 [ 400.823630] do_syscall_64+0xcf/0x110 [ 400.827429] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.832620] [ 400.834233] Uninit was stored to memory at: [ 400.838549] kmsan_internal_chain_origin+0x136/0x240 [ 400.843672] __msan_chain_origin+0x6d/0xd0 [ 400.847898] __save_stack_trace+0x833/0xc60 [ 400.852220] save_stack_trace+0xc6/0x110 [ 400.856271] kmsan_internal_chain_origin+0x136/0x240 [ 400.861366] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.865854] __msan_memcpy+0x6f/0x80 [ 400.869563] pskb_expand_head+0x43b/0x1d20 [ 400.873792] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.877760] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.881902] ___sys_sendmsg+0xe68/0x1250 [ 400.885966] __sys_sendmmsg+0x56b/0xa90 [ 400.889944] __se_sys_sendmmsg+0xbd/0xe0 [ 400.894003] __x64_sys_sendmmsg+0x56/0x70 [ 400.898144] do_syscall_64+0xcf/0x110 [ 400.901937] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.907130] [ 400.908747] Uninit was stored to memory at: [ 400.913080] kmsan_internal_chain_origin+0x136/0x240 [ 400.918177] __msan_chain_origin+0x6d/0xd0 [ 400.922408] save_stack_trace+0xfa/0x110 [ 400.926464] kmsan_internal_chain_origin+0x136/0x240 [ 400.931562] kmsan_memcpy_origins+0x13d/0x1b0 [ 400.936055] __msan_memcpy+0x6f/0x80 [ 400.939765] pskb_expand_head+0x43b/0x1d20 [ 400.943995] l2tp_xmit_skb+0x5a7/0x24b0 [ 400.947961] pppol2tp_sendmsg+0x7a6/0xba0 [ 400.952100] ___sys_sendmsg+0xe68/0x1250 [ 400.956154] __sys_sendmmsg+0x56b/0xa90 [ 400.960147] __se_sys_sendmmsg+0xbd/0xe0 [ 400.964200] __x64_sys_sendmmsg+0x56/0x70 [ 400.968342] do_syscall_64+0xcf/0x110 [ 400.972138] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.977311] [ 400.978937] Uninit was stored to memory at: [ 400.983256] kmsan_internal_chain_origin+0x136/0x240 [ 400.988351] __msan_chain_origin+0x6d/0xd0 [ 400.992584] __save_stack_trace+0x833/0xc60 [ 400.996897] save_stack_trace+0xc6/0x110 [ 401.000951] kmsan_internal_chain_origin+0x136/0x240 [ 401.006055] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.010557] __msan_memcpy+0x6f/0x80 [ 401.014273] pskb_expand_head+0x43b/0x1d20 [ 401.018501] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.022469] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.026610] ___sys_sendmsg+0xe68/0x1250 [ 401.030685] __sys_sendmmsg+0x56b/0xa90 [ 401.034655] __se_sys_sendmmsg+0xbd/0xe0 [ 401.038706] __x64_sys_sendmmsg+0x56/0x70 [ 401.042850] do_syscall_64+0xcf/0x110 [ 401.046648] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.051822] [ 401.053437] Uninit was stored to memory at: [ 401.057755] kmsan_internal_chain_origin+0x136/0x240 [ 401.062871] __msan_chain_origin+0x6d/0xd0 [ 401.067100] save_stack_trace+0xfa/0x110 [ 401.071153] kmsan_internal_chain_origin+0x136/0x240 [ 401.076250] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.080738] __msan_memcpy+0x6f/0x80 [ 401.084445] pskb_expand_head+0x43b/0x1d20 [ 401.088673] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.092643] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.096782] ___sys_sendmsg+0xe68/0x1250 [ 401.100833] __sys_sendmmsg+0x56b/0xa90 [ 401.104806] __se_sys_sendmmsg+0xbd/0xe0 [ 401.108872] __x64_sys_sendmmsg+0x56/0x70 [ 401.113012] do_syscall_64+0xcf/0x110 [ 401.116807] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.121980] [ 401.123624] Local variable description: ----i.addr.i@propagate_protected_usage [ 401.130991] Variable was created at: [ 401.134703] propagate_protected_usage+0x10b/0xcb0 [ 401.139623] page_counter_cancel+0x1f3/0x2d0 [ 401.169366] not chained 210000 origins [ 401.173288] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 401.180119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.189463] Call Trace: [ 401.192056] dump_stack+0x32d/0x480 [ 401.195692] ? save_stack_trace+0xc6/0x110 [ 401.199928] kmsan_internal_chain_origin+0x222/0x240 [ 401.205054] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 401.209202] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.214564] ? kmsan_internal_chain_origin+0x136/0x240 [ 401.219875] ? __msan_chain_origin+0x6d/0xd0 [ 401.224281] ? __save_stack_trace+0x8be/0xc60 [ 401.228770] ? save_stack_trace+0xc6/0x110 [ 401.233021] ? kmsan_internal_chain_origin+0x136/0x240 [ 401.238294] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 401.242987] ? __msan_memcpy+0x6f/0x80 [ 401.246894] ? pskb_expand_head+0x43b/0x1d20 [ 401.251490] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 401.255639] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 401.259955] ? ___sys_sendmsg+0xe68/0x1250 [ 401.264183] ? __sys_sendmmsg+0x56b/0xa90 [ 401.268327] ? __se_sys_sendmmsg+0xbd/0xe0 [ 401.272555] ? __x64_sys_sendmmsg+0x56/0x70 [ 401.276875] ? do_syscall_64+0xcf/0x110 [ 401.280869] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.286239] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 401.291596] ? is_bpf_text_address+0x49e/0x4d0 [ 401.296198] ? kmsan_internal_chain_origin+0x90/0x240 [ 401.301413] ? get_stack_info+0x863/0x9d0 [ 401.305592] __msan_chain_origin+0x6d/0xd0 [ 401.309838] ? __x64_sys_sendmmsg+0x56/0x70 [ 401.314156] __save_stack_trace+0x8be/0xc60 [ 401.318520] ? __x64_sys_sendmmsg+0x56/0x70 [ 401.322845] save_stack_trace+0xc6/0x110 [ 401.326910] kmsan_internal_chain_origin+0x136/0x240 [ 401.332025] ? kmsan_internal_chain_origin+0x136/0x240 [ 401.337622] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 401.342302] ? __msan_memcpy+0x6f/0x80 [ 401.346184] ? pskb_expand_head+0x43b/0x1d20 [ 401.350585] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 401.354727] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 401.359044] ? ___sys_sendmsg+0xe68/0x1250 [ 401.363285] ? __sys_sendmmsg+0x56b/0xa90 [ 401.367425] ? __se_sys_sendmmsg+0xbd/0xe0 [ 401.371677] ? __x64_sys_sendmmsg+0x56/0x70 [ 401.376010] ? do_syscall_64+0xcf/0x110 [ 401.379981] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.385341] ? __msan_poison_alloca+0x1e0/0x2b0 [ 401.390032] ? __msan_get_context_state+0x9/0x30 [ 401.394790] ? INIT_INT+0xc/0x30 [ 401.398162] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 401.403530] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.408030] __msan_memcpy+0x6f/0x80 [ 401.411766] pskb_expand_head+0x43b/0x1d20 [ 401.416022] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.420022] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.424206] ___sys_sendmsg+0xe68/0x1250 [ 401.428262] ? kmsan_set_origin+0x83/0x130 [ 401.432507] ? pppol2tp_getsockopt+0x1060/0x1060 [ 401.437299] ? __msan_poison_alloca+0x1e0/0x2b0 [ 401.441976] ? rcu_all_qs+0x3b/0x310 [ 401.445689] ? _cond_resched+0x59/0x120 [ 401.449692] ? rcu_all_qs+0x53/0x310 [ 401.453404] ? _cond_resched+0x37/0x120 [ 401.457375] ? __sys_sendmmsg+0x7c9/0xa90 [ 401.461528] ? _cond_resched+0x59/0x120 [ 401.465506] __sys_sendmmsg+0x56b/0xa90 [ 401.469516] __se_sys_sendmmsg+0xbd/0xe0 [ 401.473587] __x64_sys_sendmmsg+0x56/0x70 [ 401.477754] do_syscall_64+0xcf/0x110 [ 401.481558] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.486794] RIP: 0033:0x457569 [ 401.490002] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.508901] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 401.516619] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 401.523885] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 401.531149] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 401.538415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 401.545701] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 401.552979] Uninit was stored to memory at: [ 401.557298] kmsan_internal_chain_origin+0x136/0x240 [ 401.562399] __msan_chain_origin+0x6d/0xd0 [ 401.566641] __save_stack_trace+0x8be/0xc60 [ 401.570952] save_stack_trace+0xc6/0x110 [ 401.575010] kmsan_internal_chain_origin+0x136/0x240 [ 401.580111] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.584600] __msan_memcpy+0x6f/0x80 [ 401.588330] pskb_expand_head+0x43b/0x1d20 [ 401.592562] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.596554] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.600709] ___sys_sendmsg+0xe68/0x1250 [ 401.604762] __sys_sendmmsg+0x56b/0xa90 [ 401.608736] __se_sys_sendmmsg+0xbd/0xe0 [ 401.612794] __x64_sys_sendmmsg+0x56/0x70 [ 401.616937] do_syscall_64+0xcf/0x110 [ 401.620730] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.625903] [ 401.627530] Uninit was stored to memory at: [ 401.631847] kmsan_internal_chain_origin+0x136/0x240 [ 401.636942] __msan_chain_origin+0x6d/0xd0 [ 401.641171] __save_stack_trace+0x8be/0xc60 [ 401.645487] save_stack_trace+0xc6/0x110 [ 401.649540] kmsan_internal_chain_origin+0x136/0x240 [ 401.654727] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.659215] __msan_memcpy+0x6f/0x80 [ 401.662928] pskb_expand_head+0x43b/0x1d20 [ 401.667158] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.671123] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.675266] ___sys_sendmsg+0xe68/0x1250 [ 401.679320] __sys_sendmmsg+0x56b/0xa90 [ 401.683292] __se_sys_sendmmsg+0xbd/0xe0 [ 401.687350] __x64_sys_sendmmsg+0x56/0x70 [ 401.691493] do_syscall_64+0xcf/0x110 [ 401.695288] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.700472] [ 401.702089] Uninit was stored to memory at: [ 401.706426] kmsan_internal_chain_origin+0x136/0x240 [ 401.711523] __msan_chain_origin+0x6d/0xd0 [ 401.715753] __save_stack_trace+0x8be/0xc60 [ 401.720071] save_stack_trace+0xc6/0x110 [ 401.724128] kmsan_internal_chain_origin+0x136/0x240 [ 401.729227] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.733720] __msan_memcpy+0x6f/0x80 [ 401.737460] pskb_expand_head+0x43b/0x1d20 [ 401.741705] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.745680] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.749822] ___sys_sendmsg+0xe68/0x1250 [ 401.753893] __sys_sendmmsg+0x56b/0xa90 [ 401.757861] __se_sys_sendmmsg+0xbd/0xe0 [ 401.761919] __x64_sys_sendmmsg+0x56/0x70 [ 401.766068] do_syscall_64+0xcf/0x110 [ 401.769864] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.775039] [ 401.776672] Uninit was stored to memory at: [ 401.781002] kmsan_internal_chain_origin+0x136/0x240 [ 401.786100] __msan_chain_origin+0x6d/0xd0 [ 401.790332] __save_stack_trace+0x8be/0xc60 [ 401.794674] save_stack_trace+0xc6/0x110 [ 401.798729] kmsan_internal_chain_origin+0x136/0x240 [ 401.803830] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.808339] __msan_memcpy+0x6f/0x80 [ 401.812049] pskb_expand_head+0x43b/0x1d20 [ 401.816283] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.820250] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.824392] ___sys_sendmsg+0xe68/0x1250 [ 401.828445] __sys_sendmmsg+0x56b/0xa90 [ 401.832413] __se_sys_sendmmsg+0xbd/0xe0 [ 401.836471] __x64_sys_sendmmsg+0x56/0x70 [ 401.840629] do_syscall_64+0xcf/0x110 [ 401.844428] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.849606] [ 401.851221] Uninit was stored to memory at: [ 401.855540] kmsan_internal_chain_origin+0x136/0x240 [ 401.860640] __msan_chain_origin+0x6d/0xd0 [ 401.864875] __save_stack_trace+0x8be/0xc60 [ 401.869191] save_stack_trace+0xc6/0x110 [ 401.873246] kmsan_internal_chain_origin+0x136/0x240 [ 401.878344] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.882833] __msan_memcpy+0x6f/0x80 [ 401.886542] pskb_expand_head+0x43b/0x1d20 [ 401.890773] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.894741] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.898886] ___sys_sendmsg+0xe68/0x1250 [ 401.902940] __sys_sendmmsg+0x56b/0xa90 [ 401.906907] __se_sys_sendmmsg+0xbd/0xe0 [ 401.910981] __x64_sys_sendmmsg+0x56/0x70 [ 401.915127] do_syscall_64+0xcf/0x110 [ 401.918919] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.924092] [ 401.925706] Uninit was stored to memory at: [ 401.930022] kmsan_internal_chain_origin+0x136/0x240 [ 401.935150] __msan_chain_origin+0x6d/0xd0 [ 401.939379] __save_stack_trace+0x8be/0xc60 [ 401.943697] save_stack_trace+0xc6/0x110 [ 401.947753] kmsan_internal_chain_origin+0x136/0x240 [ 401.952850] kmsan_memcpy_origins+0x13d/0x1b0 [ 401.957375] __msan_memcpy+0x6f/0x80 [ 401.961087] pskb_expand_head+0x43b/0x1d20 [ 401.965315] l2tp_xmit_skb+0x5a7/0x24b0 [ 401.969284] pppol2tp_sendmsg+0x7a6/0xba0 [ 401.973426] ___sys_sendmsg+0xe68/0x1250 [ 401.977480] __sys_sendmmsg+0x56b/0xa90 [ 401.981458] __se_sys_sendmmsg+0xbd/0xe0 [ 401.985512] __x64_sys_sendmmsg+0x56/0x70 [ 401.989651] do_syscall_64+0xcf/0x110 [ 401.993447] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.998623] [ 402.000252] Uninit was stored to memory at: [ 402.004588] kmsan_internal_chain_origin+0x136/0x240 [ 402.009691] __msan_chain_origin+0x6d/0xd0 [ 402.013923] __save_stack_trace+0x8be/0xc60 [ 402.018259] save_stack_trace+0xc6/0x110 [ 402.022328] kmsan_internal_chain_origin+0x136/0x240 [ 402.027450] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.031943] __msan_memcpy+0x6f/0x80 [ 402.035651] pskb_expand_head+0x43b/0x1d20 [ 402.039876] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.043847] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.047993] ___sys_sendmsg+0xe68/0x1250 [ 402.052047] __sys_sendmmsg+0x56b/0xa90 [ 402.056038] __se_sys_sendmmsg+0xbd/0xe0 [ 402.060102] __x64_sys_sendmmsg+0x56/0x70 [ 402.064250] do_syscall_64+0xcf/0x110 [ 402.068048] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.073227] [ 402.074851] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 402.082207] Variable was created at: [ 402.085914] __local_bh_enable_ip+0x46/0x260 [ 402.090334] local_bh_enable+0x36/0x40 [ 402.120736] not chained 220000 origins [ 402.124636] CPU: 1 PID: 9666 Comm: syz-executor1 Not tainted 4.19.0+ #78 [ 402.131468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.140809] Call Trace: [ 402.143397] dump_stack+0x32d/0x480 [ 402.147027] ? save_stack_trace+0xc6/0x110 [ 402.151263] kmsan_internal_chain_origin+0x222/0x240 [ 402.156361] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 402.160511] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.165920] ? kmsan_internal_chain_origin+0x136/0x240 [ 402.171196] ? __msan_chain_origin+0x6d/0xd0 [ 402.175612] ? __save_stack_trace+0x8be/0xc60 [ 402.180100] ? save_stack_trace+0xc6/0x110 [ 402.184344] ? kmsan_internal_chain_origin+0x136/0x240 [ 402.189616] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 402.194307] ? __msan_memcpy+0x6f/0x80 [ 402.198187] ? pskb_expand_head+0x43b/0x1d20 [ 402.202618] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 