3530][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.033347][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.043174][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.053097][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.062921][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.072761][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.082579][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:17:18 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cfa71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x440a02, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000240)={0xcd}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x523101, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000180)=0xffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000280), {[{{@arp={@broadcast, @multicast1, 0xff000000, 0xff000000, 0x5, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xb0, 0x5, 0x3, 0x800, 0xc6c3, 0x6, '\x00', '\x00', {0xff}, {0xff}, 0x0, 0x2a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @remote, @rand_addr=0x64010102, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @empty, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x10}, @mac=@multicast, @empty, @rand_addr=0x64010100, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) [ 414.092400][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.102300][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.112118][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.121935][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.131756][ C0] sd 0:0:1:0: [sg0] tag#7181 CDB[c0]: 00 00 00 00 00 00 00 00 20:17:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000280)=""/17, 0x11}], 0x3, &(0x7f0000000300)=""/140, 0x8c}, 0x40002121) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) 20:17:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x1}, 0x8) close(r2) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0xff000000, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x26, 0x0, "7c7c383d09adffb506bb2faa77973a94713e513211c189f17f83dda58adba19b6c974752fa386df7468ff02deb2cf560fdbd76c353e308e09bf52c3c94ffa7f2a34f962b4110c78c157efb2ebc61b8cd"}, 0xd8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r2, 0xfbb48a1) 20:17:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4020100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedb9f8aa53acb00050008006272696467655f736c617665743100000000210000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c804}, 0x80000) mq_timedsend(r1, &(0x7f00000000c0)="53690c5a965ad27002140d878e3f9ed06bf9f05c4864ae16af578f872849d39b", 0x20, 0x6, &(0x7f0000000140)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0) getpeername$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) [ 414.587549][T10763] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 414.633041][T10738] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 414.674084][T10769] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:17:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x26, 0x0, "7c7c383d09adffb506bb2faa77973a94713e513211c189f17f83dda58adba19b6c974752fa386df7468ff02deb2cf560fdbd76c353e308e09bf52c3c94ffa7f2a34f962b4110c78c157efb2ebc61b8cd"}, 0xd8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r2, 0xfbb48a1) [ 415.049461][T10777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:17:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x10, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x2000, 0x8000, 0x1, 0xff, 0x0, 0x0, 0x8000, 0x3f, r2}, 0x20) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)) dup3(r5, r4, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_to_batadv\x00', &(0x7f0000000380)=@ethtool_ts_info}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f755cde00003d", @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00']) [ 415.483030][T10782] fuse: Unknown parameter 'grou\Þ' 20:17:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x7, @mcast1, 0xf0}}, 0x0, 0x0, 0x11, 0x0, "9f3f642319d68f6d517af4c2fd16617c537284a166e0dc2c66ed1b1366bad0f06afc1fed31f3db60590a85becd644224090353508234b999d07db770a94079f260c9a0e085723727e4ebe3f129cb00f8"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/245, 0xf5) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000340)=""/126, &(0x7f00000003c0)=0x7e) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14b6330042db0004000000000000000000002be02130653d91f9542693cff83146d8d1724dbd33247b970363ad09bd020ccd443b0b6069ed137c2e9571faa4081f28bf1271208a06c4ded95950"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x880) 20:17:19 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) read$snddsp(r0, &(0x7f0000000000)=""/147, 0x93) [ 415.587918][T10781] fuse: Unknown parameter 'grou\Þ' 20:17:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x3c}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe4ed}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4af8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x747}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x17c, 0x24, 0xc00, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff2}, {0xa, 0x5}, {0xc, 0x5}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x20, 0x7, 0x2, 0x1, 0x0, 0x6, 0xe, 0x9}}, {0x16, 0x2, [0x1, 0x1000, 0x4, 0x1000, 0x1, 0x7, 0x7, 0x2, 0x80]}}, {{0x1c, 0x1, {0x98, 0x0, 0x7, 0x9, 0x2, 0x1, 0xfd47, 0x4}}, {0xc, 0x2, [0x524f, 0x3, 0x1ff, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0xfff, 0x80000000, 0x1, 0x5, 0x8001, 0x3}}, {0xa, 0x2, [0xe8d9, 0x7, 0x6]}}, {{0x1c, 0x1, {0xc4, 0x4, 0x6, 0x7, 0x2, 0x5, 0x5, 0xa}}, {0x18, 0x2, [0x6, 0x7, 0x2, 0x7, 0x2, 0xffff, 0x12, 0x6, 0x6, 0x0]}}, {{0x1c, 0x1, {0x40, 0x3, 0x4, 0xffff, 0x0, 0xfffffffe, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0x9, 0x69b, 0x5, 0x2, 0x100, 0x3ff]}}, {{0x1c, 0x1, {0x89, 0x7f, 0x8000, 0x100, 0x0, 0x6, 0x81, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x8, 0x3, 0x7, 0x66, 0x1, 0xfffffffe, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0xa4, 0x6a, 0x5, 0x2, 0x7fff, 0x2, 0x2}}, {0x8, 0x2, [0x9, 0x7]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) [ 415.826447][T10785] can: request_module (can-proto-4) failed. [ 418.605354][T10737] IPVS: ftp: loaded support on port[0] = 21 [ 418.623280][T10741] IPVS: ftp: loaded support on port[0] = 21 20:17:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff0100000000003693e0000100ff0500000005000000000000036915fa2c1ec28656aaa79bb94b46fe00000007", 0x40) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="35895ea52be425b9bbbbbbbb8100000086dd60"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 20:17:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x8, 0x4) 20:17:23 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2000000000000192, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x80047455, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000080)={0xe, {0x6, 0x6, 0xff, 0x56, "c8c53c91dff30b5874a58ae102a0daaf9860ac1eccb9b380fc3859d5f1314c88b6338c99798ad68f8d1f9df055f736a237df21371796717bf9a3330a470aefa426fb2cdfc08211b6279b10d1c8515aa8b47408056b23"}}, 0x62) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5490b2fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8591}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bca53bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf893}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe957e10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe760}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x603a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d98}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eaf66f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1968c4b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x667542df}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36888660}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x543c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32353221}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656bd4b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa753}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d24c175}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ee1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa227}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x131a71c5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59d6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80101, 0x0) 20:17:23 executing program 1: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/exec\x00') ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x318, 0x1, 0x9, 0x10000, 0xe3c8, 0x1f, 0x486b, 0x3f]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) 20:17:23 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200202, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0xea, 0x7, 0x1, 0xc, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, 0x1, 0x7, 0x7f, 0x1}}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x15, r2, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0xa21a, @private2, 0x4}, @in6={0xa, 0x4e22, 0x80, @private2, 0x101}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @loopback}], 0x78) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x3f, 0x3f}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)={r4, 0x200}, &(0x7f0000000300)=0x8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xa002, 0x0) getsockopt$packet_buf(r6, 0x107, 0x16, &(0x7f0000000380)=""/237, &(0x7f0000000480)=0xed) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000004c0)={0x1000, 0x8, 0x81, 0x1}, 0x8) r7 = creat(&(0x7f0000000500)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000540)={r5, @in={{0x2, 0x4e22, @loopback}}, [0x3, 0x6b, 0xfffffffffffffff9, 0x91a, 0x100000000, 0xffffffffffffffe1, 0x0, 0x1ff, 0xd6d4, 0x305, 0x4, 0x800, 0xb80, 0x101, 0x7fff]}, &(0x7f0000000640)=0x100) socket$packet(0x11, 0x2, 0x300) r8 = add_key(&(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="4c35517c404fc42aa69471098e363622321494edd263471c069ce18e7fc60d8e5c37b5d302207ca1cc5a5708394153698f5bd97384f0ab1cb46c51290eefc3bed3ba9e350a3ca4ea7802c5089ad238b66133e433c31ca9d7b72413e7cabb7f851298c6dc124c2c718a7edfab3789b878664b169418c2269cc5e1", 0x7a, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r8) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000007c0)={0x0, &(0x7f0000000780)="436152a3353dac9c546b", 0xa}) [ 418.907450][ T9359] tipc: TX() has been purged, node left! [ 418.958005][T10845] IPVS: ftp: loaded support on port[0] = 21 20:17:23 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x48000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2, 0x5, 0x3, "104357a7433c0df86963ee631e1eea2b4e32be12f79c786b7f9cde1307253ffc", 0x56555959}) 20:17:23 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r3, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/203, 0xcb}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0907000000000000000001"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0xd, 0x110, r0, 0x82000000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 20:17:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="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") setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) r1 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000440)=""/251) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20060090}, 0x42ceace346b475ac) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000140)=""/218) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000040)=""/121) open_by_handle_at(r0, &(0x7f0000000140)={0xd9, 0x1f, "b4f86115b5241051ae83e320e0c87ca0b9a0b00637b04943343cedfd826b6cacfc6d8555f02d762bf74be7ad5e6039810a6bd8ee1486eaa7edd8a124d33a0ac73bfe72e833b1977589860cf7135c195207cc4b28b42ff4433a18d930e6d4222994a10c2a852e13c929575e134ba65d9d8be42723dd904a421f0a42b122813163737ab1d8cdc3e82215e145ea779305649a1ead21e9589bb853226c6ed1ad8e826406ae6cb40d9e073f9671902144102289617cfb447271881f7a6aef962f98e0a99abefe556b161f5585f015591b5d0b71"}, 0x90201) syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:24 executing program 0: r0 = io_uring_setup(0x2e36, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x7, 0x0, 0x0) 20:17:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00', @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 20:17:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='wchan\x00') 20:17:24 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e217202cb18f6e2e2aba000000ff2e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5f11039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b02"], 0xfdef) 20:17:24 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:17:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$capi20(r0, &(0x7f0000000000)={0x10, 0x9, 0xff, 0x80, 0xaf7, 0x800}, 0x10) [ 420.561359][T10906] IPVS: ftp: loaded support on port[0] = 21 [ 421.626726][T10906] chnl_net:caif_netlink_parms(): no params data found [ 421.844494][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.852084][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.861753][T10906] device bridge_slave_0 entered promiscuous mode [ 421.897785][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.904896][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.915311][T10906] device bridge_slave_1 entered promiscuous mode [ 421.961770][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.976940][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.023335][T10906] team0: Port device team_slave_0 added [ 422.034540][T10906] team0: Port device team_slave_1 added [ 422.072749][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.079842][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.106001][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.122432][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.129607][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.156122][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.220297][ T9359] tipc: TX() has been purged, node left! [ 422.226501][ T9359] tipc: TX() has been purged, node left! [ 422.244078][T10906] device hsr_slave_0 entered promiscuous mode [ 422.268190][T10906] device hsr_slave_1 entered promiscuous mode [ 422.307452][T10906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.315167][T10906] Cannot create hsr debugfs directory [ 422.511893][T10906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.581022][T10906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.643995][T10906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.691992][T10906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.834687][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.855278][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.865061][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.885984][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.919733][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.930945][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.940425][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.947751][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.956812][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.966791][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.976206][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.983550][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.992696][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 423.016490][ T9217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.033048][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 423.069665][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 423.079256][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 423.128150][T10906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.138686][T10906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.156073][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.166015][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 423.176371][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 423.186754][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 423.196495][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.206868][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 423.216620][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.227842][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.445099][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.452994][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.473463][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.521415][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.532438][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.578448][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.590593][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.611636][T10906] device veth0_vlan entered promiscuous mode [ 423.633866][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.643989][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.660297][T10906] device veth1_vlan entered promiscuous mode [ 423.734074][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.744320][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.776187][T10906] device veth0_macvtap entered promiscuous mode [ 423.815093][T10906] device veth1_macvtap entered promiscuous mode [ 423.850875][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 423.861977][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.872023][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 423.882557][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.892521][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 423.903045][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.913008][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 423.923557][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.933526][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 423.944044][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.957998][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.972922][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.982873][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.992417][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.002550][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.036171][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.047244][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.057132][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.067837][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.077824][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.088371][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.098502][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.109111][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.119162][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 424.129773][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.144163][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.153760][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.164436][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:17:28 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 20:17:28 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', &(0x7f00000000c0)={0x900, 0x20, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f00000005c0)={0x840, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xae8c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x10cb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1, 0x7f, 0x0, 0x8001}, {0x8, 0x70, 0x9b, 0xffff}, {0x3, 0x80, 0xdd, 0x80000001}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa89c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xc2f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10c00000}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x9, 0x9, 0x54, 0x7ff}, {0x0, 0x3, 0x73, 0x8}, {0x2, 0x9, 0xa0, 0x3}, {0x68c, 0x81, 0xfe, 0x2}]}}}]}}]}, 0x840}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) sendmmsg(r8, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 20:17:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 20:17:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x2, r3, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c02200065aaaad790ab4cd8ba14000000000000000000", @ANYRES16=r7, @ANYBLOB="10002bbd700005002f000001000008003b0001000000050038000000005108003a3e0000000005003800000000000800225f3a0003000000d00ef556d4e729411afd16af2933b5a27e0b0be8"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010e26bd7000fddbdf250f00000008003900ffff000008003b004000003b000300000008002b00030000000800310008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000314ec02ce616327f1e13b263c8052044fb2588f624f2371e73a3e52cfd0bbe22a183fb9899fd7611c848e75f6ac7bcfa229668122a6a3e8b2a5b650b2652594c7fb49f05f9bbec2847ea6fd64b34bbb959b0b7c1c3df", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf2511000000060028000000000008003a000004000008003900010000000500370000000000"], 0x34}}, 0x40080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000ffdbdf250b00000005002a000000000005003800010000000500350008000000050035002c0000000a000900aaaab3aaaa0f0000050033000100000005002f0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) 20:17:28 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = getpid() ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x4, 0x8001, {r1}, {r4}, 0x2, 0xfffffffffffff510}) rt_tgsigqueueinfo(0x0, r5, 0x3, &(0x7f00000000c0)={0x3, 0x1, 0x5}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') 20:17:28 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f1, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 20:17:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x844) 20:17:29 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 20:17:29 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b0304000000004555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e10913072c8254f745b7d46cedd461a7ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba408ce7a3b0c6c699890e197f44241d331615545ba9a37cfdd7ff58b659bbf65c6a2b2e441a0e0c44a3d9abeb7d90f000000000e077d0d67096da85a6d22c36fac7505a35892211b5194d55e0ad396b242811632dd07d720e8ddf1ac56b00fbd89c9"], 0x191) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r1) setxattr$security_capability(0x0, 0x0, &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 425.019272][T11143] xt_TCPMSS: Only works on TCP SYN packets 20:17:29 executing program 3: r0 = openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 20:17:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000280)='\'cel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x0, 0x0, 0x0) 20:17:29 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x8963f53e361fd74f) 20:17:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 20:17:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e217202cb18f6e2e2aba000000ff2e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5f11039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b01ff006303c816abd7e0e30000e800ea574f2481750ba13d"], 0xfdef) 20:17:30 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc600400106c0a0013004000008037153e370a00178000000000d1bd", 0x2e}], 0x1}, 0x0) 20:17:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@random={'user.', 'hashlimit\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 20:17:30 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 20:17:30 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca00000800ffffffba0e7200ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) [ 426.183266][T11181] xt_TCPMSS: Only works on TCP SYN packets [ 426.219651][T11184] xt_TCPMSS: Only works on TCP SYN packets 20:17:30 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff85}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) memfd_create(0x0, 0x0) 20:17:30 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x7fffffff, 0x0, 0x1, 0x2, 0x2, 0x5, 0x7, 0x7fffffff, 0x6, 0x0, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x30, {0x1, 0xbe86}, 0x20, 0x81}}) 20:17:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @remote, 0x0, 0xa, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010101, @rand_addr=0x64010102]}, 0x38) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 20:17:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)="a1", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010104}, 0x10) listen(r0, 0x7) accept(r0, 0x0, 0x0) 20:17:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 20:17:31 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x20, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr\x00') ioctl$FIONCLEX(r1, 0x5450) 20:17:31 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 20:17:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 427.426228][T11218] not chained 10000 origins [ 427.430786][T11218] CPU: 1 PID: 11218 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 427.439459][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.449518][T11218] Call Trace: [ 427.452823][T11218] dump_stack+0x1df/0x240 [ 427.457169][T11218] kmsan_internal_chain_origin+0x6f/0x130 [ 427.462927][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 427.468145][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 427.473267][T11218] ? kmsan_set_origin_checked+0x95/0xf0 [ 427.478823][T11218] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 427.484909][T11218] ? _copy_from_user+0x15b/0x260 [ 427.489863][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 427.494991][T11218] __msan_chain_origin+0x50/0x90 [ 427.499951][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.505428][T11218] ? __msan_get_context_state+0x9/0x20 [ 427.510905][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.515596][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 427.520722][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 427.525840][T11218] ? kmsan_internal_set_origin+0x75/0xb0 [ 427.531466][T11218] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 427.537354][T11218] ? kmsan_check_memory+0xd/0x10 [ 427.542276][T11218] ? _copy_to_user+0x12e/0x1d0 [ 427.547029][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 427.552213][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 427.557398][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 427.563187][T11218] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 427.569328][T11218] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 427.575212][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.579967][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.584805][T11218] do_syscall_64+0xb0/0x150 [ 427.589298][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.595170][T11218] RIP: 0033:0x45c1d9 [ 427.599051][T11218] Code: Bad RIP value. [ 427.603097][T11218] RSP: 002b:00007fa7dbd02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.611497][T11218] RAX: ffffffffffffffda RBX: 0000000000025a40 RCX: 000000000045c1d9 [ 427.619452][T11218] RDX: 03fffffffffffe9f RSI: 00000000200092c0 RDI: 0000000000000003 [ 427.627404][T11218] RBP: 000000000078bfe8 R08: 0000000000000000 R09: 0000000000000000 [ 427.635357][T11218] R10: 000001e34a95995e R11: 0000000000000246 R12: 000000000078bfac [ 427.643311][T11218] R13: 0000000000c9fb6f R14: 00007fa7dbd039c0 R15: 000000000078bfac [ 427.651274][T11218] Uninit was stored to memory at: [ 427.656287][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.661991][T11218] __msan_chain_origin+0x50/0x90 [ 427.666918][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.672361][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.677024][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.681771][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.686608][T11218] do_syscall_64+0xb0/0x150 [ 427.691096][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.696961][T11218] [ 427.699266][T11218] Uninit was stored to memory at: [ 427.704275][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.709975][T11218] __msan_chain_origin+0x50/0x90 [ 427.714898][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.720348][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.725018][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.729766][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.734603][T11218] do_syscall_64+0xb0/0x150 [ 427.739090][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.744955][T11218] [ 427.747263][T11218] Uninit was stored to memory at: [ 427.752272][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.757971][T11218] __msan_chain_origin+0x50/0x90 [ 427.762889][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.768331][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.772992][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.777740][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.782579][T11218] do_syscall_64+0xb0/0x150 [ 427.787066][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.792934][T11218] [ 427.795240][T11218] Uninit was stored to memory at: [ 427.801206][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.806905][T11218] __msan_chain_origin+0x50/0x90 [ 427.811827][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.817269][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.821927][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.826673][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.831508][T11218] do_syscall_64+0xb0/0x150 [ 427.836013][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.841879][T11218] [ 427.844185][T11218] Uninit was stored to memory at: [ 427.849194][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.854910][T11218] __msan_chain_origin+0x50/0x90 [ 427.859851][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.865295][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.869956][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.874701][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.879536][T11218] do_syscall_64+0xb0/0x150 [ 427.884026][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.889895][T11218] [ 427.892217][T11218] Uninit was stored to memory at: [ 427.897226][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.902927][T11218] __msan_chain_origin+0x50/0x90 [ 427.907862][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.913304][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.917963][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.922711][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.927545][T11218] do_syscall_64+0xb0/0x150 [ 427.932037][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.937902][T11218] [ 427.940208][T11218] Uninit was stored to memory at: [ 427.945216][T11218] kmsan_internal_chain_origin+0xad/0x130 [ 427.950915][T11218] __msan_chain_origin+0x50/0x90 [ 427.955836][T11218] __copy_msghdr_from_user+0x555/0xaf0 [ 427.961275][T11218] __sys_sendmmsg+0x558/0xd80 [ 427.965937][T11218] __se_sys_sendmmsg+0xbd/0xe0 [ 427.970800][T11218] __x64_sys_sendmmsg+0x56/0x70 [ 427.975634][T11218] do_syscall_64+0xb0/0x150 [ 427.980122][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.985988][T11218] [ 427.988302][T11218] Local variable ----msg_sys@__sys_sendmmsg created at: [ 427.995223][T11218] __sys_sendmmsg+0xb7/0xd80 [ 427.999794][T11218] __sys_sendmmsg+0xb7/0xd80 20:17:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0), 0x0) 20:17:32 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg$unix(r0, &(0x7f0000001900)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000080)="5089df4251ae51409903dade34d49ac28ad15eaa96d57111a971145ac89008dd2803ba24d3f74ae0d047b964815345fb1d6a9414c90cc26cfcec95423e6379c3c9ea99482d09e8093513c7f261ebaf823bfe35c3ad7fd575dd828703e3ecb3f34e81b2c6fa60362e89b43df4709773e12342ebe5edd93f7f605a31815fa5cd0c0d255fc2fbc8b1d757b37c37508c31bbe187f06a51d4263d8c9ccd61435dd049f23fb14633f245fe5a3d8216b17edc3bd2fa3cac7b2a4a27a490d112078e954fb11cd697f5c1e0a857cb51299b148289f156f5d2", 0xd4}, {&(0x7f0000000180)="d873be96456f4d436c050e7f7842d29d92ceb18b514bc497a87f459485766f4363ccee76145699664141707b2c72cead0282e9d0ca6531b592bce2b6b8e62f1015e57eb7cf0ade87f453d64e09bd350cd5ea693dc8458f34e0f06044a5039fca0d3327d19e9d3461fb7a7ef62c2418a20d5dd3d70f4cad3f18b2321900d6ec2edf566f5417fc62ba42a54f07d0c930aecd09edcd2f", 0x95}, {&(0x7f0000000240)="110ee0c3abc96491de87483e8df516ac5b1474921dc1bfa2d8a49a363b427208f6227dc91c00b7525e49b83ae22ea7a21cf6f01e1582b1e80a2a874594d8f01bbcfd0f9cf244004064966358788ae63b6635ec7fb930a4e35bda374ac3e7ed2f6eda7b0ab1bdb6ef471abcbe9cfa38c4e511", 0x72}, {&(0x7f0000000800)="732832572d6a1dc0f06298a49920a5a968038b02fdd87b3fbe37896beb31787f9dc25cbaa796eddbbb9fa193b5769c718d6fcea3c004300b236be1d474af312bd5df3d7745b16f198fd18527db67489130d607b98b6a7cc569fccd4b4e6098fcf63e30af34105acca1dabfd25a4214a69b8be3f5a5f668cebccc828fa191756bae282dc7e3314d89ec9624441404fa9ea63b42583e1e4896bf74ba9b15c80497a21444612641adc0e13a11c9c5a8885b2a842b9ec43adc759fbc35d2e1bbc6f626e9c1887110ab9bcddd29dd1b2cb4cb945727c58db28b29808be46a3dafd697537a2ec919d457c80ffdc75ea920d16d926f2344b50cb8a968b4f93c94393d05796f8d46fb96f30f292cf4a66c017dc6279a65bff4fbcb601ec0ac8ae44a67d89bad02e5407fef2dbe9b725c6528def3a9e7ea004a78a9f56950ee53b08c0d91326e18266e122dcc1fa6f4d32a69824ce86bb8b136dbf7df67d23d8a365adf8a63cd68d66b16bcc88900a44d90e2e50f6b3aa2fc9eaa24b166081b0143d66e8674498d66df75c0cdff725f3e71584a5c9abe3d13469b015767748a771b620db7d3b3102cc17be78d25f455abfb5a6e08376d217888f8e04af442358b48bcd5ad74cd9288729b492923ded4e805fbbb9ce354c917f7c628a8fd881fcf2d23fc7dfb422431b35ae1f706f39df24a015a9ffbe459b61157614cdebb58dcd23b3e932c3547c8deec47fb1b71ab1cb95d553ebdcccdd6ff357921b6cc48ea978a16ff780fa59046398fa451397ca99a803dabd9dc11984998f77913f901a748e5e10e978d43c537943b91e299bec8ceba3ecb4821b532e22dae2804e48b06e69fbcf6741ac3e51b539ce742ff77d7abdc04478eeed065afe6567bff136c907f086183d2c7f44a938c86df50089bd177df47fcf643ec4e6a0f81e439e046d3eea283203bd83682c5b6b49028ed9b66df63f33e8edb6c9b973e405189f33fa30c94566547681c5688e2c58124b31590ce5c62713958c2377eda6906f6a56d76797a666ac4101cad494450143e21cc33d427c2a3b83d9b6350fbf0a16cc18eb2bb4f99fdb33f4580f8bf174287f0851e855b97691857d40b02bb62e6b751438dd87f547c287e553fe7aad146fedfaa64174b56ab57a0d53242d263103035a3ba597017902508a62a6da1600776db58aac71952747ebbd1f9d1ef3da445dcd553010cc0b73ad568b1c9d53cd855f88af8086466e490dadab7e1e7b4baa7ee8a5b2212b59ff590d410e59e131416716fd2b85dfb0b6bbcc73ec23c81f0303e5b4b5d8571796a0e695b6098dca08a2eb4713d71ef6b8cf3896d5ebc961b626677d2c1beee570cf7b2d8b25306ca522e40d085f1a3c29fe965bb01ac932b8a40b558663de3d7bac7bea2ad3fa8687855e4decec4d60029012463484a9cb889c999e896e1df9656c96a5cde37881695c16c8a0d2957d16ad5b7ce78d8090b85bc7bceda5b090b36aae046a74ce585c48c394888941c37d0f2964c061052cecf1eafd78813c952ee7bd1888c24c96903cd28edbcb41013757fbeb882ceed3fc2cfb82be605ad7ea9c583b0e518eb5915f1f88eb0574a7d8408ac67e642f7f2a59ee321831f64dff3356a20f1718b05f4249724dc5fbe8e7b07291ea8dc17270e1818b7b79a6c9398ae81ffd3fecd6489ef072a069b50b99b20414c880fc1e08515349b11fa6864864fd9a5c0fba3d81bda3d23aec5057c46dc5c61bf08ce06debebfbfd8e77575899333f847878ce43425112c38ae39da1aa71529b22e23e249be29d38152e512d85f84e919fddbc5a52430784b8a206d71c365019b1f881209d565791e638e9e39872c40b13d5a2ebf9a4d492b3dcc4264f9e25e211152db2b3202b3c3effee048ed9fdf91562591f09b5183ff4ab7818f89de21837dc5362a9280e33d55b1c353baffb7779911752f48ee3d867d6fc5d67dd1856b48ffa2ab597ed10e05d373fcd9479412b789f5d24f02fa6dd9cabb7fc968adf35481bb3b97def195f3f0e496223296bf09e38e0366c3e0d1090eeb4e69a752ef11a213405e420836c6538b8f04d10a21c5e716d90f0d3c0077def83e6007bb8c75b64ac6a6355f366364fb0c1aec42ffd21de4774d91781dd4f2e03251d2f635c877bc228f716eb2a928a4e8840375c28ecfad10fe30664470be710662cde3a5b0193e2b1df7f1373ae12c64239b1754a1eadb414aa6ea6ac2252e889e422ded4469e46e75f2b3860e14870a229b8f9eca7acb310f11d17899f027e26c50e82a2d0eae5b8a83e865dfe00d4bf9e6bd590c945bf8971d8d0c94261c990a89789081a59731aa17c8989089a56fb6c478d251cec42fe5a106652a3da46592264da56586581381278a0e362bb8375051f5d1bdbe848963859aa5a506656355dab465ad48a65ebb91a9e67e88b7b0d1198d6bda6bb80439edf3608044d8933c6cb84c18b78db4bd31905b6457d22ea981f82c187baa6f5ecb11bff4f1e0023538951e17fa2bfc9004491289688b8fb351a5f4032c00ac29b9770a0263c4c529d08c84846f54c3459a4161acd544c1e0078dde488835186940a5b63db62708c1845a2022a7c89a01097fd2e037afc2bc9789b479299d0a80a22a62c0e92f2e1f4c4ebec2acc48a5ae292235dacc88766556ae605f2b4d38b03cf72854d51d0b0fb81dde21f9e315d103bf19b3360a3c54b3ab5eaaf65317ef4420665d3ed9e5215e589252cf9f7329964f6630b86910572b7a4caf677f3650427d5c5b8bb411672d47297f3e8170946c2f056695920630d514d772278ef4cf9182755435e35825785d66b7d1611820afbf834f340b2dbd07e70d50e89ddb7b79f6a2620d69b9657744dadd4b6414d4f6005afd8880234ccf89e02a5fd92c070d6532074b6f5360640b796176d5eee32ef3d5d8df3c89734f2516c9b4864d0829ab83fa513a5c89b940394934fdb4dc976081b38c342f503842d3d071f162b792653c5c0690194b2cd522b364b2d7bee54d48a64d2b331940edc8e6fbcc2bac12703e1cfb22b5449fb1aff431ed1ca7d3a0953b2b2756cc84f23c8bd61e8d7487bfe17cabcffe6f3387f1fcf1eda24327b511becdd103ae1b3af03f15d09080311fee68bedf2e2ee9de5b3785202774d6a06b5d303b528d3cbe107f3eb7f3497535717730264a9db9dd2f20e5323061591a9b0fab314f9fa2ad7a430acfbb389702636d859d3d82975e4f72d210b0442c6d596de5726ed8b29320b325d1ac6e8f4050c143bdedde831a5e7a904b824695654dbd825880fc4721b224f1ba74ce193708136212f3550800a08f950059661defe1012d4bd27c1c7ad7e3e02ada65f886afafb3bf97b8b229b286904af1b748bb0bc50501d533aa7d07f2ce275e7f2f957384e2afb83bd19934be233025cfb22d4d826909233e22843a3345b87116f3378c07aba73fac7e972cb915762f2561a5b35c68c79966fa7b2a8bdd99e7c4f943b3a4a1afc5d88a0755cc77bb8ec9b276fabaf1254484cd4a2d8674cde0547bfef5307a4b4b0a9b1ad00a62449907088ef8b7716c8b0e3918882573fd218481bf77c9e99052ade844f039d27df95177fd331bc6a5f4590cd40da6f21870f2b178c8e52206d99c1fec025f449676189d84b6e66359eec2e36a8c7609850b13d90ac983a0da7e0959add9938609eb248dac764c2e8fc00b3c0561992d607bd35cc041fe6ad6a159b0e7581358050fd0664384383fe6fc57329254125fbc420f1c7ac257246872494f13ee7ec8bd1a8d72f57e42b17c130750f852e94470484f7b46179eccb582ec8e5bcd7f210a95188784eb083bcb0777ef5277aeaa782db18aae01c9fc8202c63c2d3e9f4ea558dd0241fa00cfe4c916b652ee5198a3679139e093e5dda669d4366d3e6f738165b405112a1057c107d00cd7a6b628ffc910b6e9fb94876fcbbe863b057a1326405939937e35aafd4e7de8e884061a72fe2a616655e1faf4c4de37680b82d7199d47932cc5f9107484164a306b411737efeb5e0efbf71cade7a890128b61b839f6643e641a74c4f06a20a6c3f0d46341327226e109fbd95c1257598b8843a9ddb49830b62e2760d9af63ece1aa7df504638f20c704d7f62dc57f61811ce45de1f2e7746a3844bfb554b96af148d0394d7b33b47b18d065b4c11b180177f7e99dd6662f6c4744daaf219f57564fbd9a0b608d9f3734aeb7c373b9a1a1d907e9ac2f767c866306cbd1b5bd3344100cc6ad14786275c6dcb08810aaaffb011191be7319be7772fcff00d48c6870a08427e4a868fb8118d5c7976d86672980bc2c48153ac67a46645c10c6c639a0b6d313faeb49acfd481fe570c5c8853ea50bc1a93ca0a16c1157173f89821854fe7050b77e1936985d30346b8f1f212a4acd95a04ee87a46c67d5397bc20b118380f6ed9be8823a63e0405279e5275a6fdc3425ca2ba7f6a0cd091ddb52f2b57327a6c2ad07610f99b403e3a65cf5fff30ef147b1d0113e7ad6821e4e0b8e9edf716796905cbe23dfde91f2dbeae674494deda146208e03ab7476025b00d20799aa56865713326615aa22b8bf8e286bf79a7b299dbd6d1236f6495b42ab65bf5b428b43bab4bf13eed977f4e1af4d111b2d8b9d12a877de0c88858c38f719302d45581d9fdee6fd6163fb281ed52e835efc18ebcfd3fede69954a0df0f5cd8eec83b345a099fd8c83432e66ed702f3783005886cd7ed8b970e07f4be878c2b63904dbf293a76913551fefd7113cfff56c46201b67b732a60b8b5014c4b9be6d7d063bd5ec0f5d265eb4ddd2f56325bb6924b25bf22e82b91ebd8f153a5774af9bd184640870420d54c07c566abec8736ea098409627392d6f2bbc4b250b00fbb305826f4666b001fdeca16098d70cb655faf506fcd34300ca2c2d9895e55625828f8101c9698f9fa269093728d1988a8cd44731cfda1e94498bb8bcaefd5c4312d7eac26290cadd5fb65925b338c3778da121ab7131fb639739d4cc3f775f619e1fc263504ef0296b12e3d19ee97831afabde368302d5ab72af0dee42144b937e389dcff4a9c67229551281488b10ea1e6b1d763c076264bdf0014ac2c1a470374f6a29ce54a635273be80155937773c8521fc2242f8fe0422410fd20d7c309feaec46aa2f67044346804c7ec2b2b577840cabc289877018da375ea3f59fe31299b64610f8dfe563b1c159c71c2ab5f0057eb172e12870322c53374ee8c44175b74ac10212a91be017272753d181ea4a88c60865ecd0b1c68d3261c23a3e990374be890ef7f0ea6e00b7ea77dbd40c602b7b44b2c715f2f6cac86e58a1b860bb13296f53830eab8494c6f5e19a3fc5051041e9c9274ce44b4e1d4a73141d7a3e9f537b1083055da41292cb0b626eca8ae8cc00883df519c9de2153fd170f112db0532354ab569ea569467cc7d6a7f422dfa623b8d61bbfd6973b0542dae4a6c2daaaed82afc1b503e34e4e2f90fd3c09ec3ed7dd24532b3beacc721f96ec3a4b82070bfa10b2df0433e4c2ed34f5a22061699943ea0d5dada7e75f5bdbab918da2c856a562625fb45bb0a635b6e918232812132e0e7466e37ba67fd143478e563db4a7fbe9725dc23129d44b0ee82b05d7b8f13c753d19c4a5186362efc859cabe4624c96bbf469d146a51c80495f53b5eaa6dbbf71382d646f20b8fef26cdb97861bbdbc6f7eb4efe902f1a3528ef5ab4a722d1c715e59e30697956a199fb056d47464024375cc3156426c7f3df82c9edefc34854c301f066ec1c1", 0x1000}, {&(0x7f00000002c0)="6e37308e8a72127ef405a7193e106afb7de723360110684ab2760e5016cad9ae921a17bcc4cb573f1bb3c299638df025d80d4e562009255fb2891300245a587172df60263eccc26f9ec5a27e", 0x4c}, {&(0x7f0000000340)="9f72509657f3c176b69f9f502c8f431ee2d95aa3e68d3e0413fe2fec00be80cda4d783f8a2c272b98be2eb4605cd2500dec9d19cabef86861d6ea91fbcbd918ba74038829e6fae4d786801330fbe1c74f8805e22e6310a389805054e1973625a53fedc75a08be50dbd810d4631e5757e7b88", 0x72}, {&(0x7f0000001800)="b568bdc7734a790b927aaa516d33839e4acf4473a07a235ef17de86ae969575a9457ad305fcc557bd5ad88be473db65bd2310e60de9f5773661069ce2f78876eebb494f3112b84153f7ed6", 0x4b}], 0x7, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10, 0x4000845}], 0x1, 0x20008004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000001940)='net/psched\x00') 20:17:32 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/socket\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 20:17:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x5}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 20:17:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00', @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082}) 20:17:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc}}]}, 0x3c}}, 0x0) 20:17:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/203, 0xcb}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0907000000000000000001"], 0x14}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x200008d0}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 20:17:33 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20002, 0x4) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1\x00', 0x200}) syz_open_procfs(0x0, &(0x7f0000000080)='net/llc/socket\x00') 20:17:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) 20:17:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 20:17:34 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x40, 0x81}, 'port1\x00', 0x4, 0x80401, 0x3ff, 0x7ff, 0x200, 0x0, 0x5, 0x0, 0x4, 0xff}) 20:17:34 executing program 0: r0 = openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) 20:17:34 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 20:17:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000180)={0x8, 'wg0\x00', {'veth0_to_batadv\x00'}, 0x5}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x402443, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r5, 0x101}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2400000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r5, 0x8, 0x70bd2d, 0x5, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x0, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x0, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x1) 20:17:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 20:17:34 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 20:17:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRES64, @ANYRESDEC=r0, @ANYBLOB="15577e38029037b597ea96a68658d3b94d61cceff176b48cc25fd62a839aa16afb9e2c39747f9f1d6a244a1e673bb0d70a24594540f6c5f002283745aeff586081a5461c00e11dd5d6c5fdc6cf0fa5edb791331aba7626406661c63b4c704633fcb64353c0f9", @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESDEC=r5], 0xfffffecc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 20:17:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 20:17:34 executing program 3: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00', @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) [ 430.123482][T11285] IPVS: ftp: loaded support on port[0] = 21 20:17:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1f}) 20:17:34 executing program 5: r0 = io_uring_setup(0x2e36, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b40)=""/102400, 0x19000}, {&(0x7f0000019b40)=""/4096, 0x1000}], 0x2) 20:17:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000380)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x8, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_rs}}}}, 0x3a) 20:17:35 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept4(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:35 executing program 4: r0 = io_uring_setup(0x2e36, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)=""/102400, 0x19000}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 20:17:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff0100000000003693e0000100ff0500000005000000000000036915fa2c1ec28656aaa79bb94b46fe00000007", 0x40) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="35895ea52be425b9bbbbbbbb8100000086dd60163dac0a0088"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 20:17:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80400, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f00000001c0)={0x20, 0x2, 0x1f, 0x0, 0x2}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'bond0\x00', {}, 0xfffa}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24020000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x1, 0x0, 0x4, 0x3, 'syz1\x00', 0x3}) 20:17:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008580ad01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000000)) [ 431.748919][T11359] devpts: called with bogus options [ 431.775088][T11361] devpts: called with bogus options [ 431.907946][T11285] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 431.924230][T11285] device ipvlan0 entered promiscuous mode [ 432.038512][ T0] NOHZ: local_softirq_pending 08 [ 432.079524][T11285] IPVS: ftp: loaded support on port[0] = 21 [ 432.378129][ T9359] tipc: TX() has been purged, node left! 20:17:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 20:17:37 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x200e}) 20:17:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 20:17:37 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b0304000000004555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e10913072c8254f745b7d46cedd461a7ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba408ce7a3b0c6c699890e197f44241d331615545ba"], 0x191) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x40000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:17:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e217202cb18f6e2e2aba000000ff2e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5f11039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 20:17:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) [ 433.446850][T11410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:17:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2) 20:17:38 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private1, @in=@empty, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 20:17:38 executing program 2: stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 20:17:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:17:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 20:17:38 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/keycreate\x00') 20:17:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x81000000}, 0x0) 20:17:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$l2tp(r4, &(0x7f0000000080)=""/30, 0x1e, 0x2000, 0x0, 0x0) [ 434.506460][T11449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:17:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x400, 0x1f, 0x9, 0x2, 0x401}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x2}, &(0x7f0000000140)=0x8) 20:17:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) 20:17:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) 20:17:39 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000500)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200), 0x0) 20:17:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) [ 435.208205][ T9359] tipc: TX() has been purged, node left! 20:17:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000280)='.sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x0, 0x0, 0x0) 20:17:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 20:17:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:17:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0xe0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:40 executing program 5: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 20:17:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x401, 0x0) 20:17:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) 20:17:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r2, 0x80024322) 20:17:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000840)=[{r0}, {r1, 0x1324}], 0x2, 0x0, 0x0, 0x0) 20:17:40 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x31, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='net/llc/socket\x00') 20:17:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 20:17:41 executing program 5: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 20:17:41 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d8, 0x190, 0x260, 0x350, 0x0, 0x98, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x0, 0x0, 0x0, 0x1, 0x5], 0x5}, {0xffffffffffffffff, [0x5, 0x0, 0x2, 0x1, 0x1, 0x2], 0x6, 0x3}}}}, {{@ip={@multicast1, @multicast2, 0xff000000, 0x0, 'bridge0\x00', 'nr0\x00', {0xff}, {0xff}, 0xc, 0x0, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x2, 0x0, 0x4, 0x5], 0x1, 0x1}, {0x0, [0x3, 0x0, 0x4, 0x0, 0x4], 0x4}}}}, {{@ip={@local, @local, 0xff0000ff, 0xff, 'ip6gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x4a, 0x0, 0xc}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0x7, [0x2d, 0x3d, 0x3b, 0x18, 0x3a, 0x2c, 0x28, 0x24, 0x1f, 0x11, 0x39, 0x9, 0x3b, 0x37, 0x33, 0x1d], 0x0, 0x3, 0x7}}}, {{@ip={@private=0xa010102, @loopback, 0xffffffff, 0xff, 'vlan1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x67, 0x0, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ipcomp={{0x30, 'ipcomp\x00'}, {[0x4d3, 0x4d3], 0x1}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xd, "802c"}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004811}, 0x4040000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/58) 20:17:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:41 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:41 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 436.884379][T11538] xt_TCPMSS: Only works on TCP SYN packets 20:17:41 executing program 5: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 20:17:41 executing program 2: ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0xd077808efa08cdf8, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x703e, 0x3000, 0x20}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x73, 0x8, 0x4, 0xf}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) dup3(r1, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x4001fe) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) 20:17:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:41 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 437.075995][T11543] xt_TCPMSS: Only works on TCP SYN packets 20:17:41 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 437.262427][T11553] xt_TCPMSS: Only works on TCP SYN packets [ 437.440556][T11558] xt_TCPMSS: Only works on TCP SYN packets 20:17:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:42 executing program 5: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 20:17:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:42 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/socket\x00') 20:17:42 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:42 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:42 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/llc/socket\x00') ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x5, 0x0, 0x6, {0x9, 0x20, 0x3, 0x5}}) 20:17:42 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0xe0, 0xe0, 0xd0, 0x0, 0x1a8, 0x2e8, 0x2e8, 0x1a8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x6020000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x4, 0x3, [0x3b, 0x16, 0xc, 0x1, 0x18, 0x30, 0xc, 0x1b, 0xc, 0x8, 0x34, 0x2, 0x28, 0x2e, 0x34, 0x24], 0x0, 0x81ab, 0x8000}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xf}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/zero\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000b00)={{0x3c, @local, 0x4e23, 0x1, 'dh\x00', 0x8, 0x62288992, 0x58}, {@loopback, 0x4e23, 0x2000, 0xff, 0x9, 0x3}}, 0x44) 20:17:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800e000100697036677265746170"], 0x90}}, 0x0) 20:17:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:42 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 438.290792][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 438.300414][T11585] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. [ 438.307375][T11586] xt_TCPMSS: Only works on TCP SYN packets 20:17:42 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/rt_cache\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x283, 0x0) [ 438.499775][T11596] xt_TCPMSS: Only works on TCP SYN packets 20:17:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:43 executing program 5: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1, 0x0) 20:17:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @broadcast, 0x0, 0x0, '\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 20:17:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:43 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{@fixed}]}) [ 438.805224][T11607] xt_TCPMSS: Only works on TCP SYN packets 20:17:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 20:17:43 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) [ 439.246227][T11623] xt_TCPMSS: Only works on TCP SYN packets 20:17:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0x2e36, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x3, 0x0, 0x0) 20:17:43 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x4000000, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x9, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x13c) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 20:17:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:17:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:44 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) [ 439.657600][T11636] xt_hashlimit: max too large, truncated to 1048576 [ 439.672353][T11634] xt_TCPMSS: Only works on TCP SYN packets [ 439.721596][T11636] xt_hashlimit: max too large, truncated to 1048576 [ 439.789157][T11642] Dead loop on virtual device ip6_vti0, fix it urgently! [ 439.834292][T11642] Dead loop on virtual device ip6_vti0, fix it urgently! 20:17:44 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:44 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) [ 440.195165][T11653] xt_TCPMSS: Only works on TCP SYN packets 20:17:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) 20:17:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0xcac5, @empty}}, 0x1}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={r5, 0xd8c, 0x762b}, 0x8) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) renameat(r0, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000040)='./file0\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:45 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:45 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x5, 0x8}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:17:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:45 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:45 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:45 executing program 5: r0 = creat(0x0, 0x1) close(r0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x13}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a2, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff070000020000000500000000000000000000000100000001000000000000000500000000000000000000000000000000000000000000000000000000000000430000000900000075b3534f000000000000000010000000000000148d0100000000000000050000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000010000000000000000000000000000000000000000000000e5ffffffffffff"]) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000080)) close(r2) semop(0x0, &(0x7f0000000040)=[{0x3, 0x2}, {0x0, 0xffff}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003000)=[0x10]) 20:17:45 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:45 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:45 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:46 executing program 2: r0 = eventfd2(0xffffffc0, 0x80400) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x400100, 0x25) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:46 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:46 executing program 5: mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, 0x0) 20:17:46 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r4, 0x101}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2400000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd27}, 0x14}}, 0x8090) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2400000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x9c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 20:17:46 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:46 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:46 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 20:17:46 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 20:17:46 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x0, 0x0) 20:17:46 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:46 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 20:17:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @remote, 0x0, 0x0, '\x00', 'veth0_vlan\x00', {}, {}, 0x0, 0x0, 0x12}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:47 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) [ 442.679026][T11745] xt_hashlimit: size too large, truncated to 1048576 20:17:47 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x5}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 20:17:47 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 20:17:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x23, 0x2, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x38}], 0x1, 0x0) 20:17:47 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:47 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) [ 443.478472][T11769] xt_hashlimit: size too large, truncated to 1048576 20:17:48 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 20:17:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:48 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 444.013881][T11780] tcpmss_tg6_check: 1 callbacks suppressed [ 444.013899][T11780] xt_TCPMSS: Only works on TCP SYN packets 20:17:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd1, 0x2000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x3a1f) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, 0x0) 20:17:50 executing program 5: 20:17:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:50 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:50 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 445.885280][T11790] xt_TCPMSS: Only works on TCP SYN packets 20:17:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:50 executing program 5: 20:17:50 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 446.085621][T11798] xt_TCPMSS: Only works on TCP SYN packets [ 446.308105][T11808] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 20:17:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:50 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 446.487469][T11811] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 20:17:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:51 executing program 5: 20:17:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:51 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:17:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000180)=""/105}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={r3, 0x3}) 20:17:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0x130, 0x0, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}, [@common=@inet=@multiport={{0x0, 'multiport\x00'}, {0x0, 0x1, [0x4e21, 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e24, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4c8f0ebf5d09e8706001020b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8847085b0a30510b260600000000000020b8654e440000000024"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x41e) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r2}) [ 446.963275][T11829] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 20:17:51 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xc0ec312fb8aa42d2, r0, 0x180000000) 20:17:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000028c0)='/dev/vcsu#\x00', 0x6, 0x52200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r2, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/203, 0xcb}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0907000000000000000001"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0) fchmod(r2, 0x11) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:51 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/154) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250e0000002000018014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r3, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r6, @ANYBLOB="440001800800011e", @ANYRES32=r9, @ANYBLOB="08000300020000001400020074756e6c30000000000000000000000014000200766c616e3100000000000000000000000800030003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x80) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=0x6c) syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:51 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 20:17:51 executing program 5: r0 = io_uring_setup(0x2e36, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x4, 0x0, 0x0) 20:17:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:52 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 20:17:52 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0xffff8000, @empty, 0x3}}, 0x0, 0x9}, 0x90) ioctl$RTC_VL_CLR(r0, 0x7014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x43b) 20:17:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:52 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 20:17:52 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 20:17:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:52 executing program 3: 20:17:52 executing program 5: 20:17:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x104, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:52 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x2, 0x1}) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0xfffffecc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfffffffe) syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000200)={0x8, 0x5, 0x7, 0x4, &(0x7f0000000140)=""/4, 0x42, &(0x7f0000000180)=""/66, 0xcf, &(0x7f0000000300)=""/207}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) faccessat(r3, &(0x7f0000000040)='./file0\x00', 0x2) 20:17:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:52 executing program 3: 20:17:52 executing program 5: 20:17:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:53 executing program 3: 20:17:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:53 executing program 5: 20:17:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:53 executing program 3: 20:17:53 executing program 3: 20:17:53 executing program 5: 20:17:53 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4800c0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x1, r1}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x7}, 0xb) 20:17:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3d) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) capget(&(0x7f0000000000)={0x19980330, r6}, &(0x7f0000000080)={0x3f, 0x6, 0x2, 0x4, 0xfff, 0x10001}) dup(r5) fcntl$dupfd(r2, 0x406, r5) 20:17:53 executing program 3: 20:17:53 executing program 5: 20:17:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x128, 0x2e8, 0x2e8, 0x128, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @unspec=@TRACE={0x0, 'TRACE\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, '\x00', 'bridge_slave_0\x00', {}, {0xff}}, 0x0, 0x70, 0xb0}, @common=@inet=@SET1={0x0, 'SET\x00', 0x1, {{0x4, 0x2, 0x6}, {0x1, 0x2, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff2b) 20:17:54 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x7fff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) connect$caif(r3, &(0x7f0000000140)=@util={0x25, "0bc8c7e2471ba940365a901685857bc4"}, 0x18) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/ipx\x00') 20:17:54 executing program 5: 20:17:54 executing program 3: 20:17:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) 20:17:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x7, 0x2, 0x1, {0xf3d, 0x7ff, 0x10, 0xc158}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:54 executing program 5: 20:17:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:54 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) utime(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0xe75, 0x1f}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001300)={0x0, 0x2, 0x66, 0x8000}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001280)={0x0, 0xb0, &(0x7f00000011c0)=[@in6={0xa, 0x4e23, 0xffffffe1, @local, 0x7fffffff}, @in6={0xa, 0x4e22, 0x8, @private0, 0xffffffff}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @multicast2}, 0x4}, @in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}]}, &(0x7f00000012c0)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r2, 0x9, 0x7, 0x15, 0x0, 0xf001, 0x13, 0x10000, {r5, @in6={{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, 0x5, 0x0, 0x8000, 0xfffffffd, 0xf8}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r8, 0x1000, "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"}, &(0x7f0000001180)=0x1008) syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:54 executing program 3: 20:17:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) 20:17:54 executing program 5: 20:17:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xa00000, 0x8, 0x3, r3, 0x0, &(0x7f0000000040)={0x990a6e, 0x10001, [], @p_u16}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x4e22, @private=0xa010101}}) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) 20:17:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) 20:17:55 executing program 3: 20:17:55 executing program 5: 20:17:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:17:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) 20:17:55 executing program 1: ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x10001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0xee426000) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @descriptor="07caaa08c6633dcf"}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x1c1b02, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="fba8a96e2580f253aed5cdfd13648f4113d164b865f98d7a0611b6b7374a3439848d09a00bb628df382b8ad3004cc43f4ec2af0128d1790bb3cfe5d93309a0faed03d65ed28fc8c6d86646a091acb2dea59952794b15407ecd67a1198e6690977fc0b7f7e1b74a7de6c33b201cd3edebc36723aadce90a1f67e989fc0eefe74586bc5e1a5a5c5bb9d54a0992e8546bfe5a456a96f8a3b6248642612de65dda1a02704538de27f75c3e246ebaefd641023a9f5da3a1a1b3d20f11f97e306c8459645b887825953ee6"}) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') 20:17:55 executing program 3: 20:17:55 executing program 5: 20:17:55 executing program 0: 20:17:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:55 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_mr_vif\x00') 20:17:55 executing program 3: 20:17:56 executing program 0: 20:17:56 executing program 5: 20:17:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:56 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4002, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x800, 0x0) accept$inet(r1, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x2) 20:17:56 executing program 0: 20:17:56 executing program 3: 20:17:56 executing program 5: 20:17:56 executing program 0: 20:17:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:56 executing program 3: 20:17:56 executing program 5: 20:17:56 executing program 0: 20:17:56 executing program 3: 20:17:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:57 executing program 5: 20:17:57 executing program 0: 20:17:57 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = accept(r1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'geneve1\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/raw\x00') 20:17:57 executing program 3: 20:17:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:57 executing program 5: 20:17:57 executing program 0: 20:17:57 executing program 3: 20:17:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:57 executing program 5: 20:17:57 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs(r2, &(0x7f0000000100)='mountinfo\x00') 20:17:57 executing program 0: 20:17:57 executing program 3: 20:17:58 executing program 5: 20:17:58 executing program 0: 20:17:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:58 executing program 5: 20:17:58 executing program 3: 20:17:58 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000300)={0x7, 0x1, 0x0, 0x7, &(0x7f0000000280)=[{0x7fff, 0x3, 0xffff, 0x1}, {0xfff, 0x100, 0x1}, {0x9, 0x0, 0x200, 0x81}, {0xb0a, 0x5, 0x0, 0x5}, {0x7, 0x2dd9, 0x2, 0x5}, {0x2, 0x7ff, 0xbd1, 0x400}, {0x64, 0x4, 0xdec1, 0x3}]}) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="fc28e2510101e89fa77767c56b8507c6d65532d69df40a0f14abd3db7debb8bfa9c8fda01345e172ab9c89551b0087bedbeb890a2c62d0c25fd8b3c82380238046a1a5f87518ab9b98da81cc0060bf614b021aed47d42a612bce71b1eb9e684a34be6f35c982ae447ddf5a47242ab10a1bf24faf380b086f59348a1b0f87a4358b27426ff1d7e29b12d04d5f7e4c7e18af9e425bf30880074d86c0eb7ad6a9fd4c3ee05dc4df710256fdeb0b102e9c51cb0b5a67e3f00489723c51bc07f102ba2ea5d2d81b744ab7c5fb0a630543b724fd0f5b1a94ae7f5a") tkill(r0, 0x3d) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') 20:17:58 executing program 0: 20:17:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:58 executing program 3: 20:17:58 executing program 5: 20:17:58 executing program 0: 20:17:58 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x6, 0x3, 0xfffffffe, 0x8001, 0xfffffffd}) 20:17:58 executing program 5: 20:17:59 executing program 3: 20:17:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:59 executing program 0: 20:17:59 executing program 5: 20:17:59 executing program 3: 20:17:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000380)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x8, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_rs}}}}, 0x3a) 20:17:59 executing program 5: 20:17:59 executing program 3: 20:17:59 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x6, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffe01, 0x9, 0xff, 0x8001}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'geneve1\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/socket\x00') 20:17:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:17:59 executing program 5: 20:18:00 executing program 3: [ 455.661273][T12057] tipc: Failed to obtain node identity [ 455.667097][T12057] tipc: Enabling of bearer rejected, failed to enable media 20:18:00 executing program 5: 20:18:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:00 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x5}, 0x2) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r0) socket(0x0, 0x0, 0x0) 20:18:00 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x5}, 0x2) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 20:18:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) 20:18:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 20:18:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:01 executing program 5: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb892eb7750", 0x4d}, {&(0x7f00000003c0)="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", 0x2ba}], 0x2}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000afc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=""/174, 0xae}}], 0x2, 0x0, 0x0) 20:18:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:01 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0xe000008, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb892eb7750", 0x4d}, {&(0x7f00000003c0)="f0583ac29776b175c108434c251d2996f169fa34891154de372b60d30b7e13b8a820cc31b4dc8a98236205d5c5329b8482ae7ac5a999d57dc5a723cd5eede9b9edda4b522a6a4a42b8076e488ef139f0baa6bd32babe0c990c66a75c9956b8272a0ba6d52cbc094e996f6cb52e5bb9d2c5abeb1621f359b622fdbbe583c1d262bc28fc4d856e83a3b3cbcfcd83d8ed0c9184f31afac72189b6896a321993fdf79568ee4506113d22bef08fbc36aa5c9cbc600ffedd7d500aa3aa933dddaae7e82eac134d436af91d9a893a262388a7e8c3256a4042a07366998bc11e5884d9853f08f7eebebc4b41323144308cc64ae9913afe5bbed9765b08f447b723eb97199b2fd202ea2017e0cd5efa17f5e993396f29debd1159de0f8836d890b3d81d8cc2a3cf95b0910b6c739928a03a80284dda986c1d6f6899e445b5f8eec34985be9d75447646f44baf1321c3c112971c0caae973a32c05a69f091c9c9622e3e66d2458befc41e72805c8e7349d07e22f890db3d1f1409ef9f2027155844fbd4f7d104e62405dbce5a810181cd05072b94826780b6950180572e93543a736af99858cd6ed71ee4fe722e1e28c2329a6e2f1720bf8fecc96dd3434d6696851845630650548cb8d548a8cde246769913a743257954a8d4d9950ff419c25b5a2db3d817170d0ac70942acbf77bf9746f94bc45a07731ddb9b45d99994a649c3f7f19a75da137f0347babf5df5fea1cccc1392c0434f4cb80164a62e30eebc59f9f53e6f5673ad7753bfb50352ffd9541a943e2a9ac095e8321f7e48223e69398c9fb08429e37aae353cffa23de86fca4f74a5c15aa6d15acbe410341ff99132337400d65e5ab0b19dd7a68a74d69c2b44c7ad7d71e8c480e96c65f31c9bb3f1b1b9bd8a9d9e485cdcb361d5408461bb7eb42d22b8a140cda3239aa5033e57abe392ba62371cb35d49b5abe79587ed299709f542b4a08a72ffae9f488893e257ae1cd0cfc18e124bad5e476a3a18c97c40b571cdb511b69bfe60aad8a9909eb2a639d315b53e2cffcd13d04ca116aa88e90e7ce06658bca74921ee05461ae13076c8c51ae8fbd37eff7d61b8928069a469b1cd5076d9f156e84864e9f729dc8c6b4a967d8188138357a34e5eb1e350e4e4688170b5fa87c78e8a294dbf64d551a1a2e82eba19ac81bcf622a15c754725ae3b38c4240f9f5835aafd8ee6a95a9e83c11e68be8ad5835c49f0f623b168efdb670af3743a2bd64f7ed039f80dd1c9ad1d93d7ba6b43cd91a0339f95969f5bf4468757016f654ee67b07cd34cf60a643ca9e04770005a0025e24dcc14f5f712da46d5909714f73a7a3a64db16efa0b57fdec4acea474a8f5800b1dbbc264608aa6bdbc0cd0a21c2b4c7e7e7f825dc551389686b3e917926a48f1bc6a6695a5de4acc3a966bd33e7014327390db9a158271674a5f3d779195cb4ffc3e185d7b9e95eff5da68e89cdcc2b0bf1f390581f9dcc81db50382c69f811647307db2e033be601fc22a5cfd18679768111d3d8e98bc8f987db0c1911a3b39910d56abdead660cffa1c7e547d7868fb75796393f2748b102d79302e712e4f8e38d986626b2168151b80b32d6f8026831d4d00b52e519c6616711b17f95f4822329c151fc5deb482e98505385dd1fe855ddfed02bfba4caa14a8c0daa7be61d35a59499b02af98bf8ab586ad194229234c6528182e52e7abbb3ca22ed4b5e2e1b144d9a3ed3057b6e2383255e055b7317a96fb4261a48215b4a453d7edf9d11cef2e13dcc798e5b5f27f4a6bac604fe04fab212894888bd035749c91ce42bfbd7fb7df5211f77c42bfae9a077303503c890207ffb987f65b183ecb495fb242ceac7d8b546376b9a8d2f7baf71374a69bfd7cf20692a16d4155dff1a1a00e8b4488ebba6268d15ace5f13a580ab2f8308fbbee8722a77270e5fb7546d4b5493f2247b14aa2e0e4a927ecc8f9f", 0x574}], 0x2}}], 0x400000000000398, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000afc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=""/174, 0xae}}], 0x2, 0x0, 0x0) 20:18:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 20:18:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, 0x0) io_setup(0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) 20:18:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000109010100000000000000000700000a08000340fffffffd08000540000000200900010073797a31000000000c000480080001400001000808000640000000000900010073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x90}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000840) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3b}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x64}, 0x1, 0x0, 0x0, 0x44891}, 0x4) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8020000", @ANYRES16=r6, @ANYBLOB="76142abd7000fedbdf250200000014000300fc02000000000000000000000000000008000500e00000011400060076657468315f746f5f6261746164760014000200fe8800000000000000000000000000012700070073797374656d5f753a6f626a6563745f723a746170655f6465766963655f743a7330000008000500ac1e01012300070073797374656d5f753a6f626a6563745f723a696e697463746c5f743a733000001400020020010000000000000000000000000001080005007f000001"], 0xc8}, 0x1, 0x0, 0x0, 0x87a5fdf8e8851aff}, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000)={0x921b, 0xf00, 0xfffffffd, 0x0, 0x4}, 0x14) 20:18:02 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 20:18:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 20:18:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000380)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x14, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x1, "bee17eb718877edb6565"}]}}}}}, 0x46) 20:18:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10201, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000040)={0x1, "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"}) 20:18:02 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) 20:18:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 20:18:02 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20100000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) 20:18:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20:18:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)) 20:18:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)) 20:18:03 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:18:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b"], 0x1c}}, 0x0) 20:18:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000001080)={0xffffffffffffffff}) ioctl$VIDIOC_G_FMT(r3, 0xc0cc5604, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 20:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 20:18:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:18:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 20:18:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 20:18:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x7f, 0x14, 0x30313050, 0x0, [0x2], [0xfe]}) 20:18:04 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0xe000008, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb892eb7750", 0x4d}, {&(0x7f00000003c0)="f0583ac29776b175c108434c251d2996f169fa34891154de372b60d30b7e13b8a820cc31b4dc8a98236205d5c5329b8482ae7ac5a999d57dc5a723cd5eede9b9edda4b522a6a4a42b8076e488ef139f0baa6bd32babe0c990c66a75c9956b8272a0ba6d52cbc094e996f6cb52e5bb9d2c5abeb1621f359b622fdbbe583c1d262bc28fc4d856e83a3b3cbcfcd83d8ed0c9184f31afac72189b6896a321993fdf79568ee4506113d22bef08fbc36aa5c9cbc600ffedd7d500aa3aa933dddaae7e82eac134d436af91d9a893a262388a7e8c3256a4042a07366998bc11e5884d9853f08f7eebebc4b41323144308cc64ae9913afe5bbed9765b08f447b723eb97199b2fd202ea2017e0cd5efa17f5e993396f29debd1159de0f8836d890b3d81d8cc2a3cf95b0910b6c739928a03a80284dda986c1d6f6899e445b5f8eec34985be9d75447646f44baf1321c3c112971c0caae973a32c05a69f091c9c9622e3e66d2458befc41e72805c8e7349d07e22f890db3d1f1409ef9f2027155844fbd4f7d104e62405dbce5a810181cd05072b94826780b6950180572e93543a736af99858cd6ed71ee4fe722e1e28c2329a6e2f1720bf8fecc96dd3434d6696851845630650548cb8d548a8cde246769913a743257954a8d4d9950ff419c25b5a2db3d817170d0ac70942acbf77bf9746f94bc45a07731ddb9b45d99994a649c3f7f19a75da137f0347babf5df5fea1cccc1392c0434f4cb80164a62e30eebc59f9f53e6f5673ad7753bfb50352ffd9541a943e2a9ac095e8321f7e48223e69398c9fb08429e37aae353cffa23de86fca4f74a5c15aa6d15acbe410341ff99132337400d65e5ab0b19dd7a68a74d69c2b44c7ad7d71e8c480e96c65f31c9bb3f1b1b9bd8a9d9e485cdcb361d5408461bb7eb42d22b8a140cda3239aa5033e57abe392ba62371cb35d49b5abe79587ed299709f542b4a08a72ffae9f488893e257ae1cd0cfc18e124bad5e476a3a18c97c40b571cdb511b69bfe60aad8a9909eb2a639d315b53e2cffcd13d04ca116aa88e90e7ce06658bca74921ee05461ae13076c8c51ae8fbd37eff7d61b8928069a469b1cd5076d9f156e84864e9f729dc8c6b4a967d8188138357a34e5eb1e350e4e4688170b5fa87c78e8a294dbf64d551a1a2e82eba19ac81bcf622a15c754725ae3b38c4240f9f5835aafd8ee6a95a9e83c11e68be8ad5835c49f0f623b168efdb670af3743a2bd64f7ed039f80dd1c9ad1d93d7ba6b43cd91a0339f95969f5bf4468757016f654ee67b07cd34cf60a643ca9e04770005a0025e24dcc14f5f712da46d5909714f73a7a3a64db16efa0b57fdec4acea474a8f5800b1dbbc264608aa6bdbc0cd0a21c2b4c7e7e7f825dc551389686b3e917926a48f1bc6a6695a5de4acc3a966bd33e7014327390db9a158271674a5f3d779195cb4ffc3e185d7b9e95eff5da68e89cdcc2b0bf1f390581f9dcc81db50382c69f811647307db2e033be601fc22a5cfd18679768111d3d8e98bc8f987db0c1911a3b39910d56abdead660cffa1c7e547d7868fb75796393f2748b102d79302e712e4f8e38d986626b2168151b80b32d6f8026831d4d00b52e519c6616711b17f95f4822329c151fc5deb482e98505385dd1fe855ddfed02bfba4caa14a8c0daa7be61d35a59499b02af98bf8ab586ad194229234c6528182e52e7abbb3ca22ed4b5e2e1b144d9a3ed3057b6e2383255e055b7317a96fb4261a48215b4a453d7edf9d11cef2e13dcc798e5b5f27f4a6bac604fe04fab212894888bd035749c91ce42bfbd7fb7df5211f77c42bfae9a077303503c890207ffb987f65b183ecb495fb242ceac7d8b546376b9a8d2f7baf71374a69bfd7cf20692a16d4155dff1a1a00e8b4488ebba6268d15ace5f13a580ab2f8308fbbee8722a77270e5fb7546d4b5493f2247b14aa2e0e4a927ecc8f9f", 0x574}], 0x2}}], 0x400000000000398, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000afc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=""/174, 0xae}}], 0x1, 0x0, 0x0) 20:18:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}}, 0x0) [ 460.189038][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 460.207064][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 460.220414][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 460.237139][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 460.253574][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 460.267480][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 460.283055][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 20:18:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="2200000000000004010000000500000000000000801f0001001c00fbff"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}}, 0x0) 20:18:05 executing program 3: socket$kcm(0x10, 0x0, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') openat$dlm_plock(0xffffff9c, 0x0, 0x44841, 0x0) tkill(0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x0, 0x0, {0x40, 0x0, 0x0, 0x0, 0x0, 0xbef3, 0x1, 0x0, 0x0, 0x6a}, ["", "", "", "", ""]}, 0x38}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) [ 460.853496][T12225] kvm [12224]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 [ 461.044861][T12225] kvm [12224]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 20:18:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}}, 0x0) 20:18:05 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) 20:18:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x165000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x4000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20}], 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x0, 0xffff}, {0x4, 0x3}], r4}, 0x18, 0x2) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="786411d6765fdfb3df97abf67f") 20:18:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 461.624319][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 461.638576][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 461.648208][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 461.657744][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 461.667581][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 461.677345][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 461.687223][T12249] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 20:18:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1], 0x38}}, 0x0) 20:18:06 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x10) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 20:18:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 20:18:06 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 461.960070][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() preadv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0xc04) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @mcast2, 0x5}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0xc04) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000200)) preadv(r2, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0xc04) set_thread_area(&(0x7f0000000080)={0x800, 0x1000, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x600000c, 0x110, r2, 0x56) syz_open_pts(0xffffffffffffffff, 0x0) 20:18:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1], 0x38}}, 0x0) 20:18:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x40, 0x6, 0x3f}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xde002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000001c0)={0x3, 0x6, 0x7ff, 0x100, 'syz0\x00', 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="632098ce88ff726d40"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r7, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000340)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xbd6c}}}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0xe0, 0xe0, 0xe0, 0xe0, 0x0, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x6000, 0x1003, 0x0, "a4bcf0ebf5d09e870e001000b50009000000000000008846085b0a3089b8654e44dd000000000001000000000000000000000000050000000000010400"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, 0x0, 0x0, '\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0x1c8, 0x208}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x12, 0x6, 0x6, 0x5, 'syz0\x00', 'syz0\x00', {0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x119) 20:18:06 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 462.590892][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1], 0x38}}, 0x0) [ 463.019683][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5], 0x20}, 0x1, 0xc00000000000000}, 0x0) 20:18:09 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 20:18:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) 20:18:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x2, 0x3, 0x370, 0x0, 0xe0, 0xe0, 0xd0, 0x0, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x6020000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xfffe, 0xb, [0x17, 0x26, 0x19, 0x9, 0x13, 0x0, 0x2a, 0xa, 0x1, 0x13, 0x2d, 0xe, 0x28, 0x2c, 0x3a, 0x22], 0x2, 0x100, 0x1}}}, {{@ip={@local, @multicast1, 0x0, 0xffffffff, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x7, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa352fae0cab9b44907bc6c9e16cc4450f0efc100"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x40048015}, 0x20008000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2400000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008015) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x0, 0x87}, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0xfd}], 0x1) 20:18:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) statx(0xffffffffffffffff, 0x0, 0x6000, 0x80, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {}, {0x20, '))]'}], 0xa, "89a07a6e2df7b87571de145f69f92180f85bb106b314cf2eb8ebd2b6b19ff1acfcd79eae7456b38f7239bf4a820917"}, 0x53) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={0x0, 0x19c}}, 0x80) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000b00) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) [ 464.720985][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 464.812026][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.821542][T12308] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:09 executing program 0: syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa9488e7"], 0x0) 20:18:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) 20:18:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) [ 465.262264][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.284495][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.293961][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000240)={@rand_addr, @remote}, &(0x7f0000000280)=0x8) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000f70310002dbd7000ffdbdf2507000000070000002e2f66696c65302e2f66696c653100003595e2b59cad886ca9be939a7a30a412d5cd835f24d7b9e0c08199b81401438b925fd4d22832f8753691c01e27d31f5c817538a14ca0427822ff6e9db53858dc8887a752fe1802e001515cc7b6a034455428c3ee8a35d2db1ca7d8216a672021480c4b9c2b0dee1713602a0b1011e3bcb69c69cdf91fa049d12b55feac018678af3bcd81b5"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 20:18:10 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) 20:18:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500}}], 0xf, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0307000300fffffcfe000100000004000180"], 0x18}}, 0x0) 20:18:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) 20:18:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6], 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 466.044470][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 20:18:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={{0x2, 0x0, @descriptor="37e895c5721ad6ed"}, 0x74, r1, [], "56f895e4f1bf3e4bac655537afbc04182a9f0611abab691d12fa34d4168aad04d1093dd5cc7097ee28836c68db05edb56086c65f78777de6796eeb4b2f02de98440d8e39877db730b189dde14a4ce4fe6665352740f3ba103a79e097311170db72937420dfcb0d0b471ac73a60f39cd79e6954f7"}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x400000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 20:18:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_flags}) msgctl$IPC_RMID(0x0, 0x0) 20:18:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000"], 0x38}}, 0x0) 20:18:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) [ 466.572363][T12379] encrypted_key: insufficient parameters specified [ 466.644443][T12385] encrypted_key: insufficient parameters specified 20:18:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @echo_request}}}}, 0x3a) 20:18:11 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@initdev, @loopback}, &(0x7f0000000040)=0x8) 20:18:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000"], 0x38}}, 0x0) 20:18:11 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="626417beebafafc12836f0dd3fc25a01a9ddcf07e30f72536a67e4ca25f3743c490a9cb8d61e94590e8af865c9d1e86438a638119ac748e213") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0}) 20:18:11 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) [ 467.364284][T12408] __nla_validate_parse: 5 callbacks suppressed [ 467.364317][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xf, 0xfffffffd, "abd61f4f850584"}, &(0x7f0000000100), 0x1400) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:12 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000"], 0x38}}, 0x0) 20:18:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(0x0, &(0x7f0000000340)=[&(0x7f00000002c0)=']^\\+!(\xa1&\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='\x00', 0x0, &(0x7f0000000480)='/dev/nullb0\x00', &(0x7f0000000500)='\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={0x0, 0x4}, &(0x7f0000000200)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(0xffffffffffffffff) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) 20:18:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(0x0, &(0x7f0000000340)=[&(0x7f00000002c0)=']^\\+!(\xa1&\x00'], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={0x0, 0x4}, &(0x7f0000000200)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) [ 467.944677][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:13 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x0) 20:18:13 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff6671"], 0x38}}, 0x0) 20:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000003a00)=""/242, 0xf2}], 0x1, 0xe1) 20:18:13 executing program 2: mq_open(&(0x7f0000000000)='NFLOG\x00', 0x40, 0x40, &(0x7f0000000040)={0x5, 0x3, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 468.732068][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:13 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:13 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf0d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) 20:18:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff6671"], 0x38}}, 0x0) 20:18:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38}, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) 20:18:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40800, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:13 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 469.255190][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:13 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000ffffffffffff0000000000008100000086dd6000000000183afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x56) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 20:18:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f0000000040)}, 0x20) 20:18:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff6671"], 0x38}}, 0x0) 20:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x7fffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x282, 0x832}) 20:18:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x0) [ 469.751294][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:14 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf0d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) 20:18:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c"], 0x38}}, 0x0) 20:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(0xffffffffffffffff, 0x0, 0x101001, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0xb0003}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x35, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:18:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x0) 20:18:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 20:18:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x0) 20:18:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c"], 0x38}}, 0x0) 20:18:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) fchdir(r0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 20:18:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') write$binfmt_misc(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x0) 20:18:15 executing program 3: r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800, 0x9) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000003c0)=0x5, 0x4) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000200)=""/183) sendto$inet6(r1, 0x0, 0x0, 0x41, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2a308a2, &(0x7f00000002c0)=ANY=[]) eventfd(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4040, 0x0) memfd_create(&(0x7f0000000040)=',##\xa6\x00', 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) 20:18:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x18, 0x11, 0x67}}], 0x18}, 0x0) 20:18:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xc4b, 0x40400) fcntl$setpipe(r1, 0x407, 0x3ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c"], 0x38}}, 0x0) 20:18:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x18, 0x11, 0x67}}], 0x18}, 0x0) 20:18:15 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 20:18:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c00"], 0x38}}, 0x0) 20:18:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xff000000, 0x0, 'nr0\x00', 'ip_vti0\x00', {}, {0xff}, 0x1, 0x2, 0x54}, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0xffffffff, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'netdevsim0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x18, 0x11, 0x67}}], 0x18}, 0x0) 20:18:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 20:18:16 executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000180)=""/170, 0xaa, 0xcae) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000009002f6465762f6b766d0008628c47ce6b7d291ec63d8a354d1e0512734fd9a52d140e9285ccdfa3f7c243a5259b3497a4bce616e49ec89fb704552dde9ca8cccc7526e9339dbaf97319c67b14b21d1d1a2a6877ad2cfedc326ccad05491bb732c5f54d410c55119fa82e3c58fc9dd8f0e04"], 0x12) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) getpgrp(0x0) 20:18:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c00"], 0x38}}, 0x0) 20:18:16 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x280, 0x0, 0xe0, 0xe0, 0x110, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa0, 0x110, 0x0, {0x6020000}, [@common=@ah={{0x30, 'ah\x00'}, {[0x8000, 0x9], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}, {0x3, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 20:18:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 20:18:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x3}]}]}}}]}, 0x64}}, 0x0) [ 472.143448][T12574] netem: unknown loss type 3 [ 472.148284][T12574] netem: change failed 20:18:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c00"], 0x38}}, 0x0) 20:18:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x9, 0x200, 0x7ff, 0x40}, 'syz1\x00', 0x9}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x3ff, 0x4) [ 472.265068][T12578] netem: unknown loss type 3 [ 472.270072][T12578] netem: change failed 20:18:16 executing program 3: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101800) 20:18:16 executing program 5: 20:18:17 executing program 2: r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$negate(0xd, r0, 0x1, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 472.728863][T12594] encrypted_key: insufficient parameters specified [ 472.744787][T12594] encrypted_key: insufficient parameters specified [ 472.761556][T12594] encrypted_key: insufficient parameters specified [ 472.769892][T12596] encrypted_key: insufficient parameters specified 20:18:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x12, 0x11, 0x67}}], 0x12}, 0x0) 20:18:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:17 executing program 0: 20:18:17 executing program 3: 20:18:17 executing program 5: 20:18:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x0, @local, 0x8}], 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000140)=""/39) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 473.034485][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) 20:18:17 executing program 5: 20:18:17 executing program 0: 20:18:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:17 executing program 3: [ 473.415028][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:17 executing program 0: 20:18:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) 20:18:18 executing program 3: 20:18:18 executing program 5: 20:18:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) [ 473.773115][T12624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:18 executing program 3: 20:18:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1140}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x5, 0xfffffffffffffd29) 20:18:18 executing program 5: 20:18:18 executing program 0: 20:18:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) 20:18:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:18 executing program 3: 20:18:18 executing program 0: 20:18:18 executing program 5: 20:18:18 executing program 3: 20:18:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}, 0x0) 20:18:18 executing program 0: 20:18:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000300)=""/136) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000580)=""/62) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4cdf66d82ad29a42658c1adcd621b16b000000000800000083a43fa67236aba5d63e00008a901e196ea77d85ce6ce6ee914ef198040000000000000049c106e2abdc5ff8e015cdad0f468158e2d08da3a3f8da68e2505e92cd864540bd26612a7bca72e3b33a013f68d7b4254bea767fb6cb2c187e9b99521bd1c7da23bab3b2a5a55693d614ff33d195fb336218feb2"], 0x12, 0x1) close(r5) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000500)={0x9f0000, 0x7fffffff, 0x0, r7, 0x0, &(0x7f00000004c0)={0xa30001, 0x4, [], @value=0x6}}) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000003c0)={0x20, 0xc, 0x4, 0xe000, 0x4, {0x77359400}, {0x3, 0x6, 0x7, 0xff, 0x6, 0x1f, "1822fb7c"}, 0x6, 0x2, @offset=0x2, 0x8, 0x0, r4}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x90, 0xe0, 0xe0, 0x90, 0x0, 0x190, 0x2e8, 0x2e8, 0x190, 0x2e8, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'veth0_macvtap\x00', 'vlan0\x00', {}, {}, 0x33, 0x2, 0x1}, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @unspec=@TRACE={0x0, 'TRACE\x00'}}, {{@ip={@private=0xa010100, @multicast2, 0xffffffff, 0x0, '\x00', 'veth0_vlan\x00', {}, {}, 0x21}, 0x0, 0x1c8, 0x208, 0x0, {}, [@inet=@rpfilter={{0x0, 'rpfilter\x00'}, {0xa}}]}, @unspec=@CT2={0x0, 'CT\x00', 0x2, {0xc, 0x4, 0x100, 0xffff, 'snmp\x00', 'syz0\x00', {0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe47) 20:18:19 executing program 5: 20:18:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:19 executing program 3: 20:18:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}, 0x0) 20:18:19 executing program 0: 20:18:19 executing program 0: 20:18:19 executing program 5: 20:18:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:19 executing program 3: 20:18:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}, 0x0) 20:18:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x22000, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=""/140, 0x8c}) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) 20:18:20 executing program 0: 20:18:20 executing program 3: 20:18:20 executing program 5: 20:18:20 executing program 1: 20:18:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) prctl$PR_SET_FPEXC(0xc, 0x3) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="831fad3520845d3874260f7e7ddf0654b61e3797d5b74681af3bfe09a9b59a7918189bbebde07f6dbb51157d40ca05ab04fa516f8e67e42775feca7c5c654b163a5d4440e8d43232b45238e68f0fac82aa47d78c51973c2bced9f23f3b42b15da4a940e2eef66d9966aec0c792f506ea4fbc3bc54f162ca3be5131b9e9442d2956a662c47fe1c4733200de0c79d93f33ce79a35f0f9148649619807618cef11d5b19b513c082e38502c37f1f6f871861417aab", 0xb3}, {&(0x7f00000000c0)="0f058f3242aa8e9866e1b72977d18ad944bda90df4ba27e80330cce1125d6cfc01188a6bd7b6a9a521aed445e2180da9cf8aab24118794b8d8315bb33ec7fd585797083868e7d02d89ec38e6eaf54d6782c412cd3a558ca7d70a12915d2c8338f69fa31971014e6d58a27c853a97fa7c0d4baea99c36f33ceaff65da0268ffbdf31f8e8a633981862541f838a43b6e0f1848cce18272e7f4221e585e871c7b8c4eea844118b2b88a835629fbf81ce6bdaac41a335a717ee3b7e34641801ce073fd4447d49038a8a03ab5dcad3eaf3037427599815fd527d4f175b5c29a8c7f6d546420f2e038", 0xe6}, {&(0x7f00000001c0)="3b340a075991e0318ffa0520cd06638cdce992b27413cd173bd4ba596231fafb0f58f844c9a8043109c56639c66890ca61381aa67233f6f9677ce1280d40570fa622407b3083acab755aaccf4cd1e973bbb05d916ed694335d7a6ca46bdf91bca61807c9b75b4cfe9e4fff0fe02f5fd4d2afd931ddee3e3d00c0a030f46b370c97d43412aa8e2fecce9fdd1c0f8fb4edbb9e2ac93941ad6c5d854860fc525ceb0d88fdbbc8f5d9d65347b7b190670b7d8972cd083553416e519662e0", 0xbc}], 0x3, 0xfff) 20:18:20 executing program 3: 20:18:20 executing program 0: 20:18:20 executing program 1: 20:18:20 executing program 5: 20:18:20 executing program 3: 20:18:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:20 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x6, 0x1, 0x0, 'queue1\x00', 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:21 executing program 0: 20:18:21 executing program 1: 20:18:21 executing program 5: 20:18:21 executing program 3: 20:18:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:21 executing program 0: 20:18:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socket$l2tp6(0xa, 0x2, 0x73) 20:18:21 executing program 1: 20:18:21 executing program 5: 20:18:21 executing program 3: 20:18:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xcdd77f1be8cb9c0f}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000128bd7000ffdbdf250c0000006000038008000300030000001400020064756d6d793000000000000000000000140002006c6f00000000000000000000000000000800010003000000060007004e2300000800010001000000140002007663616e3000000000000000000000001c0002800800060000feffff060002004e1f000008000400f9ffffff"], 0x90}, 0x1, 0x0, 0x0, 0x40802}, 0x40000) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000080)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-ce\x00'}, {&(0x7f0000000000)=""/2, 0x2}, &(0x7f0000000040), 0x9}, 0xa0) 20:18:21 executing program 0: 20:18:21 executing program 1: 20:18:21 executing program 3: 20:18:21 executing program 5: 20:18:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:22 executing program 0: 20:18:22 executing program 1: 20:18:22 executing program 5: 20:18:22 executing program 3: 20:18:22 executing program 0: 20:18:22 executing program 1: 20:18:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:22 executing program 5: 20:18:22 executing program 3: [ 478.149369][T12731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:22 executing program 0: 20:18:22 executing program 1: 20:18:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000511e046b9df334e398c19d5d435ac8f6b0162bab38c897a196e10c3796158eb6df0b4f4a244a7d626e3879f5add05f704a970310426c2b22fa", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x4, 0xee00}, {}], {0x4, 0x1}, [{0x8, 0x5}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x8}, {0x8, 0x2}, {}]}, 0x6c, 0x2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x1000}, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x20}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0xdab, 0xa, 0x80, 0x100, 0x1d, 0x0, r9}, {0x3, 0x3, 0xf08b, 0x3f, 0x3, 0xffffffff, 0x56, 0x1}, {0x8, 0x401, 0x1}, 0x2, 0x6e6bb6, 0x0, 0x0, 0x2, 0x3}, {{@in6=@private2, 0x4d5, 0x3c}, 0x0, @in=@local, 0x3503, 0x3, 0x0, 0x5, 0x800, 0x3, 0x5c40}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'macvtap0\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:22 executing program 5: 20:18:22 executing program 3: 20:18:23 executing program 0: 20:18:23 executing program 1: [ 478.576652][T12743] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:23 executing program 5: 20:18:23 executing program 3: 20:18:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:23 executing program 0: 20:18:23 executing program 1: 20:18:23 executing program 5: [ 479.001593][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:23 executing program 3: 20:18:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x110, 0xe0, 0xe0, 0x110, 0x0, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr=0x64010101, 0xff, 0xff, 'netpci0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0xc8, 0x110, 0x0, {0x6020000}, [@common=@ah={{0x30, 'ah\x00'}, {[0x1, 0x2]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xb4, 0x1f, 'pptp\x00', {0x100}}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x4, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x3], 0x4, 0x6}, {0xffffffffffffffff, [0x2, 0x4, 0x5, 0x2, 0x3, 0x1], 0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 20:18:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:23 executing program 0: 20:18:23 executing program 1: 20:18:23 executing program 5: 20:18:23 executing program 3: [ 479.480253][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:24 executing program 0: 20:18:24 executing program 5: 20:18:24 executing program 3: 20:18:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:24 executing program 1: 20:18:24 executing program 0: [ 479.942516][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:24 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}], 0x1, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x0, 0x5}, {0xdb4, 0x4}], r1}, 0x18, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)={0x9, 0x8}) 20:18:24 executing program 5: 20:18:24 executing program 3: 20:18:24 executing program 1: 20:18:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:24 executing program 0: 20:18:24 executing program 5: 20:18:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0x80001) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) [ 480.385256][T12782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:24 executing program 1: 20:18:24 executing program 3: 20:18:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:25 executing program 0: 20:18:25 executing program 5: 20:18:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) fanotify_init(0x3, 0x400) 20:18:25 executing program 1: 20:18:25 executing program 3: [ 480.821210][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:25 executing program 0: 20:18:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:25 executing program 5: 20:18:25 executing program 3: 20:18:25 executing program 1: 20:18:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x17}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 481.176482][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:25 executing program 0: 20:18:25 executing program 5: 20:18:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/18, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:25 executing program 3: 20:18:25 executing program 1: [ 481.579354][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:26 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x630, 0x8000, 0x0, 0x7c00000, 0x7, 0x10001, 0x2, r3}, &(0x7f0000000080)=0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0xf8, 0xe0, 0xe0, 0xf8, 0x0, 0x1a8, 0x2e8, 0x2e8, 0x1a8, 0x2e8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xff, 0x0, 'syzkaller1\x00', 'vcan0\x00', {0xff}, {0x263558937563da9f}, 0x5e, 0x3c90d2397c54dda4, 0x22}, 0x0, 0x98, 0xf8, 0x0, {0x6020000}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x1000, 0xd, [0x3c, 0x2e, 0x6, 0x845, 0x1f, 0x2, 0x2d, 0x34, 0x7, 0x22, 0x11, 0x7, 0x29, 0x21, 0xe, 0x2d], 0x0, 0x6, 0x8}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00', {0x80}, {0xff}, 0x1, 0x2}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x20, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 20:18:26 executing program 0: 20:18:26 executing program 5: 20:18:26 executing program 3: 20:18:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:26 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socket$inet(0x10, 0x3, 0x0) getdents64(r0, &(0x7f0000000380)=""/87, 0x105) getdents64(r0, &(0x7f0000000280)=""/156, 0x9c) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x24) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:18:26 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x500, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x500, 0x0, 0x3}, 0x20) dup3(r0, r1, 0x0) [ 482.023955][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:18:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x320c) 20:18:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth0_to_bond\x00'}, 0x18) setsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, 0x0) [ 482.176757][T12832] ptrace attach of "/root/syz-executor.1"[12828] was attempted by "/root/syz-executor.1"[12832] 20:18:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:26 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00080048"], 0x0) [ 482.390438][T12840] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 20:18:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_RMID(0x0, 0x0, 0x10) 20:18:27 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2a000400) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) dup3(r2, r3, 0x0) 20:18:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @private}, 0x10) 20:18:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\v\r\x00'/19, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700f3ff667100000c0002"], 0x38}}, 0x0) 20:18:27 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c654555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e109"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:18:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 20:18:27 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c654555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e109"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:18:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8f, 0x0, 0x1, 0x5, 0x0, 0xf5, 0x2a02, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10, 0x2, 0x401, 0x4, 0x5, 0x0, 0xedb}, 0x0, 0x8, r0, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20000, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) 20:18:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) pipe(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1a002, &(0x7f0000000180)={0x77359400}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 20:18:27 