402.206767] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 402.211084] ? ___sys_sendmsg+0xe68/0x1250 [ 402.215313] ? __sys_sendmmsg+0x56b/0xa90 [ 402.219454] ? __se_sys_sendmmsg+0xbd/0xe0 [ 402.223686] ? __x64_sys_sendmmsg+0x56/0x70 [ 402.228005] ? do_syscall_64+0xcf/0x110 [ 402.232258] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.237626] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 402.242989] ? is_bpf_text_address+0x49e/0x4d0 [ 402.247573] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 402.252961] ? __module_address+0x6a/0x610 [ 402.257200] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 402.262561] ? is_bpf_text_address+0x49e/0x4d0 [ 402.267150] ? INIT_INT+0xc/0x30 [ 402.270525] __msan_chain_origin+0x6d/0xd0 [ 402.274766] __save_stack_trace+0xaff/0xc60 [ 402.279115] save_stack_trace+0xc6/0x110 [ 402.283184] kmsan_internal_chain_origin+0x136/0x240 [ 402.288297] ? kmsan_internal_chain_origin+0x136/0x240 [ 402.293573] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 402.298244] ? __msan_memcpy+0x6f/0x80 [ 402.302154] ? pskb_expand_head+0x43b/0x1d20 [ 402.306559] ? l2tp_xmit_skb+0x5a7/0x24b0 [ 402.310703] ? pppol2tp_sendmsg+0x7a6/0xba0 [ 402.315017] ? ___sys_sendmsg+0xe68/0x1250 [ 402.319246] ? __sys_sendmmsg+0x56b/0xa90 [ 402.323388] ? __se_sys_sendmmsg+0xbd/0xe0 [ 402.327613] ? __x64_sys_sendmmsg+0x56/0x70 [ 402.331930] ? do_syscall_64+0xcf/0x110 [ 402.335899] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.341269] ? __msan_poison_alloca+0x1e0/0x2b0 [ 402.345963] ? __msan_get_context_state+0x9/0x30 [ 402.350716] ? INIT_INT+0xc/0x30 [ 402.354084] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 402.359459] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.363960] __msan_memcpy+0x6f/0x80 [ 402.367671] pskb_expand_head+0x43b/0x1d20 [ 402.371926] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.375922] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.380096] ___sys_sendmsg+0xe68/0x1250 [ 402.384152] ? kmsan_set_origin+0x83/0x130 [ 402.388384] ? pppol2tp_getsockopt+0x1060/0x1060 [ 402.393169] ? __msan_poison_alloca+0x1e0/0x2b0 [ 402.397834] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 402.403203] ? rcu_all_qs+0x3b/0x310 [ 402.406947] ? _cond_resched+0x59/0x120 [ 402.410921] ? rcu_all_qs+0x53/0x310 [ 402.414630] ? _cond_resched+0x37/0x120 [ 402.418615] ? __sys_sendmmsg+0x7c9/0xa90 [ 402.422780] ? _cond_resched+0x59/0x120 [ 402.426753] __sys_sendmmsg+0x56b/0xa90 [ 402.430757] __se_sys_sendmmsg+0xbd/0xe0 [ 402.434821] __x64_sys_sendmmsg+0x56/0x70 [ 402.438963] do_syscall_64+0xcf/0x110 [ 402.442761] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.447964] RIP: 0033:0x457569 [ 402.451164] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.470069] RSP: 002b:00007f04d5632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 402.477789] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 402.485050] RDX: 0000000000000209 RSI: 00000000200047c0 RDI: 0000000000000004 [ 402.492332] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 402.499594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d56336d4 [ 402.506856] R13: 00000000004c374a R14: 00000000004d57b8 R15: 00000000ffffffff [ 402.514144] Uninit was stored to memory at: [ 402.518461] kmsan_internal_chain_origin+0x136/0x240 [ 402.523579] __msan_chain_origin+0x6d/0xd0 [ 402.527810] __save_stack_trace+0x8be/0xc60 [ 402.532141] save_stack_trace+0xc6/0x110 [ 402.536194] kmsan_internal_chain_origin+0x136/0x240 [ 402.541288] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.545790] __msan_memcpy+0x6f/0x80 [ 402.549515] pskb_expand_head+0x43b/0x1d20 [ 402.553744] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.557764] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.561905] ___sys_sendmsg+0xe68/0x1250 [ 402.565959] __sys_sendmmsg+0x56b/0xa90 [ 402.569927] __se_sys_sendmmsg+0xbd/0xe0 [ 402.573984] __x64_sys_sendmmsg+0x56/0x70 [ 402.578127] do_syscall_64+0xcf/0x110 [ 402.581942] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.587120] [ 402.588754] Uninit was stored to memory at: [ 402.593095] kmsan_internal_chain_origin+0x136/0x240 [ 402.598190] __msan_chain_origin+0x6d/0xd0 [ 402.602419] __save_stack_trace+0x8be/0xc60 [ 402.606735] save_stack_trace+0xc6/0x110 [ 402.610806] kmsan_internal_chain_origin+0x136/0x240 [ 402.615907] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.620412] __msan_memcpy+0x6f/0x80 [ 402.624122] pskb_expand_head+0x43b/0x1d20 [ 402.628369] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.632336] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.636477] ___sys_sendmsg+0xe68/0x1250 [ 402.640537] __sys_sendmmsg+0x56b/0xa90 [ 402.644521] __se_sys_sendmmsg+0xbd/0xe0 [ 402.648578] __x64_sys_sendmmsg+0x56/0x70 [ 402.652721] do_syscall_64+0xcf/0x110 [ 402.656528] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.661706] [ 402.663323] Uninit was stored to memory at: [ 402.667678] kmsan_internal_chain_origin+0x136/0x240 [ 402.672776] __msan_chain_origin+0x6d/0xd0 [ 402.677004] __save_stack_trace+0x8be/0xc60 [ 402.681348] save_stack_trace+0xc6/0x110 [ 402.685418] kmsan_internal_chain_origin+0x136/0x240 [ 402.690518] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.695022] __msan_memcpy+0x6f/0x80 [ 402.698747] pskb_expand_head+0x43b/0x1d20 [ 402.702978] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.706946] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.711086] ___sys_sendmsg+0xe68/0x1250 [ 402.715138] __sys_sendmmsg+0x56b/0xa90 [ 402.719106] __se_sys_sendmmsg+0xbd/0xe0 [ 402.723159] __x64_sys_sendmmsg+0x56/0x70 [ 402.727299] do_syscall_64+0xcf/0x110 [ 402.731093] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.736279] [ 402.737891] Uninit was stored to memory at: [ 402.742211] kmsan_internal_chain_origin+0x136/0x240 [ 402.747308] __msan_chain_origin+0x6d/0xd0 [ 402.751533] __save_stack_trace+0x8be/0xc60 [ 402.755844] save_stack_trace+0xc6/0x110 [ 402.759914] kmsan_internal_chain_origin+0x136/0x240 [ 402.765009] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.769512] __msan_memcpy+0x6f/0x80 [ 402.773224] pskb_expand_head+0x43b/0x1d20 [ 402.777449] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.781413] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.785556] ___sys_sendmsg+0xe68/0x1250 [ 402.789610] __sys_sendmmsg+0x56b/0xa90 [ 402.793580] __se_sys_sendmmsg+0xbd/0xe0 [ 402.797657] __x64_sys_sendmmsg+0x56/0x70 [ 402.801807] do_syscall_64+0xcf/0x110 [ 402.805611] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.810784] [ 402.812398] Uninit was stored to memory at: [ 402.816715] kmsan_internal_chain_origin+0x136/0x240 [ 402.821811] __msan_chain_origin+0x6d/0xd0 [ 402.826051] __save_stack_trace+0x8be/0xc60 [ 402.830368] save_stack_trace+0xc6/0x110 [ 402.834440] kmsan_internal_chain_origin+0x136/0x240 [ 402.839534] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.844021] __msan_memcpy+0x6f/0x80 [ 402.847727] pskb_expand_head+0x43b/0x1d20 [ 402.851953] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.855917] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.860052] ___sys_sendmsg+0xe68/0x1250 [ 402.864110] __sys_sendmmsg+0x56b/0xa90 [ 402.868085] __se_sys_sendmmsg+0xbd/0xe0 [ 402.872137] __x64_sys_sendmmsg+0x56/0x70 [ 402.876291] do_syscall_64+0xcf/0x110 [ 402.880085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.885287] [ 402.886903] Uninit was stored to memory at: [ 402.891244] kmsan_internal_chain_origin+0x136/0x240 [ 402.896342] __msan_chain_origin+0x6d/0xd0 [ 402.900574] __save_stack_trace+0x8be/0xc60 [ 402.904890] save_stack_trace+0xc6/0x110 [ 402.908971] kmsan_internal_chain_origin+0x136/0x240 [ 402.914083] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.918572] __msan_memcpy+0x6f/0x80 [ 402.922306] pskb_expand_head+0x43b/0x1d20 [ 402.926533] l2tp_xmit_skb+0x5a7/0x24b0 [ 402.930530] pppol2tp_sendmsg+0x7a6/0xba0 [ 402.934686] ___sys_sendmsg+0xe68/0x1250 [ 402.938740] __sys_sendmmsg+0x56b/0xa90 [ 402.942707] __se_sys_sendmmsg+0xbd/0xe0 [ 402.946761] __x64_sys_sendmmsg+0x56/0x70 [ 402.950898] do_syscall_64+0xcf/0x110 [ 402.954693] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.959870] [ 402.961484] Uninit was stored to memory at: [ 402.965797] kmsan_internal_chain_origin+0x136/0x240 [ 402.970893] __msan_chain_origin+0x6d/0xd0 [ 402.975127] __save_stack_trace+0x8be/0xc60 [ 402.979440] save_stack_trace+0xc6/0x110 [ 402.983509] kmsan_internal_chain_origin+0x136/0x240 [ 402.988622] kmsan_memcpy_origins+0x13d/0x1b0 [ 402.993127] __msan_memcpy+0x6f/0x80 [ 402.996835] pskb_expand_head+0x43b/0x1d20 [ 403.001064] l2tp_xmit_skb+0x5a7/0x24b0 [ 403.005038] pppol2tp_sendmsg+0x7a6/0xba0 [ 403.009181] ___sys_sendmsg+0xe68/0x1250 [ 403.013245] __sys_sendmmsg+0x56b/0xa90 [ 403.017211] __se_sys_sendmmsg+0xbd/0xe0 [ 403.021261] __x64_sys_sendmmsg+0x56/0x70 [ 403.025400] do_syscall_64+0xcf/0x110 [ 403.029198] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 403.034382] [ 403.036000] Local variable description: ----flags.i.i.i.i@__local_bh_enable_ip [ 403.043343] Variable was created at: [ 403.047088] __local_bh_enable_ip+0x46/0x260 [ 403.051507] local_bh_enable+0x36/0x40 23:13:06 executing program 1: 23:13:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) 23:13:06 executing program 3: 23:13:06 executing program 0: 23:13:06 executing program 5: 23:13:06 executing program 4: 23:13:06 executing program 4: 23:13:06 executing program 3: 23:13:06 executing program 5: 23:13:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) 23:13:06 executing program 0: 23:13:06 executing program 4: 23:13:06 executing program 1: 23:13:07 executing program 3: 23:13:07 executing program 5: 23:13:07 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:07 executing program 0: 23:13:07 executing program 4: 23:13:07 executing program 1: 23:13:07 executing program 3: 23:13:07 executing program 5: 23:13:07 executing program 1: 23:13:07 executing program 4: 23:13:07 executing program 0: 23:13:07 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:07 executing program 5: 23:13:08 executing program 3: 23:13:08 executing program 0: 23:13:08 executing program 4: 23:13:08 executing program 1: 23:13:08 executing program 3: 23:13:08 executing program 5: 23:13:08 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:08 executing program 0: 23:13:08 executing program 4: 23:13:08 executing program 1: 23:13:09 executing program 5: 23:13:09 executing program 3: 23:13:09 executing program 0: 23:13:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:09 executing program 5: 23:13:09 executing program 4: 23:13:09 executing program 1: 23:13:09 executing program 3: 23:13:09 executing program 0: 23:13:09 executing program 4: 23:13:09 executing program 5: 23:13:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:10 executing program 3: 23:13:10 executing program 1: 23:13:10 executing program 5: 23:13:10 executing program 4: 23:13:10 executing program 0: 23:13:10 executing program 1: 23:13:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:10 executing program 3: 23:13:10 executing program 5: 23:13:10 executing program 4: 23:13:10 executing program 1: 23:13:11 executing program 0: msgrcv(0x0, &(0x7f0000000140)={0x0, ""/43}, 0x33, 0x0, 0x0) 23:13:11 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) 23:13:11 executing program 4: 23:13:11 executing program 1: 23:13:11 executing program 5: 23:13:11 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:11 executing program 0: 23:13:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2e2) 23:13:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001b40)={0x0, 0x5, 0x7, 'queue1\x00'}) 23:13:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x0, 0x41, "007ff095b08247c43f043ee881b0e7b4ef05136865454bbbc208b6585fc0b65797fa09206a689609d937d6521fe8bae84ad94661e87a39f64321af692108734ce8"}) 23:13:12 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000080), 0x2cb) recvmsg(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=""/69, 0x45}, 0x0) 23:13:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:12 executing program 1: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) 23:13:12 executing program 3: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x368, 0x6d, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 409.599731] device veth0_to_bridge entered promiscuous mode [ 409.632707] device veth0_to_bridge left promiscuous mode [ 409.711472] device veth0_to_bridge entered promiscuous mode [ 409.730354] device veth0_to_bridge left promiscuous mode 23:13:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/245, 0xf5}], 0x3, &(0x7f0000001680)=""/154, 0x9a}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 23:13:13 executing program 3: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x368, 0x6d, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 23:13:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 410.270582] device veth0_to_bridge entered promiscuous mode [ 410.317586] device veth0_to_bridge left promiscuous mode 23:13:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x3}) 23:13:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001b40)={0x0, 0x5, 0x7, 'queue1\x00'}) 23:13:13 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) pwritev(r0, &(0x7f0000001a40)=[{&(0x7f00000006c0)="19", 0x1}], 0x1, 0x0) 23:13:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) close(r0) 23:13:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 23:13:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0/bus/file0\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000700)=0xe8) connect$packet(r0, &(0x7f0000000740)={0x11, 0x16, r1, 0x1, 0x3, 0x6, @local}, 0x14) mkdir(&(0x7f00000005c0)='./file0\x00', 0xfffbffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x368, 0x6d, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 23:13:14 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 410.974970] device veth0_to_bridge entered promiscuous mode [ 410.998947] device veth0_to_bridge left promiscuous mode 23:13:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000006, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", &(0x7f0000000300)=""/41, 0x68}, 0x28) 23:13:14 executing program 3: syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x200) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000200)="ba053f5bd8ba6a241f0fc3fb915cd62a4f3a51a292eb63d70b6bd3ece971425e1783bea49f5c363a36e5e2c72d12c4464ca8e0e63a18e0e46b2b22b6142f6d2ffdc1910085804db5191c9557859f23742fed098b56bb23bb458b511bcff2330fe1598164273c4ad8ef4a71224df801c9be7778e7aa09ead948c718ee673f54b1e0ed81c8c2ae66fb578e5905b3b92a0d93b495b38c72f6d8372482353c0adc59153d2d6637b1b6083c79f93aec7af1de762bc508c1af33a49fbd618f314fb50e0d369329842cf8d4a4cffa5bbe107bb298cbb7224098cff20aa5cc8eb944c54fc3a4e576f38c78693ae362fe075943372140930e50d4906752e4009ecc6d8fe409c00ae2f10477712868667287b3482669bc994f9d8e699664d155c37f4c1027bed1e2e198334dbac4ee3fe25eb82d11537d8ce840455055c4df9490b7cb977f80155eb0378e777caf7f63149a1e620a2686b07473385a56286d6a1df4619ff455306090a536ae705dddb120b40fd1573f90cf287e0038b0c2e4d58b59e3848910539dc46842d02839a15c59040a62179cfceb8c76e4bc4ecf01c60d241a0833eb6deda1ee9a305bb13d9f802bae76fa764252b4be155706ebf7ee040132fc7718979c32fb0cd982637706353f179859f1bccb05c899d50566f1fe57923a49b7772ccd3b0a741f722bc21accaa280bd1bfaf48dc280b393b320bec0bc19cae5f5ce9b06c19afe15a4c7b1729694c987a0be725bdf5cf8a8c3496821de1795c2b14c62c7cb20956448b18dba37812779903eeb5e8af0af5209c18c79c4c395f35fb2e58db56edd33856a5d076d36179e4dbdf57880c34884ce3e30668e6792a1c1065e2882fde5d7966ec68fc79ca8bee2fa6d2f27b080dbadb30ca9a92f66ee9dbfe356f85b53a6e95a4ac029d1e29d031f03ad8dd48273c535c58718971395fd82efd710dc499d66a64594cac488e3821f5f9435c115675e602596f735fbe5853f8a779f009ed47515d1a3bfd02fcbaef917e463ce5e622497c666d7494c8784673848eb42f952d94bff7b211bc47dc6b0ddf5aae004d5796adf756d78681210eed16808ddf1375b42c46d886b27a248b21f2721c4d538117ae0a49791f5ba5b09f10aaeaeda42f5c2ef1412e5c2cf5f7cbe86d1581fb61ea58a795e73e613a3de865a97428733004ff16cff6907081768e3ca9b0e654251c56439ce3624582a4e5c1498d84a5b0b549568e1c2fa093d9a9b57f179875c24bbbafe74989f249bf11886a25c9c3d2a91b132952bf08c16767e676b4d50afe4e2a3463ce349daae68fa1716655c5d6bcb770f28feb7c5fe688a270aa671ac243d4814ead4c3ce46881869f790b81b35297230d7f45b7fee82320267929b9b02c26e8741e818c0c0e8c56e7890d0e1fc4a6d66a78d7ab657532fffb72717d642f5bcc1bcc1af0334a58aecef4de5bfe94362e23054e81f86460a1d496e5e6ff6ca330480b832a93bc2753ed7ff5cfb7f81ee44a6111784d627ca5d944bff20a205a86847b7813a322c407f2e135f32723042551bdf30f20ea86c58eb4ae63a63bf00ad76ba4efcc6b27fb55589240a1a13480ade97cdd5169caa3b6191811d94738673707795bb459052667896edc00da275f28f9c023f53875f937741aea60ea71b75f62b2f504efc0433c63880d61a31ea007c5481979893e18ada5efa2a9bac31f576cb9088cc5c811d14f08e181aeabd1fa18393b6b8b3a7301a886c65de41d32b504ed2e92fc1e92a6dbb4984e54d92986924852bdfd48653430b049617b1c175fdbb236839372a40cbf0c47e7c888a878635b531129449c0be04b534200eda6a182c4a6d4f00bd992dd842d375d86de2e4a073e19253b6d8fd3651719345e8c59de298abfc0e70a5908d9ed87c9170c9740c3557fb1021fb5f32e8c89d51b5bfdd83f151d0d0007526ec82318d382c9918ae6c97aed5d9917a2ab135850ac7efacc44218ef079758da3be476d0739799593336e528041733be884cfc65981bc47675bfa60dd9e1f6e5fe84aee5f0040adefd3336b932c69f323b8ae2ab7e7bb846a0acabe5e4b88a6324ba058f310513c860d4de1357b482969c4ca2c3d5e931a840a82fa7d13a599cb6b596f78f74685740dae95fae295477be6b2e679893cf7bb30f3394d9ebacc89f5870618ec0fa64a58121d0c36e34f74dacf8bbc49d655c59f3fbb93afe3151661fea6da23fb25e739c28ff8113153bb9734595e46fafdb0d6134ca67b22f79ce184dbbf0ac904308a8ffff2c0e27dca863e1ce29633d9b231f69fd85fd013934e2d20c0033e614b59377a7eafd49d3854c890bb04cad414b57a86a1414b180c72620c7634f7df0b4491840a9552b94d96c868c88dbdf40ea7d7901787345470dcacf3cb7ed3793a767be5e6a22dd31cc38f86df6ad8ac52df9f9e928e81c185635a4f5f3894a400485b34880201a1be4324e7905a4759b5e1c2a6e75ce3d19746c4a5539c878cdba700bb70774b1ab3b5cc43e13057a93769119e553d1ef8cf894756051a91023fd4a97c77654c60bc2c9e41ca38437b6052e4d7e61e083258555b7e368d44ef8e000acaf606b08b9cdcbfe3c30cd9001215ccbead8ab70d0753e6893287cc8d46039410950caf52a8e64200f8d66aa5b7670d237297cda189126e06a58a0f9634054320e4746ab05ee6912e0e66a5c025f12e28855741b221668c25179a3214db53ce9fc10fd01e7e248b966a028ed6089604526b15ee5b933b1e9280d525feb863278892363d2783fd65810e277bacb9509489e5edf59b9c40db6208a8fc62931c598dfc2ca5246d98bcabfcdd3260e922d64caefe90a56006b12c2109f0db8d243442e85a97cb56660d1d2710e3eee8d608dd5a8fe5ab02fea32c4421dd467c6bd5a4cabf3041b17eb4ff3ec19efc0d0a9308c8000c7eab5c8491521c74c989ad341a532e4772f7238298dccaa8c9fa11fb87de9ca07bf7f54c37da0a924d0dc1abc7a143d133f3ba3a5f136f7e87bd393ce1af4fd939482fed5bed077db5fdc9841a5956e6417c599d2a507ce0d43573c1d6cfc78a81125d8d6b520a8b8cfae7812639b7abfd4955bfea6b1197e3ebee9f751be4076d0003004aa13407be609895f6124d92b9e2d1570028b3aed82faf03ffe8634ad076b01e26854c88c705f0ca1239b98b2ef064d09767d27c11170da2fbcf4745b297d0a432e0f3bc3ea57aa6e1e100b8de3c286e79badefefe8365b44bca1dae08a70259d89cfa8a1e6564bbee808763026e928582971cce30251c0a68324c80b6a50bce1337d2669f44683e1c0ac9a2cbc2cf4414ec9a762aab4b541b763600dfb8bcc8d63564578370facd6bff29b65431c3392d6831b3cab71f5f0104bf3ca1bd3b104079a471be5c66b6b447fbb09565e771b7933082de08e2a16a3962893e97d7d7d4b8956c6fd4403eb8dd8052265dd14150782b0b9ea2c7a62fb1f0c5b2512fdff271389fdee680ff3582cb36af534204f8210cd9be256ebb088ddfef1ccb50d8fd8b3749e2dd72cfe7745213a9b708de2d8c2a0dadb83418506a7b6bac947d8ae73199e75764e6ad630a9f66c3d622670f356ec9c5d4a9cc12f6d05c4c195abaee4edfdcb661aaee4682074531060d8368ff17a7436ff9eea0dc762200424af48e2a937f614c7fa90794d871ee4e62b6caf169334fc21bb5ec1a9a6f02d173fb651edd75034edf8d3d750e025645c5daf0e618533f5978d827fbe4d5b952d4f07d4f46782f358cc32ac03501ed1f713a4f0118a17ec9ef6f7eb4547a5bf1ea79c4d308fa0b8b3cfcf49981d480621970b39e605e6681d0c81c547dfc491caa091b5b0a78195f4e8e47728224b86c8c8ff262f0bf5c172362af855b057fdf409df1ff9ec1d688aa88155e74216c75697a29796c0c7f569e489eaefed425074474303818b708953a5b52081578b5025468f6f9c97dd346045cc948120c66c7d66d08433d2c295e699fdf60888a3e1e715ae3a1fdb70c6565aad6aaccd8bce2243308b487deac34390c275a68a4136513e25c61a7a5976fee7a784eda8a08bef39597beaea8d8c968fc96edd279ab2a3fedb6431cdbf969032b575a2317aa599f9e76eb7137b8a3156758ae5fe7444bd857879a1d769e4c40f4f57641eba7f9ee85712167b7e6e7080b7a48561f3d2a36fe655e4932a656e057732a99608c3c2aefa518f5e4cf614e3bc7460ad12d0d55d7714d0fd42f38bf4f9307ae24e1f37dcc0897d4af1cc3ced8aaab35f06a6651f73122817cc9b92914c278e7b3b8444c3d33bfe6dbe0c09456261f012431f74895ec5b43b65acf3b690c43cdc7cae5e147d92e98a864534639de947ec260a9cbce8e141dfb52971a722dbe50a5558ef76ee61bebdf957f344c1e29bd758fc4c151c033c23597e14d8a76a2c6153890effa14f548fe097d1c528518b59e612b2503ca0587747c81967bf2674a1f9205e52e3c9520d23da3574aad5f9f551db7dc079e8e92b4a6b291b544cfd15f2a8f4066821b197fc31df64789cee82f3a09afb977db54b779019df42614b759f0b0269b1c42d44d8186e41dcd812defa552161bd6be6b343e483a7537ac1bc32402fed226b7c63f0abcfbe910c9099b44532eccce203853790b334c8cfe2590e254df15cb391d8d0805b51ead434c6815d2b400db941e4c5cb088b0aba31b4b40dc0064f0f7d45d16a85d83db8f6786345674d4a9caeef5bf87b6f5be3999fea2a047bccd2dd6f484fc2030d1a1e0bc1abf0920e852276a3634c8d3fa1cfde37dd438f189d8ebcacbd13c9f938c1b7b178df8e6f3de731c450dd9e59a97251b6537982e470732b1d2e62175db7bf1893d0360c9d0394d2c37a24d2ef47a375c3841ebe5bc266d3fe9dfbfb80fac73e4c43d719cc72ac0b0eeb1976f966358f0ed2e9f477726842d80e2fd33e2f98d6283309ddcdf381ecdb784b13c77f099d74845f18d0647f523d753af932496935f0ffd5a856c442e648b4bb0f16051b5b09432d9a0ee36d81e3b8117ad94e31d62bb18534573156cc3e4e85d284946a3d9a540c25a18d078edaeabec50f6b575495996b372b2ffcc0495d6f7f18a89b3497ab1227c6b7e7a0bb98e5f60a0f4290464f39878df4fa99fadae10e2a8b854990067fc3de0ce2e072aca8beef2fc412fdac569254dcc8f4599063a49e36154e660f9d4d2158c86d7708b47b87a195985c43006274264038449ed584e342b204718347246e4bb19e3ac6cee6c57b1f0c720f992ac197e5b0520366a365bd5c1ac74b43785921029ca2e0b041d874b01b91b1231694cfe9a00ae175df09b2c182067695ed972ff0b5c700ece5f9c1746b68e254c8f1b98fc9bd66909f462f5f5bdee4f63dda185c3f18181933abf4881efba44eb517c42ed5120d8763dc24b3c0e13e2b370884763ee49c9062aaa7636492cbc5b98188405b735e82124fc1279994b5768da2a783ed6c091bf08ba9325f79da97ef19da3d1f417ecdaec5ec6850b59440864b2fcddb2a563cdbe26f421696bb568d7d1fe1b8bb8b37b36910d47820bdb295a1c222aa6eef78a16d84be7883cd4cd7e9d0381455e268106f11417fb260bedd354195888806a1d29f015e83b0621545b990b264f17743fe98955956d9c59eb1c84054826d65dd6fdc27751d9396d9a2b63052d6ed707f19fb4") socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b70000000e000000950000000000000017acc2c9d008a9c294541b24c870d90a5e0dc9e5293328cb7f2bea26de65b312dd8514c26e19b76ef2a8e2ed5d6fe3626bc7dbf4b3090fb5932a89db"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x0) 23:13:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 411.484028] device veth0_to_bridge entered promiscuous mode [ 411.533170] device veth0_to_bridge left promiscuous mode 23:13:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001b40)={0x0, 0x5, 0x7, 'queue1\x00'}) 23:13:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000038c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/245, 0xf5}], 0x2, &(0x7f0000001680)=""/154, 0x9a, 0x10000}, 0x2000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 23:13:14 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) dup2(r0, r1) 23:13:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x9) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)}], 0x1, 0xb) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x100000000, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 412.009942] device veth0_to_bridge entered promiscuous mode [ 412.069055] device veth0_to_bridge left promiscuous mode 23:13:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) dup2(r0, r1) [ 412.534549] device veth0_to_bridge entered promiscuous mode 23:13:15 executing program 1: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000180)='*lo\x00'], &(0x7f0000001440)=[&(0x7f0000001280)='%/@%\x00', &(0x7f00000012c0)='{#security-\x00', &(0x7f0000001300)='eth1\x00', &(0x7f0000001340)='&ppp1[/}){\x00']) ptrace(0x10, r0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000001480)) tkill(r0, 0x1c) [ 412.589196] device veth0_to_bridge left promiscuous mode 23:13:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x9) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)}], 0x1, 0xb) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x100000000, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:13:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) dup2(r0, r1) 23:13:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 413.122960] device veth0_to_bridge entered promiscuous mode 23:13:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000380)={'bcsh0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) [ 413.186123] device veth0_to_bridge left promiscuous mode 23:13:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001b40)={0x0, 0x5, 0x7, 'queue1\x00'}) 23:13:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:16 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="c1ff0f000000000000e5f700ac14140deb10c100005b6e765e95637e8921f6053b58289405bfee4716753d00ad05da36e342b9a69a10a7901a8bdf6a000062c8d81ab8e54af069470c", 0x49}], 0x1}, 0x0) [ 413.717094] device veth0_to_bridge entered promiscuous mode 23:13:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x1000000000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000200), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev={0xfe, 0x80, [0x20000380, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) r2 = gettid() r3 = perf_event_open$cgroup(&(0x7f0000000840)={0x1, 0x70, 0x9, 0x493, 0x80000000, 0x1, 0x0, 0xfd87, 0x0, 0x1, 0xffffffff, 0x1, 0x3, 0x6, 0x8, 0x3f, 0x1, 0x9, 0x8, 0x6, 0x2, 0x10, 0x3ff, 0x80000001, 0x4d, 0x2, 0x6, 0x0, 0x9, 0x5, 0x2, 0x5, 0x0, 0x209f60a4, 0x9, 0x2de41c4a, 0xfff, 0x8, 0x0, 0x1, 0x4, @perf_bp, 0x2008, 0x3, 0x200, 0x0, 0x59, 0x4, 0x1f}, 0xffffffffffffff9c, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x7, 0x10001, 0x8, 0x0, 0x0, 0x2, 0x4, 0x100000000, 0x7, 0x8, 0x1000, 0x401, 0x8, 0x7, 0x2, 0xfffffffffffffffa, 0x3612eb8b, 0x6, 0x3, 0x3, 0x20, 0x5, 0x4, 0x1, 0x1, 0x2, 0x7ff, 0x897, 0xa6, 0x5, 0x6, 0xf954, 0x7fffffff, 0x412, 0x3, 0x0, 0x6, 0x6, @perf_config_ext={0x8001}, 0x10, 0x0, 0x400, 0xf, 0xfc8, 0x1fc, 0x9}, r2, 0xc, r3, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x10000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000300)) close(r0) [ 413.761120] device veth0_to_bridge left promiscuous mode 23:13:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190710003fffffffda0602000080ff0f0001040000040d000a00000000000000000001", 0x29}], 0x1) 23:13:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0/bus/file0\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000700)=0xe8) connect$packet(r0, &(0x7f0000000740)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) mkdir(&(0x7f00000005c0)='./file0\x00', 0xfffbffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x368, 0x6d, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='minix\x00', 0x200020, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) getpgrp(0x0) 23:13:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 414.339123] device veth0_to_bridge entered promiscuous mode [ 414.372021] device veth0_to_bridge left promiscuous mode [ 414.407202] netlink: 'syz-executor1': attribute type 10 has an invalid length. 23:13:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000038c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=""/154, 0x9a}, 0x2000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 23:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000004c0)) [ 414.454120] netlink: 'syz-executor1': attribute type 10 has an invalid length. 