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c654555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e109"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:18:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "0000e8ff000000000000000000000000000001000000010000002400002300000000000017000000000000000000000000000000000000000800"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 20:18:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x201300, 0x0, 0x30051, r4, 0x0) 20:18:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x1f0, 0xa8, 0xe0, 0xe0, 0xa8, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x6020000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x1}, {0xffffffffffffffff, 0x6, 0x4}, {0x3, 0x0, 0x7}, 0x2, 0x4}}}, {{@ip={@local, @empty, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) 20:18:27 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c654555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e109"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:18:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e309147e55f0941e6acdf84a7c54c4197353a6db164d43af67abc73a0230bd8b6ad958cf00fd4554d20beef39fa557deccfb0e7ca127e76200"}, 0x80, 0x0}}], 0x1, 0x0) 20:18:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}}, 0x0) 20:18:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe1, 0x131000) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000080), 0x80000000, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x8}, 0x8) 20:18:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "0000e8ff000000000000000000000000000001000000010000002400002300000000000017000000000000000000000000000000000000000800"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 483.924018][T12905] 8021q: VLANs not supported on ipvlan1 20:18:28 executing program 4: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 20:18:28 executing program 3: socket$kcm(0x2, 0x2, 0x73) 20:18:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 484.770059][ C1] sctp: protocol violation state 1 chunkid 5 20:18:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "0000e8ff000000000000000000000000000001000000010000002400002300000000000017000000000000000000000000000000000000000800"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 20:18:29 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) [ 484.924124][T12916] not chained 20000 origins [ 484.928678][T12916] CPU: 1 PID: 12916 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 484.937349][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.947414][T12916] Call Trace: [ 484.950721][T12916] dump_stack+0x1df/0x240 [ 484.955069][T12916] kmsan_internal_chain_origin+0x6f/0x130 [ 484.960802][T12916] ? kmsan_get_metadata+0x4f/0x180 [ 484.965929][T12916] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 484.971836][T12916] ? __msan_poison_alloca+0xf0/0x120 [ 484.977134][T12916] ? kmsan_get_metadata+0x4f/0x180 [ 484.982258][T12916] ? kmsan_internal_set_origin+0x75/0xb0 [ 484.987906][T12916] ? __msan_poison_alloca+0xf0/0x120 [ 484.993203][T12916] ? kmsan_get_metadata+0x4f/0x180 [ 484.998353][T12916] ? kmsan_get_metadata+0x4f/0x180 [ 485.003456][T12916] ? kmsan_set_origin_checked+0x95/0xf0 [ 485.008989][T12916] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 485.015043][T12916] ? _copy_from_user+0x15b/0x260 [ 485.019963][T12916] ? kmsan_get_metadata+0x4f/0x180 [ 485.025059][T12916] __msan_chain_origin+0x50/0x90 [ 485.029985][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.034587][T12916] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.040375][T12916] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 485.046514][T12916] ? get_timespec64+0x24c/0x2e0 [ 485.051357][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.056292][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.061145][T12916] do_syscall_64+0xb0/0x150 [ 485.065640][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.071514][T12916] RIP: 0033:0x45c1d9 [ 485.075384][T12916] Code: Bad RIP value. [ 485.079433][T12916] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 485.087826][T12916] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 485.095782][T12916] RDX: 04000000000006b9 RSI: 0000000020002d80 RDI: 0000000000000003 [ 485.103736][T12916] RBP: 000000000078bff0 R08: 0000000020000180 R09: 0000000000000000 [ 485.111689][T12916] R10: 000000000001a002 R11: 0000000000000246 R12: 000000000078bfac [ 485.119655][T12916] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 485.127642][T12916] Uninit was stored to memory at: [ 485.132671][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.138380][T12916] __msan_chain_origin+0x50/0x90 [ 485.143304][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.147881][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.152808][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.157643][T12916] do_syscall_64+0xb0/0x150 [ 485.162130][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.167993][T12916] [ 485.170300][T12916] Uninit was stored to memory at: [ 485.175306][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.181007][T12916] __msan_chain_origin+0x50/0x90 [ 485.185927][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.190515][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.195433][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.200282][T12916] do_syscall_64+0xb0/0x150 [ 485.204783][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.210737][T12916] [ 485.213043][T12916] Uninit was stored to memory at: [ 485.218050][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.223748][T12916] __msan_chain_origin+0x50/0x90 [ 485.228670][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.233244][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.238164][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.242998][T12916] do_syscall_64+0xb0/0x150 [ 485.247486][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.253352][T12916] [ 485.255659][T12916] Uninit was stored to memory at: [ 485.260667][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.266366][T12916] __msan_chain_origin+0x50/0x90 [ 485.271288][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.275861][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.280785][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.285725][T12916] do_syscall_64+0xb0/0x150 [ 485.290219][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.296087][T12916] [ 485.298399][T12916] Uninit was stored to memory at: [ 485.303423][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.309125][T12916] __msan_chain_origin+0x50/0x90 [ 485.314047][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.318635][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.323557][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.328398][T12916] do_syscall_64+0xb0/0x150 [ 485.332885][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.338749][T12916] [ 485.341059][T12916] Uninit was stored to memory at: [ 485.346156][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.351857][T12916] __msan_chain_origin+0x50/0x90 [ 485.356775][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.363272][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.368192][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.373025][T12916] do_syscall_64+0xb0/0x150 [ 485.377512][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.383379][T12916] [ 485.385687][T12916] Uninit was stored to memory at: [ 485.390695][T12916] kmsan_internal_chain_origin+0xad/0x130 [ 485.396395][T12916] __msan_chain_origin+0x50/0x90 [ 485.401315][T12916] do_recvmmsg+0x105a/0x1ee0 [ 485.405888][T12916] __se_sys_recvmmsg+0x25d/0x350 [ 485.410807][T12916] __x64_sys_recvmmsg+0x62/0x80 [ 485.415643][T12916] do_syscall_64+0xb0/0x150 [ 485.420134][T12916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.426013][T12916] [ 485.428325][T12916] Local variable ----msg_sys@do_recvmmsg created at: [ 485.434983][T12916] do_recvmmsg+0xc5/0x1ee0 [ 485.439382][T12916] do_recvmmsg+0xc5/0x1ee0 20:18:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000011c0)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x2a3, 0x161) 20:18:29 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x300, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x0, 0x1000}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/141) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706001000b5000000124ac39a06da375c77c88320aa63529ebce847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6abf893c05d91fa31c05b7c972f52c10bc6c9e16cc4450f0ef00"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 20:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "0000e8ff000000000000000000000000000001000000010000002400002300000000000017000000000000000000000000000000000000000800"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 20:18:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20000, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 20:18:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8f, 0x0, 0x1, 0x5, 0x0, 0xf5, 0x2a02, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x16}, 0x10, 0x2, 0x401, 0x4, 0x5, 0x0, 0xedb}, 0x0, 0x8, 0xffffffffffffffff, 0x8) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20000, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 20:18:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 20:18:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0xe, &(0x7f0000000100), 0x14) accept$inet6(r4, 0x0, 0x0) 20:18:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 20:18:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) socket(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e309147e55f0941e6acdf84a7c54c4197353a6db164d43af67abc73a0230bd8b6ad958cf00fd4554d20beef39fa557deccfb0e7ca127e76200"}, 0x80, 0x0}}], 0x1, 0x0) 20:18:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x3) 20:18:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 20:18:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$tty1(0xc, 0x4, 0x1) 20:18:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 20:18:32 executing program 2: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000000119"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000200)={0x0}, 0xb, 0x6000010}, 0x0) 20:18:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000380)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x1, "bee17eb718877edb6565"}]}}}}}, 0x46) 20:18:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e309147e55f0941e6acdf84a7c54c4197353a6db164d43af67abc73a0230bd8b6ad958cf00fd4554d20beef39fa557deccfb0e7ca127e76200"}, 0x80, 0x0}}], 0x1, 0x0) 20:18:32 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) [ 488.184405][T13003] __nla_validate_parse: 2 callbacks suppressed [ 488.184436][T13003] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.281423][T13009] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. 20:18:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 20:18:33 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000680)={0x1ff}, &(0x7f0000000200), 0x0) 20:18:33 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:33 executing program 2: open(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000500), 0x37d, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 20:18:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 20:18:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) 20:18:34 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 20:18:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x2c010000) 20:18:34 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e309147e55f0941e6acdf84a7c54c4197353a6db164d43af67abc73a0230bd8b6ad958cf00fd4554d20beef39fa557deccfb0e7ca127e76200"}, 0x80, 0x0}}], 0x1, 0x0) 20:18:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:18:34 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c654555a763c11ceda0bb3576ed3ae7a290ab0e7446771332da4a8c7b94c26f9721da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b1e5903e109"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:18:34 executing program 3: socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 20:18:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x70, 0xe, 0x0, &(0x7f00000001c0)="e11abce40dc46026104bc1060d36", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:18:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20000, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 20:18:35 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:35 executing program 4: socket(0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 20:18:35 executing program 0: open(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000500), 0x37d, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 20:18:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 20:18:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) socket(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e309147e55f0941e6acdf84a7c54c4197353a6db164d43af67abc73a0230bd8b6ad958cf00fd4554d20beef39fa557deccfb0e7ca127e76200"}, 0x80, 0x0}}], 0x1, 0x0) 20:18:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004280)=ANY=[@ANYBLOB="440100001000130729bd700000000000ac1414aa000000000000000000000000ff0200000000000000000000000000010000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000020000000000000000000000000000000000000000000000000000000002dbd7000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/198], 0x144}}, 0x0) 20:18:36 executing program 1: process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 491.796249][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 20:18:36 executing program 2: io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20000005002}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0xa}]) 20:18:36 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) gettid() sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00dbed3f3dbb92101f0094ec1b4054f3395ae0ed18e59585c65b1e487b2937d3f14946a62aa45fda070aeb3ed413e465a1cb8fd1ff7f0000000000008f820953958db19a683e27dfdd05ec1ed0b97bbe0d07d06deaab2e87a4f0e144c3178be0776d3ea9a42bcf7931a7b5d83bdaf411280b74a17ce01bc6c892dbab3f26660d05000000943855ad7e9347a9b0f490fa7575ba3be6eeae9c1113c501a94c1cc95a6fda1a2617e40b9ea2", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250200000008000400000000000800040000000000080005fd0b14"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x40000) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x40059) clone(0x50000110, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:18:36 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="27512c331c454ea1c5c42ccf696c4007c84a354c1483016fa3c39e18359a29efbe47809092dbed53d684cf7d6281b975727a9d2feb209ca6eb522adef7eec6336eba79595005f522b287f2d36512f054f02adc81fbbe21d8f9ccd8d010221ca408c89c36b77ae61363c654420f58b82feee73082f9253432a3ecfefd1001dea270ee5c7d91b35fb3568f49b37ce05b32b6e1a55ca220fa6c4ae8987d380b910dcd41cc185216917ece6bcacf168379484a02012817f050d23b07792ce3446e", 0xbf}, {&(0x7f0000000100)="f9", 0x1}, {&(0x7f0000000180)="776d9d388685e51b4fd049bd41f4a9d2718bb1194c9571ac13be7a8ec706716cff46510d72da87019cc45e023273f29a0733ecb521acce2db5de1f196d24fb142c36e1858d9e2e5be0c96d63ce5320426e6727db51bec85eab8117933ce5dea0d34c7200767ede0fbf7e4a2891d30980a487e87ffde528185fbfab8ed38e15c224a0f96b9e3c309181c317ddb729845f095a50540bc54cb008fc2da2e990602c09dee20700000000000000b9b72e7263b517eb99488302eb7247a902cd40f904f2e596bafb7458a99c6ed3e070af0e4b0c3e00513dd69c895d93de1e3a4a78", 0xff7a}, {&(0x7f00000005c0)="11ac325e27208134172147b9f04e79c0319f4958549530d153f8578649c513b1c60a4bc687ae751b862b215361289bce42395c79829be73981714f227784cc213516ecdaece733d76269c43a7ea568ffe36c460363a8e7b0364610a4fe8d6ae0c7875d5115d6b733f9ee0d7df117be76ff887b6982fc4771178c26ea581945015faa6a34", 0x84}, {&(0x7f0000000000)="5c2732de78d42fbbf295c824e9ef47917ff72ee725343c57b71ecc779d6934f230601592c3f0fa204bcc0755f76664284c9cba72c50567a7828a3594790fcc15f7ca3739adda92a7a05623a3d7416ab94ecc771ab007d03f22327234653ef5ee380e0c", 0x63}, {&(0x7f0000000080)="a29e02baafeefb0be8ddd85f9f8f495d5b6ffd6924788c4b", 0x18}], 0x6, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 20:18:36 executing program 1: process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r3}, 0x8) 20:18:37 executing program 1: process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:37 executing program 2: open(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 20:18:37 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:18:37 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, &(0x7f0000000180)=""/33, 0x21) 20:18:37 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, &(0x7f0000000180)=""/33, 0x21) getdents64(r0, 0x0, 0x18) 20:18:37 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000240)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x41000070}) creat(&(0x7f0000000100)='./bus\x00', 0x0) 20:18:37 executing program 1: getpid() process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) [ 492.976412][T13173] xt_TCPMSS: Only works on TCP SYN packets 20:18:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) unshare(0x40020200) 20:18:37 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000028000100"/20, @ANYRES32=r2, @ANYBLOB="d1"], 0x24}}, 0x0) 20:18:37 executing program 1: getpid() process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:37 executing program 5: io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20000005002}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0xa}]) 20:18:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000)="01", &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, 0x73f000}, 0x20) [ 493.479951][T13190] IPVS: ftp: loaded support on port[0] = 21 20:18:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) 20:18:38 executing program 1: getpid() process_vm_readv(0x0, &(0x7f0000001380)=[{0x0, 0x23}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) 20:18:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x100000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000040, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x80002, 0x0) r5 = socket(0x11, 0x3, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210049740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0xfffffffffffffdf0) [ 493.855921][T13236] IPVS: ftp: loaded support on port[0] = 21 20:18:38 executing program 2: unshare(0x40040000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) [ 494.000415][ T1605] tipc: TX() has been purged, node left! 20:18:38 executing program 1: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x100000000000015f, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 494.245551][T13246] IPVS: ftp: loaded support on port[0] = 21 20:18:38 executing program 1: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) [ 494.984360][T13246] IPVS: ftp: loaded support on port[0] = 21 20:18:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010827bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="110000000000000008000400", @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) 20:18:40 executing program 1: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) gettid() sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00dbed3f3dbb92101f0094ec1b4054f3395ae0ed18e59585c65b1e487b2937d3f14946a62aa45fda070aeb3ed413e465a1cb8fd1ff7f0000000000008f820953958db19a683e27dfdd05ec1ed0b97bbe0d07d06deaab2e87a4f0e144c3178be0776d3ea9a42bcf7931a7b5d83bdaf411280b74a17ce01bc6c892dbab3f26660d05000000943855ad7e9347a9b0f490fa7575ba3be6eeae9c1113c501a94c1cc95a6fda1a2617e40b9ea211cb1974c8", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250200000008000400000000000800040000"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x40000) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x40059) clone(0x50000110, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:18:40 executing program 0: io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20000005002}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0xa}]) 20:18:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00'}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000)="01", &(0x7f0000000080)=@tcp6=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r2, &(0x7f00000001c0), 0x73f000}, 0x20) 20:18:40 executing program 2: unshare(0x40040000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) [ 496.518094][T13318] IPVS: ftp: loaded support on port[0] = 21 [ 496.576934][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 496.594586][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 496.602637][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 496.616089][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 20:18:41 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) [ 496.623958][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 496.638392][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 496.646140][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 496.661017][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 496.669689][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 496.683055][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 496.691311][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 496.705813][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 496.713947][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 20:18:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 20:18:41 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:41 executing program 2: unshare(0x40040000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) [ 497.234129][T13362] xt_TCPMSS: Only works on TCP SYN packets 20:18:41 executing program 0: io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20000005002}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0xa}]) [ 497.326828][T13364] xt_TCPMSS: Only works on TCP SYN packets 20:18:41 executing program 4: [ 497.457668][T13369] IPVS: ftp: loaded support on port[0] = 21 20:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000026000106"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x80000000000001a, 0x40010002, 0x0) 20:18:42 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:42 executing program 5: 20:18:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f00000000c0)="207efe70edb091ee06000000000000000000007aabe418e075c44285d2f4c8e3aebface7cd6a4839211dc8bc9356ffe065903fc36f21224245ea37abf8dc6a11060000009a1869022b00ed39d15b00dcc80bb2e55db1b0fa0ee7bafdd7149c5a93d17fb20bdf53e9fd47cf08516e49d812ecba7fd57615accf02a581d4f574bf9108d1c7f00e505f797462fa0684ff537942"}, 0x40) r1 = perf_event_open(&(0x7f00000001c0)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000080)=""/63, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:42 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0x1d8, 0x110, 0x110, 0x1fc, 0x1d8, 0x2d4, 0x2c4, 0x2c4, 0x2c4, 0x2d4, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@mark={{0x2c, 'mark\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d9f4364f570d76f31243b50000000003ec38dbc100"}}, {{@ipv6={@mcast1, @ipv4={[], [], @private}, [], [], '\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x30}}]}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@generic={0x0, 0x6, "99987f", 0x0, 0xef, 0x0, @remote, @mcast2}}}, 0x32) 20:18:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000026000125000000000000000031000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000a965000004000a"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x80000000000001a, 0x40010002, 0x0) 20:18:42 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:42 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) [ 499.158568][ T1605] tipc: TX() has been purged, node left! [ 499.224509][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.271756][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.309374][ T1605] tipc: TX() has been purged, node left! [ 499.350196][ T1605] tipc: TX() has been purged, node left! 20:18:43 executing program 2: unshare(0x40040000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) [ 499.643352][T13441] IPVS: ftp: loaded support on port[0] = 21 20:18:44 executing program 0: 20:18:44 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:44 executing program 3: 20:18:44 executing program 4: 20:18:44 executing program 5: 20:18:44 executing program 2: 20:18:44 executing program 5: 20:18:44 executing program 3: 20:18:44 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:44 executing program 0: 20:18:44 executing program 2: 20:18:44 executing program 4: 20:18:45 executing program 3: 20:18:45 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:45 executing program 5: 20:18:45 executing program 0: 20:18:45 executing program 4: 20:18:45 executing program 2: 20:18:45 executing program 3: 20:18:45 executing program 0: 20:18:45 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:45 executing program 5: 20:18:45 executing program 4: 20:18:45 executing program 2: 20:18:45 executing program 3: 20:18:45 executing program 0: 20:18:45 executing program 5: 20:18:46 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:46 executing program 4: 20:18:46 executing program 2: 20:18:46 executing program 3: 20:18:46 executing program 5: 20:18:46 executing program 0: 20:18:46 executing program 4: 20:18:46 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x0) 20:18:46 executing program 2: 20:18:46 executing program 3: 20:18:46 executing program 4: 20:18:46 executing program 5: 20:18:46 executing program 0: 20:18:46 executing program 2: 20:18:46 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, 0x0, 0x0, 0x0) 20:18:47 executing program 0: 20:18:47 executing program 4: 20:18:47 executing program 3: 20:18:47 executing program 5: 20:18:47 executing program 2: 20:18:47 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, 0x0, 0x0, 0x0) 20:18:47 executing program 4: 20:18:47 executing program 5: 20:18:47 executing program 0: 20:18:47 executing program 3: 20:18:47 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, 0x0, 0x0, 0x0) 20:18:47 executing program 2: 20:18:47 executing program 5: 20:18:47 executing program 4: 20:18:47 executing program 0: 20:18:47 executing program 3: 20:18:47 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480), 0x0, 0x0) 20:18:48 executing program 2: 20:18:48 executing program 5: 20:18:48 executing program 4: 20:18:48 executing program 3: 20:18:48 executing program 0: 20:18:48 executing program 2: 20:18:48 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480), 0x0, 0x0) 20:18:48 executing program 4: 20:18:48 executing program 5: 20:18:48 executing program 0: 20:18:48 executing program 3: 20:18:48 executing program 4: 20:18:48 executing program 2: 20:18:48 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480), 0x0, 0x0) 20:18:48 executing program 0: 20:18:49 executing program 5: 20:18:49 executing program 3: 20:18:49 executing program 4: 20:18:49 executing program 0: 20:18:49 executing program 2: 20:18:49 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{0x0}], 0x1, 0x0) 20:18:49 executing program 5: 20:18:49 executing program 3: 20:18:49 executing program 4: 20:18:49 executing program 0: 20:18:49 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{0x0}], 0x1, 0x0) 20:18:49 executing program 5: [ 505.186957][ T1605] tipc: TX() has been purged, node left! 20:18:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') unlink(&(0x7f00000001c0)='./file0\x00') 20:18:49 executing program 3: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 20:18:49 executing program 4: symlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00') rename(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') [ 505.365874][ T1605] tipc: TX() has been purged, node left! 20:18:49 executing program 0: munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000) munmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000) 20:18:50 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{0x0}], 0x1, 0x0) 20:18:50 executing program 5: 20:18:50 executing program 3: 20:18:50 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200000008890d100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) creat(&(0x7f00000001c0)='./file0\x00', 0x99) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000480)='\xf0\xc1><\xc8\xcb\xcf3\x14sR:\x8c\xde\xeb\x86\x0e\x80\x00\x83\rW\x1d\x81\xd2a\xac\x12\xaa\xcej\xf8\x97\xf6\x82\xe2\x1a\xfd^\xb4\xc3R\xb3\xa9f\x82\x16\xbeK\x1ak\xb2\xe7\xa5\xda\x03 \xaa\xa7\xfeS}\bS\xabOHv\x03\xcf\xd8\xa3\xec\xc9\xc8\xb9\xd3lA\x89\x11\xcd-/o\x1f\xcd\x8aUQ\xa9\x9bb\xa0r\xaeM5\xa0\xd3\x03+5\xad\x95\xb0\x19n\x8d\xa6\xaa\xc0\xa0I\xd4xK\xf7\a2\xb9\x82\x10\x8403\xc5\xca\x16\b\x83\x8e.w\xfe+\x8c\xdb\xc3D\xc9\xfe\xf6%\x19\xc4\xe2K\x0e\xda4Qr\xafJS\xf2M&\xdb\xce\x1dD\x1e\xc7\xef\xa2\x93\xc4}\xf3\xfaLZ\x0f\xc9\xb8\xcf\x1f\\v\x94\x9d\xc7o\xfe\x81tj\x83\n\x13,\xa4\xdc\xfc\tq8I\xe0\xb8\xb4\xc5\x8f\vU\xcd\xd4nL\xf54\x00i6\x93K\xadg\xfd\xed\xc6\xfd\x1d\x92\x81\xd0\xbf\xe0\xa5w\xfb\xb30E^\x8d\xd4\xb6\xe5+\xd2@t\x02D\v\xbd\x13\x9e\xc1\xd3\x17\x8e\xa6\xd7D!\xba\x13\x84z\x86\xebu\x9b\xfa-D\xcf-\x8ey8\xe4\xe3\xaat\x8d\xa7\x84n\xba\\\x9br\xe5') 20:18:50 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) 20:18:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x2}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xc, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) 20:18:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 20:18:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:18:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x1000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) dup(r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8008) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x80) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = semget$private(0x0, 0x8, 0x0) semtimedop(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x800}, {0x4, 0xd951, 0x800}, {0x0, 0x2, 0x1000}], 0x3, &(0x7f00000001c0)) 20:18:50 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000680)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 20:18:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) 20:18:50 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000680)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 20:18:50 executing program 1: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xac}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) rt_sigaction(0x15, &(0x7f0000000400)={&(0x7f0000000300)="2e450f1a33c4c1e1e58e063a9a03263666410faef14190430fd3d6446fd9eddbe0400f1a2af30f1ef0", 0x0, &(0x7f0000000340)="c40255980a66470f177500f3a5c4c17a5b8171300000dde42e660fe8850a000000440f161d0000000066420ff7da450f698f28b0f8c6c481f0154918", {[0x6]}}, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)="c4827d20c9dadd2e450fae5e0066460f38dfe28f69689813f347a52ef63ec401fe6f043cd9e464653e660f513477"}, 0x8, &(0x7f0000000500)) timerfd_create(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_adjtime(0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/37, 0x25}, {&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000640)=""/251, 0xfb}], 0x4}, 0x112f4f60}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}, {&(0x7f0000000840)=""/193, 0xc1}, {&(0x7f00000034c0)=""/4111, 0x100f}, {&(0x7f0000004500)=""/4099, 0x1003}, {0x0}, {&(0x7f0000002e40)=""/112, 0x70}, {&(0x7f0000002ec0)=""/241, 0xfea6}, {&(0x7f00000009c0)=""/156, 0x9c}, {0x0}], 0x9}, 0xfff}], 0x2, 0x20101, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x34, 0x8, 0x7, 0x80000001}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') semget$private(0x0, 0x0, 0x6f2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd5f}], 0x1, 0x0) dup2(r2, 0xffffffffffffffff) openat$cgroup_type(r2, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 506.668461][T13625] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 20:18:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x123801) io_setup(0x8, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 20:18:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:18:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20600, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)=ANY=[], 0x21) ftruncate(r0, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18}, 0x18) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r1, r0) [ 507.401684][T13643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 507.425292][T13642] not chained 30000 origins [ 507.429833][T13642] CPU: 1 PID: 13642 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 507.438497][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.450820][T13642] Call Trace: [ 507.454124][T13642] dump_stack+0x1df/0x240 [ 507.458471][T13642] kmsan_internal_chain_origin+0x6f/0x130 [ 507.464228][T13642] ? kmsan_get_metadata+0x4f/0x180 [ 507.469350][T13642] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 507.475253][T13642] ? __msan_poison_alloca+0xf0/0x120 [ 507.482458][T13642] ? kmsan_get_metadata+0x11d/0x180 [ 507.487766][T13642] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 507.500181][T13642] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 507.506255][T13642] ? kfree+0x61/0x30f0 [ 507.510331][T13642] ? kmsan_get_metadata+0x4f/0x180 [ 507.515447][T13642] ? kmsan_set_origin_checked+0x95/0xf0 [ 507.521000][T13642] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 507.527073][T13642] ? _copy_from_user+0x15b/0x260 [ 507.532010][T13642] ? kmsan_get_metadata+0x4f/0x180 [ 507.537138][T13642] __msan_chain_origin+0x50/0x90 [ 507.542086][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.546716][T13642] ? __msan_poison_alloca+0xf0/0x120 [ 507.552014][T13642] ? __se_sys_recvmmsg+0xac/0x350 [ 507.557047][T13642] ? __se_sys_recvmmsg+0xac/0x350 [ 507.562078][T13642] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 507.567981][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.572947][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.577809][T13642] do_syscall_64+0xb0/0x150 [ 507.582435][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.588317][T13642] RIP: 0033:0x45c1d9 [ 507.593072][T13642] Code: Bad RIP value. [ 507.597818][T13642] RSP: 002b:00007fb772b0dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 507.606492][T13642] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 507.614454][T13642] RDX: 04000000000005e3 RSI: 0000000020008880 RDI: 0000000000000003 [ 507.622416][T13642] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 507.630484][T13642] R10: 0000000044000102 R11: 0000000000000246 R12: 000000000078bf0c [ 507.638450][T13642] R13: 0000000000c9fb6f R14: 00007fb772b0e9c0 R15: 000000000078bf0c [ 507.646676][T13642] Uninit was stored to memory at: [ 507.651694][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.657398][T13642] __msan_chain_origin+0x50/0x90 [ 507.662359][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.667024][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.671948][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.676804][T13642] do_syscall_64+0xb0/0x150 [ 507.681300][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.687223][T13642] [ 507.689540][T13642] Uninit was stored to memory at: [ 507.694556][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.700265][T13642] __msan_chain_origin+0x50/0x90 [ 507.705189][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.709763][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.714685][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.719520][T13642] do_syscall_64+0xb0/0x150 [ 507.724008][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.729874][T13642] [ 507.732186][T13642] Uninit was stored to memory at: [ 507.737805][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.743508][T13642] __msan_chain_origin+0x50/0x90 [ 507.748431][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.753006][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.757931][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.762765][T13642] do_syscall_64+0xb0/0x150 [ 507.767256][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.773126][T13642] [ 507.775436][T13642] Uninit was stored to memory at: [ 507.780445][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.786147][T13642] __msan_chain_origin+0x50/0x90 [ 507.791072][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.795647][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.800571][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.805409][T13642] do_syscall_64+0xb0/0x150 [ 507.809899][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.815773][T13642] [ 507.818081][T13642] Uninit was stored to memory at: [ 507.823090][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.828795][T13642] __msan_chain_origin+0x50/0x90 [ 507.833715][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.838289][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.843209][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.848044][T13642] do_syscall_64+0xb0/0x150 [ 507.852532][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.858420][T13642] [ 507.860730][T13642] Uninit was stored to memory at: [ 507.865742][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.871445][T13642] __msan_chain_origin+0x50/0x90 [ 507.876368][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.880945][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.885869][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.890704][T13642] do_syscall_64+0xb0/0x150 [ 507.895203][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.901244][T13642] [ 507.903552][T13642] Uninit was stored to memory at: [ 507.908562][T13642] kmsan_internal_chain_origin+0xad/0x130 [ 507.914267][T13642] __msan_chain_origin+0x50/0x90 [ 507.919199][T13642] do_recvmmsg+0x105a/0x1ee0 [ 507.923800][T13642] __se_sys_recvmmsg+0x1d1/0x350 [ 507.928722][T13642] __x64_sys_recvmmsg+0x62/0x80 [ 507.933560][T13642] do_syscall_64+0xb0/0x150 [ 507.938051][T13642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.949737][T13642] 20:18:51 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)=""/255, 0xff) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x80, 0x400, {0x0}, {0xee00}, 0x5, 0xd5}) sched_getscheduler(r3) 20:18:52 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000002080)=0xfffffbff) [ 507.952047][T13642] Local variable ----msg_sys@do_recvmmsg created at: [ 507.958706][T13642] do_recvmmsg+0xc5/0x1ee0 [ 507.963107][T13642] do_recvmmsg+0xc5/0x1ee0 20:18:52 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x20001401) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1011, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1011, 0x0) 20:18:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) 20:18:52 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1084, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:18:53 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f5f0efe01b2a4a290930206040200101301070000000000000035000c06010000001900054004000000021222dc1338d54404139b84136e3b5afb83de4411000b00bf28dbff", 0x4c}, {&(0x7f0000000040)='\n\x00\x00 \x00@\x00\x00\x00', 0x9}], 0x2}, 0x0) 20:18:53 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x20001401) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1011, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 508.806671][T13668] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 509.071675][T13656] not chained 40000 origins [ 509.076230][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 509.084906][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.094975][T13656] Call Trace: [ 509.098289][T13656] dump_stack+0x1df/0x240 [ 509.102638][T13656] ? psi_group_change+0x1007/0x13c0 [ 509.107857][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 509.113603][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 509.118814][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 509.124366][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 509.129575][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 509.135396][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 509.141481][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 509.146692][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 509.151899][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 509.157020][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 509.162637][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 509.168718][T13656] ? _copy_from_user+0x15b/0x260 [ 509.173668][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 509.178792][T13656] __msan_chain_origin+0x50/0x90 [ 509.183737][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.188369][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 509.193664][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 509.198707][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 509.203738][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 509.209757][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.215665][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.220511][T13656] do_syscall_64+0xb0/0x150 [ 509.225011][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.230889][T13656] RIP: 0033:0x45c1d9 [ 509.234761][T13656] Code: Bad RIP value. [ 509.239331][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 509.247764][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 509.255723][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 509.263688][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 509.271653][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 509.279618][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 509.287613][T13656] Uninit was stored to memory at: [ 509.292630][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.298431][T13656] __msan_chain_origin+0x50/0x90 [ 509.303364][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.307938][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.312860][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.317699][T13656] do_syscall_64+0xb0/0x150 [ 509.322196][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.328157][T13656] [ 509.330468][T13656] Uninit was stored to memory at: [ 509.335589][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.341572][T13656] __msan_chain_origin+0x50/0x90 [ 509.346503][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.351775][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.356698][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.361533][T13656] do_syscall_64+0xb0/0x150 [ 509.366025][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.371891][T13656] [ 509.374374][T13656] Uninit was stored to memory at: [ 509.379471][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.385177][T13656] __msan_chain_origin+0x50/0x90 [ 509.390096][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.394671][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.399592][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.404427][T13656] do_syscall_64+0xb0/0x150 [ 509.408915][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.414781][T13656] [ 509.417089][T13656] Uninit was stored to memory at: [ 509.422097][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.427801][T13656] __msan_chain_origin+0x50/0x90 [ 509.432721][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.437298][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.442222][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.447071][T13656] do_syscall_64+0xb0/0x150 [ 509.451558][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.457426][T13656] [ 509.459736][T13656] Uninit was stored to memory at: [ 509.464745][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.470453][T13656] __msan_chain_origin+0x50/0x90 [ 509.475379][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.479953][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.484880][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.489714][T13656] do_syscall_64+0xb0/0x150 [ 509.494224][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.500523][T13656] [ 509.502831][T13656] Uninit was stored to memory at: [ 509.507840][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.513539][T13656] __msan_chain_origin+0x50/0x90 [ 509.518477][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.523053][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.527978][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.532811][T13656] do_syscall_64+0xb0/0x150 [ 509.537297][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.543162][T13656] [ 509.545468][T13656] Uninit was stored to memory at: [ 509.550477][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 509.556184][T13656] __msan_chain_origin+0x50/0x90 [ 509.561104][T13656] do_recvmmsg+0x105a/0x1ee0 [ 509.565680][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 509.570598][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 509.575435][T13656] do_syscall_64+0xb0/0x150 [ 509.579929][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.585794][T13656] [ 509.588103][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 509.594758][T13656] do_recvmmsg+0xc5/0x1ee0 [ 509.599157][T13656] do_recvmmsg+0xc5/0x1ee0 20:18:54 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460000ffff0000000000000011"], 0x58) 20:18:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{&(0x7f00000003c0)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000005b40)=""/102400, 0x19000}, {0x0}], 0x3}, 0x9}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f0000001380)=[{&(0x7f0000000f40)=""/146, 0x92}, {0x0}, {0x0}, {&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/33, 0x21}, {0x0}, {&(0x7f0000001000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000180)=""/20, 0x14}, {0x0}], 0xa, &(0x7f0000002440)=""/79, 0x4f}, 0x2}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f00000047c0)=""/26, 0x1a}, 0x2}, {{0x0, 0x0, &(0x7f0000004940)=[{0x0}], 0x1}, 0x7e}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x1800, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xfffbfffffffffffa, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 20:18:54 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:18:54 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x228002, 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) [ 510.081681][T13651] not chained 50000 origins [ 510.086237][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 510.094909][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.104969][T13651] Call Trace: [ 510.108276][T13651] dump_stack+0x1df/0x240 [ 510.112621][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 510.118353][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 510.123603][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 510.129491][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 510.134775][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 510.139964][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 510.145848][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 510.151905][T13651] ? kfree+0x61/0x30f0 [ 510.155958][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 510.161053][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 510.166583][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 510.172639][T13651] ? _copy_from_user+0x15b/0x260 [ 510.177584][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 510.182689][T13651] __msan_chain_origin+0x50/0x90 [ 510.187620][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.192234][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 510.197515][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 510.202522][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 510.207529][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 510.213409][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.218341][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.223177][T13651] do_syscall_64+0xb0/0x150 [ 510.227667][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.233541][T13651] RIP: 0033:0x45c1d9 [ 510.237414][T13651] Code: Bad RIP value. [ 510.241470][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 510.249977][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 510.257935][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 510.265890][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 510.273844][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 510.281798][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 510.289770][T13651] Uninit was stored to memory at: [ 510.294794][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.300501][T13651] __msan_chain_origin+0x50/0x90 [ 510.305449][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.310027][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.314951][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.319785][T13651] do_syscall_64+0xb0/0x150 [ 510.324277][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.330143][T13651] [ 510.332455][T13651] Uninit was stored to memory at: [ 510.337466][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.343172][T13651] __msan_chain_origin+0x50/0x90 [ 510.348092][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.352664][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.357584][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.362419][T13651] do_syscall_64+0xb0/0x150 [ 510.366907][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.372773][T13651] [ 510.375082][T13651] Uninit was stored to memory at: [ 510.380094][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.385797][T13651] __msan_chain_origin+0x50/0x90 [ 510.390718][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.395291][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.400210][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.405045][T13651] do_syscall_64+0xb0/0x150 [ 510.409546][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.415411][T13651] [ 510.417718][T13651] Uninit was stored to memory at: [ 510.422723][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.428425][T13651] __msan_chain_origin+0x50/0x90 [ 510.433342][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.437917][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.442836][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.447670][T13651] do_syscall_64+0xb0/0x150 [ 510.452155][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.458021][T13651] [ 510.460326][T13651] Uninit was stored to memory at: [ 510.465335][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.471036][T13651] __msan_chain_origin+0x50/0x90 [ 510.475957][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.480529][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.485449][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.490286][T13651] do_syscall_64+0xb0/0x150 [ 510.494773][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.500640][T13651] [ 510.502949][T13651] Uninit was stored to memory at: [ 510.507960][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.513717][T13651] __msan_chain_origin+0x50/0x90 [ 510.518636][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.523207][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.528125][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.532960][T13651] do_syscall_64+0xb0/0x150 [ 510.537446][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.543323][T13651] [ 510.545638][T13651] Uninit was stored to memory at: [ 510.550664][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 510.556397][T13651] __msan_chain_origin+0x50/0x90 [ 510.561327][T13651] do_recvmmsg+0x105a/0x1ee0 [ 510.565907][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 510.570843][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 510.575681][T13651] do_syscall_64+0xb0/0x150 [ 510.580171][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.586038][T13651] [ 510.588344][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 510.595013][T13651] do_recvmmsg+0xc5/0x1ee0 [ 510.599413][T13651] do_recvmmsg+0xc5/0x1ee0 [ 511.056335][T13656] not chained 60000 origins [ 511.060907][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 511.069577][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.079633][T13656] Call Trace: [ 511.082942][T13656] dump_stack+0x1df/0x240 [ 511.087285][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 511.093011][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 511.098129][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 511.104030][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 511.109325][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 511.114532][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 511.120347][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 511.127127][T13656] ? kfree+0x61/0x30f0 [ 511.131205][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 511.136322][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 511.141876][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 511.147961][T13656] ? _copy_from_user+0x15b/0x260 [ 511.152911][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 511.158034][T13656] __msan_chain_origin+0x50/0x90 [ 511.162989][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.167619][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 511.172919][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 511.177948][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 511.182978][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 511.188879][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.193839][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.198700][T13656] do_syscall_64+0xb0/0x150 [ 511.203217][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.209108][T13656] RIP: 0033:0x45c1d9 [ 511.212990][T13656] Code: Bad RIP value. [ 511.217055][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 511.225471][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 511.233441][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 511.241415][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 511.249398][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 511.257383][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 511.265375][T13656] Uninit was stored to memory at: [ 511.270409][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.276141][T13656] __msan_chain_origin+0x50/0x90 [ 511.281079][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.285670][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.290606][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.295456][T13656] do_syscall_64+0xb0/0x150 [ 511.299958][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.305832][T13656] [ 511.308150][T13656] Uninit was stored to memory at: [ 511.313174][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.318889][T13656] __msan_chain_origin+0x50/0x90 [ 511.323822][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.328411][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.333353][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.338204][T13656] do_syscall_64+0xb0/0x150 [ 511.342706][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.348587][T13656] [ 511.350906][T13656] Uninit was stored to memory at: [ 511.355934][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.361654][T13656] __msan_chain_origin+0x50/0x90 [ 511.366589][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.371177][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.376112][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.380961][T13656] do_syscall_64+0xb0/0x150 [ 511.385466][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.391343][T13656] [ 511.393658][T13656] Uninit was stored to memory at: [ 511.398684][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.404399][T13656] __msan_chain_origin+0x50/0x90 [ 511.409341][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.413933][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.418866][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.423711][T13656] do_syscall_64+0xb0/0x150 [ 511.428218][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.434095][T13656] [ 511.436415][T13656] Uninit was stored to memory at: [ 511.441454][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.447169][T13656] __msan_chain_origin+0x50/0x90 [ 511.452104][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.456692][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.461624][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.466474][T13656] do_syscall_64+0xb0/0x150 [ 511.470975][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.476848][T13656] [ 511.479168][T13656] Uninit was stored to memory at: [ 511.484189][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.489905][T13656] __msan_chain_origin+0x50/0x90 [ 511.494844][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.499442][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.504381][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.509228][T13656] do_syscall_64+0xb0/0x150 [ 511.513728][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.519602][T13656] [ 511.521918][T13656] Uninit was stored to memory at: [ 511.526945][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 511.532664][T13656] __msan_chain_origin+0x50/0x90 [ 511.537603][T13656] do_recvmmsg+0x105a/0x1ee0 [ 511.542190][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 511.547128][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 511.551978][T13656] do_syscall_64+0xb0/0x150 [ 511.556479][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.562358][T13656] [ 511.564677][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 511.571348][T13656] do_recvmmsg+0xc5/0x1ee0 [ 511.575769][T13656] do_recvmmsg+0xc5/0x1ee0 [ 512.003383][T13651] not chained 70000 origins [ 512.007928][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.016604][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.026659][T13651] Call Trace: [ 512.029954][T13651] dump_stack+0x1df/0x240 [ 512.034291][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 512.040015][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 512.045236][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 512.051135][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 512.056425][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 512.061629][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 512.067443][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 512.073517][T13651] ? kfree+0x61/0x30f0 [ 512.077594][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 512.082713][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 512.088269][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 512.094352][T13651] ? _copy_from_user+0x15b/0x260 [ 512.099294][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 512.104403][T13651] __msan_chain_origin+0x50/0x90 [ 512.109342][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.113964][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 512.119254][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 512.124285][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 512.129318][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 512.135308][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.140264][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.145128][T13651] do_syscall_64+0xb0/0x150 [ 512.149638][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.155532][T13651] RIP: 0033:0x45c1d9 [ 512.159498][T13651] Code: Bad RIP value. [ 512.163560][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 512.171970][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 512.179945][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 512.187914][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 512.195883][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 512.203848][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 512.211931][T13651] Uninit was stored to memory at: [ 512.216969][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.222686][T13651] __msan_chain_origin+0x50/0x90 [ 512.227659][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.232242][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.237280][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.242124][T13651] do_syscall_64+0xb0/0x150 [ 512.246626][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.252499][T13651] [ 512.254817][T13651] Uninit was stored to memory at: [ 512.259845][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.265570][T13651] __msan_chain_origin+0x50/0x90 [ 512.270514][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.275103][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.280049][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.284903][T13651] do_syscall_64+0xb0/0x150 [ 512.289416][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.295297][T13651] [ 512.297615][T13651] Uninit was stored to memory at: [ 512.302640][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.308357][T13651] __msan_chain_origin+0x50/0x90 [ 512.313294][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.317882][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.322814][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.327670][T13651] do_syscall_64+0xb0/0x150 [ 512.332170][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.338045][T13651] [ 512.340361][T13651] Uninit was stored to memory at: [ 512.345381][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.351097][T13651] __msan_chain_origin+0x50/0x90 [ 512.356030][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.360616][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.365552][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.370400][T13651] do_syscall_64+0xb0/0x150 [ 512.374900][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.380775][T13651] [ 512.383092][T13651] Uninit was stored to memory at: [ 512.388634][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.394345][T13651] __msan_chain_origin+0x50/0x90 [ 512.399279][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.403863][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.408796][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.413639][T13651] do_syscall_64+0xb0/0x150 [ 512.418141][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.424015][T13651] [ 512.426331][T13651] Uninit was stored to memory at: [ 512.431353][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.434883][T13656] not chained 80000 origins [ 512.437070][T13651] __msan_chain_origin+0x50/0x90 [ 512.441555][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.446473][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.446493][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.455149][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.459730][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.464631][T13656] Call Trace: [ 512.474675][T13651] do_syscall_64+0xb0/0x150 [ 512.479499][T13656] dump_stack+0x1df/0x240 [ 512.482762][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.487241][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 512.491532][T13651] [ 512.497418][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 512.503098][T13651] Uninit was stored to memory at: [ 512.505416][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 512.510509][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 512.515522][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 512.521386][T13651] __msan_chain_origin+0x50/0x90 [ 512.527080][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 512.532339][T13651] do_recvmmsg+0x105a/0x1ee0 [ 512.537249][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 512.542420][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 512.546986][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 512.552764][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 512.557683][T13656] ? kfree+0x61/0x30f0 [ 512.563722][T13651] do_syscall_64+0xb0/0x150 [ 512.568546][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 512.572588][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.577063][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 512.582136][T13651] [ 512.588013][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 512.593520][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 512.595834][T13656] ? _copy_from_user+0x15b/0x260 [ 512.601869][T13651] do_recvmmsg+0xc5/0x1ee0 [ 512.608514][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 512.613441][T13651] do_recvmmsg+0xc5/0x1ee0 [ 512.617835][T13656] __msan_chain_origin+0x50/0x90 [ 512.632237][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.636840][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 512.642114][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 512.647122][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 512.652129][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 512.658008][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.662941][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.667781][T13656] do_syscall_64+0xb0/0x150 [ 512.672271][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.678160][T13656] RIP: 0033:0x45c1d9 [ 512.682031][T13656] Code: Bad RIP value. [ 512.686077][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 512.694476][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 512.702446][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 512.710405][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 512.718359][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 512.726314][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 512.734287][T13656] Uninit was stored to memory at: [ 512.739302][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.745008][T13656] __msan_chain_origin+0x50/0x90 [ 512.749930][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.754504][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.759426][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.764260][T13656] do_syscall_64+0xb0/0x150 [ 512.768747][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.774615][T13656] [ 512.776924][T13656] Uninit was stored to memory at: [ 512.781941][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.787647][T13656] __msan_chain_origin+0x50/0x90 [ 512.792570][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.797145][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.802068][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.806905][T13656] do_syscall_64+0xb0/0x150 [ 512.811411][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.817280][T13656] [ 512.819592][T13656] Uninit was stored to memory at: [ 512.824602][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.830305][T13656] __msan_chain_origin+0x50/0x90 [ 512.835228][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.839804][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.844730][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.849563][T13656] do_syscall_64+0xb0/0x150 [ 512.854053][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.859921][T13656] [ 512.862232][T13656] Uninit was stored to memory at: [ 512.867242][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.872944][T13656] __msan_chain_origin+0x50/0x90 [ 512.877867][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.882440][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.887381][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.892219][T13656] do_syscall_64+0xb0/0x150 [ 512.896723][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.902588][T13656] [ 512.904897][T13656] Uninit was stored to memory at: [ 512.909908][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.915609][T13656] __msan_chain_origin+0x50/0x90 [ 512.920530][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.925102][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.930028][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.934866][T13656] do_syscall_64+0xb0/0x150 [ 512.939354][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.945221][T13656] [ 512.947615][T13656] Uninit was stored to memory at: [ 512.952621][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 512.958323][T13656] __msan_chain_origin+0x50/0x90 [ 512.963245][T13656] do_recvmmsg+0x105a/0x1ee0 [ 512.967820][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 512.972740][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 512.977574][T13656] do_syscall_64+0xb0/0x150 [ 512.982062][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.987928][T13656] [ 512.990239][T13656] Uninit was stored to memory at: [ 512.995248][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 513.000964][T13656] __msan_chain_origin+0x50/0x90 [ 513.005887][T13656] do_recvmmsg+0x105a/0x1ee0 [ 513.010465][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 513.015395][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 513.020230][T13656] do_syscall_64+0xb0/0x150 [ 513.024716][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.030591][T13656] [ 513.032901][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 513.039562][T13656] do_recvmmsg+0xc5/0x1ee0 [ 513.043963][T13656] do_recvmmsg+0xc5/0x1ee0 [ 513.289958][T13651] not chained 90000 origins [ 513.294499][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 513.303162][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.313213][T13651] Call Trace: [ 513.316508][T13651] dump_stack+0x1df/0x240 [ 513.320839][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 513.326556][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 513.331670][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 513.337561][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 513.342872][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 513.348076][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 513.353887][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 513.359956][T13651] ? kfree+0x61/0x30f0 [ 513.364025][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 513.369133][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 513.374678][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 513.380745][T13651] ? _copy_from_user+0x15b/0x260 [ 513.385687][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 513.390827][T13651] __msan_chain_origin+0x50/0x90 [ 513.395767][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.400388][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 513.405675][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 513.410697][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 513.415722][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 513.421614][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.426558][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.431410][T13651] do_syscall_64+0xb0/0x150 [ 513.435918][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.441802][T13651] RIP: 0033:0x45c1d9 [ 513.445681][T13651] Code: Bad RIP value. [ 513.449736][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 513.458144][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 513.466111][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 513.474080][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 513.482049][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 513.490016][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 513.497992][T13651] Uninit was stored to memory at: [ 513.503022][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.508736][T13651] __msan_chain_origin+0x50/0x90 [ 513.513669][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.518255][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.523188][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.528036][T13651] do_syscall_64+0xb0/0x150 [ 513.532538][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.538413][T13651] [ 513.540729][T13651] Uninit was stored to memory at: [ 513.545749][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.551467][T13651] __msan_chain_origin+0x50/0x90 [ 513.556402][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.560984][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.565919][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.570772][T13651] do_syscall_64+0xb0/0x150 [ 513.575274][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.581149][T13651] [ 513.583481][T13651] Uninit was stored to memory at: [ 513.588504][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.594219][T13651] __msan_chain_origin+0x50/0x90 [ 513.599154][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.603738][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.608680][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.613529][T13651] do_syscall_64+0xb0/0x150 [ 513.618032][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.623907][T13651] [ 513.626230][T13651] Uninit was stored to memory at: [ 513.631250][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.636962][T13651] __msan_chain_origin+0x50/0x90 [ 513.641897][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.646485][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.651422][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.656272][T13651] do_syscall_64+0xb0/0x150 [ 513.660774][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.666651][T13651] [ 513.668966][T13651] Uninit was stored to memory at: [ 513.673986][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.679701][T13651] __msan_chain_origin+0x50/0x90 [ 513.684636][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.689217][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.694146][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.698989][T13651] do_syscall_64+0xb0/0x150 [ 513.703484][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.709351][T13651] [ 513.713657][T13651] Uninit was stored to memory at: [ 513.718668][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.724373][T13651] __msan_chain_origin+0x50/0x90 [ 513.729295][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.733888][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.738810][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.743645][T13651] do_syscall_64+0xb0/0x150 [ 513.748133][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.754005][T13651] [ 513.756313][T13651] Uninit was stored to memory at: [ 513.761324][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 513.767028][T13651] __msan_chain_origin+0x50/0x90 [ 513.771955][T13651] do_recvmmsg+0x105a/0x1ee0 [ 513.776629][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 513.781551][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 513.786386][T13651] do_syscall_64+0xb0/0x150 [ 513.790874][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.796742][T13651] [ 513.799313][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 513.805969][T13651] do_recvmmsg+0xc5/0x1ee0 [ 513.810369][T13651] do_recvmmsg+0xc5/0x1ee0 [ 513.891234][T13656] not chained 100000 origins [ 513.895859][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 513.904518][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.914564][T13656] Call Trace: [ 513.917858][T13656] dump_stack+0x1df/0x240 [ 513.922190][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 513.927908][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 513.933017][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 513.938905][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 513.944190][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 513.949388][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 513.955225][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 513.961288][T13656] ? kfree+0x61/0x30f0 [ 513.965356][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 513.970465][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 513.976017][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 513.982092][T13656] ? _copy_from_user+0x15b/0x260 [ 513.987026][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 513.992133][T13656] __msan_chain_origin+0x50/0x90 [ 513.997072][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.001695][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 514.006989][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 514.012010][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 514.017030][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 514.022923][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.027872][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.032723][T13656] do_syscall_64+0xb0/0x150 [ 514.037229][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.043113][T13656] RIP: 0033:0x45c1d9 [ 514.046997][T13656] Code: Bad RIP value. [ 514.051172][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 514.059577][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 514.067545][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 514.075598][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 514.083567][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 514.091627][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 514.099606][T13656] Uninit was stored to memory at: [ 514.104637][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.110353][T13656] __msan_chain_origin+0x50/0x90 [ 514.115289][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.119875][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.124805][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.129652][T13656] do_syscall_64+0xb0/0x150 [ 514.134150][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.140025][T13656] [ 514.142347][T13656] Uninit was stored to memory at: [ 514.147372][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.153092][T13656] __msan_chain_origin+0x50/0x90 [ 514.158896][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.163492][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.168437][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.173287][T13656] do_syscall_64+0xb0/0x150 [ 514.177792][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.183672][T13656] [ 514.185989][T13656] Uninit was stored to memory at: [ 514.191013][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.196724][T13656] __msan_chain_origin+0x50/0x90 [ 514.201658][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.206242][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.211183][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.216031][T13656] do_syscall_64+0xb0/0x150 [ 514.220548][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.226431][T13656] [ 514.228748][T13656] Uninit was stored to memory at: [ 514.233777][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.239495][T13656] __msan_chain_origin+0x50/0x90 [ 514.244433][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.249017][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.253953][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.258801][T13656] do_syscall_64+0xb0/0x150 [ 514.263300][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.269175][T13656] [ 514.271492][T13656] Uninit was stored to memory at: [ 514.276527][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.282248][T13656] __msan_chain_origin+0x50/0x90 [ 514.287193][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.291778][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.296709][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.301556][T13656] do_syscall_64+0xb0/0x150 [ 514.306071][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.311955][T13656] [ 514.314381][T13656] Uninit was stored to memory at: [ 514.319509][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.325223][T13656] __msan_chain_origin+0x50/0x90 [ 514.330159][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.334747][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.339682][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.344528][T13656] do_syscall_64+0xb0/0x150 [ 514.349028][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.354907][T13656] [ 514.357226][T13656] Uninit was stored to memory at: [ 514.362248][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 514.367961][T13656] __msan_chain_origin+0x50/0x90 [ 514.372899][T13656] do_recvmmsg+0x105a/0x1ee0 [ 514.377485][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 514.382478][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 514.387328][T13656] do_syscall_64+0xb0/0x150 [ 514.391827][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.397701][T13656] [ 514.400018][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 514.406691][T13656] do_recvmmsg+0xc5/0x1ee0 [ 514.411102][T13656] do_recvmmsg+0xc5/0x1ee0 [ 514.555681][T13651] not chained 110000 origins [ 514.560313][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 514.568981][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.579029][T13651] Call Trace: [ 514.582320][T13651] dump_stack+0x1df/0x240 [ 514.586656][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 514.592378][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 514.597490][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 514.603391][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 514.608674][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 514.613873][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 514.619681][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 514.625749][T13651] ? kfree+0x61/0x30f0 [ 514.629836][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 514.634956][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 514.640503][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 514.646662][T13651] ? _copy_from_user+0x15b/0x260 [ 514.651602][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 514.656712][T13651] __msan_chain_origin+0x50/0x90 [ 514.661653][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.666273][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 514.671559][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 514.676588][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 514.681613][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 514.687514][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.692464][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.697322][T13651] do_syscall_64+0xb0/0x150 [ 514.701825][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.707709][T13651] RIP: 0033:0x45c1d9 [ 514.711590][T13651] Code: Bad RIP value. [ 514.715647][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 514.724051][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 514.732018][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 514.740095][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 514.748062][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 514.756028][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 514.764003][T13651] Uninit was stored to memory at: [ 514.769025][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.774739][T13651] __msan_chain_origin+0x50/0x90 [ 514.779675][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.784263][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.789193][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.794038][T13651] do_syscall_64+0xb0/0x150 [ 514.798561][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.804440][T13651] [ 514.806757][T13651] Uninit was stored to memory at: [ 514.811782][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.817503][T13651] __msan_chain_origin+0x50/0x90 [ 514.822436][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.827028][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.832010][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.836860][T13651] do_syscall_64+0xb0/0x150 [ 514.841359][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.847234][T13651] [ 514.849551][T13651] Uninit was stored to memory at: [ 514.854572][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.860283][T13651] __msan_chain_origin+0x50/0x90 [ 514.865217][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.869808][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.874741][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.879587][T13651] do_syscall_64+0xb0/0x150 [ 514.884087][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.889959][T13651] [ 514.892275][T13651] Uninit was stored to memory at: [ 514.897297][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.903013][T13651] __msan_chain_origin+0x50/0x90 [ 514.907947][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.912577][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.917532][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.922391][T13651] do_syscall_64+0xb0/0x150 [ 514.926899][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.932777][T13651] [ 514.935097][T13651] Uninit was stored to memory at: [ 514.940126][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.945843][T13651] __msan_chain_origin+0x50/0x90 [ 514.951571][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.956176][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 514.961211][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 514.966062][T13651] do_syscall_64+0xb0/0x150 [ 514.970570][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.976446][T13651] [ 514.978765][T13651] Uninit was stored to memory at: [ 514.983798][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 514.989528][T13651] __msan_chain_origin+0x50/0x90 [ 514.994678][T13651] do_recvmmsg+0x105a/0x1ee0 [ 514.999265][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 515.004198][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 515.009050][T13651] do_syscall_64+0xb0/0x150 [ 515.013738][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.019704][T13651] [ 515.022025][T13651] Uninit was stored to memory at: [ 515.027055][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 515.032788][T13651] __msan_chain_origin+0x50/0x90 [ 515.037819][T13651] do_recvmmsg+0x105a/0x1ee0 [ 515.042410][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 515.047521][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 515.052379][T13651] do_syscall_64+0xb0/0x150 [ 515.056885][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.062761][T13651] [ 515.065080][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 515.071762][T13651] do_recvmmsg+0xc5/0x1ee0 [ 515.076272][T13651] do_recvmmsg+0xc5/0x1ee0 [ 515.232249][T13656] not chained 120000 origins [ 515.236884][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 515.245554][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.255731][T13656] Call Trace: [ 515.259030][T13656] dump_stack+0x1df/0x240 [ 515.263486][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 515.269214][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 515.274332][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 515.280231][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 515.285628][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 515.290828][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 515.296640][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 515.302705][T13656] ? kfree+0x61/0x30f0 [ 515.306776][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 515.311890][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 515.317435][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 515.323502][T13656] ? _copy_from_user+0x15b/0x260 [ 515.328440][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 515.333553][T13656] __msan_chain_origin+0x50/0x90 [ 515.338491][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.343112][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 515.348400][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 515.353419][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 515.358441][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 515.364332][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.369292][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.374148][T13656] do_syscall_64+0xb0/0x150 [ 515.378655][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.384540][T13656] RIP: 0033:0x45c1d9 [ 515.388422][T13656] Code: Bad RIP value. [ 515.392476][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 515.400887][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 515.408851][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 515.416821][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 515.424788][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 515.432755][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 515.440734][T13656] Uninit was stored to memory at: [ 515.445762][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.451476][T13656] __msan_chain_origin+0x50/0x90 [ 515.456411][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.460995][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.465931][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.470777][T13656] do_syscall_64+0xb0/0x150 [ 515.475277][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.481153][T13656] [ 515.483468][T13656] Uninit was stored to memory at: [ 515.488492][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.494205][T13656] __msan_chain_origin+0x50/0x90 [ 515.499147][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.503731][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.508666][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.513512][T13656] do_syscall_64+0xb0/0x150 [ 515.518015][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.523890][T13656] [ 515.526206][T13656] Uninit was stored to memory at: [ 515.531230][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.536945][T13656] __msan_chain_origin+0x50/0x90 [ 515.541880][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.546465][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.551399][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.556273][T13656] do_syscall_64+0xb0/0x150 [ 515.560778][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.566661][T13656] [ 515.568977][T13656] Uninit was stored to memory at: [ 515.574000][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.579713][T13656] __msan_chain_origin+0x50/0x90 [ 515.584649][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.589237][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.594165][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.599013][T13656] do_syscall_64+0xb0/0x150 [ 515.603512][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.609387][T13656] [ 515.611705][T13656] Uninit was stored to memory at: [ 515.616727][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.622440][T13656] __msan_chain_origin+0x50/0x90 [ 515.627372][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.631956][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.636894][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.641738][T13656] do_syscall_64+0xb0/0x150 [ 515.646238][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.652202][T13656] [ 515.654517][T13656] Uninit was stored to memory at: [ 515.659537][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.665249][T13656] __msan_chain_origin+0x50/0x90 [ 515.670182][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.674766][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.679697][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.684542][T13656] do_syscall_64+0xb0/0x150 [ 515.689039][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.694914][T13656] [ 515.697236][T13656] Uninit was stored to memory at: [ 515.702259][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 515.707969][T13656] __msan_chain_origin+0x50/0x90 [ 515.712901][T13656] do_recvmmsg+0x105a/0x1ee0 [ 515.717488][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 515.722419][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 515.727266][T13656] do_syscall_64+0xb0/0x150 [ 515.731763][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.737635][T13656] [ 515.739950][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 515.746621][T13656] do_recvmmsg+0xc5/0x1ee0 [ 515.751031][T13656] do_recvmmsg+0xc5/0x1ee0 [ 515.894664][T13651] not chained 130000 origins [ 515.899288][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 515.907949][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.917999][T13651] Call Trace: [ 515.921295][T13651] dump_stack+0x1df/0x240 [ 515.925634][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 515.931348][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 515.936454][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 515.942346][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 515.947632][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 515.952831][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 515.958642][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 515.964708][T13651] ? kfree+0x61/0x30f0 [ 515.968778][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 515.973887][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 515.979437][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 515.985505][T13651] ? _copy_from_user+0x15b/0x260 [ 515.990439][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 515.995553][T13651] __msan_chain_origin+0x50/0x90 [ 516.000503][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.005124][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 516.010408][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 516.021775][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 516.026795][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 516.032687][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.037632][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.042481][T13651] do_syscall_64+0xb0/0x150 [ 516.047073][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.052955][T13651] RIP: 0033:0x45c1d9 [ 516.056833][T13651] Code: Bad RIP value. [ 516.060894][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 516.069297][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 516.077366][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 516.085331][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 516.093294][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 516.101258][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 516.109230][T13651] Uninit was stored to memory at: [ 516.114259][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.119985][T13651] __msan_chain_origin+0x50/0x90 [ 516.124926][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.129518][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.134457][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.139307][T13651] do_syscall_64+0xb0/0x150 [ 516.143804][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.149792][T13651] [ 516.152107][T13651] Uninit was stored to memory at: [ 516.157126][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.162841][T13651] __msan_chain_origin+0x50/0x90 [ 516.167775][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.172362][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.177295][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.182142][T13651] do_syscall_64+0xb0/0x150 [ 516.186641][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.192514][T13651] [ 516.194831][T13651] Uninit was stored to memory at: [ 516.199854][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.205566][T13651] __msan_chain_origin+0x50/0x90 [ 516.210500][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.215086][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.220021][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.224865][T13651] do_syscall_64+0xb0/0x150 [ 516.229367][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.235245][T13651] [ 516.237560][T13651] Uninit was stored to memory at: [ 516.242579][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.248294][T13651] __msan_chain_origin+0x50/0x90 [ 516.253227][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.257814][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.262746][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.267604][T13651] do_syscall_64+0xb0/0x150 [ 516.272113][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.277993][T13651] [ 516.280312][T13651] Uninit was stored to memory at: [ 516.285344][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.291060][T13651] __msan_chain_origin+0x50/0x90 [ 516.295995][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.300583][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.305515][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.310361][T13651] do_syscall_64+0xb0/0x150 [ 516.314862][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.320740][T13651] [ 516.323057][T13651] Uninit was stored to memory at: [ 516.328079][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.333792][T13651] __msan_chain_origin+0x50/0x90 [ 516.338732][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.343319][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.348256][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.353106][T13651] do_syscall_64+0xb0/0x150 [ 516.357606][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.363480][T13651] [ 516.365797][T13651] Uninit was stored to memory at: [ 516.370818][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 516.376528][T13651] __msan_chain_origin+0x50/0x90 [ 516.381459][T13651] do_recvmmsg+0x105a/0x1ee0 [ 516.386045][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 516.390978][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 516.395823][T13651] do_syscall_64+0xb0/0x150 [ 516.400323][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.406200][T13651] [ 516.408518][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 516.415188][T13651] do_recvmmsg+0xc5/0x1ee0 [ 516.419603][T13651] do_recvmmsg+0xc5/0x1ee0 [ 516.568342][T13656] not chained 140000 origins [ 516.572981][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 516.581643][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.591693][T13656] Call Trace: [ 516.594984][T13656] dump_stack+0x1df/0x240 [ 516.599317][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 516.605033][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 516.610144][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 516.616034][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 516.621318][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 516.626516][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 516.632320][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 516.638411][T13656] ? kfree+0x61/0x30f0 [ 516.642496][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 516.647609][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 516.653155][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 516.659224][T13656] ? _copy_from_user+0x15b/0x260 [ 516.664155][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 516.669266][T13656] __msan_chain_origin+0x50/0x90 [ 516.674205][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.678825][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 516.684111][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 516.689128][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 516.694148][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 516.700046][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.704991][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.709840][T13656] do_syscall_64+0xb0/0x150 [ 516.714343][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.720225][T13656] RIP: 0033:0x45c1d9 [ 516.724106][T13656] Code: Bad RIP value. [ 516.728167][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 516.736578][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 516.744567][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 516.752532][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 516.760499][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 516.768468][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 516.776445][T13656] Uninit was stored to memory at: [ 516.781472][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 516.787189][T13656] __msan_chain_origin+0x50/0x90 [ 516.792121][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.796708][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.801639][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.806492][T13656] do_syscall_64+0xb0/0x150 [ 516.810991][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.816864][T13656] [ 516.819178][T13656] Uninit was stored to memory at: [ 516.824203][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 516.829917][T13656] __msan_chain_origin+0x50/0x90 [ 516.834852][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.839439][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.844379][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.849232][T13656] do_syscall_64+0xb0/0x150 [ 516.853730][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.859605][T13656] [ 516.861923][T13656] Uninit was stored to memory at: [ 516.866944][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 516.872657][T13656] __msan_chain_origin+0x50/0x90 [ 516.877595][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.882185][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.887122][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.891968][T13656] do_syscall_64+0xb0/0x150 [ 516.896470][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.902344][T13656] [ 516.904659][T13656] Uninit was stored to memory at: [ 516.909681][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 516.915397][T13656] __msan_chain_origin+0x50/0x90 [ 516.920327][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.924915][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.929845][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.934693][T13656] do_syscall_64+0xb0/0x150 [ 516.939195][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.945073][T13656] [ 516.947391][T13656] Uninit was stored to memory at: [ 516.952416][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 516.958133][T13656] __msan_chain_origin+0x50/0x90 [ 516.963067][T13656] do_recvmmsg+0x105a/0x1ee0 [ 516.967658][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 516.972588][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 516.977437][T13656] do_syscall_64+0xb0/0x150 [ 516.981937][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.987814][T13656] [ 516.990130][T13656] Uninit was stored to memory at: [ 516.995154][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.000869][T13656] __msan_chain_origin+0x50/0x90 [ 517.005807][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.010392][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.015318][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.020163][T13656] do_syscall_64+0xb0/0x150 [ 517.024650][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.030517][T13656] [ 517.032824][T13656] Uninit was stored to memory at: [ 517.037833][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.043537][T13656] __msan_chain_origin+0x50/0x90 [ 517.048457][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.053032][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.057953][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.062799][T13656] do_syscall_64+0xb0/0x150 [ 517.067288][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.073154][T13656] [ 517.075463][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 517.082121][T13656] do_recvmmsg+0xc5/0x1ee0 [ 517.086520][T13656] do_recvmmsg+0xc5/0x1ee0 [ 517.108857][T13656] not chained 150000 origins [ 517.113483][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 517.122149][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.132208][T13656] Call Trace: [ 517.135505][T13656] dump_stack+0x1df/0x240 [ 517.139842][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 517.145562][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.150671][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 517.156568][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 517.161851][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 517.167049][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 517.172860][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 517.178924][T13656] ? kfree+0x61/0x30f0 [ 517.182993][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.188102][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 517.193647][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 517.199714][T13656] ? _copy_from_user+0x15b/0x260 [ 517.204646][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.209755][T13656] __msan_chain_origin+0x50/0x90 [ 517.214695][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.219314][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 517.224706][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 517.229726][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 517.234754][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 517.240642][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.245573][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.250417][T13656] do_syscall_64+0xb0/0x150 [ 517.254908][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.260783][T13656] RIP: 0033:0x45c1d9 [ 517.264764][T13656] Code: Bad RIP value. [ 517.268821][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 517.277225][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 517.285185][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 517.293242][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 517.301197][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 517.309150][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 517.317116][T13656] Uninit was stored to memory at: [ 517.322128][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.327831][T13656] __msan_chain_origin+0x50/0x90 [ 517.332752][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.337326][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.342245][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.347080][T13656] do_syscall_64+0xb0/0x150 [ 517.351577][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.357443][T13656] [ 517.359749][T13656] Uninit was stored to memory at: [ 517.365278][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.370976][T13656] __msan_chain_origin+0x50/0x90 [ 517.375895][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.380470][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.385395][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.390230][T13656] do_syscall_64+0xb0/0x150 [ 517.394719][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.400584][T13656] [ 517.402892][T13656] Uninit was stored to memory at: [ 517.407902][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.413605][T13656] __msan_chain_origin+0x50/0x90 [ 517.418527][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.423106][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.428025][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.432856][T13656] do_syscall_64+0xb0/0x150 [ 517.437342][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.443208][T13656] [ 517.445518][T13656] Uninit was stored to memory at: [ 517.450525][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.456224][T13656] __msan_chain_origin+0x50/0x90 [ 517.461144][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.465719][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.470642][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.475476][T13656] do_syscall_64+0xb0/0x150 [ 517.479961][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.485826][T13656] [ 517.488134][T13656] Uninit was stored to memory at: [ 517.493142][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.498842][T13656] __msan_chain_origin+0x50/0x90 [ 517.503765][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.508342][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.513263][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.518119][T13656] do_syscall_64+0xb0/0x150 [ 517.522609][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.528649][T13656] [ 517.530956][T13656] Uninit was stored to memory at: [ 517.535966][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.541667][T13656] __msan_chain_origin+0x50/0x90 [ 517.546588][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.551162][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.556084][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.560915][T13656] do_syscall_64+0xb0/0x150 [ 517.565406][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.571270][T13656] [ 517.573575][T13656] Uninit was stored to memory at: [ 517.578581][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.584282][T13656] __msan_chain_origin+0x50/0x90 [ 517.589217][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.593787][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.598707][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.603542][T13656] do_syscall_64+0xb0/0x150 [ 517.608031][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.613896][T13656] [ 517.616209][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 517.622866][T13656] do_recvmmsg+0xc5/0x1ee0 [ 517.627264][T13656] do_recvmmsg+0xc5/0x1ee0 [ 517.747572][T13656] not chained 160000 origins [ 517.752215][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 517.760877][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.770924][T13656] Call Trace: [ 517.774219][T13656] dump_stack+0x1df/0x240 [ 517.778551][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 517.784270][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.789376][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 517.795263][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 517.800539][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 517.805754][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 517.811558][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 517.817618][T13656] ? kfree+0x61/0x30f0 [ 517.821687][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.826811][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 517.832352][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 517.838434][T13656] ? _copy_from_user+0x15b/0x260 [ 517.843372][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 517.848482][T13656] __msan_chain_origin+0x50/0x90 [ 517.853421][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.858028][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 517.863318][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 517.868346][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 517.873365][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 517.879252][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.884183][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.889120][T13656] do_syscall_64+0xb0/0x150 [ 517.893610][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.899482][T13656] RIP: 0033:0x45c1d9 [ 517.903354][T13656] Code: Bad RIP value. [ 517.907403][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 517.915796][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 517.923750][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 517.931704][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 517.939662][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 517.947616][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 517.955578][T13656] Uninit was stored to memory at: [ 517.960589][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 517.966289][T13656] __msan_chain_origin+0x50/0x90 [ 517.971225][T13656] do_recvmmsg+0x105a/0x1ee0 [ 517.975801][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 517.980722][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 517.985556][T13656] do_syscall_64+0xb0/0x150 [ 517.990042][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.995905][T13656] [ 517.998213][T13656] Uninit was stored to memory at: [ 518.003222][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.008925][T13656] __msan_chain_origin+0x50/0x90 [ 518.013849][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.018436][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.023357][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.028193][T13656] do_syscall_64+0xb0/0x150 [ 518.032682][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.038549][T13656] [ 518.040857][T13656] Uninit was stored to memory at: [ 518.045866][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.051569][T13656] __msan_chain_origin+0x50/0x90 [ 518.056490][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.061066][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.065999][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.070831][T13656] do_syscall_64+0xb0/0x150 [ 518.075324][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.081191][T13656] [ 518.083496][T13656] Uninit was stored to memory at: [ 518.088507][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.094213][T13656] __msan_chain_origin+0x50/0x90 [ 518.099135][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.103708][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.108629][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.113464][T13656] do_syscall_64+0xb0/0x150 [ 518.117954][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.123833][T13656] [ 518.126153][T13656] Uninit was stored to memory at: [ 518.131181][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.136891][T13656] __msan_chain_origin+0x50/0x90 [ 518.141820][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.146402][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.151332][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.156171][T13656] do_syscall_64+0xb0/0x150 [ 518.160657][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.166526][T13656] [ 518.168834][T13656] Uninit was stored to memory at: [ 518.173851][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.179551][T13656] __msan_chain_origin+0x50/0x90 [ 518.184470][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.189044][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.193976][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.198809][T13656] do_syscall_64+0xb0/0x150 [ 518.203298][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.209162][T13656] [ 518.211467][T13656] Uninit was stored to memory at: [ 518.216475][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.222176][T13656] __msan_chain_origin+0x50/0x90 [ 518.227097][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.231668][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.236587][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.241509][T13656] do_syscall_64+0xb0/0x150 [ 518.246000][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.251864][T13656] [ 518.254172][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 518.260829][T13656] do_recvmmsg+0xc5/0x1ee0 [ 518.265234][T13656] do_recvmmsg+0xc5/0x1ee0 [ 518.402378][T13656] not chained 170000 origins [ 518.407011][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 518.415665][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.425702][T13656] Call Trace: [ 518.428980][T13656] dump_stack+0x1df/0x240 [ 518.433302][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 518.439008][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 518.444195][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 518.450091][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 518.455367][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 518.460565][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 518.466361][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 518.472411][T13656] ? kfree+0x61/0x30f0 [ 518.476468][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 518.481566][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 518.487110][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 518.493166][T13656] ? _copy_from_user+0x15b/0x260 [ 518.498101][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 518.503199][T13656] __msan_chain_origin+0x50/0x90 [ 518.508129][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.512731][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 518.518002][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 518.523010][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 518.528030][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 518.533910][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.538846][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.543685][T13656] do_syscall_64+0xb0/0x150 [ 518.548178][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.554055][T13656] RIP: 0033:0x45c1d9 [ 518.557929][T13656] Code: Bad RIP value. [ 518.561977][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 518.570547][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 518.578503][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 518.586459][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 518.594413][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 518.602370][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 518.610342][T13656] Uninit was stored to memory at: [ 518.615357][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.621059][T13656] __msan_chain_origin+0x50/0x90 [ 518.625982][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.630557][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.635480][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.640319][T13656] do_syscall_64+0xb0/0x150 [ 518.644807][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.650678][T13656] [ 518.652985][T13656] Uninit was stored to memory at: [ 518.657996][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.663701][T13656] __msan_chain_origin+0x50/0x90 [ 518.668635][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.673208][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.678131][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.682967][T13656] do_syscall_64+0xb0/0x150 [ 518.687469][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.693349][T13656] [ 518.695660][T13656] Uninit was stored to memory at: [ 518.700669][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.706374][T13656] __msan_chain_origin+0x50/0x90 [ 518.711296][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.715870][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.720790][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.725627][T13656] do_syscall_64+0xb0/0x150 [ 518.730304][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.736169][T13656] [ 518.738475][T13656] Uninit was stored to memory at: [ 518.743483][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.749196][T13656] __msan_chain_origin+0x50/0x90 [ 518.754118][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.758692][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.763616][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.768451][T13656] do_syscall_64+0xb0/0x150 [ 518.772936][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.778805][T13656] [ 518.781111][T13656] Uninit was stored to memory at: [ 518.786118][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.791821][T13656] __msan_chain_origin+0x50/0x90 [ 518.796760][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.801332][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.806253][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.811090][T13656] do_syscall_64+0xb0/0x150 [ 518.815579][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.821446][T13656] [ 518.823761][T13656] Uninit was stored to memory at: [ 518.828770][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.834484][T13656] __msan_chain_origin+0x50/0x90 [ 518.839423][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.844001][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.848929][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.853768][T13656] do_syscall_64+0xb0/0x150 [ 518.858258][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.864124][T13656] [ 518.866450][T13656] Uninit was stored to memory at: [ 518.871485][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 518.877189][T13656] __msan_chain_origin+0x50/0x90 [ 518.882124][T13656] do_recvmmsg+0x105a/0x1ee0 [ 518.886699][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 518.891620][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 518.896459][T13656] do_syscall_64+0xb0/0x150 [ 518.900958][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.906823][T13656] [ 518.909134][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 518.915791][T13656] do_recvmmsg+0xc5/0x1ee0 [ 518.920195][T13656] do_recvmmsg+0xc5/0x1ee0 [ 519.096857][T13656] not chained 180000 origins [ 519.101494][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 519.110162][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.120325][T13656] Call Trace: [ 519.123624][T13656] dump_stack+0x1df/0x240 [ 519.127966][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 519.133697][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 519.138808][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 519.144705][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 519.149996][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 519.155198][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 519.161002][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 519.167070][T13656] ? kfree+0x61/0x30f0 [ 519.171148][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 519.176264][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 519.181808][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 519.187879][T13656] ? _copy_from_user+0x15b/0x260 [ 519.192816][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 519.197928][T13656] __msan_chain_origin+0x50/0x90 [ 519.202873][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.207497][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 519.212786][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 519.217813][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 519.222837][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 519.228743][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.233700][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.238566][T13656] do_syscall_64+0xb0/0x150 [ 519.243074][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.248959][T13656] RIP: 0033:0x45c1d9 [ 519.252839][T13656] Code: Bad RIP value. [ 519.256898][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 519.265309][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 519.273285][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 519.281269][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 519.289248][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 519.297220][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 519.305199][T13656] Uninit was stored to memory at: [ 519.310236][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.315960][T13656] __msan_chain_origin+0x50/0x90 [ 519.320897][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.325491][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.330431][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.335280][T13656] do_syscall_64+0xb0/0x150 [ 519.339782][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.345661][T13656] [ 519.347976][T13656] Uninit was stored to memory at: [ 519.352999][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.358718][T13656] __msan_chain_origin+0x50/0x90 [ 519.363675][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.368269][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.373207][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.378058][T13656] do_syscall_64+0xb0/0x150 [ 519.382558][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.388439][T13656] [ 519.390759][T13656] Uninit was stored to memory at: [ 519.395786][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.401608][T13656] __msan_chain_origin+0x50/0x90 [ 519.406545][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.411134][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.416070][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.420918][T13656] do_syscall_64+0xb0/0x150 [ 519.425421][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.431295][T13656] [ 519.433610][T13656] Uninit was stored to memory at: [ 519.438636][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.444352][T13656] __msan_chain_origin+0x50/0x90 [ 519.449289][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.453873][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.458813][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.463659][T13656] do_syscall_64+0xb0/0x150 [ 519.468163][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.474039][T13656] [ 519.476353][T13656] Uninit was stored to memory at: [ 519.481406][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.487124][T13656] __msan_chain_origin+0x50/0x90 [ 519.492061][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.496652][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.501584][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.506433][T13656] do_syscall_64+0xb0/0x150 [ 519.510934][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.516811][T13656] [ 519.519133][T13656] Uninit was stored to memory at: [ 519.524161][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.529877][T13656] __msan_chain_origin+0x50/0x90 [ 519.534814][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.539403][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.544337][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.549182][T13656] do_syscall_64+0xb0/0x150 [ 519.553682][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.559560][T13656] [ 519.561876][T13656] Uninit was stored to memory at: [ 519.566902][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 519.572617][T13656] __msan_chain_origin+0x50/0x90 [ 519.577550][T13656] do_recvmmsg+0x105a/0x1ee0 [ 519.582134][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 519.587067][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 519.591917][T13656] do_syscall_64+0xb0/0x150 [ 519.596421][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.602296][T13656] [ 519.604620][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 519.611294][T13656] do_recvmmsg+0xc5/0x1ee0 [ 519.615706][T13656] do_recvmmsg+0xc5/0x1ee0 [ 519.746064][T13651] not chained 190000 origins [ 519.750707][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 519.759663][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.769720][T13651] Call Trace: [ 519.773008][T13651] dump_stack+0x1df/0x240 [ 519.777335][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 519.783039][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 519.788138][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 519.794022][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 519.799298][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 519.804484][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 519.810370][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 519.816422][T13651] ? kfree+0x61/0x30f0 [ 519.820481][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 519.825594][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 519.831131][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 519.837185][T13651] ? _copy_from_user+0x15b/0x260 [ 519.842199][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 519.847297][T13651] __msan_chain_origin+0x50/0x90 [ 519.852224][T13651] do_recvmmsg+0x105a/0x1ee0 [ 519.856826][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 519.862098][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 519.867109][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 519.872132][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 519.878016][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 519.882948][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 519.887787][T13651] do_syscall_64+0xb0/0x150 [ 519.892280][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.898156][T13651] RIP: 0033:0x45c1d9 [ 519.902026][T13651] Code: Bad RIP value. [ 519.906083][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 519.914475][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 519.922434][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 519.930391][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 519.938348][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 519.946302][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 519.954265][T13651] Uninit was stored to memory at: [ 519.959277][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 519.964994][T13651] __msan_chain_origin+0x50/0x90 [ 519.969918][T13651] do_recvmmsg+0x105a/0x1ee0 [ 519.974491][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 519.979414][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 519.984251][T13651] do_syscall_64+0xb0/0x150 [ 519.988739][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 519.994606][T13651] [ 519.996910][T13651] Uninit was stored to memory at: [ 520.001919][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.007629][T13651] __msan_chain_origin+0x50/0x90 [ 520.012566][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.017173][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.022101][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.026939][T13651] do_syscall_64+0xb0/0x150 [ 520.031427][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.037299][T13651] [ 520.039605][T13651] Uninit was stored to memory at: [ 520.044615][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.050318][T13651] __msan_chain_origin+0x50/0x90 [ 520.055324][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.059895][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.064816][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.069650][T13651] do_syscall_64+0xb0/0x150 [ 520.074137][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.080003][T13651] [ 520.082314][T13651] Uninit was stored to memory at: [ 520.087324][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.093047][T13651] __msan_chain_origin+0x50/0x90 [ 520.097977][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.102558][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.107487][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.112321][T13651] do_syscall_64+0xb0/0x150 [ 520.116810][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.122677][T13651] [ 520.124986][T13651] Uninit was stored to memory at: [ 520.129993][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.135693][T13651] __msan_chain_origin+0x50/0x90 [ 520.140611][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.145183][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.150130][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.154965][T13651] do_syscall_64+0xb0/0x150 [ 520.159459][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.165325][T13651] [ 520.167638][T13651] Uninit was stored to memory at: [ 520.172648][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.178349][T13651] __msan_chain_origin+0x50/0x90 [ 520.183270][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.187844][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.192765][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.197598][T13651] do_syscall_64+0xb0/0x150 [ 520.202084][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.207949][T13651] [ 520.210258][T13651] Uninit was stored to memory at: [ 520.215269][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 520.220971][T13651] __msan_chain_origin+0x50/0x90 [ 520.225945][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.230540][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.235587][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.240628][T13651] do_syscall_64+0xb0/0x150 [ 520.245137][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.251014][T13651] [ 520.253338][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 520.260017][T13651] do_recvmmsg+0xc5/0x1ee0 [ 520.264420][T13651] do_recvmmsg+0xc5/0x1ee0 [ 520.435872][T13656] not chained 200000 origins [ 520.440501][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 520.449168][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.459225][T13656] Call Trace: [ 520.462521][T13656] dump_stack+0x1df/0x240 [ 520.466856][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 520.472570][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 520.477682][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 520.483568][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 520.488863][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 520.494073][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 520.499889][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 520.505961][T13656] ? kfree+0x61/0x30f0 [ 520.510033][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 520.515146][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 520.520690][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 520.526759][T13656] ? _copy_from_user+0x15b/0x260 [ 520.531691][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 520.536799][T13656] __msan_chain_origin+0x50/0x90 [ 520.541737][T13656] do_recvmmsg+0x105a/0x1ee0 [ 520.546359][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 520.551651][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 520.556678][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 520.561701][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 520.567606][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 520.572561][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 520.577420][T13656] do_syscall_64+0xb0/0x150 [ 520.581927][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.583283][T13651] not chained 210000 origins [ 520.587820][T13656] RIP: 0033:0x45c1d9 [ 520.596249][T13656] Code: Bad RIP value. [ 520.600296][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.608692][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 520.616644][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 520.624596][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 520.632547][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 520.640509][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 520.648469][T13656] Uninit was stored to memory at: [ 520.648480][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 520.648494][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.653497][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 520.662137][T13651] Call Trace: [ 520.672293][T13656] __msan_chain_origin+0x50/0x90 [ 520.677995][T13651] dump_stack+0x1df/0x240 [ 520.681262][T13656] do_recvmmsg+0x105a/0x1ee0 [ 520.686187][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 520.690500][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 520.695063][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 520.700755][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 520.705664][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 520.710746][T13656] do_syscall_64+0xb0/0x150 [ 520.715570][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 520.721438][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.725910][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 520.731156][T13656] [ 520.737039][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 520.742199][T13656] Uninit was stored to memory at: [ 520.744516][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 520.750291][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 520.755290][T13651] ? kfree+0x61/0x30f0 [ 520.761323][T13656] __msan_chain_origin+0x50/0x90 [ 520.767017][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 520.771074][T13656] do_recvmmsg+0x105a/0x1ee0 [ 520.775990][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 520.781073][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 520.785637][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 520.791154][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 520.796075][T13651] ? _copy_from_user+0x15b/0x260 [ 520.802114][T13656] do_syscall_64+0xb0/0x150 [ 520.806939][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 520.811926][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.816403][T13651] __msan_chain_origin+0x50/0x90 [ 520.821477][T13656] [ 520.827354][T13651] do_recvmmsg+0x105a/0x1ee0 [ 520.832428][T13656] Uninit was stored to memory at: [ 520.834766][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 520.839308][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 520.844306][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 520.849561][T13656] __msan_chain_origin+0x50/0x90 [ 520.855271][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 520.860269][T13656] do_recvmmsg+0x105a/0x1ee0 [ 520.865179][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 520.870172][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 520.874737][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 520.880601][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 520.885517][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 520.890430][T13656] do_syscall_64+0xb0/0x150 [ 520.895249][T13651] do_syscall_64+0xb0/0x150 [ 520.900071][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.904550][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.909013][T13656] [ 520.914883][T13651] RIP: 0033:0x45c1d9 [ 520.920736][T13656] Uninit was stored to memory at: [ 520.923054][T13651] Code: Bad RIP value. [ 520.926930][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 520.931933][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.935981][T13656] __msan_chain_origin+0x50/0x90 [ 520.941666][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 520.950053][T13656] do_recvmmsg+0x105a/0x1ee0 [ 520.954959][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 520.962911][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 520.967466][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 520.975428][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 520.980326][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 520.988294][T13656] do_syscall_64+0xb0/0x150 [ 520.993110][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 521.001065][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.005538][T13651] Uninit was stored to memory at: [ 521.013491][T13656] [ 521.019379][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.024368][T13656] Uninit was stored to memory at: [ 521.026685][T13651] __msan_chain_origin+0x50/0x90 [ 521.032380][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 521.037376][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.042283][T13656] __msan_chain_origin+0x50/0x90 [ 521.047976][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.052537][T13656] do_recvmmsg+0x105a/0x1ee0 [ 521.057450][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.062359][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 521.066933][T13651] do_syscall_64+0xb0/0x150 [ 521.071745][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 521.076656][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.081140][T13656] do_syscall_64+0xb0/0x150 [ 521.085953][T13651] [ 521.091842][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.096320][T13651] Uninit was stored to memory at: [ 521.098629][T13656] [ 521.104510][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.109492][T13656] Uninit was stored to memory at: [ 521.111818][T13651] __msan_chain_origin+0x50/0x90 [ 521.117769][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 521.122768][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.127676][T13656] __msan_chain_origin+0x50/0x90 [ 521.133366][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.137929][T13656] do_recvmmsg+0x105a/0x1ee0 [ 521.142840][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.147769][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 521.152340][T13651] do_syscall_64+0xb0/0x150 [ 521.157174][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 521.162087][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.166561][T13656] do_syscall_64+0xb0/0x150 [ 521.171374][T13651] [ 521.177334][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.181809][T13651] Uninit was stored to memory at: [ 521.184112][T13656] [ 521.189983][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.194970][T13656] Uninit was stored to memory at: [ 521.197282][T13651] __msan_chain_origin+0x50/0x90 [ 521.202982][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 521.208005][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.212913][T13656] __msan_chain_origin+0x50/0x90 [ 521.218600][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.218619][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.223181][T13656] do_recvmmsg+0x105a/0x1ee0 [ 521.228091][T13651] do_syscall_64+0xb0/0x150 [ 521.232999][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 521.237822][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.242382][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 521.246846][T13651] [ 521.251781][T13656] do_syscall_64+0xb0/0x150 [ 521.257634][T13651] Uninit was stored to memory at: [ 521.262487][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.264792][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.269269][T13656] [ 521.274293][T13651] __msan_chain_origin+0x50/0x90 [ 521.280150][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 521.285850][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.288155][T13656] do_recvmmsg+0xc5/0x1ee0 [ 521.293088][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.299733][T13656] do_recvmmsg+0xc5/0x1ee0 [ 521.304299][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.322829][T13651] do_syscall_64+0xb0/0x150 [ 521.327344][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.333233][T13651] [ 521.335556][T13651] Uninit was stored to memory at: [ 521.340582][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.346299][T13651] __msan_chain_origin+0x50/0x90 [ 521.351317][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.355891][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.360810][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.365665][T13651] do_syscall_64+0xb0/0x150 [ 521.370153][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.376037][T13651] [ 521.378345][T13651] Uninit was stored to memory at: [ 521.383356][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.389061][T13651] __msan_chain_origin+0x50/0x90 [ 521.393985][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.398568][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.403489][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.408329][T13651] do_syscall_64+0xb0/0x150 [ 521.412819][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.418687][T13651] [ 521.420996][T13651] Uninit was stored to memory at: [ 521.430004][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.435711][T13651] __msan_chain_origin+0x50/0x90 [ 521.440632][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.445238][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.450161][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.454997][T13651] do_syscall_64+0xb0/0x150 [ 521.459487][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.465356][T13651] [ 521.467665][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 521.474322][T13651] do_recvmmsg+0xc5/0x1ee0 [ 521.478719][T13651] do_recvmmsg+0xc5/0x1ee0 [ 521.630696][T13651] not chained 220000 origins [ 521.635338][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 521.644000][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.654048][T13651] Call Trace: [ 521.657342][T13651] dump_stack+0x1df/0x240 [ 521.662199][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 521.667918][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 521.673033][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 521.678928][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 521.684218][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 521.689414][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 521.695224][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 521.701293][T13651] ? kfree+0x61/0x30f0 [ 521.705364][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 521.710481][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 521.716158][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 521.722230][T13651] ? _copy_from_user+0x15b/0x260 [ 521.727169][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 521.732279][T13651] __msan_chain_origin+0x50/0x90 [ 521.737218][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.741841][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 521.747126][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 521.752149][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 521.757172][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 521.763066][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.768018][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.772872][T13651] do_syscall_64+0xb0/0x150 [ 521.777384][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.783291][T13651] RIP: 0033:0x45c1d9 [ 521.787175][T13651] Code: Bad RIP value. [ 521.791233][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 521.799643][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 521.807614][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 521.815584][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 521.823550][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 521.831518][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 521.839498][T13651] Uninit was stored to memory at: [ 521.844527][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.850241][T13651] __msan_chain_origin+0x50/0x90 [ 521.855174][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.859761][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.864694][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.869574][T13651] do_syscall_64+0xb0/0x150 [ 521.874075][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.879953][T13651] [ 521.882272][T13651] Uninit was stored to memory at: [ 521.887293][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.893006][T13651] __msan_chain_origin+0x50/0x90 [ 521.897943][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.902531][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.907467][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.912316][T13651] do_syscall_64+0xb0/0x150 [ 521.916815][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.922689][T13651] [ 521.925006][T13651] Uninit was stored to memory at: [ 521.931329][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.937044][T13651] __msan_chain_origin+0x50/0x90 [ 521.941984][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.946572][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.951508][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.956356][T13651] do_syscall_64+0xb0/0x150 [ 521.960857][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.966737][T13651] [ 521.969053][T13651] Uninit was stored to memory at: [ 521.974076][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 521.979791][T13651] __msan_chain_origin+0x50/0x90 [ 521.984729][T13651] do_recvmmsg+0x105a/0x1ee0 [ 521.989316][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 521.994249][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 521.999094][T13651] do_syscall_64+0xb0/0x150 [ 522.003597][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.009472][T13651] [ 522.011788][T13651] Uninit was stored to memory at: [ 522.016812][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 522.022526][T13651] __msan_chain_origin+0x50/0x90 [ 522.027464][T13651] do_recvmmsg+0x105a/0x1ee0 [ 522.032048][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 522.036987][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 522.041834][T13651] do_syscall_64+0xb0/0x150 [ 522.046337][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.052214][T13651] [ 522.054529][T13651] Uninit was stored to memory at: [ 522.059550][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 522.065263][T13651] __msan_chain_origin+0x50/0x90 [ 522.070197][T13651] do_recvmmsg+0x105a/0x1ee0 [ 522.074785][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 522.079731][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 522.084587][T13651] do_syscall_64+0xb0/0x150 [ 522.089090][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.094968][T13651] [ 522.097287][T13651] Uninit was stored to memory at: [ 522.102311][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 522.108041][T13651] __msan_chain_origin+0x50/0x90 [ 522.112981][T13651] do_recvmmsg+0x105a/0x1ee0 [ 522.117668][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 522.122619][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 522.127573][T13651] do_syscall_64+0xb0/0x150 [ 522.132101][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.138086][T13651] [ 522.140420][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 522.147111][T13651] do_recvmmsg+0xc5/0x1ee0 [ 522.151534][T13651] do_recvmmsg+0xc5/0x1ee0 [ 522.310492][T13656] not chained 230000 origins [ 522.315133][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 522.323816][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.333866][T13656] Call Trace: [ 522.337165][T13656] dump_stack+0x1df/0x240 [ 522.341498][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 522.347215][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 522.352330][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 522.358243][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 522.363531][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 522.368732][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 522.374537][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 522.380603][T13656] ? kfree+0x61/0x30f0 [ 522.384672][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 522.389790][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 522.395337][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 522.401406][T13656] ? _copy_from_user+0x15b/0x260 [ 522.406344][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 522.412492][T13656] __msan_chain_origin+0x50/0x90 [ 522.417431][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.422053][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 522.427340][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 522.432360][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 522.437383][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 522.443275][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.448223][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.453074][T13656] do_syscall_64+0xb0/0x150 [ 522.457582][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.463469][T13656] RIP: 0033:0x45c1d9 [ 522.467348][T13656] Code: Bad RIP value. [ 522.471407][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 522.479815][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 522.487787][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 522.495761][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 522.503728][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 522.511693][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 522.519669][T13656] Uninit was stored to memory at: [ 522.524694][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.530409][T13656] __msan_chain_origin+0x50/0x90 [ 522.535344][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.539929][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.544865][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.549719][T13656] do_syscall_64+0xb0/0x150 [ 522.554219][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.560094][T13656] [ 522.562414][T13656] Uninit was stored to memory at: [ 522.567435][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.573149][T13656] __msan_chain_origin+0x50/0x90 [ 522.578083][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.582669][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.587606][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.592453][T13656] do_syscall_64+0xb0/0x150 [ 522.597176][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.603053][T13656] [ 522.605371][T13656] Uninit was stored to memory at: [ 522.610396][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.616110][T13656] __msan_chain_origin+0x50/0x90 [ 522.621045][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.625629][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.630569][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.635418][T13656] do_syscall_64+0xb0/0x150 [ 522.639920][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.645795][T13656] [ 522.648112][T13656] Uninit was stored to memory at: [ 522.653139][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.658854][T13656] __msan_chain_origin+0x50/0x90 [ 522.663790][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.668378][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.673311][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.678161][T13656] do_syscall_64+0xb0/0x150 [ 522.682662][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.688539][T13656] [ 522.690861][T13656] Uninit was stored to memory at: [ 522.695879][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.701581][T13656] __msan_chain_origin+0x50/0x90 [ 522.706506][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.711078][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.716003][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.720842][T13656] do_syscall_64+0xb0/0x150 [ 522.725335][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.731204][T13656] [ 522.733513][T13656] Uninit was stored to memory at: [ 522.738521][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.744224][T13656] __msan_chain_origin+0x50/0x90 [ 522.749145][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.753717][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.758641][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.763479][T13656] do_syscall_64+0xb0/0x150 [ 522.767970][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.773843][T13656] [ 522.776156][T13656] Uninit was stored to memory at: [ 522.781169][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 522.786872][T13656] __msan_chain_origin+0x50/0x90 [ 522.791793][T13656] do_recvmmsg+0x105a/0x1ee0 [ 522.796931][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 522.801857][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 522.806692][T13656] do_syscall_64+0xb0/0x150 [ 522.811183][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.817049][T13656] [ 522.819359][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 522.826018][T13656] do_recvmmsg+0xc5/0x1ee0 [ 522.830416][T13656] do_recvmmsg+0xc5/0x1ee0 [ 522.963325][T13651] not chained 240000 origins [ 522.967952][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 522.976619][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.986668][T13651] Call Trace: [ 522.989988][T13651] dump_stack+0x1df/0x240 [ 522.994328][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 523.000044][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.005153][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 523.011047][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 523.016334][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 523.021532][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 523.027330][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 523.033385][T13651] ? kfree+0x61/0x30f0 [ 523.037445][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.042544][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 523.048077][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 523.054136][T13651] ? _copy_from_user+0x15b/0x260 [ 523.059064][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.064168][T13651] __msan_chain_origin+0x50/0x90 [ 523.069095][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.073715][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 523.079123][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 523.084137][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 523.089260][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 523.095148][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.100092][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.104942][T13651] do_syscall_64+0xb0/0x150 [ 523.109439][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.115319][T13651] RIP: 0033:0x45c1d9 [ 523.119192][T13651] Code: Bad RIP value. [ 523.123239][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 523.131633][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 523.139590][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 523.147550][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 523.155523][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 523.163483][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 523.172229][T13651] Uninit was stored to memory at: [ 523.177267][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.182976][T13651] __msan_chain_origin+0x50/0x90 [ 523.187899][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.192474][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.197406][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.202246][T13651] do_syscall_64+0xb0/0x150 [ 523.206751][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.212625][T13651] [ 523.214932][T13651] Uninit was stored to memory at: [ 523.219959][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.225667][T13651] __msan_chain_origin+0x50/0x90 [ 523.230590][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.235168][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.240785][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.245623][T13651] do_syscall_64+0xb0/0x150 [ 523.250200][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.256188][T13651] [ 523.258504][T13651] Uninit was stored to memory at: [ 523.263522][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.269239][T13651] __msan_chain_origin+0x50/0x90 [ 523.274161][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.278743][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.283677][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.288579][T13651] do_syscall_64+0xb0/0x150 [ 523.293089][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.298967][T13651] [ 523.301295][T13651] Uninit was stored to memory at: [ 523.306327][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.312333][T13651] __msan_chain_origin+0x50/0x90 [ 523.317281][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.322060][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.327105][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.332154][T13651] do_syscall_64+0xb0/0x150 [ 523.336653][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.342533][T13651] [ 523.344855][T13651] Uninit was stored to memory at: [ 523.349893][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.355628][T13651] __msan_chain_origin+0x50/0x90 [ 523.360563][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.365150][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.370183][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.375031][T13651] do_syscall_64+0xb0/0x150 [ 523.379543][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.385422][T13651] [ 523.387746][T13651] Uninit was stored to memory at: [ 523.392775][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.398580][T13651] __msan_chain_origin+0x50/0x90 [ 523.403513][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.408181][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.413108][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.417954][T13651] do_syscall_64+0xb0/0x150 [ 523.422452][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.428324][T13651] [ 523.430645][T13651] Uninit was stored to memory at: [ 523.435668][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.441431][T13651] __msan_chain_origin+0x50/0x90 [ 523.446461][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.451046][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.455982][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.460823][T13651] do_syscall_64+0xb0/0x150 [ 523.465322][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.471197][T13651] [ 523.473603][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 523.480281][T13651] do_recvmmsg+0xc5/0x1ee0 [ 523.484690][T13651] do_recvmmsg+0xc5/0x1ee0 [ 523.645272][T13651] not chained 250000 origins [ 523.649921][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 523.658588][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.668730][T13651] Call Trace: [ 523.672027][T13651] dump_stack+0x1df/0x240 [ 523.676370][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 523.682090][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.687216][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 523.693135][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 523.698427][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 523.703630][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 523.709449][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 523.715520][T13651] ? kfree+0x61/0x30f0 [ 523.719707][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.724831][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 523.730520][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 523.736916][T13651] ? _copy_from_user+0x15b/0x260 [ 523.741857][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 523.746976][T13651] __msan_chain_origin+0x50/0x90 [ 523.751926][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.756552][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 523.761840][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 523.766883][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 523.771924][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 523.778797][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.783746][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.789039][T13651] do_syscall_64+0xb0/0x150 [ 523.793548][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.799438][T13651] RIP: 0033:0x45c1d9 [ 523.803326][T13651] Code: Bad RIP value. [ 523.807395][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 523.815808][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 523.823780][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 523.831751][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 523.839833][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 523.848240][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 523.856221][T13651] Uninit was stored to memory at: [ 523.861251][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.866967][T13651] __msan_chain_origin+0x50/0x90 [ 523.871903][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.876495][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.881436][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.886289][T13651] do_syscall_64+0xb0/0x150 [ 523.890802][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.896680][T13651] [ 523.899000][T13651] Uninit was stored to memory at: [ 523.904028][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.909773][T13651] __msan_chain_origin+0x50/0x90 [ 523.914709][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.919298][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.924238][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.929091][T13651] do_syscall_64+0xb0/0x150 [ 523.933599][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.939478][T13651] [ 523.941801][T13651] Uninit was stored to memory at: [ 523.946829][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.952549][T13651] __msan_chain_origin+0x50/0x90 [ 523.957486][T13651] do_recvmmsg+0x105a/0x1ee0 [ 523.962177][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 523.967112][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 523.971965][T13651] do_syscall_64+0xb0/0x150 [ 523.976468][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.982346][T13651] [ 523.984666][T13651] Uninit was stored to memory at: [ 523.989689][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 523.995408][T13651] __msan_chain_origin+0x50/0x90 [ 524.000370][T13651] do_recvmmsg+0x105a/0x1ee0 [ 524.004959][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 524.009896][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 524.014762][T13651] do_syscall_64+0xb0/0x150 [ 524.019267][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.025158][T13651] [ 524.028956][T13651] Uninit was stored to memory at: [ 524.034591][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 524.040306][T13651] __msan_chain_origin+0x50/0x90 [ 524.045240][T13651] do_recvmmsg+0x105a/0x1ee0 [ 524.049826][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 524.054789][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 524.059641][T13651] do_syscall_64+0xb0/0x150 [ 524.064147][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.070028][T13651] [ 524.072347][T13651] Uninit was stored to memory at: [ 524.077378][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 524.083091][T13651] __msan_chain_origin+0x50/0x90 [ 524.088028][T13651] do_recvmmsg+0x105a/0x1ee0 [ 524.092617][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 524.097568][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 524.102428][T13651] do_syscall_64+0xb0/0x150 [ 524.106945][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.112912][T13651] [ 524.115232][T13651] Uninit was stored to memory at: [ 524.120266][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 524.126099][T13651] __msan_chain_origin+0x50/0x90 [ 524.131037][T13651] do_recvmmsg+0x105a/0x1ee0 [ 524.136063][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 524.140997][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 524.145846][T13651] do_syscall_64+0xb0/0x150 [ 524.150365][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.156348][T13651] [ 524.158671][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 524.165345][T13651] do_recvmmsg+0xc5/0x1ee0 [ 524.169771][T13651] do_recvmmsg+0xc5/0x1ee0 [ 524.232230][T13656] not chained 260000 origins [ 524.236861][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 524.245524][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.256369][T13656] Call Trace: [ 524.259659][T13656] dump_stack+0x1df/0x240 [ 524.264508][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 524.270234][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 524.275336][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 524.281231][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 524.286509][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 524.291699][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 524.297494][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 524.303549][T13656] ? kfree+0x61/0x30f0 [ 524.307612][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 524.312721][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 524.318258][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 524.324324][T13656] ? _copy_from_user+0x15b/0x260 [ 524.329265][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 524.334366][T13656] __msan_chain_origin+0x50/0x90 [ 524.339509][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.344116][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 524.349390][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 524.354402][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 524.359517][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 524.365403][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.370339][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.375289][T13656] do_syscall_64+0xb0/0x150 [ 524.379785][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.385930][T13656] RIP: 0033:0x45c1d9 [ 524.389804][T13656] Code: Bad RIP value. [ 524.393856][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 524.404426][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 524.412646][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 524.420888][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 524.428868][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 524.436852][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 524.444905][T13656] Uninit was stored to memory at: [ 524.449923][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.455629][T13656] __msan_chain_origin+0x50/0x90 [ 524.460556][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.465134][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.470063][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.474905][T13656] do_syscall_64+0xb0/0x150 [ 524.479395][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.485280][T13656] [ 524.487593][T13656] Uninit was stored to memory at: [ 524.492607][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.498310][T13656] __msan_chain_origin+0x50/0x90 [ 524.512092][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.516671][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.522030][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.526902][T13656] do_syscall_64+0xb0/0x150 [ 524.531390][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.537261][T13656] [ 