23:13:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) 23:13:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) 23:13:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:18 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 415.047072] device veth0_to_bridge entered promiscuous mode 23:13:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendfile(r0, r1, &(0x7f0000000480), 0x200000008001) [ 415.088557] device veth0_to_bridge left promiscuous mode 23:13:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev}, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000740)=[{0x10, 0xbf}], 0x10, 0x8000}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000004100)={&(0x7f0000003e00)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e80)=""/76, 0x4c}, {&(0x7f0000003f00)=""/21, 0x15}, {&(0x7f0000003f40)=""/178, 0xb2}], 0x3, &(0x7f0000004040)=""/165, 0xa5}, 0x2) 23:13:18 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:18 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) write$UHID_CREATE(r1, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/96, 0x60, 0x81}, 0x120) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000440)=@nl=@proc, 0xfffffffffffffffd, &(0x7f0000000500), 0x0, &(0x7f00000004c0), 0x0, 0xc}, 0x20000000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 23:13:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 415.413253] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 415.421991] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 415.492868] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 415.501642] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 23:13:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) [ 415.770706] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.797260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 23:13:18 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000001c0)=0x2) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 23:13:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 415.957089] binder: 10135:10138 Acquire 1 refcount change on invalid ref 0 ret -22 [ 415.965332] binder: 10135:10138 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 416.063961] binder: 10135:10138 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 416.090513] binder: 10135:10138 Acquire 1 refcount change on invalid ref 0 ret -22 [ 416.098544] binder: 10135:10138 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 23:13:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000003c0)={r9, 0x0, 0x1}) 23:13:19 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) write$UHID_CREATE(r1, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/96, 0x60, 0x81}, 0x120) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000440)=@nl=@proc, 0xfffffffffffffffd, &(0x7f0000000500), 0x0, &(0x7f00000004c0), 0x0, 0xc}, 0x20000000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 23:13:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) [ 416.539219] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.572809] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 416.694405] binder: 10161:10165 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 416.732528] binder: 10161:10165 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 23:13:19 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)="47ff4c00", 0x0, 0x99, &(0x7f0000ce7000)=""/153}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffff7f00000000, 0xe, 0x34, &(0x7f00000000c0)="3b1163cd78b89e1ba101df682bb0", &(0x7f00007ec000)=""/52}, 0x28) 23:13:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, 0xffffffffffffffff) 23:13:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast2}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000c80)={0x1, 'ep0\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x40, 0x0) fcntl$setstatus(r0, 0x4, 0x6400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000003c0)={0x0, 0x1, 0x1c}) shutdown(r1, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x4000, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000500)) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000001c0)=0x2f3) openat$cgroup_type(r3, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) unshare(0x40000000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x0, 0x0, 0x2, 0x400}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000580)={0x9, 0x80000000, 0x7}) clone(0xfffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:13:20 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000001c0)=0x2) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 23:13:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000001c0)=0x2) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) [ 417.691031] device veth0_to_bridge entered promiscuous mode [ 417.764394] device veth0_to_bridge left promiscuous mode [ 417.905197] IPVS: ftp: loaded support on port[0] = 21 23:13:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x1}) 23:13:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x802}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00'}) [ 418.606944] IPVS: ftp: loaded support on port[0] = 21 23:13:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000001c0)=0x2) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 23:13:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 419.193785] device veth0_to_bridge entered promiscuous mode [ 419.201304] device veth0_to_bridge left promiscuous mode 23:13:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast2={0xff, 0x2, [0x5000000, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x1, 0x3}, 0x2b) 23:13:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)) 23:13:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 419.746068] device veth0_to_bridge entered promiscuous mode 23:13:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x101281, 0x0) close(r0) [ 419.811106] device veth0_to_bridge left promiscuous mode 23:13:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000001c0)=0x2) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 23:13:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r4, 0x40044591) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r5, r6) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000380)) 23:13:23 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) dup2(0xffffffffffffffff, r0) 23:13:23 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/120, 0x78}], 0x4, &(0x7f0000001740)=""/110, 0x6e}, 0x40) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2, 0x1000, &(0x7f0000000100)="bcab", &(0x7f0000000740)=""/4096}, 0x28) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000700), 0x4) gettid() 23:13:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000300083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) [ 420.496196] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 420.513279] device veth0_to_bridge entered promiscuous mode [ 420.543643] device veth0_to_bridge left promiscuous mode 23:13:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:23 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x5, 0x7fff, 0x6, '\x00', 0x8}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r3, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x44}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)=ANY=[], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) 23:13:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:24 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0x7fff) [ 421.262910] device veth0_to_bridge entered promiscuous mode [ 421.342527] device veth0_to_bridge left promiscuous mode 23:13:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:24 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa5e0936e7f46bf5c) fchmodat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x7) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000680)={0xfffffffffffff800, 0x741}) kcmp(r2, 0x0, 0x0, r1, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000540), &(0x7f0000000640)=0x4) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x11, 0x2, {0x20}}, 0x14) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 23:13:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)="2f2a726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157524c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) 23:13:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:25 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r4, r5) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x40}) 23:13:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 422.314482] device veth0_to_bridge entered promiscuous mode [ 422.360259] device veth0_to_bridge left promiscuous mode 23:13:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) prctl$intptr(0x800000001d, 0xfffffffffffffbac) prctl$getreaper(0x40400000000001e, &(0x7f0000000040)) syz_execute_func(&(0x7f0000000200)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010196f04cd04cd0f2902") 23:13:25 executing program 0: r0 = memfd_create(&(0x7f0000c19ff0)='^-\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0xc08c5335, &(0x7f0000000000)) 23:13:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:26 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 423.134732] device veth0_to_bridge entered promiscuous mode [ 423.187221] device veth0_to_bridge left promiscuous mode 23:13:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 23:13:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5451, &(0x7f00000000c0)) 23:13:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) r1 = dup2(r0, r0) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x88) 23:13:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r4, r5) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4) [ 423.822613] device veth0_to_bridge entered promiscuous mode [ 423.864280] device veth0_to_bridge left promiscuous mode 23:13:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 23:13:27 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000280)="6e72300100"}, 0x30) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) write$cgroup_int(r0, &(0x7f0000000000), 0x12) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000140)) 23:13:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 424.489831] device veth0_to_bridge entered promiscuous mode 23:13:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000180)=0xfdfd, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) [ 424.614728] device veth0_to_bridge left promiscuous mode 23:13:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000004000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00000000000000ffffffffffff00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffff0a1b000000000000aaaaaaaaaa0000000000000000007000000070000000a0000000415544495400000000000000000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0x248) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) 23:13:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x80000000}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4000, 0x1000007, 0x2013, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000002cc0)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) 23:13:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000880)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000900)) socket$kcm(0xa, 0x3, 0x3a) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) close(r0) 23:13:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 425.222890] device veth0_to_bridge entered promiscuous mode [ 425.257282] device veth0_to_bridge left promiscuous mode 23:13:28 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00003e1000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)) read(r0, &(0x7f0000000400)=""/100, 0x64) r2 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 23:13:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r4, r5) getpeername(0xffffffffffffffff, &(0x7f0000001c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000001c0)=0x80) 23:13:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x8, 0x209e22, 0x8000000001}, 0x2c) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x8, 0x4, 0x0, 0xffffffffffff0000, 0x0, 0xc0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x7, 0x55, 0x0, 0x9, 0x1, 0x2, 0x0, 0xfffffffffffffff8, 0x80000000, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xf6c7, 0x8001, 0x7, 0x2, 0x0, 0x7f, 0x7ff, 0x6, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x4000, 0x400, 0x3, 0x0, 0x120000000000, 0x66, 0x10001}, r2, 0xd, r1, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 23:13:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:29 executing program 0: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) 23:13:29 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)) 23:13:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xb2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:13:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) dup2(r4, r5) 23:13:30 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x40600) pwritev(r0, &(0x7f00000013c0), 0x0, 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:13:30 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)) 23:13:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() clock_adjtime(0x0, &(0x7f0000000040)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) 23:13:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:13:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 23:13:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:31 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffff98) fcntl$addseals(r0, 0x409, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) 23:13:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x24) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}], 0x4000133, 0x0) [ 428.792999] device veth0_to_bridge entered promiscuous mode [ 428.827635] device veth0_to_bridge left promiscuous mode 23:13:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet6(r0, &(0x7f0000000100), 0xacdbf90f7b4ecd63, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0x6453af3d52000000], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) 23:13:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:13:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:32 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) [ 429.409912] device veth0_to_bridge entered promiscuous mode [ 429.459297] device veth0_to_bridge left promiscuous mode 23:13:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) dup2(r0, r1) [ 429.589929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 429.596912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:13:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:13:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 23:13:33 executing program 0: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000bc0)=""/11, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 23:13:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 430.273878] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:13:33 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 23:13:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:33 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 23:13:34 executing program 0: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000580)=""/248) 23:13:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 431.815761] device veth0_to_bridge entered promiscuous mode [ 431.831822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.856329] device veth0_to_bridge left promiscuous mode 23:13:35 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 23:13:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 23:13:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:35 executing program 1: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0xc080) [ 432.285488] device veth0_to_bridge entered promiscuous mode [ 432.334827] device veth0_to_bridge left promiscuous mode [ 432.402410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.426996] not chained 230000 origins [ 432.430929] CPU: 1 PID: 10633 Comm: syz-executor3 Not tainted 4.19.0+ #78 [ 432.437867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.447237] Call Trace: [ 432.449853] [ 432.452039] dump_stack+0x32d/0x480 [ 432.455705] ? kmsan_internal_chain_origin+0x136/0x240 [ 432.461018] kmsan_internal_chain_origin+0x222/0x240 [ 432.466159] ? ip6_finish_output+0xc13/0xca0 [ 432.470607] ? __do_softirq+0x721/0xc5d [ 432.474617] ? do_softirq_own_stack+0x49/0x80 [ 432.479146] ? __local_bh_enable_ip+0x228/0x260 [ 432.483858] ? _raw_spin_unlock_bh+0x4b/0x60 [ 432.488333] ? __fib6_clean_all+0x79b/0x8d0 [ 432.492691] ? fib6_clean_all+0x90/0xa0 [ 432.496692] ? rt6_sync_up+0x1a4/0x200 [ 432.500607] ? addrconf_notify+0x2c33/0x6200 [ 432.505055] ? raw_notifier_call_chain+0x13d/0x240 [ 432.510018] ? netdev_state_change+0x1b0/0x2f0 [ 432.514627] ? do_setlink+0x1df2/0x5d30 [ 432.518635] ? rtnl_newlink+0x20c8/0x3450 [ 432.522809] ? rtnetlink_rcv_msg+0x1148/0x1540 [ 432.527422] ? netlink_rcv_skb+0x394/0x640 [ 432.531682] ? rtnetlink_rcv+0x50/0x60 [ 432.535594] ? netlink_unicast+0x1699/0x1740 [ 432.540034] ? netlink_sendmsg+0x13c7/0x1440 [ 432.544499] ? ___sys_sendmsg+0xe68/0x1250 [ 432.548763] ? __se_sys_sendmsg+0x305/0x460 [ 432.553104] ? __x64_sys_sendmsg+0x4a/0x70 [ 432.557374] ? do_syscall_64+0xcf/0x110 [ 432.561381] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.566767] ? netlink_sendmsg+0x13c7/0x1440 [ 432.571199] ? ___sys_sendmsg+0xe68/0x1250 [ 432.575462] ? __se_sys_sendmsg+0x305/0x460 [ 432.579813] ? __x64_sys_sendmsg+0x4a/0x70 [ 432.584093] ? do_syscall_64+0xcf/0x110 [ 432.588096] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.593511] ? get_stack_info+0x863/0x9d0 [ 432.597719] __msan_chain_origin+0x6d/0xd0 [ 432.601988] ? do_setlink+0x1df2/0x5d30 [ 432.605989] __save_stack_trace+0x8be/0xc60 [ 432.610377] ? do_setlink+0x1df2/0x5d30 [ 432.614387] save_stack_trace+0xc6/0x110 [ 432.618484] kmsan_internal_chain_origin+0x136/0x240 [ 432.623613] ? run_timer_softirq+0x55/0xa0 [ 432.627907] ? rtnetlink_rcv_msg+0x1148/0x1540 [ 432.632524] ? kmsan_internal_chain_origin+0x136/0x240 [ 432.637827] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 432.642591] ? __msan_memcpy+0x6f/0x80 [ 432.646518] ? pskb_expand_head+0x43b/0x1d20 [ 432.650956] ? gre_tap_xmit+0x4e3/0x910 [ 432.654955] ? dev_hard_start_xmit+0x6dc/0xe00 [ 432.659564] ? sch_direct_xmit+0x59b/0x890 [ 432.663821] ? __qdisc_run+0x1bac/0x3600 [ 432.667904] ? __dev_queue_xmit+0x2131/0x3e00 [ 432.672535] ? dev_queue_xmit+0x4b/0x60 [ 432.676557] ? ip6_finish_output2+0x1a5b/0x22d0 [ 432.681259] ? ip6_finish_output+0xc13/0xca0 [ 432.685697] ? ip6_output+0x5e4/0x720 [ 432.689526] ? mld_sendpack+0xf2e/0x17b0 [ 432.693622] ? mld_ifc_timer_expire+0x115c/0x1680 [ 432.698497] ? call_timer_fn+0x356/0x7c0 [ 432.702590] ? __run_timers+0xe95/0x1300 [ 432.706700] ? run_timer_softirq+0x55/0xa0 [ 432.710962] ? __do_softirq+0x721/0xc5d [ 432.714997] ? do_softirq_own_stack+0x49/0x80 [ 432.719530] ? __local_bh_enable_ip+0x228/0x260 [ 432.724268] ? _raw_spin_unlock_bh+0x4b/0x60 [ 432.728727] ? __fib6_clean_all+0x79b/0x8d0 [ 432.733085] ? fib6_clean_all+0x90/0xa0 [ 432.737120] ? rt6_sync_up+0x1a4/0x200 [ 432.741084] ? addrconf_notify+0x2c33/0x6200 [ 432.745528] ? raw_notifier_call_chain+0x13d/0x240 [ 432.750483] ? netdev_state_change+0x1b0/0x2f0 [ 432.755094] ? do_setlink+0x1df2/0x5d30 [ 432.759091] ? rtnl_newlink+0x20c8/0x3450 [ 432.763289] ? rtnetlink_rcv_msg+0x1148/0x1540 [ 432.767896] ? netlink_rcv_skb+0x394/0x640 [ 432.772163] ? rtnetlink_rcv+0x50/0x60 [ 432.776088] ? netlink_unicast+0x1699/0x1740 [ 432.780528] ? netlink_sendmsg+0x13c7/0x1440 [ 432.784961] ? ___sys_sendmsg+0xe68/0x1250 [ 432.789218] ? __se_sys_sendmsg+0x305/0x460 [ 432.793559] ? __x64_sys_sendmsg+0x4a/0x70 [ 432.797822] ? do_syscall_64+0xcf/0x110 [ 432.801827] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.807231] ? __msan_get_context_state+0x9/0x30 [ 432.812028] ? INIT_INT+0xc/0x30 [ 432.815429] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 432.820824] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 432.826246] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.831029] __msan_memcpy+0x6f/0x80 [ 432.835227] pskb_expand_head+0x43b/0x1d20 [ 432.839996] gre_tap_xmit+0x4e3/0x910 [ 432.844289] ? gre_tap_init+0x650/0x650 [ 432.848804] dev_hard_start_xmit+0x6dc/0xe00 [ 432.853603] sch_direct_xmit+0x59b/0x890 [ 432.858239] __qdisc_run+0x1bac/0x3600 [ 432.862854] ? __msan_get_context_state+0x9/0x30 [ 432.868199] __dev_queue_xmit+0x2131/0x3e00 [ 432.872594] dev_queue_xmit+0x4b/0x60 [ 432.876452] ip6_finish_output2+0x1a5b/0x22d0 [ 432.881011] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 432.886412] ? ip6_mtu+0x289/0x330 [ 432.890001] ip6_finish_output+0xc13/0xca0 [ 432.894291] ip6_output+0x5e4/0x720 [ 432.897989] ? ip6_output+0x720/0x720 [ 432.901819] ? ac6_seq_show+0x200/0x200 [ 432.905828] mld_sendpack+0xf2e/0x17b0 [ 432.909906] ? mld_send_report+0x4b0/0x4b0 [ 432.914206] mld_ifc_timer_expire+0x115c/0x1680 [ 432.918914] ? __msan_poison_alloca+0x1e0/0x2b0 [ 432.923634] call_timer_fn+0x356/0x7c0 [ 432.927579] ? mld_gq_timer_expire+0xf0/0xf0 [ 432.932037] __run_timers+0xe95/0x1300 [ 432.935964] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 432.941375] ? mld_gq_timer_expire+0xf0/0xf0 [ 432.945849] run_timer_softirq+0x55/0xa0 [ 432.949951] ? timers_dead_cpu+0xb90/0xb90 [ 432.954218] __do_softirq+0x721/0xc5d [ 432.958074] do_softirq_own_stack+0x49/0x80 [ 432.962425] [ 432.964731] __local_bh_enable_ip+0x228/0x260 [ 432.969264] _raw_spin_unlock_bh+0x4b/0x60 [ 432.973531] __fib6_clean_all+0x79b/0x8d0 [ 432.977710] ? rt6_sync_up+0x200/0x200 [ 432.981659] ? node_free_rcu+0x70/0x70 [ 432.985583] ? rt6_sync_up+0x200/0x200 [ 432.989509] fib6_clean_all+0x90/0xa0 [ 432.993349] ? rt6_sync_up+0x200/0x200 [ 432.997273] rt6_sync_up+0x1a4/0x200 [ 433.001027] addrconf_notify+0x2c33/0x6200 [ 433.005318] ? kmsan_set_origin+0x83/0x130 [ 433.009620] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.015024] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.020420] ? ip6mr_device_event+0x35e/0x3d0 [ 433.024952] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.030372] ? dev_forward_change+0xb90/0xb90 [ 433.034908] raw_notifier_call_chain+0x13d/0x240 [ 433.039709] netdev_state_change+0x1b0/0x2f0 [ 433.044169] do_setlink+0x1df2/0x5d30 [ 433.048018] ? validate_nla+0xb85/0xe20 [ 433.052047] ? kmsan_set_origin+0x83/0x130 [ 433.056319] rtnl_newlink+0x20c8/0x3450 [ 433.060433] ? kmsan_set_origin+0x83/0x130 [ 433.064713] ? kmsan_set_origin+0x83/0x130 [ 433.068985] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 433.074402] ? __msan_get_context_state+0x9/0x30 [ 433.079179] ? INIT_BOOL+0x17/0x30 [ 433.082752] ? refcount_sub_and_test_checked+0x5ef/0x710 [ 433.088303] ? rtnl_setlink+0x700/0x700 [ 433.092303] rtnetlink_rcv_msg+0x1148/0x1540 [ 433.096773] ? ___sys_sendmsg+0xe68/0x1250 [ 433.101079] ? __msan_poison_alloca+0x1e0/0x2b0 [ 433.105801] ? should_fail+0x162/0x13c0 [ 433.109848] ? kmsan_set_origin+0x83/0x130 [ 433.114123] netlink_rcv_skb+0x394/0x640 [ 433.118245] ? rtnetlink_bind+0x120/0x120 [ 433.122457] rtnetlink_rcv+0x50/0x60 [ 433.126211] netlink_unicast+0x1699/0x1740 [ 433.130503] ? rtnetlink_net_exit+0x90/0x90 [ 433.134868] netlink_sendmsg+0x13c7/0x1440 [ 433.139195] ___sys_sendmsg+0xe68/0x1250 [ 433.143291] ? netlink_getsockopt+0x16b0/0x16b0 [ 433.148055] ? __fdget+0x329/0x440 [ 433.151644] __se_sys_sendmsg+0x305/0x460 [ 433.155860] __x64_sys_sendmsg+0x4a/0x70 [ 433.159952] do_syscall_64+0xcf/0x110 [ 433.163789] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 433.169010] RIP: 0033:0x457569 [ 433.172239] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.191192] RSP: 002b:00007f716c1adc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.198943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 433.206225] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 433.213502] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 433.220794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f716c1ae6d4 [ 433.228093] R13: 00000000004c3b16 R14: 00000000004d5c08 R15: 00000000ffffffff [ 433.235402] Uninit was stored to memory at: [ 433.239756] kmsan_internal_chain_origin+0x136/0x240 [ 433.244890] __msan_chain_origin+0x6d/0xd0 [ 433.249152] __save_stack_trace+0x8be/0xc60 [ 433.253506] save_stack_trace+0xc6/0x110 [ 433.257598] kmsan_internal_chain_origin+0x136/0x240 [ 433.262730] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.267248] __msan_memcpy+0x6f/0x80 [ 433.270989] pskb_expand_head+0x43b/0x1d20 [ 433.275246] gre_tap_xmit+0x4e3/0x910 [ 433.279065] dev_hard_start_xmit+0x6dc/0xe00 [ 433.283530] sch_direct_xmit+0x59b/0x890 [ 433.287644] __qdisc_run+0x1bac/0x3600 [ 433.291574] __dev_queue_xmit+0x2131/0x3e00 [ 433.295936] dev_queue_xmit+0x4b/0x60 [ 433.299775] ip6_finish_output2+0x1a5b/0x22d0 [ 433.304292] ip6_finish_output+0xc13/0xca0 [ 433.308553] ip6_output+0x5e4/0x720 [ 433.312202] mld_sendpack+0xf2e/0x17b0 [ 433.316112] mld_ifc_timer_expire+0x115c/0x1680 [ 433.320836] call_timer_fn+0x356/0x7c0 [ 433.324752] __run_timers+0xe95/0x1300 [ 433.328675] run_timer_softirq+0x55/0xa0 [ 433.332763] __do_softirq+0x721/0xc5d [ 433.336570] [ 433.338610] Uninit was stored to memory at: [ 433.342973] kmsan_internal_chain_origin+0x136/0x240 [ 433.348125] __msan_chain_origin+0x6d/0xd0 [ 433.352391] __save_stack_trace+0x8be/0xc60 [ 433.356733] save_stack_trace+0xc6/0x110 [ 433.360845] kmsan_internal_chain_origin+0x136/0x240 [ 433.365980] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.370510] __msan_memcpy+0x6f/0x80 [ 433.374254] pskb_expand_head+0x43b/0x1d20 [ 433.378509] gre_tap_xmit+0x4e3/0x910 [ 433.382328] dev_hard_start_xmit+0x6dc/0xe00 [ 433.386760] sch_direct_xmit+0x59b/0x890 [ 433.390845] __qdisc_run+0x1bac/0x3600 [ 433.394755] __dev_queue_xmit+0x2131/0x3e00 [ 433.399107] dev_queue_xmit+0x4b/0x60 [ 433.402936] ip6_finish_output2+0x1a5b/0x22d0 [ 433.407454] ip6_finish_output+0xc13/0xca0 [ 433.411714] ip6_output+0x5e4/0x720 [ 433.415395] mld_sendpack+0xf2e/0x17b0 [ 433.419357] mld_ifc_timer_expire+0x115c/0x1680 [ 433.424079] call_timer_fn+0x356/0x7c0 [ 433.428006] __run_timers+0xe95/0x1300 [ 433.431921] run_timer_softirq+0x55/0xa0 [ 433.436007] __do_softirq+0x721/0xc5d [ 433.439819] [ 433.441462] Uninit was stored to memory at: [ 433.445805] kmsan_internal_chain_origin+0x136/0x240 [ 433.450942] __msan_chain_origin+0x6d/0xd0 [ 433.455206] __save_stack_trace+0x8be/0xc60 [ 433.459562] save_stack_trace+0xc6/0x110 [ 433.463655] kmsan_internal_chain_origin+0x136/0x240 [ 433.468784] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.473306] __msan_memcpy+0x6f/0x80 [ 433.477043] pskb_expand_head+0x43b/0x1d20 [ 433.481310] gre_tap_xmit+0x4e3/0x910 [ 433.485167] dev_hard_start_xmit+0x6dc/0xe00 [ 433.489599] sch_direct_xmit+0x59b/0x890 [ 433.493693] __qdisc_run+0x1bac/0x3600 [ 433.497606] __dev_queue_xmit+0x2131/0x3e00 [ 433.501962] dev_queue_xmit+0x4b/0x60 [ 433.505794] ip6_finish_output2+0x1a5b/0x22d0 [ 433.510313] ip6_finish_output+0xc13/0xca0 [ 433.514576] ip6_output+0x5e4/0x720 [ 433.518227] mld_sendpack+0xf2e/0x17b0 [ 433.522138] mld_ifc_timer_expire+0x115c/0x1680 [ 433.526840] call_timer_fn+0x356/0x7c0 [ 433.530749] __run_timers+0xe95/0x1300 [ 433.534678] run_timer_softirq+0x55/0xa0 [ 433.538762] __do_softirq+0x721/0xc5d [ 433.542587] [ 433.544235] Uninit was stored to memory at: [ 433.548579] kmsan_internal_chain_origin+0x136/0x240 [ 433.553711] __msan_chain_origin+0x6d/0xd0 [ 433.557968] __save_stack_trace+0x8be/0xc60 [ 433.562313] save_stack_trace+0xc6/0x110 [ 433.566401] kmsan_internal_chain_origin+0x136/0x240 [ 433.571529] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.576049] __msan_memcpy+0x6f/0x80 [ 433.579786] pskb_expand_head+0x43b/0x1d20 [ 433.584046] gre_tap_xmit+0x4e3/0x910 [ 433.587870] dev_hard_start_xmit+0x6dc/0xe00 [ 433.592306] sch_direct_xmit+0x59b/0x890 [ 433.596391] __qdisc_run+0x1bac/0x3600 [ 433.600305] __dev_queue_xmit+0x2131/0x3e00 [ 433.604648] dev_queue_xmit+0x4b/0x60 [ 433.608502] ip6_finish_output2+0x1a5b/0x22d0 [ 433.613021] ip6_finish_output+0xc13/0xca0 [ 433.617304] ip6_output+0x5e4/0x720 [ 433.620965] mld_sendpack+0xf2e/0x17b0 [ 433.624879] mld_ifc_timer_expire+0x115c/0x1680 [ 433.629569] call_timer_fn+0x356/0x7c0 [ 433.633500] __run_timers+0xe95/0x1300 [ 433.637473] run_timer_softirq+0x55/0xa0 [ 433.641559] __do_softirq+0x721/0xc5d [ 433.645444] [ 433.647098] Uninit was stored to memory at: [ 433.651448] kmsan_internal_chain_origin+0x136/0x240 [ 433.656932] __msan_chain_origin+0x6d/0xd0 [ 433.661407] __save_stack_trace+0x8be/0xc60 [ 433.665777] save_stack_trace+0xc6/0x110 [ 433.669866] kmsan_internal_chain_origin+0x136/0x240 [ 433.674991] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.679510] __msan_memcpy+0x6f/0x80 [ 433.683313] pskb_expand_head+0x43b/0x1d20 [ 433.687571] gre_tap_xmit+0x4e3/0x910 [ 433.691403] dev_hard_start_xmit+0x6dc/0xe00 [ 433.695851] sch_direct_xmit+0x59b/0x890 [ 433.699944] __qdisc_run+0x1bac/0x3600 [ 433.703855] __dev_queue_xmit+0x2131/0x3e00 [ 433.708197] dev_queue_xmit+0x4b/0x60 [ 433.712021] ip6_finish_output2+0x1a5b/0x22d0 [ 433.716556] ip6_finish_output+0xc13/0xca0 [ 433.720812] ip6_output+0x5e4/0x720 [ 433.724461] mld_sendpack+0xf2e/0x17b0 [ 433.728372] mld_ifc_timer_expire+0x115c/0x1680 [ 433.733069] call_timer_fn+0x356/0x7c0 [ 433.736983] __run_timers+0xe95/0x1300 [ 433.740899] run_timer_softirq+0x55/0xa0 [ 433.744990] __do_softirq+0x721/0xc5d [ 433.748809] [ 433.750451] Uninit was stored to memory at: [ 433.754795] kmsan_internal_chain_origin+0x136/0x240 [ 433.759925] __msan_chain_origin+0x6d/0xd0 [ 433.764199] __save_stack_trace+0x8be/0xc60 [ 433.768542] save_stack_trace+0xc6/0x110 [ 433.772625] kmsan_internal_chain_origin+0x136/0x240 [ 433.777758] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.782285] __msan_memcpy+0x6f/0x80 [ 433.786018] pskb_expand_head+0x43b/0x1d20 [ 433.790278] gre_tap_xmit+0x4e3/0x910 [ 433.794099] dev_hard_start_xmit+0x6dc/0xe00 [ 433.798552] sch_direct_xmit+0x59b/0x890 [ 433.802656] __qdisc_run+0x1bac/0x3600 [ 433.806569] __dev_queue_xmit+0x2131/0x3e00 [ 433.810917] dev_queue_xmit+0x4b/0x60 [ 433.814742] ip6_finish_output2+0x1a5b/0x22d0 [ 433.819276] ip6_finish_output+0xc13/0xca0 [ 433.823540] ip6_output+0x5e4/0x720 [ 433.827194] mld_sendpack+0xf2e/0x17b0 [ 433.831106] mld_ifc_timer_expire+0x115c/0x1680 [ 433.835805] call_timer_fn+0x356/0x7c0 [ 433.839717] __run_timers+0xe95/0x1300 [ 433.843631] run_timer_softirq+0x55/0xa0 [ 433.847719] __do_softirq+0x721/0xc5d [ 433.851537] [ 433.853199] Uninit was stored to memory at: [ 433.857547] kmsan_internal_chain_origin+0x136/0x240 [ 433.862677] __msan_chain_origin+0x6d/0xd0 [ 433.866941] __save_stack_trace+0x8be/0xc60 [ 433.871284] save_stack_trace+0xc6/0x110 [ 433.875366] kmsan_internal_chain_origin+0x136/0x240 [ 433.880496] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.885025] __msan_memcpy+0x6f/0x80 [ 433.888771] pskb_expand_head+0x43b/0x1d20 [ 433.893032] gre_tap_xmit+0x4e3/0x910 [ 433.896866] dev_hard_start_xmit+0x6dc/0xe00 [ 433.901303] sch_direct_xmit+0x59b/0x890 [ 433.905488] __qdisc_run+0x1bac/0x3600 [ 433.909408] __dev_queue_xmit+0x2131/0x3e00 [ 433.913757] dev_queue_xmit+0x4b/0x60 [ 433.917584] ip6_finish_output2+0x1a5b/0x22d0 [ 433.922119] ip6_finish_output+0xc13/0xca0 [ 433.926382] ip6_output+0x5e4/0x720 [ 433.930024] mld_sendpack+0xf2e/0x17b0 [ 433.933936] mld_ifc_timer_expire+0x115c/0x1680 [ 433.938632] call_timer_fn+0x356/0x7c0 [ 433.942541] __run_timers+0xe95/0x1300 [ 433.946452] run_timer_softirq+0x55/0xa0 [ 433.950556] __do_softirq+0x721/0xc5d [ 433.954378] [ 433.956019] Local variable description: ----ipc6@icmp6_send [ 433.961770] Variable was created at: [ 433.965505] icmp6_send+0x201/0x3ca0 [ 433.969245] icmpv6_send+0xe5/0x110 23:13:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) close(r1) 23:13:37 executing program 1: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0xc080) 23:13:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 23:13:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000040)={0x3}) 23:13:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) [ 435.334514] device veth0_to_bridge entered promiscuous mode [ 435.347631] device veth0_to_bridge left promiscuous mode 23:13:38 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 23:13:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') fstat(r0, &(0x7f0000000900)) 23:13:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xff80000000000001) read(r0, &(0x7f0000000100)=""/255, 0xff) 23:13:38 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000004000000000000000200000000000000000000000000000000000000040000008000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x468, &(0x7f0000000000)=[{}]}, 0x10) [ 435.787878] device veth0_to_bridge entered promiscuous mode [ 435.830741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.918049] device veth0_to_bridge left promiscuous mode 23:13:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000500)=""/61, 0x3d}, 0x40) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 23:13:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af14, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) [ 436.366347] device veth0_to_bridge entered promiscuous mode 23:13:39 executing program 1: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "f3b375fd6b4bcde28e9ff7b4ac5b07a4fad3abfafd1be264388545ebc74a112f"}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x12, 0x4, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x5f, 0xa]}, 0x2c) 23:13:39 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000640)=@ipx, 0x80, &(0x7f00000005c0)}}], 0x1, 0x0, &(0x7f0000003280)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) [ 437.479618] device veth0_to_bridge left promiscuous mode 23:13:40 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {}, [{0x8, 0x7}, {0x8, 0x4}, {0x8, 0x4}, {}, {0x8, 0x2}, {}], {0x10, 0x4}, {0x20, 0x2}}, 0x54, 0x3) rmdir(&(0x7f0000000300)='./file0\x00') 23:13:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:40 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000004000000000000000200000000000000000000000000000000000000040000008000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x468, &(0x7f0000000000)=[{}]}, 0x10) 23:13:40 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1/file0\x00') rename(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000280)='./file2\x00') 23:13:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 23:13:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 437.813523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 437.838897] device veth0_to_bridge entered promiscuous mode [ 437.881111] device veth0_to_bridge left promiscuous mode 23:13:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x6000000]}}]}, 0x2c}}, 0x0) 23:13:41 executing program 2: 23:13:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) 23:13:41 executing program 2: 23:13:41 executing program 3: [ 438.546595] device veth0_to_bridge entered promiscuous mode [ 438.582974] device veth0_to_bridge left promiscuous mode 23:13:41 executing program 0: 23:13:41 executing program 2: 23:13:42 executing program 3: unshare(0x8020000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c87000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000c26000/0x3000)=nil) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r1, 0x0) 23:13:42 executing program 1: 23:13:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, r1) [ 439.244959] device veth0_to_bridge entered promiscuous mode 23:13:42 executing program 0: [ 439.287791] device veth0_to_bridge left promiscuous mode 23:13:42 executing program 2: 23:13:42 executing program 3: 23:13:42 executing program 1: 23:13:42 executing program 0: 23:13:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(0xffffffffffffffff, r1) 23:13:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:42 executing program 2: 23:13:43 executing program 3: 23:13:43 executing program 1: [ 440.048253] device veth0_to_bridge entered promiscuous mode [ 440.108587] device veth0_to_bridge left promiscuous mode 23:13:43 executing program 0: 23:13:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) dup2(r0, 0xffffffffffffffff) 23:13:43 executing program 2: 23:13:43 executing program 1: 23:13:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:43 executing program 0: 23:13:43 executing program 3: [ 440.642835] device veth0_to_bridge entered promiscuous mode [ 440.703052] device veth0_to_bridge left promiscuous mode 23:13:43 executing program 1: 23:13:44 executing program 5: 23:13:44 executing program 2: 23:13:44 executing program 0: 23:13:44 executing program 3: 23:13:44 executing program 1: 23:13:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:44 executing program 5: 23:13:44 executing program 0: 23:13:44 executing program 2: 23:13:44 executing program 1: 23:13:44 executing program 3: 23:13:45 executing program 0: 23:13:45 executing program 2: 23:13:45 executing program 5: 23:13:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:45 executing program 1: 23:13:45 executing program 3: 23:13:45 executing program 2: 23:13:45 executing program 0: 23:13:45 executing program 5: 23:13:45 executing program 1: 23:13:45 executing program 3: 23:13:45 executing program 5: 23:13:45 executing program 2: 23:13:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:46 executing program 0: 23:13:46 executing program 3: 23:13:46 executing program 1: 23:13:46 executing program 2: 23:13:46 executing program 5: 23:13:46 executing program 0: 23:13:46 executing program 2: 23:13:46 executing program 3: 23:13:46 executing program 1: 23:13:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:47 executing program 5: 23:13:47 executing program 2: 23:13:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0/bus/file0\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000700)=0xe8) connect$packet(r0, &(0x7f0000000740)={0x11, 0x0, r1, 0x1, 0x3, 0x6, @local}, 0x14) mkdir(&(0x7f00000005c0)='./file0\x00', 0xfffbffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x368, 0x6d, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='minix\x00', 0x200020, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) 23:13:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 23:13:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendfile(r0, r1, &(0x7f0000000140), 0x200000008001) 23:13:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000100)="11fa50", 0x3, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) recvmmsg(r3, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001980)=""/203, 0xcb}}], 0x1, 0x10000, &(0x7f0000003f80)={0x0, 0x989680}) 23:13:47 executing program 2: 23:13:47 executing program 1: 23:13:47 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000140)=[{}], 0x1) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000040)) 23:13:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000003c00), 0x0, 0x8000, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000006340)="e7", 0x1}], 0x1}, 0x100}], 0x1, 0x0) [ 444.964910] audit: type=1326 audit(1541632428.011:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10932 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:13:48 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000100), &(0x7f00000002c0)={0x0, 0x1c9c380}) 23:13:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f0000000000)=""/239, 0xef) recvmmsg(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003480), 0x0, &(0x7f0000000300)=""/12, 0x3a}}, {{&(0x7f0000003b80)=@can, 0x80, &(0x7f0000003e40), 0x35e, &(0x7f0000000340)=""/217, 0xd9}}], 0x40000000000002d, 0x0, &(0x7f0000008080)={0x77359400}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r0, &(0x7f00000006c0)="1f0000001e0007f1fff5ff0200000000000000040000dd00000003728d0417", 0x1f) socket$inet6(0xa, 0x0, 0x800000000000004) sendfile(r1, r1, 0x0, 0x2) 23:13:48 executing program 1: 23:13:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) [ 445.647086] audit: type=1326 audit(1541632428.691:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10932 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 445.676796] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 445.685503] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 23:13:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:49 executing program 1: 23:13:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:49 executing program 1: [ 446.454612] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 446.463503] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 23:13:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:50 executing program 0: 23:13:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:50 executing program 1: 23:13:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x9, 0x12) 23:13:50 executing program 1: 23:13:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:51 executing program 1: 23:13:51 executing program 0: 23:13:51 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:51 executing program 0: 23:13:51 executing program 1: 23:13:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:51 executing program 1: 23:13:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:51 executing program 0: 23:13:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:52 executing program 0: 23:13:52 executing program 1: 23:13:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 23:13:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:52 executing program 1: 23:13:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) recvfrom$inet(r1, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:52 executing program 0: 23:13:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = dup(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 23:13:53 executing program 0: 23:13:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:53 executing program 1: 23:13:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) 23:13:53 executing program 0: 23:13:53 executing program 1: 23:13:53 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = dup(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) 23:13:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:54 executing program 0: 23:13:54 executing program 1: 23:13:54 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) 23:13:54 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = dup(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:54 executing program 1: 23:13:54 executing program 0: 23:13:54 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a90", 0x1e) 23:13:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:55 executing program 1: 23:13:55 executing program 0: 23:13:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a9061", 0x1f) 23:13:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r0, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r2, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:55 executing program 1: 23:13:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:55 executing program 0: 23:13:55 executing program 3: 23:13:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:56 executing program 3: 23:13:56 executing program 1: 23:13:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:56 executing program 0: 23:13:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r0, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r2, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:56 executing program 3: 23:13:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:56 executing program 0: 23:13:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:57 executing program 3: 23:13:57 executing program 1: 23:13:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r0, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r2, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:57 executing program 0: 23:13:57 executing program 3: 23:13:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:57 executing program 1: 23:13:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:57 executing program 