524.540809][T13656] Uninit was stored to memory at: [ 524.545825][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.551528][T13656] __msan_chain_origin+0x50/0x90 [ 524.556454][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.561090][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.566014][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.570854][T13656] do_syscall_64+0xb0/0x150 [ 524.575430][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.581304][T13656] [ 524.583614][T13656] Uninit was stored to memory at: [ 524.588639][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.594346][T13656] __msan_chain_origin+0x50/0x90 [ 524.599376][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.604040][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.608966][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.613811][T13656] do_syscall_64+0xb0/0x150 [ 524.618304][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.624175][T13656] [ 524.626487][T13656] Uninit was stored to memory at: [ 524.631512][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.637236][T13656] __msan_chain_origin+0x50/0x90 [ 524.642189][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.646767][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.651701][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.656547][T13656] do_syscall_64+0xb0/0x150 [ 524.661039][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.666909][T13656] [ 524.669227][T13656] Uninit was stored to memory at: [ 524.674243][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.679989][T13656] __msan_chain_origin+0x50/0x90 [ 524.685091][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.689669][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.694595][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.699442][T13656] do_syscall_64+0xb0/0x150 [ 524.704638][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.710596][T13656] [ 524.712903][T13656] Uninit was stored to memory at: [ 524.718004][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 524.723707][T13656] __msan_chain_origin+0x50/0x90 [ 524.728806][T13656] do_recvmmsg+0x105a/0x1ee0 [ 524.733386][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 524.738399][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 524.743239][T13656] do_syscall_64+0xb0/0x150 [ 524.747755][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.753918][T13656] [ 524.756291][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 524.762955][T13656] do_recvmmsg+0xc5/0x1ee0 [ 524.767365][T13656] do_recvmmsg+0xc5/0x1ee0 [ 524.939057][T13651] not chained 270000 origins [ 524.943690][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 524.952360][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.962416][T13651] Call Trace: [ 524.965729][T13651] dump_stack+0x1df/0x240 [ 524.970069][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 524.975793][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 524.980902][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 524.986891][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 524.992183][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 524.997370][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 525.003279][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 525.009335][T13651] ? kfree+0x61/0x30f0 [ 525.013573][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 525.018672][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 525.024205][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 525.030263][T13651] ? _copy_from_user+0x15b/0x260 [ 525.035187][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 525.040283][T13651] __msan_chain_origin+0x50/0x90 [ 525.045213][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.049823][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 525.055097][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 525.060105][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 525.065118][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 525.071004][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.075937][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.080777][T13651] do_syscall_64+0xb0/0x150 [ 525.085274][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.091147][T13651] RIP: 0033:0x45c1d9 [ 525.095017][T13651] Code: Bad RIP value. [ 525.099066][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 525.107460][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 525.115431][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 525.123390][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 525.131347][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 525.139306][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 525.147272][T13651] Uninit was stored to memory at: [ 525.152288][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.157997][T13651] __msan_chain_origin+0x50/0x90 [ 525.162917][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.167491][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.172413][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.177249][T13651] do_syscall_64+0xb0/0x150 [ 525.181734][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.187601][T13651] [ 525.189908][T13651] Uninit was stored to memory at: [ 525.194920][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.200623][T13651] __msan_chain_origin+0x50/0x90 [ 525.205547][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.210122][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.215043][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.219880][T13651] do_syscall_64+0xb0/0x150 [ 525.224369][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.230237][T13651] [ 525.232547][T13651] Uninit was stored to memory at: [ 525.237557][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.243384][T13651] __msan_chain_origin+0x50/0x90 [ 525.248314][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.252894][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.257835][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.262686][T13651] do_syscall_64+0xb0/0x150 [ 525.267180][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.273045][T13651] [ 525.275353][T13651] Uninit was stored to memory at: [ 525.280365][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.286068][T13651] __msan_chain_origin+0x50/0x90 [ 525.290987][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.295561][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.300481][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.305325][T13651] do_syscall_64+0xb0/0x150 [ 525.309812][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.315679][T13651] [ 525.317988][T13651] Uninit was stored to memory at: [ 525.322998][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.328701][T13651] __msan_chain_origin+0x50/0x90 [ 525.333624][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.338198][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.343118][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.347953][T13651] do_syscall_64+0xb0/0x150 [ 525.352440][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.358306][T13651] [ 525.360614][T13651] Uninit was stored to memory at: [ 525.365623][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.371324][T13651] __msan_chain_origin+0x50/0x90 [ 525.376248][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.380826][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.385748][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.390582][T13651] do_syscall_64+0xb0/0x150 [ 525.395069][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.400953][T13651] [ 525.403260][T13651] Uninit was stored to memory at: [ 525.408268][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.413968][T13651] __msan_chain_origin+0x50/0x90 [ 525.418889][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.423464][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.428398][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.433233][T13651] do_syscall_64+0xb0/0x150 [ 525.437719][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.443585][T13651] [ 525.445895][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 525.452556][T13651] do_recvmmsg+0xc5/0x1ee0 [ 525.456960][T13651] do_recvmmsg+0xc5/0x1ee0 [ 525.590817][T13651] not chained 280000 origins [ 525.595448][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 525.604117][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.614156][T13651] Call Trace: [ 525.617439][T13651] dump_stack+0x1df/0x240 [ 525.621759][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 525.627464][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 525.632562][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 525.638443][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 525.643718][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 525.648906][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 525.654698][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 525.660761][T13651] ? kfree+0x61/0x30f0 [ 525.664830][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 525.669926][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 525.675462][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 525.682214][T13651] ? _copy_from_user+0x15b/0x260 [ 525.687137][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 525.692240][T13651] __msan_chain_origin+0x50/0x90 [ 525.697879][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.702481][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 525.707754][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 525.712764][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 525.717875][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 525.723759][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.728694][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.733535][T13651] do_syscall_64+0xb0/0x150 [ 525.738028][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.743903][T13651] RIP: 0033:0x45c1d9 [ 525.747777][T13651] Code: Bad RIP value. [ 525.751824][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 525.760220][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 525.768184][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 525.776143][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 525.784096][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 525.792051][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 525.800011][T13651] Uninit was stored to memory at: [ 525.805038][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.810740][T13651] __msan_chain_origin+0x50/0x90 [ 525.815665][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.820240][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.825160][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.829996][T13651] do_syscall_64+0xb0/0x150 [ 525.834486][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.840353][T13651] [ 525.842660][T13651] Uninit was stored to memory at: [ 525.847672][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.853383][T13651] __msan_chain_origin+0x50/0x90 [ 525.858307][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.862884][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.867811][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.872645][T13651] do_syscall_64+0xb0/0x150 [ 525.877135][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.883004][T13651] [ 525.885312][T13651] Uninit was stored to memory at: [ 525.890322][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.896026][T13651] __msan_chain_origin+0x50/0x90 [ 525.900953][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.905526][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.910449][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.915284][T13651] do_syscall_64+0xb0/0x150 [ 525.919770][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.925637][T13651] [ 525.927948][T13651] Uninit was stored to memory at: [ 525.932958][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.938657][T13651] __msan_chain_origin+0x50/0x90 [ 525.943576][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.948149][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.953279][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 525.958110][T13651] do_syscall_64+0xb0/0x150 [ 525.962599][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.968464][T13651] [ 525.970771][T13651] Uninit was stored to memory at: [ 525.975779][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 525.981478][T13651] __msan_chain_origin+0x50/0x90 [ 525.986411][T13651] do_recvmmsg+0x105a/0x1ee0 [ 525.990999][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 525.995922][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 526.000756][T13651] do_syscall_64+0xb0/0x150 [ 526.005242][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.011109][T13651] [ 526.013414][T13651] Uninit was stored to memory at: [ 526.018421][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 526.024124][T13651] __msan_chain_origin+0x50/0x90 [ 526.029044][T13651] do_recvmmsg+0x105a/0x1ee0 [ 526.033616][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 526.038549][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 526.043384][T13651] do_syscall_64+0xb0/0x150 [ 526.047870][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.053740][T13651] [ 526.056048][T13651] Uninit was stored to memory at: [ 526.061055][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 526.066755][T13651] __msan_chain_origin+0x50/0x90 [ 526.071674][T13651] do_recvmmsg+0x105a/0x1ee0 [ 526.076249][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 526.081169][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 526.086016][T13651] do_syscall_64+0xb0/0x150 [ 526.090519][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.096410][T13651] [ 526.098723][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 526.105383][T13651] do_recvmmsg+0xc5/0x1ee0 [ 526.109783][T13651] do_recvmmsg+0xc5/0x1ee0 [ 526.279482][T13656] not chained 290000 origins [ 526.284117][T13656] CPU: 0 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 526.292781][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.302836][T13656] Call Trace: [ 526.306134][T13656] dump_stack+0x1df/0x240 [ 526.310470][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 526.316193][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 526.321302][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 526.327202][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 526.332488][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 526.337688][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 526.343493][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 526.349558][T13656] ? kfree+0x61/0x30f0 [ 526.353625][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 526.358733][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 526.364280][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 526.370350][T13656] ? _copy_from_user+0x15b/0x260 [ 526.375288][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 526.380399][T13656] __msan_chain_origin+0x50/0x90 [ 526.385339][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.389947][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 526.395221][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 526.400228][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 526.405237][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 526.411119][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.416049][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.420889][T13656] do_syscall_64+0xb0/0x150 [ 526.425381][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.431255][T13656] RIP: 0033:0x45c1d9 [ 526.435125][T13656] Code: Bad RIP value. [ 526.439171][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 526.447564][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 526.455519][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 526.463470][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 526.471422][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 526.479375][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 526.487337][T13656] Uninit was stored to memory at: [ 526.492347][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.498046][T13656] __msan_chain_origin+0x50/0x90 [ 526.502968][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.507541][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.512479][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.517328][T13656] do_syscall_64+0xb0/0x150 [ 526.521821][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.527697][T13656] [ 526.530008][T13656] Uninit was stored to memory at: [ 526.535023][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.540723][T13656] __msan_chain_origin+0x50/0x90 [ 526.545644][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.550220][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.555142][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.559977][T13656] do_syscall_64+0xb0/0x150 [ 526.564465][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.570330][T13656] [ 526.572640][T13656] Uninit was stored to memory at: [ 526.577648][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.583350][T13656] __msan_chain_origin+0x50/0x90 [ 526.588272][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.592861][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.597784][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.602619][T13656] do_syscall_64+0xb0/0x150 [ 526.607108][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.612974][T13656] [ 526.615282][T13656] Uninit was stored to memory at: [ 526.620288][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.625992][T13656] __msan_chain_origin+0x50/0x90 [ 526.630913][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.635488][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.640406][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.645243][T13656] do_syscall_64+0xb0/0x150 [ 526.649731][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.655597][T13656] [ 526.657905][T13656] Uninit was stored to memory at: [ 526.662913][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.668615][T13656] __msan_chain_origin+0x50/0x90 [ 526.673535][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.678110][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.683029][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.687866][T13656] do_syscall_64+0xb0/0x150 [ 526.692353][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.698217][T13656] [ 526.700524][T13656] Uninit was stored to memory at: [ 526.705530][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.711230][T13656] __msan_chain_origin+0x50/0x90 [ 526.716153][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.720726][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.725646][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.730479][T13656] do_syscall_64+0xb0/0x150 [ 526.734966][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.740836][T13656] [ 526.743142][T13656] Uninit was stored to memory at: [ 526.748176][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 526.753893][T13656] __msan_chain_origin+0x50/0x90 [ 526.758823][T13656] do_recvmmsg+0x105a/0x1ee0 [ 526.763399][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 526.768323][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 526.773159][T13656] do_syscall_64+0xb0/0x150 [ 526.777650][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.783518][T13656] [ 526.785824][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 526.792481][T13656] do_recvmmsg+0xc5/0x1ee0 [ 526.796883][T13656] do_recvmmsg+0xc5/0x1ee0 [ 526.903364][T13651] not chained 300000 origins [ 526.907996][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 526.916656][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.926703][T13651] Call Trace: [ 526.929982][T13651] dump_stack+0x1df/0x240 [ 526.934304][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 526.940006][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 526.945104][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 526.950992][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 526.956266][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 526.961447][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 526.967238][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 526.973289][T13651] ? kfree+0x61/0x30f0 [ 526.977346][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 526.982444][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 526.987976][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 526.994031][T13651] ? _copy_from_user+0x15b/0x260 [ 526.998951][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 527.004046][T13651] __msan_chain_origin+0x50/0x90 [ 527.008972][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.013573][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 527.018843][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 527.023852][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 527.028860][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 527.034741][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.039672][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.044510][T13651] do_syscall_64+0xb0/0x150 [ 527.049001][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.054876][T13651] RIP: 0033:0x45c1d9 [ 527.058747][T13651] Code: Bad RIP value. [ 527.062793][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.071183][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 527.079143][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 527.087104][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 527.095062][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 527.103017][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 527.110995][T13651] Uninit was stored to memory at: [ 527.116018][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.121728][T13651] __msan_chain_origin+0x50/0x90 [ 527.126658][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.131232][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.136153][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.140990][T13651] do_syscall_64+0xb0/0x150 [ 527.145486][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.151352][T13651] [ 527.153661][T13651] Uninit was stored to memory at: [ 527.158671][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.164403][T13651] __msan_chain_origin+0x50/0x90 [ 527.169342][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.173925][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.178850][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.183689][T13651] do_syscall_64+0xb0/0x150 [ 527.188179][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.194046][T13651] [ 527.196356][T13651] Uninit was stored to memory at: [ 527.201369][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.207086][T13651] __msan_chain_origin+0x50/0x90 [ 527.212008][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.216583][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.221505][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.226341][T13651] do_syscall_64+0xb0/0x150 [ 527.230838][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.236705][T13651] [ 527.239015][T13651] Uninit was stored to memory at: [ 527.244024][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.249726][T13651] __msan_chain_origin+0x50/0x90 [ 527.254650][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.259225][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.264148][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.268990][T13651] do_syscall_64+0xb0/0x150 [ 527.273475][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.279342][T13651] [ 527.281649][T13651] Uninit was stored to memory at: [ 527.286774][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.292533][T13651] __msan_chain_origin+0x50/0x90 [ 527.297481][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.302076][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.307343][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.312230][T13651] do_syscall_64+0xb0/0x150 [ 527.316742][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.323095][T13651] [ 527.325423][T13651] Uninit was stored to memory at: [ 527.330542][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.336266][T13651] __msan_chain_origin+0x50/0x90 [ 527.341212][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.345801][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.350737][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.355585][T13651] do_syscall_64+0xb0/0x150 [ 527.360177][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.366063][T13651] [ 527.368382][T13651] Uninit was stored to memory at: [ 527.373404][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.379117][T13651] __msan_chain_origin+0x50/0x90 [ 527.384058][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.388647][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.393585][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.398436][T13651] do_syscall_64+0xb0/0x150 [ 527.402934][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.408925][T13651] [ 527.411245][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 527.417921][T13651] do_recvmmsg+0xc5/0x1ee0 [ 527.422335][T13651] do_recvmmsg+0xc5/0x1ee0 [ 527.585675][T13651] not chained 310000 origins [ 527.590318][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 527.599168][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.609227][T13651] Call Trace: [ 527.612527][T13651] dump_stack+0x1df/0x240 [ 527.616871][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 527.622600][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 527.627726][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 527.633624][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 527.638923][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 527.644138][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 527.649959][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 527.656053][T13651] ? kfree+0x61/0x30f0 [ 527.660133][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 527.665261][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 527.670828][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 527.676906][T13651] ? _copy_from_user+0x15b/0x260 [ 527.681856][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 527.686976][T13651] __msan_chain_origin+0x50/0x90 [ 527.691931][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.696576][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 527.701900][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 527.706953][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 527.712014][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 527.717917][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.722869][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.727733][T13651] do_syscall_64+0xb0/0x150 [ 527.732615][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.739110][T13651] RIP: 0033:0x45c1d9 [ 527.743002][T13651] Code: Bad RIP value. [ 527.747067][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.755481][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 527.763454][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 527.771425][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 527.779405][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 527.787387][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 527.795404][T13651] Uninit was stored to memory at: [ 527.800532][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.806445][T13651] __msan_chain_origin+0x50/0x90 [ 527.811406][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.816118][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.821122][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.826005][T13651] do_syscall_64+0xb0/0x150 [ 527.830526][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.836414][T13651] [ 527.838739][T13651] Uninit was stored to memory at: [ 527.843773][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.849508][T13651] __msan_chain_origin+0x50/0x90 [ 527.854733][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.859426][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.864374][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.869234][T13651] do_syscall_64+0xb0/0x150 [ 527.873742][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.879625][T13651] [ 527.881948][T13651] Uninit was stored to memory at: [ 527.889335][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.895062][T13651] __msan_chain_origin+0x50/0x90 [ 527.900005][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.904687][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.909649][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.914681][T13651] do_syscall_64+0xb0/0x150 [ 527.919207][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.925091][T13651] [ 527.927424][T13651] Uninit was stored to memory at: [ 527.932473][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.938190][T13651] __msan_chain_origin+0x50/0x90 [ 527.943159][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.947849][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.953083][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 527.957939][T13651] do_syscall_64+0xb0/0x150 [ 527.962447][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.968328][T13651] [ 527.970649][T13651] Uninit was stored to memory at: [ 527.975681][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 527.981398][T13651] __msan_chain_origin+0x50/0x90 [ 527.986338][T13651] do_recvmmsg+0x105a/0x1ee0 [ 527.990928][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 527.995871][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 528.000720][T13651] do_syscall_64+0xb0/0x150 [ 528.005225][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.011110][T13651] [ 528.013431][T13651] Uninit was stored to memory at: [ 528.019414][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 528.025129][T13651] __msan_chain_origin+0x50/0x90 [ 528.030064][T13651] do_recvmmsg+0x105a/0x1ee0 [ 528.034651][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 528.039597][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 528.044451][T13651] do_syscall_64+0xb0/0x150 [ 528.048964][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.054859][T13651] [ 528.057204][T13651] Uninit was stored to memory at: [ 528.062228][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 528.067950][T13651] __msan_chain_origin+0x50/0x90 [ 528.072887][T13651] do_recvmmsg+0x105a/0x1ee0 [ 528.077484][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 528.082535][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 528.087818][T13651] do_syscall_64+0xb0/0x150 [ 528.092499][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.098386][T13651] [ 528.100794][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 528.107470][T13651] do_recvmmsg+0xc5/0x1ee0 [ 528.111888][T13651] do_recvmmsg+0xc5/0x1ee0 [ 528.253774][T13656] not chained 320000 origins [ 528.258526][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 528.267196][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.277258][T13656] Call Trace: [ 528.280556][T13656] dump_stack+0x1df/0x240 [ 528.284898][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 528.290621][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 528.295739][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 528.301633][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 528.306925][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 528.312561][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 528.318374][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 528.324453][T13656] ? kfree+0x61/0x30f0 [ 528.328529][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 528.333642][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 528.339289][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 528.345707][T13656] ? _copy_from_user+0x15b/0x260 [ 528.350646][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 528.355756][T13656] __msan_chain_origin+0x50/0x90 [ 528.360699][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.365333][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 528.370621][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 528.375643][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 528.381768][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 528.387676][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.393069][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.397996][T13656] do_syscall_64+0xb0/0x150 [ 528.402595][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.408485][T13656] RIP: 0033:0x45c1d9 [ 528.412547][T13656] Code: Bad RIP value. [ 528.416611][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 528.425022][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 528.432998][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 528.440969][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 528.448974][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 528.456947][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 528.464939][T13656] Uninit was stored to memory at: [ 528.469971][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.475689][T13656] __msan_chain_origin+0x50/0x90 [ 528.480624][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.485217][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.490166][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.495037][T13656] do_syscall_64+0xb0/0x150 [ 528.499540][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.505771][T13656] [ 528.508090][T13656] Uninit was stored to memory at: [ 528.513126][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.518857][T13656] __msan_chain_origin+0x50/0x90 [ 528.523796][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.528384][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.533408][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.538259][T13656] do_syscall_64+0xb0/0x150 [ 528.542761][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.548639][T13656] [ 528.551047][T13656] Uninit was stored to memory at: [ 528.556257][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.562073][T13656] __msan_chain_origin+0x50/0x90 [ 528.567029][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.571712][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.577183][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.582036][T13656] do_syscall_64+0xb0/0x150 [ 528.586629][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.592692][T13656] [ 528.595018][T13656] Uninit was stored to memory at: [ 528.600043][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.605763][T13656] __msan_chain_origin+0x50/0x90 [ 528.610704][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.615303][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.620451][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.625486][T13656] do_syscall_64+0xb0/0x150 [ 528.630094][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.635990][T13656] [ 528.638315][T13656] Uninit was stored to memory at: [ 528.643364][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.649088][T13656] __msan_chain_origin+0x50/0x90 [ 528.654137][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.658912][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.664194][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.669065][T13656] do_syscall_64+0xb0/0x150 [ 528.673578][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.679633][T13656] [ 528.681954][T13656] Uninit was stored to memory at: [ 528.686987][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.692827][T13656] __msan_chain_origin+0x50/0x90 [ 528.697771][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.702366][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.707394][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.712250][T13656] do_syscall_64+0xb0/0x150 [ 528.716748][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.722626][T13656] [ 528.724945][T13656] Uninit was stored to memory at: [ 528.730000][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 528.735718][T13656] __msan_chain_origin+0x50/0x90 [ 528.740655][T13656] do_recvmmsg+0x105a/0x1ee0 [ 528.745246][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 528.750183][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 528.755034][T13656] do_syscall_64+0xb0/0x150 [ 528.759537][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.765418][T13656] [ 528.767741][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 528.774422][T13656] do_recvmmsg+0xc5/0x1ee0 [ 528.778834][T13656] do_recvmmsg+0xc5/0x1ee0 [ 528.925613][T13651] not chained 330000 origins [ 528.930364][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 528.939042][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.949356][T13651] Call Trace: [ 528.952651][T13651] dump_stack+0x1df/0x240 [ 528.956988][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 528.962709][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 528.967823][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 528.973730][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 528.979017][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 528.984239][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 528.990073][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 528.996142][T13651] ? kfree+0x61/0x30f0 [ 529.000338][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 529.005452][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 529.010999][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 529.017166][T13651] ? _copy_from_user+0x15b/0x260 [ 529.022101][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 529.027214][T13651] __msan_chain_origin+0x50/0x90 [ 529.032205][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.043777][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 529.049066][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 529.054091][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 529.059114][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 529.065009][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.069956][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.074810][T13651] do_syscall_64+0xb0/0x150 [ 529.079316][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.085204][T13651] RIP: 0033:0x45c1d9 [ 529.089085][T13651] Code: Bad RIP value. [ 529.093142][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 529.101676][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 529.109653][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 529.117623][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 529.125594][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 529.133560][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 529.141538][T13651] Uninit was stored to memory at: [ 529.149709][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.155505][T13651] __msan_chain_origin+0x50/0x90 [ 529.160478][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.165088][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.170023][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.174873][T13651] do_syscall_64+0xb0/0x150 [ 529.179376][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.185775][T13651] [ 529.189150][T13651] Uninit was stored to memory at: [ 529.194184][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.200962][T13651] __msan_chain_origin+0x50/0x90 [ 529.205925][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.210521][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.215549][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.220413][T13651] do_syscall_64+0xb0/0x150 [ 529.224923][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.230974][T13651] [ 529.233294][T13651] Uninit was stored to memory at: [ 529.238320][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.244035][T13651] __msan_chain_origin+0x50/0x90 [ 529.248968][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.253557][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.258495][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.263355][T13651] do_syscall_64+0xb0/0x150 [ 529.267866][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.273747][T13651] [ 529.276068][T13651] Uninit was stored to memory at: [ 529.281094][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.287074][T13651] __msan_chain_origin+0x50/0x90 [ 529.292016][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.296606][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.301543][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.306398][T13651] do_syscall_64+0xb0/0x150 [ 529.310901][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.317822][T13651] [ 529.320142][T13651] Uninit was stored to memory at: [ 529.325169][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.330882][T13651] __msan_chain_origin+0x50/0x90 [ 529.335818][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.340402][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.345340][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.350189][T13651] do_syscall_64+0xb0/0x150 [ 529.354688][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.360560][T13651] [ 529.362874][T13651] Uninit was stored to memory at: [ 529.367896][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.373613][T13651] __msan_chain_origin+0x50/0x90 [ 529.378548][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.383131][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.388064][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.392911][T13651] do_syscall_64+0xb0/0x150 [ 529.397423][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.403300][T13651] [ 529.405616][T13651] Uninit was stored to memory at: [ 529.410639][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 529.416354][T13651] __msan_chain_origin+0x50/0x90 [ 529.421295][T13651] do_recvmmsg+0x105a/0x1ee0 [ 529.425885][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 529.430817][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 529.435662][T13651] do_syscall_64+0xb0/0x150 [ 529.440162][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.446037][T13651] [ 529.448357][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 529.455026][T13651] do_recvmmsg+0xc5/0x1ee0 [ 529.459438][T13651] do_recvmmsg+0xc5/0x1ee0 [ 529.601726][T13656] not chained 340000 origins [ 529.606357][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 529.615018][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.625069][T13656] Call Trace: [ 529.628361][T13656] dump_stack+0x1df/0x240 [ 529.632698][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 529.638414][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 529.643528][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 529.649423][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 529.654709][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 529.659906][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 529.666410][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 529.672561][T13656] ? kfree+0x61/0x30f0 [ 529.676634][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 529.681742][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 529.687305][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 529.693374][T13656] ? _copy_from_user+0x15b/0x260 [ 529.698311][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 529.703423][T13656] __msan_chain_origin+0x50/0x90 [ 529.708363][T13656] do_recvmmsg+0x105a/0x1ee0 [ 529.712986][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 529.718269][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 529.723292][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 529.728315][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 529.734210][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 529.739157][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 529.744093][T13656] do_syscall_64+0xb0/0x150 [ 529.748596][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.754484][T13656] RIP: 0033:0x45c1d9 [ 529.758363][T13656] Code: Bad RIP value. [ 529.762425][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 529.770830][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 529.778797][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 529.786762][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 529.794729][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 529.802697][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 529.810674][T13656] Uninit was stored to memory at: [ 529.815703][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 529.821417][T13656] __msan_chain_origin+0x50/0x90 [ 529.826353][T13656] do_recvmmsg+0x105a/0x1ee0 [ 529.830944][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 529.835880][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 529.840729][T13656] do_syscall_64+0xb0/0x150 [ 529.845231][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.851108][T13656] [ 529.853424][T13656] Uninit was stored to memory at: [ 529.858532][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 529.864250][T13656] __msan_chain_origin+0x50/0x90 [ 529.869185][T13656] do_recvmmsg+0x105a/0x1ee0 [ 529.873771][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 529.878703][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 529.883553][T13656] do_syscall_64+0xb0/0x150 [ 529.888054][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.893936][T13656] [ 529.896256][T13656] Uninit was stored to memory at: [ 529.901285][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 529.907610][T13656] __msan_chain_origin+0x50/0x90 [ 529.912549][T13656] do_recvmmsg+0x105a/0x1ee0 [ 529.917134][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 529.922068][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 529.926954][T13656] do_syscall_64+0xb0/0x150 [ 529.931485][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.937544][T13656] [ 529.939883][T13656] Uninit was stored to memory at: [ 529.945068][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 529.950814][T13656] __msan_chain_origin+0x50/0x90 [ 529.955826][T13656] do_recvmmsg+0x105a/0x1ee0 [ 529.960421][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 529.965365][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 529.970223][T13656] do_syscall_64+0xb0/0x150 [ 529.974733][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.980614][T13656] [ 529.982936][T13656] Uninit was stored to memory at: [ 529.988066][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 529.993793][T13656] __msan_chain_origin+0x50/0x90 [ 529.998741][T13656] do_recvmmsg+0x105a/0x1ee0 [ 530.003335][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 530.008286][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 530.013160][T13656] do_syscall_64+0xb0/0x150 [ 530.017678][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.023561][T13656] [ 530.025893][T13656] Uninit was stored to memory at: [ 530.031486][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 530.037210][T13656] __msan_chain_origin+0x50/0x90 [ 530.042153][T13656] do_recvmmsg+0x105a/0x1ee0 [ 530.046748][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 530.051692][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 530.056547][T13656] do_syscall_64+0xb0/0x150 [ 530.061054][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.066936][T13656] [ 530.069270][T13656] Uninit was stored to memory at: [ 530.074316][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 530.080224][T13656] __msan_chain_origin+0x50/0x90 [ 530.085180][T13656] do_recvmmsg+0x105a/0x1ee0 [ 530.089774][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 530.094808][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 530.099669][T13656] do_syscall_64+0xb0/0x150 [ 530.104207][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.110093][T13656] [ 530.112493][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 530.119346][T13656] do_recvmmsg+0xc5/0x1ee0 [ 530.124165][T13656] do_recvmmsg+0xc5/0x1ee0 [ 530.281756][T13651] not chained 350000 origins [ 530.286393][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 530.295058][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.305108][T13651] Call Trace: [ 530.308405][T13651] dump_stack+0x1df/0x240 [ 530.312741][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 530.318460][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 530.323575][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 530.329645][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 530.334935][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 530.340134][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 530.345942][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 530.352011][T13651] ? kfree+0x61/0x30f0 [ 530.356093][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 530.362248][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 530.367800][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 530.373914][T13651] ? _copy_from_user+0x15b/0x260 [ 530.379236][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 530.384358][T13651] __msan_chain_origin+0x50/0x90 [ 530.389300][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.393929][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 530.399217][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 530.404239][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 530.409263][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 530.415163][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.420108][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.425222][T13651] do_syscall_64+0xb0/0x150 [ 530.429736][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.435627][T13651] RIP: 0033:0x45c1d9 [ 530.439508][T13651] Code: Bad RIP value. [ 530.443565][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 530.452495][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 530.460464][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 530.468435][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 530.476404][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 530.484370][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 530.492345][T13651] Uninit was stored to memory at: [ 530.497376][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.503201][T13651] __msan_chain_origin+0x50/0x90 [ 530.508406][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.512997][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.517932][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.523043][T13651] do_syscall_64+0xb0/0x150 [ 530.527937][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.533849][T13651] [ 530.536174][T13651] Uninit was stored to memory at: [ 530.541379][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.547196][T13651] __msan_chain_origin+0x50/0x90 [ 530.552132][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.556720][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.561658][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.566532][T13651] do_syscall_64+0xb0/0x150 [ 530.571037][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.576915][T13651] [ 530.579234][T13651] Uninit was stored to memory at: [ 530.584264][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.590068][T13651] __msan_chain_origin+0x50/0x90 [ 530.595001][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.599587][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.604522][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.609372][T13651] do_syscall_64+0xb0/0x150 [ 530.613875][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.620898][T13651] [ 530.623218][T13651] Uninit was stored to memory at: [ 530.628245][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.633967][T13651] __msan_chain_origin+0x50/0x90 [ 530.638941][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.643530][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.649161][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.654015][T13651] do_syscall_64+0xb0/0x150 [ 530.658522][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.664402][T13651] [ 530.666726][T13651] Uninit was stored to memory at: [ 530.671760][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.677689][T13651] __msan_chain_origin+0x50/0x90 [ 530.682629][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.687225][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.692190][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.697049][T13651] do_syscall_64+0xb0/0x150 [ 530.701558][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.707531][T13651] [ 530.709858][T13651] Uninit was stored to memory at: [ 530.714894][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.720615][T13651] __msan_chain_origin+0x50/0x90 [ 530.725551][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.730138][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.735071][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.739918][T13651] do_syscall_64+0xb0/0x150 [ 530.744420][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.750297][T13651] [ 530.752618][T13651] Uninit was stored to memory at: [ 530.757642][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 530.763358][T13651] __msan_chain_origin+0x50/0x90 [ 530.768298][T13651] do_recvmmsg+0x105a/0x1ee0 [ 530.772891][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 530.778176][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 530.783203][T13651] do_syscall_64+0xb0/0x150 [ 530.787710][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.793592][T13651] [ 530.795921][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 530.802599][T13651] do_recvmmsg+0xc5/0x1ee0 [ 530.807101][T13651] do_recvmmsg+0xc5/0x1ee0 [ 530.949663][T13656] not chained 360000 origins [ 530.954297][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 530.962960][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.973011][T13656] Call Trace: [ 530.976305][T13656] dump_stack+0x1df/0x240 [ 530.980640][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 530.986364][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 530.991480][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 530.997376][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 531.002662][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 531.008035][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 531.013934][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 531.019999][T13656] ? kfree+0x61/0x30f0 [ 531.024071][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 531.029185][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 531.034734][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 531.040802][T13656] ? _copy_from_user+0x15b/0x260 [ 531.045742][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 531.050965][T13656] __msan_chain_origin+0x50/0x90 [ 531.055912][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.060537][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 531.065823][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 531.070847][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 531.076065][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 531.081959][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.086911][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.091761][T13656] do_syscall_64+0xb0/0x150 [ 531.096974][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.102860][T13656] RIP: 0033:0x45c1d9 [ 531.106759][T13656] Code: Bad RIP value. [ 531.110823][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.119236][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 531.127209][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 531.135179][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 531.143146][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 531.151117][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 531.159104][T13656] Uninit was stored to memory at: [ 531.164142][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.170403][T13656] __msan_chain_origin+0x50/0x90 [ 