3: 23:13:57 executing program 0: 23:13:58 executing program 1: 23:13:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:58 executing program 3: 23:13:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00), 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:58 executing program 0: 23:13:58 executing program 1: 23:13:58 executing program 3: 23:13:58 executing program 1: 23:13:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00), 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:13:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 23:13:59 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x200) ioctl(r0, 0x7, &(0x7f0000000200)="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") socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b70000000e000000950000000000000017acc2c9d008a9c294541b24c870d90a5e0dc9e5293328cb7f2bea26de65b312dd8514c26e19b76ef2a8e2ed5d6fe3626bc7dbf4b3090fb5932a89db"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x0) 23:13:59 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/43}, 0x33, 0x0, 0x0) 23:13:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00), 0x0, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:13:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:13:59 executing program 0: unshare(0x28020000) clone(0x70024100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000240)) [ 456.588892] audit: type=1326 audit(1541632439.631:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11279 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:13:59 executing program 3: 23:13:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:00 executing program 3: [ 457.293931] audit: type=1326 audit(1541632440.341:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11279 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="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") ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 23:14:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="34e30acd5e6981197fb871bfda3e12132ef163bd237f0ac772455f403994dfb5a33656c1909dbad3b48cea809963ff9265c85eb577701b67c1f6c3cf14fc6b334248f7fbf8ea0643", 0x48}]) 23:14:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8000, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 23:14:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:01 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x600}, [@jmp]}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x3bd, &(0x7f0000000400)=""/187, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 23:14:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="34e30acd5e6981197fb871bfda3e12132ef163bd237f0ac772455f403994dfb5a33656c1909dbad3b48cea809963ff9265c85eb577701b67c1f6c3cf14fc6b334248f7fbf8ea0643", 0x48}]) 23:14:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="f30f5ac36667660fecf066b95803000066b82c02000066ba000000000f300f01dfe1fb66b8ed0f300e0f23c80f21f86635040080000f23f80f300f01cb66b9030300000f32da80f60e", 0x49}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84c8f7245f0fb7b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000bfe5000000000000000000004916f6c8bd7ec16d000000000000000000000000000000040000000000000007"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:14:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)) splice(r1, &(0x7f00000000c0)=0x8000, r0, 0x0, 0x5, 0x0) [ 458.916186] *** Guest State *** [ 458.919598] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 458.928772] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 458.937909] CR3 = 0x0000000000000000 [ 458.941772] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 458.947794] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 458.953933] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 458.960716] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.968903] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.977050] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.985253] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.993400] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.001441] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.009570] GDTR: limit=0x00000000, base=0x0000000000000000 [ 459.017740] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.025886] IDTR: limit=0x00000000, base=0x0000000000000000 [ 459.034264] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.042393] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 459.048860] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 459.056512] Interruptibility = 00000000 ActivityState = 00000000 [ 459.063401] *** Host State *** [ 459.066694] RIP = 0xffffffff812c8203 RSP = 0xffff8801663af3c8 [ 459.072888] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 459.079398] FSBase=00007f716c1ae700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 459.087351] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 459.093448] CR0=0000000080050033 CR3=000000016874a000 CR4=00000000001426f0 [ 459.100535] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 459.107677] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 459.113985] *** Control State *** [ 459.117498] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 459.124377] EntryControls=0000d1ff ExitControls=002fefff [ 459.129911] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 459.137052] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.143888] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.150522] reason=80000021 qualification=0000000000000000 [ 459.157032] IDTVectoring: info=00000000 errcode=00000000 [ 459.162635] TSC Offset = 0xffffff04afa28e55 [ 459.167057] EPT pointer = 0x00000001658b101e [ 459.494736] *** Guest State *** [ 459.498249] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 459.507364] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 459.516454] CR3 = 0x0000000000000000 [ 459.520218] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 459.526426] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 459.532600] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 23:14:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=""/154, 0x9a}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 23:14:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x2181) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) alarm(0x0) [ 459.539347] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.547508] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.555684] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.564219] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.572481] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.580534] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.588824] GDTR: limit=0x00000000, base=0x0000000000000000 [ 459.597063] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.605289] IDTR: limit=0x00000000, base=0x0000000000000000 [ 459.613478] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.621524] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 459.628211] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 459.635974] Interruptibility = 00000000 ActivityState = 00000000 [ 459.642448] *** Host State *** [ 459.645727] RIP = 0xffffffff812c8203 RSP = 0xffff880165b7f3c8 [ 459.651978] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 459.658456] FSBase=00007f716c16c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 459.666493] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 459.672581] CR0=0000000080050033 CR3=000000016874a000 CR4=00000000001426e0 [ 459.679675] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 459.686609] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 459.692915] *** Control State *** [ 459.696434] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 459.703363] EntryControls=0000d1ff ExitControls=002fefff [ 459.708888] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 459.716016] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.722911] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.729548] reason=80000021 qualification=0000000000000000 [ 459.736034] IDTVectoring: info=00000000 errcode=00000000 [ 459.741537] TSC Offset = 0xffffff04afa28e55 [ 459.746056] EPT pointer = 0x00000001658b101e 23:14:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)) 23:14:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x2a, 0xaff, 0x0, 0x0, {0x4802}}, 0x14}}, 0x0) 23:14:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:03 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000140), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}) openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/fuse\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:14:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 460.365876] ptrace attach of "/root/syz-executor1"[11390] was attempted by "/root/syz-executor1"[11391] 23:14:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f0000001680)=""/154, 0x9a}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 23:14:03 executing program 0: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)="0000000201000000000000010400000000000000", 0x14, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00') 23:14:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) 23:14:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb", 0x8}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:04 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) set_tid_address(&(0x7f0000000040)) 23:14:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab16679", 0xc}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:04 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x70f000) 23:14:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f750f3d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) [ 461.574667] audit: type=1326 audit(1541632444.621:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11428 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:04 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x600}, [@jmp]}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x3bd, &(0x7f0000000400)=""/187, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 23:14:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b7", 0xe}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x28b) 23:14:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x28b) [ 462.188066] audit: type=1326 audit(1541632445.231:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11428 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000800)=""/252, 0xf000}, 0x28) 23:14:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a", 0xf}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f2a726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) 23:14:05 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x3, r1, 0x0, 0x20000000) 23:14:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a90", 0x1e) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 462.775817] ptrace attach of "/root/syz-executor1"[6633] was attempted by "/root/syz-executor1"[11471] [ 462.814069] ptrace attach of "/root/syz-executor1"[6633] was attempted by "/root/syz-executor1"[11471] 23:14:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@loopback={0x200000000000000}}, 0x20) 23:14:05 executing program 3: 23:14:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r0) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a90", 0x1e) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:06 executing program 1: syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76617400000000000000a80300", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001180)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001280)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000380)) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/166, 0xa6, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000340)={0xa0, 0x19, 0x0, {0x48, {0x0, 0x0, 0x5}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xaae, 0x0, 0x6, 0x0, 0x0, 0xed, 0xfffffffffffffffb}}, 0xa0) 23:14:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x8490, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xbaf3, 0x4, 0x18e, 0x4, 0x8000000, 0x0, 0x0, 0x82, 0x20, 0x80000000, 0x3, 0x6, 0x6, 0x1000000000, 0x400000004000000, 0xff, 0x7, 0xffffffff, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x6}, 0x40, 0x7ff, 0x8, 0x5, 0x10001, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x800, 0x0, 0xbd, 0x0, 0x0, 0x82, 0x0, 0x4, 0xfffffffffffffffa, 0x2a, 0x3f, 0x22ca9de2, 0x1, 0x7, 0x3ff, 0x5, 0x6, 0x7, 0xff2, 0x4, 0xc13, 0x8, 0xffffffffffffd59f, 0x0, 0x5, 0x1, 0x2, 0xfff, 0x0, 0x1, 0x100000001, 0x81, 0x0, 0x28d4, 0x6, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x5, 0x9, 0x9, 0x9, 0x0, 0xfffffffffffffff7, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x1180060000000000) 23:14:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:06 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)="73797a7b616c6c65cce1", 0x0, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0xfffffffffffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0xffffffcf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 463.453341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:14:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a90", 0x1e) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) recvfrom$inet(r2, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:07 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 23:14:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a9061", 0x1f) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 464.247444] audit: type=1326 audit(1541632447.291:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11513 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e9199b2131d432cb3ab1667911b77a28", 0x10}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) dup2(r1, r0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0), 0x706000) 23:14:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a9061", 0x1f) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x62) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 465.025323] audit: type=1326 audit(1541632448.071:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11513 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 465.453696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:14:08 executing program 1: syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76617400000000000000a80300", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001180)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001280)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000380)) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/166, 0xa6, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000340)={0xa0, 0x19, 0x0, {0x48, {0x0, 0x0, 0x5}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xaae, 0x0, 0x6, 0x0, 0x0, 0xed, 0xfffffffffffffffb}}, 0xa0) 23:14:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000100)="11fa50", 0x3, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) 23:14:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x3e9, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 23:14:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)="2f02726f0500000074617000895059372f9199aa53f0bb5cf7b64cb7336b650264b1f1f81db62cc9399668f301b3668ad02b47dd439dcf453f1bceff3b4f5a2745f5", 0x2761, 0x0) 23:14:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a9061", 0x1f) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x62) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 465.688621] device team0 entered promiscuous mode [ 465.693904] device team_slave_0 entered promiscuous mode [ 465.699733] device team_slave_1 entered promiscuous mode 23:14:08 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0xe0000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0300000a0000000008001b00000000007d01807f368d169faefb393eb0ba13303c3f81304e279fabc5ea21a811aa5ecbba7b5504ece23bc9115ac34d9588c037ae2fc568fdd8643b5743eff625451ebbddb851811e78cadd593978df5f64cc1629"], 0x1}}, 0x0) dup2(r0, r1) 23:14:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:14:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x62) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000006, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", &(0x7f0000000300)=""/41}, 0x28) 23:14:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482) 23:14:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 467.848645] team0 (unregistering): Port device team_slave_0 removed [ 468.273251] team0 (unregistering): Port device team_slave_1 removed [ 468.350862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:14:12 executing program 1: syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76617400000000000000a80300", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001180)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001280)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000380)) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/166, 0xa6, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000340)={0xa0, 0x19, 0x0, {0x48, {0x0, 0x0, 0x5}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xaae, 0x0, 0x6, 0x0, 0x0, 0xed, 0xfffffffffffffffb}}, 0xa0) 23:14:12 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 23:14:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:12 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) 23:14:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x3e9, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 23:14:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101001, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10}, 0x10) [ 469.270547] device team0 entered promiscuous mode [ 469.314808] device team0 left promiscuous mode 23:14:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/211) [ 469.380638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:14:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r1, 0x0) listen(r2, 0x0) 23:14:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:12 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) epoll_wait(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) 23:14:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f00000002c0)='lo}loppp1+-vboxnet1\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff00000000dba100000000000000010000f8ffffffb702000018000000bd12000066c0f054c350bf1706000000b7d32ee64a3c40c8fb9519ffdc8608000000000000000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xad) perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x10, &(0x7f0000000380)={&(0x7f0000000740)=""/90, 0x5a, 0xffffffffffffffff}}, 0x11a3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r4, 0x4) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000140)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000004180)}, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@sco={0x1f, {0x4, 0x0, 0x0, 0x1, 0x2, 0x100}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xbe) socket$kcm(0xa, 0x2, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440), 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r7, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x541b, 0x706000) [ 469.935714] audit: type=1326 audit(1541632452.981:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11618 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:13 executing program 5: [ 470.723401] audit: type=1326 audit(1541632453.771:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11618 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 23:14:14 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) 23:14:14 executing program 5: 23:14:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:14 executing program 3: 23:14:14 executing program 2: 23:14:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000100)="11fa50", 0x3, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000180)=0xff, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) [ 471.277753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:14:14 executing program 2: 23:14:14 executing program 5: 23:14:14 executing program 3: 23:14:14 executing program 1: 23:14:14 executing program 2: 23:14:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:14 executing program 3: 23:14:15 executing program 0: 23:14:15 executing program 5: 23:14:15 executing program 1: 23:14:15 executing program 0: 23:14:15 executing program 2: 23:14:15 executing program 1: 23:14:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) dup3(r1, r2, 0x80000) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r3, 0x40044591) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:15 executing program 5: 23:14:15 executing program 3: 23:14:15 executing program 0: 23:14:15 executing program 2: 23:14:15 executing program 1: 23:14:16 executing program 5: 23:14:16 executing program 3: r0 = socket$kcm(0xa, 0x6, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000007f00)={&(0x7f0000007cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000007ec0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000007f40)={0x0, 0x3, &(0x7f0000000440), &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000740)=""/215}, 0x48) getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)="47ff4c00", 0x0, 0x99, &(0x7f0000ce7000)=""/153}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffff7f00000000, 0xe, 0x34, &(0x7f00000000c0)="3b1163cd78b89e1ba101df682bb0", &(0x7f00007ec000)=""/52}, 0x28) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f00000002c0), &(0x7f0000000240)=""/9}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05e, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 23:14:16 executing program 2: 23:14:16 executing program 1: 23:14:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r1, 0x40044591) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:16 executing program 0: 23:14:16 executing program 2: 23:14:16 executing program 3: 23:14:16 executing program 5: 23:14:16 executing program 1: 23:14:17 executing program 0: 23:14:17 executing program 3: 23:14:17 executing program 2: 23:14:17 executing program 5: 23:14:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r1, 0x40044591) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:17 executing program 1: 23:14:17 executing program 0: 23:14:17 executing program 3: 23:14:17 executing program 2: 23:14:17 executing program 5: 23:14:17 executing program 0: 23:14:17 executing program 1: 23:14:18 executing program 2: 23:14:18 executing program 3: 23:14:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x20081, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x62) ioctl$TIOCSBRK(r1, 0x40044591) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setflags(r0, 0x2, 0x200001) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 23:14:18 executing program 0: 23:14:18 executing program 5: 23:14:18 executing program 1: 23:14:18 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f22726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) 23:14:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = socket(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x630}, {&(0x7f0000000fc0)=""/4096, 0x1064}, {&(0x7f0000000400)=""/120, 0x107c}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x6, &(0x7f0000003700)={0x77359400}) 23:14:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000fc0)={'ip6tnl0\x00', 0x0}) pipe2(&(0x7f0000000080), 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0) 23:14:18 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002c00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002b80)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001280)=""/243, 0xf3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="2f67726f75703d73746174003c23fb572a1f0494e6f378b41a28a4533d16d54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a6fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000317987301fc9378ba0992dfb1cde636dc3cd84e3dedbfb3f40e00312eb650edba6e3f43ecf226ed85d1b0abd08cee5b1eb57ae851c4ed7d1889391906e8def88f90000000000", 0x2761, 0x0) [ 475.850356] ================================================================== [ 475.857809] BUG: KMSAN: uninit-value in memcmp+0x117/0x180 [ 475.863466] CPU: 0 PID: 11759 Comm: syz-executor5 Not tainted 4.19.0+ #78 [ 475.870419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.879799] Call Trace: [ 475.882426] dump_stack+0x32d/0x480 [ 475.886083] ? _raw_spin_lock_irqsave+0x237/0x340 [ 475.890947] ? memcmp+0x117/0x180 [ 475.894453] kmsan_report+0x19f/0x300 [ 475.898315] __msan_warning+0x76/0xd0 [ 475.902155] memcmp+0x117/0x180 [ 475.905483] dev_mc_add_excl+0x17c/0x780 [ 475.909601] rtnl_fdb_add+0xe84/0x12a0 [ 475.913575] ? rtnl_dump_all+0x530/0x530 [ 475.917677] rtnetlink_rcv_msg+0x1148/0x1540 [ 475.922134] ? ___sys_sendmsg+0xe68/0x1250 [ 475.926417] ? __msan_poison_alloca+0x1e0/0x2b0 [ 475.931122] ? should_fail+0x162/0x13c0 [ 475.935171] ? kmsan_set_origin+0x83/0x130 [ 475.939509] netlink_rcv_skb+0x394/0x640 [ 475.943608] ? rtnetlink_bind+0x120/0x120 [ 475.947825] rtnetlink_rcv+0x50/0x60 [ 475.951592] netlink_unicast+0x1699/0x1740 [ 475.955893] ? rtnetlink_net_exit+0x90/0x90 [ 475.960272] netlink_sendmsg+0x13c7/0x1440 [ 475.964599] ___sys_sendmsg+0xe68/0x1250 [ 475.968700] ? netlink_getsockopt+0x16b0/0x16b0 [ 475.973500] ? __fdget+0x329/0x440 [ 475.977092] __se_sys_sendmsg+0x305/0x460 [ 475.981317] __x64_sys_sendmsg+0x4a/0x70 [ 475.985430] do_syscall_64+0xcf/0x110 [ 475.989303] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 475.994530] RIP: 0033:0x457569 [ 475.997766] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.016707] RSP: 002b:00007ff51a568c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.024469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 476.031768] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000007 [ 476.039067] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 23:14:19 executing program 1: [ 476.046354] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff51a5696d4 [ 476.053642] R13: 00000000004c3b16 R14: 00000000004d5c08 R15: 00000000ffffffff [ 476.060957] [ 476.062603] Uninit was created at: [ 476.066183] kmsan_internal_poison_shadow+0xc8/0x1e0 [ 476.071313] kmsan_kmalloc+0x98/0x110 [ 476.075173] kmsan_slab_alloc+0xe/0x10 [ 476.079090] __kmalloc_node_track_caller+0xf62/0x14e0 [ 476.084315] __alloc_skb+0x42b/0xeb0 [ 476.088059] netlink_sendmsg+0xc9e/0x1440 [ 476.092241] ___sys_sendmsg+0xe68/0x1250 [ 476.096346] __se_sys_sendmsg+0x305/0x460 23:14:19 executing program 1: [ 476.100519] __x64_sys_sendmsg+0x4a/0x70 [ 476.104604] do_syscall_64+0xcf/0x110 [ 476.108434] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 476.113636] ================================================================== [ 476.121013] Disabling lock debugging due to kernel taint [ 476.126508] Kernel panic - not syncing: panic_on_warn set ... [ 476.126508] [ 476.133958] CPU: 0 PID: 11759 Comm: syz-executor5 Tainted: G B 4.19.0+ #78 [ 476.142294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.151669] Call Trace: [ 476.154332] dump_stack+0x32d/0x480 [ 476.158021] panic+0x57e/0xb28 [ 476.161302] kmsan_report+0x300/0x300 [ 476.165154] __msan_warning+0x76/0xd0 [ 476.168994] memcmp+0x117/0x180 [ 476.172328] dev_mc_add_excl+0x17c/0x780 [ 476.176451] rtnl_fdb_add+0xe84/0x12a0 [ 476.180688] ? rtnl_dump_all+0x530/0x530 [ 476.184833] rtnetlink_rcv_msg+0x1148/0x1540 [ 476.189292] ? ___sys_sendmsg+0xe68/0x1250 [ 476.193580] ? __msan_poison_alloca+0x1e0/0x2b0 [ 476.198297] ? should_fail+0x162/0x13c0 [ 476.202341] ? kmsan_set_origin+0x83/0x130 [ 476.206629] netlink_rcv_skb+0x394/0x640 [ 476.210733] ? rtnetlink_bind+0x120/0x120 [ 476.214951] rtnetlink_rcv+0x50/0x60 [ 476.218703] netlink_unicast+0x1699/0x1740 [ 476.222998] ? rtnetlink_net_exit+0x90/0x90 [ 476.227385] netlink_sendmsg+0x13c7/0x1440 [ 476.232130] ___sys_sendmsg+0xe68/0x1250 [ 476.236223] ? netlink_getsockopt+0x16b0/0x16b0 [ 476.240974] ? __fdget+0x329/0x440 [ 476.244564] __se_sys_sendmsg+0x305/0x460 [ 476.248784] __x64_sys_sendmsg+0x4a/0x70 [ 476.252889] do_syscall_64+0xcf/0x110 [ 476.256724] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 476.261964] RIP: 0033:0x457569 [ 476.265207] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.284134] RSP: 002b:00007ff51a568c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.291877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 23:14:19 executing program 1: [ 476.299170] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000007 [ 476.306460] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 476.313767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff51a5696d4 [ 476.321623] R13: 00000000004c3b16 R14: 00000000004d5c08 R15: 00000000ffffffff [ 476.329873] Kernel Offset: disabled [ 476.333513] Rebooting in 86400 seconds..