531.175351][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.180113][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.185136][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.189984][T13656] do_syscall_64+0xb0/0x150 [ 531.194485][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.200365][T13656] [ 531.202682][T13656] Uninit was stored to memory at: [ 531.207708][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.213438][T13656] __msan_chain_origin+0x50/0x90 [ 531.218444][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.223036][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.227973][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.232825][T13656] do_syscall_64+0xb0/0x150 [ 531.237330][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.243205][T13656] [ 531.245520][T13656] Uninit was stored to memory at: [ 531.250544][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.256257][T13656] __msan_chain_origin+0x50/0x90 [ 531.261193][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.265790][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.270736][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.275590][T13656] do_syscall_64+0xb0/0x150 [ 531.280095][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.285974][T13656] [ 531.288307][T13656] Uninit was stored to memory at: [ 531.293331][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.299046][T13656] __msan_chain_origin+0x50/0x90 [ 531.303979][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.308563][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.313497][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.318383][T13656] do_syscall_64+0xb0/0x150 [ 531.322885][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.328763][T13656] [ 531.331080][T13656] Uninit was stored to memory at: [ 531.336106][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.341817][T13656] __msan_chain_origin+0x50/0x90 [ 531.346754][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.351343][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.356280][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.361130][T13656] do_syscall_64+0xb0/0x150 [ 531.365630][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.371505][T13656] [ 531.373820][T13656] Uninit was stored to memory at: [ 531.378841][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.384553][T13656] __msan_chain_origin+0x50/0x90 [ 531.389486][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.394073][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.399006][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.403852][T13656] do_syscall_64+0xb0/0x150 [ 531.408441][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.414317][T13656] [ 531.416632][T13656] Uninit was stored to memory at: [ 531.421652][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 531.427563][T13656] __msan_chain_origin+0x50/0x90 [ 531.432496][T13656] do_recvmmsg+0x105a/0x1ee0 [ 531.437084][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 531.442014][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 531.446859][T13656] do_syscall_64+0xb0/0x150 [ 531.451357][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.457234][T13656] [ 531.459551][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 531.466221][T13656] do_recvmmsg+0xc5/0x1ee0 [ 531.470630][T13656] do_recvmmsg+0xc5/0x1ee0 [ 531.618285][T13651] not chained 370000 origins [ 531.622904][T13651] CPU: 1 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 531.631565][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.641614][T13651] Call Trace: [ 531.644909][T13651] dump_stack+0x1df/0x240 [ 531.649249][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 531.654968][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 531.660077][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 531.665970][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 531.671281][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 531.676518][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 531.682368][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 531.688479][T13651] ? kfree+0x61/0x30f0 [ 531.692567][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 531.697690][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 531.703249][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 531.709328][T13651] ? _copy_from_user+0x15b/0x260 [ 531.714271][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 531.719389][T13651] __msan_chain_origin+0x50/0x90 [ 531.724341][T13651] do_recvmmsg+0x105a/0x1ee0 [ 531.728964][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 531.734253][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 531.739280][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 531.744310][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 531.750218][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 531.755174][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 531.760041][T13651] do_syscall_64+0xb0/0x150 [ 531.764551][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.770450][T13651] RIP: 0033:0x45c1d9 [ 531.774332][T13651] Code: Bad RIP value. [ 531.779011][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.787427][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 531.795400][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 531.803381][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 531.811878][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 531.819851][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 531.828379][T13651] Uninit was stored to memory at: [ 531.833431][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 531.839154][T13651] __msan_chain_origin+0x50/0x90 [ 531.844096][T13651] do_recvmmsg+0x105a/0x1ee0 [ 531.848686][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 531.853625][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 531.858481][T13651] do_syscall_64+0xb0/0x150 [ 531.862988][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.868868][T13651] [ 531.871205][T13651] Uninit was stored to memory at: [ 531.876239][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 531.881959][T13651] __msan_chain_origin+0x50/0x90 [ 531.886921][T13651] do_recvmmsg+0x105a/0x1ee0 [ 531.891514][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 531.896457][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 531.901310][T13651] do_syscall_64+0xb0/0x150 [ 531.905812][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.911692][T13651] [ 531.914014][T13651] Uninit was stored to memory at: [ 531.919151][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 531.924876][T13651] __msan_chain_origin+0x50/0x90 [ 531.929904][T13651] do_recvmmsg+0x105a/0x1ee0 [ 531.934587][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 531.939527][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 531.944380][T13651] do_syscall_64+0xb0/0x150 [ 531.948883][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.954770][T13651] [ 531.957127][T13651] Uninit was stored to memory at: [ 531.962175][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 531.967900][T13651] __msan_chain_origin+0x50/0x90 [ 531.972836][T13651] do_recvmmsg+0x105a/0x1ee0 [ 531.977419][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 531.982359][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 531.987216][T13651] do_syscall_64+0xb0/0x150 [ 531.991717][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.997631][T13651] [ 531.999949][T13651] Uninit was stored to memory at: [ 532.004971][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 532.010682][T13651] __msan_chain_origin+0x50/0x90 [ 532.015614][T13651] do_recvmmsg+0x105a/0x1ee0 [ 532.020202][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 532.025138][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 532.029985][T13651] do_syscall_64+0xb0/0x150 [ 532.034488][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.040387][T13651] [ 532.042705][T13651] Uninit was stored to memory at: [ 532.047731][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 532.053450][T13651] __msan_chain_origin+0x50/0x90 [ 532.058391][T13651] do_recvmmsg+0x105a/0x1ee0 [ 532.062976][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 532.067911][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 532.072762][T13651] do_syscall_64+0xb0/0x150 [ 532.077264][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.083147][T13651] [ 532.085470][T13651] Uninit was stored to memory at: [ 532.090513][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 532.096231][T13651] __msan_chain_origin+0x50/0x90 [ 532.101191][T13651] do_recvmmsg+0x105a/0x1ee0 [ 532.105792][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 532.110733][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 532.115590][T13651] do_syscall_64+0xb0/0x150 [ 532.120095][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.125976][T13651] [ 532.128294][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 532.134965][T13651] do_recvmmsg+0xc5/0x1ee0 [ 532.139375][T13651] do_recvmmsg+0xc5/0x1ee0 [ 532.281772][T13656] not chained 380000 origins [ 532.286417][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 532.295080][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.305129][T13656] Call Trace: [ 532.308422][T13656] dump_stack+0x1df/0x240 [ 532.312758][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 532.318476][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 532.323599][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 532.331313][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 532.336595][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 532.341794][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 532.347598][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 532.353663][T13656] ? kfree+0x61/0x30f0 [ 532.357731][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 532.362840][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 532.368388][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 532.374456][T13656] ? _copy_from_user+0x15b/0x260 [ 532.379400][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 532.384514][T13656] __msan_chain_origin+0x50/0x90 [ 532.389452][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.394079][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 532.399371][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 532.404391][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 532.409414][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 532.415313][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.420259][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.425114][T13656] do_syscall_64+0xb0/0x150 [ 532.429621][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.435506][T13656] RIP: 0033:0x45c1d9 [ 532.439377][T13656] Code: Bad RIP value. [ 532.443426][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 532.451821][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 532.459776][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 532.467730][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 532.475685][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 532.483642][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 532.491606][T13656] Uninit was stored to memory at: [ 532.496624][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.502325][T13656] __msan_chain_origin+0x50/0x90 [ 532.507250][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.511822][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.516745][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.521596][T13656] do_syscall_64+0xb0/0x150 [ 532.526086][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.531953][T13656] [ 532.534258][T13656] Uninit was stored to memory at: [ 532.539267][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.544975][T13656] __msan_chain_origin+0x50/0x90 [ 532.550076][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.554672][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.559613][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.564489][T13656] do_syscall_64+0xb0/0x150 [ 532.568998][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.574887][T13656] [ 532.577301][T13656] Uninit was stored to memory at: [ 532.582323][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.588042][T13656] __msan_chain_origin+0x50/0x90 [ 532.593061][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.597646][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.602575][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.607420][T13656] do_syscall_64+0xb0/0x150 [ 532.611919][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.617796][T13656] [ 532.620117][T13656] Uninit was stored to memory at: [ 532.625134][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.630847][T13656] __msan_chain_origin+0x50/0x90 [ 532.635778][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.640381][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.645316][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.650162][T13656] do_syscall_64+0xb0/0x150 [ 532.654662][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.660537][T13656] [ 532.663030][T13656] Uninit was stored to memory at: [ 532.668053][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.673769][T13656] __msan_chain_origin+0x50/0x90 [ 532.678704][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.683284][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.688218][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.693064][T13656] do_syscall_64+0xb0/0x150 [ 532.697561][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.703434][T13656] [ 532.705752][T13656] Uninit was stored to memory at: [ 532.710792][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.716502][T13656] __msan_chain_origin+0x50/0x90 [ 532.721434][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.726015][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.730965][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.735835][T13656] do_syscall_64+0xb0/0x150 [ 532.740331][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.746226][T13656] [ 532.748627][T13656] Uninit was stored to memory at: [ 532.753650][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 532.759368][T13656] __msan_chain_origin+0x50/0x90 [ 532.764307][T13656] do_recvmmsg+0x105a/0x1ee0 [ 532.768977][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 532.773916][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 532.778771][T13656] do_syscall_64+0xb0/0x150 [ 532.783265][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.789135][T13656] [ 532.791540][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 532.798216][T13656] do_recvmmsg+0xc5/0x1ee0 [ 532.802643][T13656] do_recvmmsg+0xc5/0x1ee0 [ 532.948987][T13656] not chained 390000 origins [ 532.953616][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 532.962275][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.972326][T13656] Call Trace: [ 532.975620][T13656] dump_stack+0x1df/0x240 [ 532.979954][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 532.985670][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 532.990784][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 532.996679][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 533.001966][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 533.007163][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 533.012968][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 533.019036][T13656] ? kfree+0x61/0x30f0 [ 533.023106][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 533.028218][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 533.033765][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 533.039841][T13656] ? _copy_from_user+0x15b/0x260 [ 533.044776][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 533.049889][T13656] __msan_chain_origin+0x50/0x90 [ 533.054831][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.059455][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 533.064747][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 533.069768][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 533.074791][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 533.080684][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.085630][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.090480][T13656] do_syscall_64+0xb0/0x150 [ 533.094981][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.100862][T13656] RIP: 0033:0x45c1d9 [ 533.104745][T13656] Code: Bad RIP value. [ 533.108802][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 533.117215][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 533.125188][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 533.133159][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 533.141127][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 533.149095][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 533.157164][T13656] Uninit was stored to memory at: [ 533.162201][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.167928][T13656] __msan_chain_origin+0x50/0x90 [ 533.172864][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.177460][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.182399][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.187248][T13656] do_syscall_64+0xb0/0x150 [ 533.191750][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.197627][T13656] [ 533.199946][T13656] Uninit was stored to memory at: [ 533.204974][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.210691][T13656] __msan_chain_origin+0x50/0x90 [ 533.215804][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.220395][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.225331][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.230183][T13656] do_syscall_64+0xb0/0x150 [ 533.234719][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.240603][T13656] [ 533.242921][T13656] Uninit was stored to memory at: [ 533.247948][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.253667][T13656] __msan_chain_origin+0x50/0x90 [ 533.258608][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.263195][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.268141][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.272999][T13656] do_syscall_64+0xb0/0x150 [ 533.277507][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.283386][T13656] [ 533.285708][T13656] Uninit was stored to memory at: [ 533.290734][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.296459][T13656] __msan_chain_origin+0x50/0x90 [ 533.301394][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.305983][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.310924][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.315775][T13656] do_syscall_64+0xb0/0x150 [ 533.320279][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.326169][T13656] [ 533.332484][T13656] Uninit was stored to memory at: [ 533.337513][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.343264][T13656] __msan_chain_origin+0x50/0x90 [ 533.348201][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.352787][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.357721][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.362573][T13656] do_syscall_64+0xb0/0x150 [ 533.367076][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.372949][T13656] [ 533.375263][T13656] Uninit was stored to memory at: [ 533.380289][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.386006][T13656] __msan_chain_origin+0x50/0x90 [ 533.390941][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.395528][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.400472][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.405318][T13656] do_syscall_64+0xb0/0x150 [ 533.409820][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.415696][T13656] [ 533.418013][T13656] Uninit was stored to memory at: [ 533.423035][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 533.428747][T13656] __msan_chain_origin+0x50/0x90 [ 533.433683][T13656] do_recvmmsg+0x105a/0x1ee0 [ 533.438265][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 533.443196][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 533.448043][T13656] do_syscall_64+0xb0/0x150 [ 533.452540][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.458415][T13656] [ 533.460730][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 533.467403][T13656] do_recvmmsg+0xc5/0x1ee0 [ 533.471814][T13656] do_recvmmsg+0xc5/0x1ee0 [ 533.600645][T13651] not chained 400000 origins [ 533.605276][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 533.613939][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.623985][T13651] Call Trace: [ 533.627272][T13651] dump_stack+0x1df/0x240 [ 533.631592][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 533.637295][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 533.642393][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 533.648276][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 533.653550][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 533.658738][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 533.664533][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 533.670599][T13651] ? kfree+0x61/0x30f0 [ 533.674674][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 533.679774][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 533.685308][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 533.691367][T13651] ? _copy_from_user+0x15b/0x260 [ 533.696291][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 533.701388][T13651] __msan_chain_origin+0x50/0x90 [ 533.706321][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.710923][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 533.716196][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 533.721208][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 533.726220][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 533.732099][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 533.737048][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 533.741886][T13651] do_syscall_64+0xb0/0x150 [ 533.746379][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.752253][T13651] RIP: 0033:0x45c1d9 [ 533.756122][T13651] Code: Bad RIP value. [ 533.760169][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 533.768566][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 533.776524][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 533.784480][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 533.792434][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 533.800391][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 533.808363][T13651] Uninit was stored to memory at: [ 533.813378][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 533.819081][T13651] __msan_chain_origin+0x50/0x90 [ 533.824005][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.828577][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 533.833499][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 533.838332][T13651] do_syscall_64+0xb0/0x150 [ 533.842823][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.848690][T13651] [ 533.850997][T13651] Uninit was stored to memory at: [ 533.856010][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 533.861712][T13651] __msan_chain_origin+0x50/0x90 [ 533.866636][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.871820][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 533.876829][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 533.881672][T13651] do_syscall_64+0xb0/0x150 [ 533.886162][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.892033][T13651] [ 533.894358][T13651] Uninit was stored to memory at: [ 533.899370][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 533.905086][T13651] __msan_chain_origin+0x50/0x90 [ 533.910008][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.914582][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 533.919502][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 533.924337][T13651] do_syscall_64+0xb0/0x150 [ 533.928830][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.934696][T13651] [ 533.937002][T13651] Uninit was stored to memory at: [ 533.942010][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 533.947710][T13651] __msan_chain_origin+0x50/0x90 [ 533.952630][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.957204][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 533.962124][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 533.966958][T13651] do_syscall_64+0xb0/0x150 [ 533.971446][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.977314][T13651] [ 533.979621][T13651] Uninit was stored to memory at: [ 533.984629][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 533.990329][T13651] __msan_chain_origin+0x50/0x90 [ 533.995251][T13651] do_recvmmsg+0x105a/0x1ee0 [ 533.999824][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 534.004760][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 534.009594][T13651] do_syscall_64+0xb0/0x150 [ 534.014084][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.019951][T13651] [ 534.022258][T13651] Uninit was stored to memory at: [ 534.027270][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 534.032988][T13651] __msan_chain_origin+0x50/0x90 [ 534.037912][T13651] do_recvmmsg+0x105a/0x1ee0 [ 534.042485][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 534.047405][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 534.052243][T13651] do_syscall_64+0xb0/0x150 [ 534.056730][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.062596][T13651] [ 534.064906][T13651] Uninit was stored to memory at: [ 534.069917][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 534.075622][T13651] __msan_chain_origin+0x50/0x90 [ 534.080544][T13651] do_recvmmsg+0x105a/0x1ee0 [ 534.085120][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 534.090042][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 534.094895][T13651] do_syscall_64+0xb0/0x150 [ 534.099420][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.105294][T13651] [ 534.107607][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 534.114270][T13651] do_recvmmsg+0xc5/0x1ee0 [ 534.118669][T13651] do_recvmmsg+0xc5/0x1ee0 [ 534.275688][T13656] not chained 410000 origins [ 534.280317][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 534.288978][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.299025][T13656] Call Trace: [ 534.302316][T13656] dump_stack+0x1df/0x240 [ 534.306651][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 534.312376][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 534.317491][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 534.323385][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 534.328675][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 534.333872][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 534.339673][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 534.345738][T13656] ? kfree+0x61/0x30f0 [ 534.349807][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 534.354916][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 534.360460][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 534.366532][T13656] ? _copy_from_user+0x15b/0x260 [ 534.371471][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 534.376579][T13656] __msan_chain_origin+0x50/0x90 [ 534.381520][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.386142][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 534.391431][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 534.396461][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 534.401482][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 534.407382][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.412330][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.417183][T13656] do_syscall_64+0xb0/0x150 [ 534.421689][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.427584][T13656] RIP: 0033:0x45c1d9 [ 534.431461][T13656] Code: Bad RIP value. [ 534.435515][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 534.443920][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 534.451887][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 534.459853][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 534.467825][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 534.475792][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 534.483767][T13656] Uninit was stored to memory at: [ 534.488793][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.494509][T13656] __msan_chain_origin+0x50/0x90 [ 534.499442][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.504033][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.508983][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.513841][T13656] do_syscall_64+0xb0/0x150 [ 534.518340][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.524216][T13656] [ 534.526531][T13656] Uninit was stored to memory at: [ 534.531552][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.537269][T13656] __msan_chain_origin+0x50/0x90 [ 534.542207][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.546805][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.551746][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.557119][T13656] do_syscall_64+0xb0/0x150 [ 534.561626][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.567511][T13656] [ 534.569833][T13656] Uninit was stored to memory at: [ 534.574871][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.580594][T13656] __msan_chain_origin+0x50/0x90 [ 534.585536][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.590126][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.595852][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.600802][T13656] do_syscall_64+0xb0/0x150 [ 534.610527][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.616732][T13656] [ 534.619054][T13656] Uninit was stored to memory at: [ 534.624090][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.629900][T13656] __msan_chain_origin+0x50/0x90 [ 534.635425][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.640046][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.645232][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.650113][T13656] do_syscall_64+0xb0/0x150 [ 534.655187][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.661445][T13656] [ 534.663786][T13656] Uninit was stored to memory at: [ 534.668834][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.674571][T13656] __msan_chain_origin+0x50/0x90 [ 534.679528][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.684133][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.689087][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.693952][T13656] do_syscall_64+0xb0/0x150 [ 534.698475][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.704377][T13656] [ 534.706713][T13656] Uninit was stored to memory at: [ 534.711851][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.717587][T13656] __msan_chain_origin+0x50/0x90 [ 534.722540][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.727147][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.732099][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.736965][T13656] do_syscall_64+0xb0/0x150 [ 534.742031][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.748445][T13656] [ 534.750780][T13656] Uninit was stored to memory at: [ 534.755824][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 534.761557][T13656] __msan_chain_origin+0x50/0x90 [ 534.766511][T13656] do_recvmmsg+0x105a/0x1ee0 [ 534.771118][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 534.776590][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 534.781453][T13656] do_syscall_64+0xb0/0x150 [ 534.786338][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.792238][T13656] [ 534.794571][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 534.801279][T13656] do_recvmmsg+0xc5/0x1ee0 [ 534.806525][T13656] do_recvmmsg+0xc5/0x1ee0 [ 534.945041][T13656] not chained 420000 origins [ 534.949683][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 534.958364][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.968421][T13656] Call Trace: [ 534.971817][T13656] dump_stack+0x1df/0x240 [ 534.976160][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 534.981977][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 534.987416][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 534.993318][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 534.998626][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 535.003844][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 535.009716][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 535.016288][T13656] ? kfree+0x61/0x30f0 [ 535.020559][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 535.025682][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 535.031323][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 535.037404][T13656] ? _copy_from_user+0x15b/0x260 [ 535.042352][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 535.047556][T13656] __msan_chain_origin+0x50/0x90 [ 535.052504][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.057137][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 535.062432][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 535.063452][T13651] not chained 430000 origins [ 535.067465][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 535.077054][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 535.082966][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.087915][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.092774][T13656] do_syscall_64+0xb0/0x150 [ 535.097279][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.103177][T13656] RIP: 0033:0x45c1d9 [ 535.107058][T13656] Code: Bad RIP value. [ 535.111118][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.120404][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 535.128370][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 535.136334][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 535.144297][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 535.153635][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 535.161725][T13656] Uninit was stored to memory at: [ 535.161738][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 535.161751][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.166768][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.175623][T13651] Call Trace: [ 535.185679][T13656] __msan_chain_origin+0x50/0x90 [ 535.191383][T13651] dump_stack+0x1df/0x240 [ 535.194656][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.199576][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 535.203886][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.208460][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 535.214164][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.219129][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 535.224228][T13656] do_syscall_64+0xb0/0x150 [ 535.229061][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 535.234938][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.239479][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 535.245962][T13656] [ 535.251872][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 535.257041][T13656] Uninit was stored to memory at: [ 535.259374][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 535.265163][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.270171][T13651] ? kfree+0x61/0x30f0 [ 535.276216][T13656] __msan_chain_origin+0x50/0x90 [ 535.282441][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 535.286666][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.291761][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 535.296854][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.301426][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 535.306989][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.312008][T13651] ? _copy_from_user+0x15b/0x260 [ 535.318057][T13656] do_syscall_64+0xb0/0x150 [ 535.322886][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 535.327807][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.332291][T13651] __msan_chain_origin+0x50/0x90 [ 535.337375][T13656] [ 535.345224][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.350132][T13656] Uninit was stored to memory at: [ 535.352568][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 535.357129][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.362137][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 535.367455][T13656] __msan_chain_origin+0x50/0x90 [ 535.373160][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 535.378428][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.383393][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 535.388398][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.392999][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.398875][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.403799][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.408716][T13656] do_syscall_64+0xb0/0x150 [ 535.413552][T13651] do_syscall_64+0xb0/0x150 [ 535.418385][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.422872][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.427521][T13656] [ 535.433574][T13651] RIP: 0033:0x45c1d9 [ 535.439438][T13656] Uninit was stored to memory at: [ 535.441751][T13651] Code: Bad RIP value. [ 535.445636][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.450642][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.454695][T13656] __msan_chain_origin+0x50/0x90 [ 535.460390][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 535.468785][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.473695][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 535.481654][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.486221][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 535.494188][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.499139][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 535.507104][T13656] do_syscall_64+0xb0/0x150 [ 535.511930][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 535.519892][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.524378][T13651] Uninit was stored to memory at: [ 535.532329][T13656] [ 535.538212][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.543204][T13656] Uninit was stored to memory at: [ 535.545524][T13651] __msan_chain_origin+0x50/0x90 [ 535.551222][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.556228][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.561253][T13656] __msan_chain_origin+0x50/0x90 [ 535.566984][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.571583][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.576629][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.581803][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.586665][T13651] do_syscall_64+0xb0/0x150 [ 535.591552][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.596481][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.601104][T13656] do_syscall_64+0xb0/0x150 [ 535.605926][T13651] [ 535.612006][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.616584][T13651] Uninit was stored to memory at: [ 535.618910][T13656] [ 535.624806][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.629798][T13656] Uninit was stored to memory at: [ 535.632123][T13651] __msan_chain_origin+0x50/0x90 [ 535.637872][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.642887][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.647806][T13656] __msan_chain_origin+0x50/0x90 [ 535.653614][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.658193][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.663116][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.668084][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.672663][T13651] do_syscall_64+0xb0/0x150 [ 535.677551][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.682478][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.686966][T13656] do_syscall_64+0xb0/0x150 [ 535.691791][T13651] [ 535.697683][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.702157][T13651] Uninit was stored to memory at: [ 535.704469][T13656] [ 535.710359][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.715365][T13656] Uninit was stored to memory at: [ 535.717691][T13651] __msan_chain_origin+0x50/0x90 [ 535.723403][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 535.728414][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.733336][T13656] __msan_chain_origin+0x50/0x90 [ 535.739073][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.743646][T13656] do_recvmmsg+0x105a/0x1ee0 [ 535.748609][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.753536][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 535.758110][T13651] do_syscall_64+0xb0/0x150 [ 535.762942][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 535.767867][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.772355][T13656] do_syscall_64+0xb0/0x150 [ 535.777183][T13651] [ 535.783073][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.787547][T13651] Uninit was stored to memory at: [ 535.789939][T13656] [ 535.789952][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 535.795840][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.800852][T13656] do_recvmmsg+0xc5/0x1ee0 [ 535.803229][T13651] __msan_chain_origin+0x50/0x90 [ 535.810035][T13656] do_recvmmsg+0xc5/0x1ee0 [ 535.815745][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.834192][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.840011][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.844963][T13651] do_syscall_64+0xb0/0x150 [ 535.849565][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.855451][T13651] [ 535.857782][T13651] Uninit was stored to memory at: [ 535.862818][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.868982][T13651] __msan_chain_origin+0x50/0x90 [ 535.873932][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.878623][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.883567][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.888420][T13651] do_syscall_64+0xb0/0x150 [ 535.892927][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.898813][T13651] [ 535.901137][T13651] Uninit was stored to memory at: [ 535.906170][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.911909][T13651] __msan_chain_origin+0x50/0x90 [ 535.916866][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.921463][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.926494][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.931355][T13651] do_syscall_64+0xb0/0x150 [ 535.935866][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.941750][T13651] [ 535.944075][T13651] Uninit was stored to memory at: [ 535.949106][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 535.954828][T13651] __msan_chain_origin+0x50/0x90 [ 535.959768][T13651] do_recvmmsg+0x105a/0x1ee0 [ 535.964797][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 535.969779][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 535.974720][T13651] do_syscall_64+0xb0/0x150 [ 535.979232][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 535.985117][T13651] [ 535.987447][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 535.994127][T13651] do_recvmmsg+0xc5/0x1ee0 [ 535.998661][T13651] do_recvmmsg+0xc5/0x1ee0 [ 536.229455][T13651] not chained 440000 origins [ 536.234098][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 536.242855][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.252931][T13651] Call Trace: [ 536.256234][T13651] dump_stack+0x1df/0x240 [ 536.260731][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 536.266723][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.271843][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 536.277750][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 536.283047][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 536.288348][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 536.294256][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 536.300418][T13651] ? kfree+0x61/0x30f0 [ 536.304502][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.309967][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 536.315525][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 536.321616][T13651] ? _copy_from_user+0x15b/0x260 [ 536.326648][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.331768][T13651] __msan_chain_origin+0x50/0x90 [ 536.336716][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.341346][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 536.346643][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 536.351676][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 536.356708][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 536.362612][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.367573][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.372432][T13651] do_syscall_64+0xb0/0x150 [ 536.376953][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.382846][T13651] RIP: 0033:0x45c1d9 [ 536.386736][T13651] Code: Bad RIP value. [ 536.390803][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 536.399303][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 536.407280][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 536.415254][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 536.424012][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 536.431997][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 536.440237][T13651] Uninit was stored to memory at: [ 536.445272][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.451514][T13651] __msan_chain_origin+0x50/0x90 [ 536.456458][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.461054][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.465997][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.470991][T13651] do_syscall_64+0xb0/0x150 [ 536.475503][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.481388][T13651] [ 536.483714][T13651] Uninit was stored to memory at: [ 536.488747][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.494470][T13651] __msan_chain_origin+0x50/0x90 [ 536.499412][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.504006][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.508950][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.513804][T13651] do_syscall_64+0xb0/0x150 [ 536.518311][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.524195][T13651] [ 536.526887][T13651] Uninit was stored to memory at: [ 536.531930][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.537655][T13651] __msan_chain_origin+0x50/0x90 [ 536.542614][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.547210][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.552238][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.557098][T13651] do_syscall_64+0xb0/0x150 [ 536.561606][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.567492][T13651] [ 536.569818][T13651] Uninit was stored to memory at: [ 536.574846][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.580569][T13651] __msan_chain_origin+0x50/0x90 [ 536.585511][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.591059][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.596001][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.600863][T13651] do_syscall_64+0xb0/0x150 [ 536.605378][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.611267][T13651] [ 536.615124][T13651] Uninit was stored to memory at: [ 536.620155][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.625961][T13651] __msan_chain_origin+0x50/0x90 [ 536.630908][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.635503][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.640443][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.645301][T13651] do_syscall_64+0xb0/0x150 [ 536.649810][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.655697][T13651] [ 536.658025][T13651] Uninit was stored to memory at: [ 536.663057][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.668780][T13651] __msan_chain_origin+0x50/0x90 [ 536.673724][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.678315][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.683253][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.688105][T13651] do_syscall_64+0xb0/0x150 [ 536.692627][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.698514][T13651] [ 536.700835][T13651] Uninit was stored to memory at: [ 536.705869][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 536.711591][T13651] __msan_chain_origin+0x50/0x90 [ 536.716528][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.721120][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 536.726064][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 536.730918][T13651] do_syscall_64+0xb0/0x150 [ 536.735427][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 536.741307][T13651] [ 536.743633][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 536.750309][T13651] do_recvmmsg+0xc5/0x1ee0 [ 536.754753][T13651] do_recvmmsg+0xc5/0x1ee0 [ 536.888178][T13651] not chained 450000 origins [ 536.892813][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 536.901480][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.911730][T13651] Call Trace: [ 536.915077][T13651] dump_stack+0x1df/0x240 [ 536.919431][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 536.925512][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.930728][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 536.936890][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 536.942189][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 536.947400][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 536.953313][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 536.959404][T13651] ? kfree+0x61/0x30f0 [ 536.963480][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.968590][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 536.974140][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 536.980212][T13651] ? _copy_from_user+0x15b/0x260 [ 536.985155][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 536.990283][T13651] __msan_chain_origin+0x50/0x90 [ 536.995230][T13651] do_recvmmsg+0x105a/0x1ee0 [ 536.999861][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 537.005148][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 537.010174][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 537.015202][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 537.021207][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.026196][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.031050][T13651] do_syscall_64+0xb0/0x150 [ 537.035557][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.041720][T13651] RIP: 0033:0x45c1d9 [ 537.045788][T13651] Code: Bad RIP value. [ 537.049960][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 537.058372][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 537.066438][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 537.074415][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 537.082656][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 537.090643][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 537.098631][T13651] Uninit was stored to memory at: [ 537.103665][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.109396][T13651] __msan_chain_origin+0x50/0x90 [ 537.114333][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.118923][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.123879][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.128732][T13651] do_syscall_64+0xb0/0x150 [ 537.133411][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.139292][T13651] [ 537.141625][T13651] Uninit was stored to memory at: [ 537.146668][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.152395][T13651] __msan_chain_origin+0x50/0x90 [ 537.157381][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.161971][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.166918][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.171772][T13651] do_syscall_64+0xb0/0x150 [ 537.176278][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.182169][T13651] [ 537.184492][T13651] Uninit was stored to memory at: [ 537.189516][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.195234][T13651] __msan_chain_origin+0x50/0x90 [ 537.200171][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.204930][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.209862][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.215230][T13651] do_syscall_64+0xb0/0x150 [ 537.219730][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.225608][T13651] [ 537.228360][T13651] Uninit was stored to memory at: [ 537.233382][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.239092][T13651] __msan_chain_origin+0x50/0x90 [ 537.244200][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.249306][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.254326][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.259523][T13651] do_syscall_64+0xb0/0x150 [ 537.264067][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.269944][T13651] [ 537.272355][T13651] Uninit was stored to memory at: [ 537.277430][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.283157][T13651] __msan_chain_origin+0x50/0x90 [ 537.288109][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.292790][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.297849][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.302703][T13651] do_syscall_64+0xb0/0x150 [ 537.307204][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.313179][T13651] [ 537.315503][T13651] Uninit was stored to memory at: [ 537.320613][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.328052][T13651] __msan_chain_origin+0x50/0x90 [ 537.333120][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.337760][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.342868][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.347805][T13651] do_syscall_64+0xb0/0x150 [ 537.352302][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.358187][T13651] [ 537.360505][T13651] Uninit was stored to memory at: [ 537.365532][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.371246][T13651] __msan_chain_origin+0x50/0x90 [ 537.376193][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.380776][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.385709][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.390554][T13651] do_syscall_64+0xb0/0x150 [ 537.395067][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.401030][T13651] [ 537.403522][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 537.410211][T13651] do_recvmmsg+0xc5/0x1ee0 [ 537.414625][T13651] do_recvmmsg+0xc5/0x1ee0 [ 537.603810][T13651] not chained 460000 origins [ 537.608653][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 537.617330][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.627487][T13651] Call Trace: [ 537.630892][T13651] dump_stack+0x1df/0x240 [ 537.635267][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 537.641694][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 537.647296][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 537.653225][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 537.658525][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 537.663738][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 537.669551][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 537.675633][T13651] ? kfree+0x61/0x30f0 [ 537.679727][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 537.685205][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 537.690959][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 537.697055][T13651] ? _copy_from_user+0x15b/0x260 [ 537.702199][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 537.707406][T13651] __msan_chain_origin+0x50/0x90 [ 537.712356][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.717015][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 537.722319][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 537.728756][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 537.733821][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 537.739739][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.744828][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.749700][T13651] do_syscall_64+0xb0/0x150 [ 537.754221][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.760131][T13651] RIP: 0033:0x45c1d9 [ 537.764200][T13651] Code: Bad RIP value. [ 537.768268][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 537.776693][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 537.784668][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 537.792653][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 537.801598][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 537.809583][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 537.817752][T13651] Uninit was stored to memory at: [ 537.822790][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.828635][T13651] __msan_chain_origin+0x50/0x90 [ 537.833588][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.838193][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.843136][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.847996][T13651] do_syscall_64+0xb0/0x150 [ 537.852507][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.858392][T13651] [ 537.860720][T13651] Uninit was stored to memory at: [ 537.865753][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.871483][T13651] __msan_chain_origin+0x50/0x90 [ 537.876516][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.881497][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.886447][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.891319][T13651] do_syscall_64+0xb0/0x150 [ 537.895830][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.901807][T13651] [ 537.904134][T13651] Uninit was stored to memory at: [ 537.909170][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.914896][T13651] __msan_chain_origin+0x50/0x90 [ 537.919840][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.924447][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.929397][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.934257][T13651] do_syscall_64+0xb0/0x150 [ 537.938767][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.944656][T13651] [ 537.946983][T13651] Uninit was stored to memory at: [ 537.952626][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 537.958352][T13651] __msan_chain_origin+0x50/0x90 [ 537.963306][T13651] do_recvmmsg+0x105a/0x1ee0 [ 537.967905][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 537.972856][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 537.977827][T13651] do_syscall_64+0xb0/0x150 [ 537.982343][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.988232][T13651] [ 537.990556][T13651] Uninit was stored to memory at: [ 537.995595][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.001320][T13651] __msan_chain_origin+0x50/0x90 [ 538.010174][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.014774][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.020177][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.025125][T13651] do_syscall_64+0xb0/0x150 [ 538.029646][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.035533][T13651] [ 538.037862][T13651] Uninit was stored to memory at: [ 538.042897][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.048625][T13651] __msan_chain_origin+0x50/0x90 [ 538.053571][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.058165][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.063107][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.067971][T13651] do_syscall_64+0xb0/0x150 [ 538.072485][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.078370][T13651] [ 538.080695][T13651] Uninit was stored to memory at: [ 538.086001][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.091730][T13651] __msan_chain_origin+0x50/0x90 [ 538.096684][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.101377][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.106330][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.111191][T13651] do_syscall_64+0xb0/0x150 [ 538.115891][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.121788][T13651] [ 538.124119][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 538.130805][T13651] do_recvmmsg+0xc5/0x1ee0 [ 538.135314][T13651] do_recvmmsg+0xc5/0x1ee0 [ 538.304235][T13651] not chained 470000 origins [ 538.308878][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 538.317557][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.327623][T13651] Call Trace: [ 538.331032][T13651] dump_stack+0x1df/0x240 [ 538.335381][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 538.341106][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 538.346317][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 538.352220][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 538.357520][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 538.362730][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.368551][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 538.374626][T13651] ? kfree+0x61/0x30f0 [ 538.378708][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 538.383830][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 538.389387][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 538.395470][T13651] ? _copy_from_user+0x15b/0x260 [ 538.400865][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 538.406265][T13651] __msan_chain_origin+0x50/0x90 [ 538.411563][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.416195][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 538.421662][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 538.426786][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 538.432273][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 538.438376][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.443337][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.448203][T13651] do_syscall_64+0xb0/0x150 [ 538.452724][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.458712][T13651] RIP: 0033:0x45c1d9 [ 538.462601][T13651] Code: Bad RIP value. [ 538.466668][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 538.475084][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 538.483076][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 538.491406][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 538.499390][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 538.507372][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 538.515378][T13651] Uninit was stored to memory at: [ 538.520512][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.526241][T13651] __msan_chain_origin+0x50/0x90 [ 538.531194][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.535803][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.540748][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.545609][T13651] do_syscall_64+0xb0/0x150 [ 538.550119][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.556003][T13651] [ 538.558329][T13651] Uninit was stored to memory at: [ 538.563357][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.569084][T13651] __msan_chain_origin+0x50/0x90 [ 538.574039][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.578640][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.583588][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.588451][T13651] do_syscall_64+0xb0/0x150 [ 538.592964][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.598852][T13651] [ 538.601177][T13651] Uninit was stored to memory at: [ 538.606216][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.611945][T13651] __msan_chain_origin+0x50/0x90 [ 538.617220][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.621831][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.627244][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.632135][T13651] do_syscall_64+0xb0/0x150 [ 538.636754][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.642650][T13651] [ 538.644987][T13651] Uninit was stored to memory at: [ 538.650123][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.656066][T13651] __msan_chain_origin+0x50/0x90 [ 538.661027][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.665636][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.670675][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.675547][T13651] do_syscall_64+0xb0/0x150 [ 538.680067][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.685963][T13651] [ 538.687200][T13656] not chained 480000 origins [ 538.688294][T13651] Uninit was stored to memory at: [ 538.692888][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 538.697920][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.706570][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.712286][T13651] __msan_chain_origin+0x50/0x90 [ 538.722322][T13656] Call Trace: [ 538.727373][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.730644][T13656] dump_stack+0x1df/0x240 [ 538.735223][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.739545][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 538.744472][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.750183][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 538.755023][T13651] do_syscall_64+0xb0/0x150 [ 538.760121][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 538.764612][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.770492][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 538.776444][T13651] [ 538.785934][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 538.788239][T13651] Uninit was stored to memory at: [ 538.793436][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.799199][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.804994][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 538.811757][T13651] __msan_chain_origin+0x50/0x90 [ 538.817881][T13656] ? kfree+0x61/0x30f0 [ 538.822987][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.827031][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 538.831627][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.836987][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 538.842107][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.847737][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 538.852718][T13651] do_syscall_64+0xb0/0x150 [ 538.858787][T13656] ? _copy_from_user+0x15b/0x260 [ 538.863286][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.868370][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 538.874243][T13651] [ 538.879367][T13656] __msan_chain_origin+0x50/0x90 [ 538.881673][T13651] Uninit was stored to memory at: [ 538.886706][T13656] do_recvmmsg+0x105a/0x1ee0 [ 538.891714][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 538.896320][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 538.902015][T13651] __msan_chain_origin+0x50/0x90 [ 538.907296][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 538.912395][T13651] do_recvmmsg+0x105a/0x1ee0 [ 538.917495][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 538.922073][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 538.927121][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 538.932128][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 538.938127][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 538.942969][T13651] do_syscall_64+0xb0/0x150 [ 538.949299][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 538.953782][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.958708][T13656] do_syscall_64+0xb0/0x150 [ 538.964725][T13651] [ 538.969441][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.971748][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 538.977805][T13656] RIP: 0033:0x45c1d9 [ 538.984609][T13651] do_recvmmsg+0xc5/0x1ee0 [ 538.988479][T13656] Code: Bad RIP value. [ 538.992891][T13651] do_recvmmsg+0xc5/0x1ee0 [ 538.996938][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 539.010034][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 539.018195][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 539.026168][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 539.034311][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 539.042279][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 539.050255][T13656] Uninit was stored to memory at: [ 539.055285][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.061011][T13656] __msan_chain_origin+0x50/0x90 [ 539.065946][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.070534][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.075469][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.080492][T13656] do_syscall_64+0xb0/0x150 [ 539.085082][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.090961][T13656] [ 539.093368][T13656] Uninit was stored to memory at: [ 539.098491][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.104227][T13656] __msan_chain_origin+0x50/0x90 [ 539.109184][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.113774][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.118740][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.123594][T13656] do_syscall_64+0xb0/0x150 [ 539.128182][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.134076][T13656] [ 539.136401][T13656] Uninit was stored to memory at: [ 539.141428][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.147231][T13656] __msan_chain_origin+0x50/0x90 [ 539.152169][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.156758][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.162034][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.166884][T13656] do_syscall_64+0xb0/0x150 [ 539.171384][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.177353][T13656] [ 539.179671][T13656] Uninit was stored to memory at: [ 539.184693][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.190409][T13656] __msan_chain_origin+0x50/0x90 [ 539.195433][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.200018][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.204954][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.209800][T13656] do_syscall_64+0xb0/0x150 [ 539.214299][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.220200][T13656] [ 539.222517][T13656] Uninit was stored to memory at: [ 539.227539][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.233343][T13656] __msan_chain_origin+0x50/0x90 [ 539.238271][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.242855][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.247785][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.252631][T13656] do_syscall_64+0xb0/0x150 [ 539.257131][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.263009][T13656] [ 539.265337][T13656] Uninit was stored to memory at: [ 539.270360][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.276080][T13656] __msan_chain_origin+0x50/0x90 [ 539.281011][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.285710][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.290647][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.295639][T13656] do_syscall_64+0xb0/0x150 [ 539.300148][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.306545][T13656] [ 539.308861][T13656] Uninit was stored to memory at: [ 539.313896][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.319607][T13656] __msan_chain_origin+0x50/0x90 [ 539.324542][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.329125][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.334054][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.339003][T13656] do_syscall_64+0xb0/0x150 [ 539.343591][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.349478][T13656] [ 539.351796][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 539.358725][T13656] do_recvmmsg+0xc5/0x1ee0 [ 539.363199][T13656] do_recvmmsg+0xc5/0x1ee0 [ 539.501860][T13656] not chained 490000 origins [ 539.506526][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 539.515630][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.525683][T13656] Call Trace: [ 539.528983][T13656] dump_stack+0x1df/0x240 [ 539.533318][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 539.539040][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 539.544162][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 539.550067][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 539.555353][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 539.560644][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.566474][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 539.572542][T13656] ? kfree+0x61/0x30f0 [ 539.576611][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 539.581724][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 539.587277][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 539.593354][T13656] ? _copy_from_user+0x15b/0x260 [ 539.598296][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 539.603413][T13656] __msan_chain_origin+0x50/0x90 [ 539.608364][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.612985][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 539.618369][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 539.623396][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 539.628421][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 539.634316][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.639470][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.644338][T13656] do_syscall_64+0xb0/0x150 [ 539.649382][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.655719][T13656] RIP: 0033:0x45c1d9 [ 539.659605][T13656] Code: Bad RIP value. [ 539.663683][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 539.672104][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 539.680264][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 539.688237][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 539.696206][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 539.704180][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 539.712224][T13656] Uninit was stored to memory at: [ 539.717256][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.723011][T13656] __msan_chain_origin+0x50/0x90 [ 539.728391][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.732979][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.737914][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.742757][T13656] do_syscall_64+0xb0/0x150 [ 539.747252][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.753130][T13656] [ 539.755445][T13656] Uninit was stored to memory at: [ 539.760463][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.766173][T13656] __msan_chain_origin+0x50/0x90 [ 539.771105][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.775986][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.780917][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.785763][T13656] do_syscall_64+0xb0/0x150 [ 539.790256][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.796234][T13656] [ 539.798678][T13656] Uninit was stored to memory at: [ 539.803695][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.809845][T13656] __msan_chain_origin+0x50/0x90 [ 539.814948][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.819551][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.824479][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.829320][T13656] do_syscall_64+0xb0/0x150 [ 539.833815][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.839685][T13656] [ 539.841996][T13656] Uninit was stored to memory at: [ 539.847010][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.852713][T13656] __msan_chain_origin+0x50/0x90 [ 539.857638][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.863256][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.868182][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.873023][T13656] do_syscall_64+0xb0/0x150 [ 539.877513][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.883482][T13656] [ 539.885793][T13656] Uninit was stored to memory at: [ 539.890802][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.896507][T13656] __msan_chain_origin+0x50/0x90 [ 539.901429][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.906005][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.910928][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.915767][T13656] do_syscall_64+0xb0/0x150 [ 539.920257][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.926152][T13656] [ 539.928468][T13656] Uninit was stored to memory at: [ 539.933482][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.939304][T13656] __msan_chain_origin+0x50/0x90 [ 539.944227][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.948802][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.953726][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 539.958563][T13656] do_syscall_64+0xb0/0x150 [ 539.963749][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.969618][T13656] [ 539.971930][T13656] Uninit was stored to memory at: [ 539.976941][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 539.982674][T13656] __msan_chain_origin+0x50/0x90 [ 539.987615][T13656] do_recvmmsg+0x105a/0x1ee0 [ 539.992192][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 539.997117][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 540.001954][T13656] do_syscall_64+0xb0/0x150 [ 540.006445][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.012316][T13656] [ 540.014631][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 540.021291][T13656] do_recvmmsg+0xc5/0x1ee0 [ 540.025693][T13656] do_recvmmsg+0xc5/0x1ee0 [ 540.202891][T13651] not chained 500000 origins [ 540.207540][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 540.216311][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.226375][T13651] Call Trace: [ 540.229679][T13651] dump_stack+0x1df/0x240 [ 540.234032][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 540.239788][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 540.244922][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 540.250826][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 540.256130][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 540.261427][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 540.267247][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 540.273325][T13651] ? kfree+0x61/0x30f0 [ 540.277409][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 540.282545][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 540.288231][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 540.294402][T13651] ? _copy_from_user+0x15b/0x260 [ 540.299359][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 540.304487][T13651] __msan_chain_origin+0x50/0x90 [ 540.309441][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.314079][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 540.319378][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 540.324415][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 540.329447][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 540.335358][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.340320][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.345182][T13651] do_syscall_64+0xb0/0x150 [ 540.349698][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.355806][T13651] RIP: 0033:0x45c1d9 [ 540.360312][T13651] Code: Bad RIP value. [ 540.364384][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.372804][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 540.381345][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 540.390019][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 540.398198][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 540.406269][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 540.414260][T13651] Uninit was stored to memory at: [ 540.419649][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.425392][T13651] __msan_chain_origin+0x50/0x90 [ 540.430525][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.435129][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.440080][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.445053][T13651] do_syscall_64+0xb0/0x150 [ 540.449685][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.455972][T13651] [ 540.458521][T13651] Uninit was stored to memory at: [ 540.463601][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.469436][T13651] __msan_chain_origin+0x50/0x90 [ 540.474694][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.479295][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.484247][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.489109][T13651] do_syscall_64+0xb0/0x150 [ 540.493630][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.499611][T13651] [ 540.501944][T13651] Uninit was stored to memory at: [ 540.506985][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.512714][T13651] __msan_chain_origin+0x50/0x90 [ 540.517774][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.522376][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.528697][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.535147][T13651] do_syscall_64+0xb0/0x150 [ 540.539667][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.545678][T13651] [ 540.548018][T13651] Uninit was stored to memory at: [ 540.553059][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.559305][T13651] __msan_chain_origin+0x50/0x90 [ 540.565768][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.571692][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.576766][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.583193][T13651] do_syscall_64+0xb0/0x150 [ 540.587947][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.594685][T13651] [ 540.597474][T13651] Uninit was stored to memory at: [ 540.603134][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.610376][T13651] __msan_chain_origin+0x50/0x90 [ 540.615469][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.620431][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.625545][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.630565][T13651] do_syscall_64+0xb0/0x150 [ 540.635373][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.641535][T13651] [ 540.644052][T13651] Uninit was stored to memory at: [ 540.649220][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.654980][T13651] __msan_chain_origin+0x50/0x90 [ 540.660501][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.665886][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.670881][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.675855][T13651] do_syscall_64+0xb0/0x150 [ 540.680383][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.686286][T13651] [ 540.688763][T13651] Uninit was stored to memory at: [ 540.693821][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 540.699565][T13651] __msan_chain_origin+0x50/0x90 [ 540.704675][T13651] do_recvmmsg+0x105a/0x1ee0 [ 540.709796][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 540.715025][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 540.720398][T13651] do_syscall_64+0xb0/0x150 [ 540.725692][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.731738][T13651] [ 540.734082][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 540.740782][T13651] do_recvmmsg+0xc5/0x1ee0 [ 540.745377][T13651] do_recvmmsg+0xc5/0x1ee0 [ 540.883481][T13656] not chained 510000 origins [ 540.888262][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 540.896947][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.907017][T13656] Call Trace: [ 540.910328][T13656] dump_stack+0x1df/0x240 [ 540.914682][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 540.920551][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 540.925678][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 540.931585][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 540.937033][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 540.942330][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 540.948152][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 540.954235][T13656] ? kfree+0x61/0x30f0 [ 540.958322][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 540.963454][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 540.969015][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 540.975097][T13656] ? _copy_from_user+0x15b/0x260 [ 540.980133][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 540.985453][T13656] __msan_chain_origin+0x50/0x90 [ 540.990495][T13656] do_recvmmsg+0x105a/0x1ee0 [ 540.995131][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 541.000520][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 541.005558][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 541.010610][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 541.016520][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.021480][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.026346][T13656] do_syscall_64+0xb0/0x150 [ 541.030871][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.036773][T13656] RIP: 0033:0x45c1d9 [ 541.040756][T13656] Code: Bad RIP value. [ 541.044827][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 541.053430][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 541.061655][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 541.069822][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 541.078230][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 541.086214][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 541.094642][T13656] Uninit was stored to memory at: [ 541.099682][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.105412][T13656] __msan_chain_origin+0x50/0x90 [ 541.110494][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.115201][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.120156][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.125023][T13656] do_syscall_64+0xb0/0x150 [ 541.129539][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.135430][T13656] [ 541.137760][T13656] Uninit was stored to memory at: [ 541.142798][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.148530][T13656] __msan_chain_origin+0x50/0x90 [ 541.153494][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.158098][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.163333][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.168450][T13656] do_syscall_64+0xb0/0x150 [ 541.173158][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.179055][T13656] [ 541.181389][T13656] Uninit was stored to memory at: [ 541.186436][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.192183][T13656] __msan_chain_origin+0x50/0x90 [ 541.197587][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.202627][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.207582][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.212609][T13656] do_syscall_64+0xb0/0x150 [ 541.217112][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.223083][T13656] [ 541.225409][T13656] Uninit was stored to memory at: [ 541.230436][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.236239][T13656] __msan_chain_origin+0x50/0x90 [ 541.241174][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.245772][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.250705][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.255555][T13656] do_syscall_64+0xb0/0x150 [ 541.260059][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.266060][T13656] [ 541.268391][T13656] Uninit was stored to memory at: [ 541.273430][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.279181][T13656] __msan_chain_origin+0x50/0x90 [ 541.284121][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.288710][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.293812][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.298666][T13656] do_syscall_64+0xb0/0x150 [ 541.303250][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.309224][T13656] [ 541.311620][T13656] Uninit was stored to memory at: [ 541.316749][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.323179][T13656] __msan_chain_origin+0x50/0x90 [ 541.328222][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.332816][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.337773][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.342626][T13656] do_syscall_64+0xb0/0x150 [ 541.347129][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.353116][T13656] [ 541.355440][T13656] Uninit was stored to memory at: [ 541.360563][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.366282][T13656] __msan_chain_origin+0x50/0x90 [ 541.371218][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.375804][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.380739][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.385726][T13656] do_syscall_64+0xb0/0x150 [ 541.390228][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.396106][T13656] [ 541.398425][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 541.405099][T13656] do_recvmmsg+0xc5/0x1ee0 [ 541.409510][T13656] do_recvmmsg+0xc5/0x1ee0 [ 541.611834][T13656] not chained 520000 origins [ 541.616643][T13656] CPU: 1 PID: 13656 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 541.625413][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.635698][T13656] Call Trace: [ 541.639003][T13656] dump_stack+0x1df/0x240 [ 541.643421][T13656] kmsan_internal_chain_origin+0x6f/0x130 [ 541.649157][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 541.654281][T13656] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 541.660193][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 541.665497][T13656] ? kmsan_get_metadata+0x11d/0x180 [ 541.670713][T13656] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 541.677713][T13656] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 541.683877][T13656] ? kfree+0x61/0x30f0 [ 541.687967][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 541.693086][T13656] ? kmsan_set_origin_checked+0x95/0xf0 [ 541.698639][T13656] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 541.704857][T13656] ? _copy_from_user+0x15b/0x260 [ 541.709806][T13656] ? kmsan_get_metadata+0x4f/0x180 [ 541.714928][T13656] __msan_chain_origin+0x50/0x90 [ 541.719880][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.724514][T13656] ? __msan_poison_alloca+0xf0/0x120 [ 541.729809][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 541.735018][T13656] ? __se_sys_recvmmsg+0xac/0x350 [ 541.740056][T13656] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 541.745963][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.750922][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.755785][T13656] do_syscall_64+0xb0/0x150 [ 541.760303][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.766199][T13656] RIP: 0033:0x45c1d9 [ 541.770092][T13656] Code: Bad RIP value. [ 541.774285][T13656] RSP: 002b:00007f2201ee7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 541.782706][T13656] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 541.790692][T13656] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 541.798676][T13656] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 541.806667][T13656] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 541.814648][T13656] R13: 0000000000c9fb6f R14: 00007f2201ee89c0 R15: 000000000078bfac [ 541.822640][T13656] Uninit was stored to memory at: [ 541.827679][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.833411][T13656] __msan_chain_origin+0x50/0x90 [ 541.838362][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.842961][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.847914][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.852779][T13656] do_syscall_64+0xb0/0x150 [ 541.857293][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.863182][T13656] [ 541.865508][T13656] Uninit was stored to memory at: [ 541.870538][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.876263][T13656] __msan_chain_origin+0x50/0x90 [ 541.881217][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.885818][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.890763][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.895622][T13656] do_syscall_64+0xb0/0x150 [ 541.900137][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.906142][T13656] [ 541.908471][T13656] Uninit was stored to memory at: [ 541.913502][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.919233][T13656] __msan_chain_origin+0x50/0x90 [ 541.924192][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.928806][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.933951][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.939361][T13656] do_syscall_64+0xb0/0x150 [ 541.943895][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.949989][T13656] [ 541.952517][T13656] Uninit was stored to memory at: [ 541.957654][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 541.963433][T13656] __msan_chain_origin+0x50/0x90 [ 541.968404][T13656] do_recvmmsg+0x105a/0x1ee0 [ 541.973004][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 541.977958][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 541.983095][T13656] do_syscall_64+0xb0/0x150 [ 541.988439][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.994382][T13656] [ 541.996717][T13656] Uninit was stored to memory at: [ 542.001950][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 542.007811][T13656] __msan_chain_origin+0x50/0x90 [ 542.012798][T13656] do_recvmmsg+0x105a/0x1ee0 [ 542.017532][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 542.022969][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 542.027873][T13656] do_syscall_64+0xb0/0x150 [ 542.032681][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.038909][T13656] [ 542.041429][T13656] Uninit was stored to memory at: [ 542.046595][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 542.052571][T13656] __msan_chain_origin+0x50/0x90 [ 542.057526][T13656] do_recvmmsg+0x105a/0x1ee0 [ 542.062129][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 542.067206][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 542.072202][T13656] do_syscall_64+0xb0/0x150 [ 542.076817][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.082837][T13656] [ 542.085169][T13656] Uninit was stored to memory at: [ 542.090210][T13656] kmsan_internal_chain_origin+0xad/0x130 [ 542.096027][T13656] __msan_chain_origin+0x50/0x90 [ 542.100980][T13656] do_recvmmsg+0x105a/0x1ee0 [ 542.105682][T13656] __se_sys_recvmmsg+0x1d1/0x350 [ 542.110810][T13656] __x64_sys_recvmmsg+0x62/0x80 [ 542.116646][T13656] do_syscall_64+0xb0/0x150 [ 542.121257][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.127273][T13656] [ 542.129696][T13656] Local variable ----msg_sys@do_recvmmsg created at: [ 542.136400][T13656] do_recvmmsg+0xc5/0x1ee0 [ 542.140828][T13656] do_recvmmsg+0xc5/0x1ee0 [ 542.285848][T13651] not chained 530000 origins [ 542.290630][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 542.299549][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.310051][T13651] Call Trace: [ 542.313377][T13651] dump_stack+0x1df/0x240 [ 542.317717][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 542.323545][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 542.328794][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 542.334693][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 542.340103][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 542.345310][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 542.351141][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 542.357474][T13651] ? kfree+0x61/0x30f0 [ 542.361828][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 542.366953][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 542.372841][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 542.378924][T13651] ? _copy_from_user+0x15b/0x260 [ 542.383971][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 542.389194][T13651] __msan_chain_origin+0x50/0x90 [ 542.394156][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.399524][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 542.404936][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 542.410648][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 542.415695][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 542.421702][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.426672][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.431526][T13651] do_syscall_64+0xb0/0x150 [ 542.436034][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.441939][T13651] RIP: 0033:0x45c1d9 [ 542.445951][T13651] Code: Bad RIP value. [ 542.450016][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 542.458431][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 542.466508][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 542.474483][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 542.482700][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 542.491066][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 542.499137][T13651] Uninit was stored to memory at: [ 542.504237][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.510225][T13651] __msan_chain_origin+0x50/0x90 [ 542.515208][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.519964][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.525279][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.530335][T13651] do_syscall_64+0xb0/0x150 [ 542.534850][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.540823][T13651] [ 542.543359][T13651] Uninit was stored to memory at: [ 542.548460][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.554287][T13651] __msan_chain_origin+0x50/0x90 [ 542.559488][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.564110][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.569128][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.574334][T13651] do_syscall_64+0xb0/0x150 [ 542.578856][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.584748][T13651] [ 542.587079][T13651] Uninit was stored to memory at: [ 542.592105][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.597993][T13651] __msan_chain_origin+0x50/0x90 [ 542.603452][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.608125][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.613346][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.618201][T13651] do_syscall_64+0xb0/0x150 [ 542.623252][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.629136][T13651] [ 542.631552][T13651] Uninit was stored to memory at: [ 542.636582][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.642298][T13651] __msan_chain_origin+0x50/0x90 [ 542.647327][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.652229][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.657258][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.662634][T13651] do_syscall_64+0xb0/0x150 [ 542.668151][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.674035][T13651] [ 542.676360][T13651] Uninit was stored to memory at: [ 542.681387][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.687104][T13651] __msan_chain_origin+0x50/0x90 [ 542.692039][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.696626][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.701853][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.706707][T13651] do_syscall_64+0xb0/0x150 [ 542.711793][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.717672][T13651] [ 542.720085][T13651] Uninit was stored to memory at: [ 542.725108][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.730826][T13651] __msan_chain_origin+0x50/0x90 [ 542.735877][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.740463][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.745418][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.750281][T13651] do_syscall_64+0xb0/0x150 [ 542.754785][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.760763][T13651] [ 542.763085][T13651] Uninit was stored to memory at: [ 542.768111][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 542.774410][T13651] __msan_chain_origin+0x50/0x90 [ 542.779350][T13651] do_recvmmsg+0x105a/0x1ee0 [ 542.784288][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 542.789486][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 542.794339][T13651] do_syscall_64+0xb0/0x150 [ 542.798859][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.804920][T13651] [ 542.807864][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 542.815581][T13651] do_recvmmsg+0xc5/0x1ee0 [ 542.820213][T13651] do_recvmmsg+0xc5/0x1ee0 [ 542.985028][T13651] not chained 540000 origins [ 542.989676][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 542.998438][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.008503][T13651] Call Trace: [ 543.012077][T13651] dump_stack+0x1df/0x240 [ 543.016607][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 543.022658][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.027789][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 543.033989][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 543.039380][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 543.044609][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 543.050634][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 543.056720][T13651] ? kfree+0x61/0x30f0 [ 543.061127][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.067239][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 543.073134][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 543.080071][T13651] ? _copy_from_user+0x15b/0x260 [ 543.085540][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.091830][T13651] __msan_chain_origin+0x50/0x90 [ 543.097340][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.102342][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 543.107930][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 543.113492][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 543.118659][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 543.124780][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.129770][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.134731][T13651] do_syscall_64+0xb0/0x150 [ 543.139256][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.145372][T13651] RIP: 0033:0x45c1d9 [ 543.149585][T13651] Code: Bad RIP value. [ 543.154177][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 543.162734][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 543.170864][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 543.178944][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 543.186937][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 543.195187][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 543.203356][T13651] Uninit was stored to memory at: [ 543.208418][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.214243][T13651] __msan_chain_origin+0x50/0x90 [ 543.219281][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.223890][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.228848][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.233711][T13651] do_syscall_64+0xb0/0x150 [ 543.238311][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.244206][T13651] [ 543.246541][T13651] Uninit was stored to memory at: [ 543.251586][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.258074][T13651] __msan_chain_origin+0x50/0x90 [ 543.263026][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.267768][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.272813][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.277685][T13651] do_syscall_64+0xb0/0x150 [ 543.282518][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.288423][T13651] [ 543.290758][T13651] Uninit was stored to memory at: [ 543.295804][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.301541][T13651] __msan_chain_origin+0x50/0x90 [ 543.306671][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.311454][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.316426][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.321379][T13651] do_syscall_64+0xb0/0x150 [ 543.325991][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.331887][T13651] [ 543.334220][T13651] Uninit was stored to memory at: [ 543.339257][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.345189][T13651] __msan_chain_origin+0x50/0x90 [ 543.350496][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.355273][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.360225][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.365099][T13651] do_syscall_64+0xb0/0x150 [ 543.369620][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.375600][T13651] [ 543.377938][T13651] Uninit was stored to memory at: [ 543.383068][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.388893][T13651] __msan_chain_origin+0x50/0x90 [ 543.394058][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.398851][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.403945][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.408899][T13651] do_syscall_64+0xb0/0x150 [ 543.413587][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.419483][T13651] [ 543.421814][T13651] Uninit was stored to memory at: [ 543.426942][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.432759][T13651] __msan_chain_origin+0x50/0x90 [ 543.437883][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.442829][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.447975][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.452844][T13651] do_syscall_64+0xb0/0x150 [ 543.457366][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.463256][T13651] [ 543.465586][T13651] Uninit was stored to memory at: [ 543.470627][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.476355][T13651] __msan_chain_origin+0x50/0x90 [ 543.481299][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.485904][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.490848][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.495713][T13651] do_syscall_64+0xb0/0x150 [ 543.500312][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.506191][T13651] [ 543.508517][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 543.515187][T13651] do_recvmmsg+0xc5/0x1ee0 [ 543.519598][T13651] do_recvmmsg+0xc5/0x1ee0 [ 543.667595][T13651] not chained 550000 origins [ 543.672244][T13651] CPU: 0 PID: 13651 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 543.681085][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.691162][T13651] Call Trace: [ 543.694476][T13651] dump_stack+0x1df/0x240 [ 543.698824][T13651] kmsan_internal_chain_origin+0x6f/0x130 [ 543.704575][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.709704][T13651] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 543.715636][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 543.720939][T13651] ? kmsan_get_metadata+0x11d/0x180 [ 543.726156][T13651] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 543.732094][T13651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 543.738168][T13651] ? kfree+0x61/0x30f0 [ 543.742248][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.747483][T13651] ? kmsan_set_origin_checked+0x95/0xf0 [ 543.753113][T13651] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 543.759221][T13651] ? _copy_from_user+0x15b/0x260 [ 543.764176][T13651] ? kmsan_get_metadata+0x4f/0x180 [ 543.769316][T13651] __msan_chain_origin+0x50/0x90 [ 543.774273][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.778908][T13651] ? __msan_poison_alloca+0xf0/0x120 [ 543.784206][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 543.789241][T13651] ? __se_sys_recvmmsg+0xac/0x350 [ 543.794281][T13651] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 543.800187][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.805150][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.810014][T13651] do_syscall_64+0xb0/0x150 [ 543.814542][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.820512][T13651] RIP: 0033:0x45c1d9 [ 543.824409][T13651] Code: Bad RIP value. [ 543.828477][T13651] RSP: 002b:00007f2201f08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 543.836894][T13651] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 543.844874][T13651] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 543.852850][T13651] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 543.863163][T13651] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bf0c [ 543.871301][T13651] R13: 0000000000c9fb6f R14: 00007f2201f099c0 R15: 000000000078bf0c [ 543.879459][T13651] Uninit was stored to memory at: [ 543.884506][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.890379][T13651] __msan_chain_origin+0x50/0x90 [ 543.895343][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.899939][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.904893][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.909754][T13651] do_syscall_64+0xb0/0x150 [ 543.914270][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.920160][T13651] [ 543.922486][T13651] Uninit was stored to memory at: [ 543.927523][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.933247][T13651] __msan_chain_origin+0x50/0x90 [ 543.938197][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.942794][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.947744][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.952604][T13651] do_syscall_64+0xb0/0x150 [ 543.957115][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.963003][T13651] [ 543.965340][T13651] Uninit was stored to memory at: [ 543.970377][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 543.976103][T13651] __msan_chain_origin+0x50/0x90 [ 543.981049][T13651] do_recvmmsg+0x105a/0x1ee0 [ 543.985652][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 543.990600][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 543.995461][T13651] do_syscall_64+0xb0/0x150 [ 543.999971][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.005862][T13651] [ 544.008195][T13651] Uninit was stored to memory at: [ 544.013317][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 544.019049][T13651] __msan_chain_origin+0x50/0x90 [ 544.023998][T13651] do_recvmmsg+0x105a/0x1ee0 [ 544.028594][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 544.033567][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 544.038422][T13651] do_syscall_64+0xb0/0x150 [ 544.042937][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.048827][T13651] [ 544.051155][T13651] Uninit was stored to memory at: [ 544.056328][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 544.062144][T13651] __msan_chain_origin+0x50/0x90 [ 544.067134][T13651] do_recvmmsg+0x105a/0x1ee0 [ 544.071732][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 544.076681][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 544.081628][T13651] do_syscall_64+0xb0/0x150 [ 544.086146][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.092036][T13651] [ 544.094369][T13651] Uninit was stored to memory at: [ 544.099495][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 544.105226][T13651] __msan_chain_origin+0x50/0x90 [ 544.110189][T13651] do_recvmmsg+0x105a/0x1ee0 [ 544.115445][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 544.120484][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 544.125351][T13651] do_syscall_64+0xb0/0x150 [ 544.129877][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.135767][T13651] [ 544.138093][T13651] Uninit was stored to memory at: [ 544.143467][T13651] kmsan_internal_chain_origin+0xad/0x130 [ 544.149321][T13651] __msan_chain_origin+0x50/0x90 [ 544.154912][T13651] do_recvmmsg+0x105a/0x1ee0 [ 544.159707][T13651] __se_sys_recvmmsg+0x1d1/0x350 [ 544.164888][T13651] __x64_sys_recvmmsg+0x62/0x80 [ 544.169771][T13651] do_syscall_64+0xb0/0x150 [ 544.174571][T13651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.180570][T13651] [ 544.182902][T13651] Local variable ----msg_sys@do_recvmmsg created at: [ 544.190169][T13651] do_recvmmsg+0xc5/0x1ee0 [ 544.194778][T13651] do_recvmmsg+0xc5/0x1ee0 20:19:28 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r1 = getpid() tkill(r1, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') sendfile(r0, r2, 0x0, 0x10005e) 20:19:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x840, 0x0) read(r0, 0x0, 0x0) 20:19:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 20:19:28 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file1\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 20:19:28 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10=\x8f\xa2\xc7\x8b\x96|?\x16\xbf\xa1$\xe2\xf4\xa6t#M\xe0l\x0e<\x89\x8df\xa0m\x00\a\xbb\x84\xc2V\xff\xb0j\x06\x00\xba\x1a\xe7@\xab\xe2v\x8a\x97\x88\xd3\xa5\xeePb\x10\xf5\'\xc1\x01\xfew\xdfgCM>\xba\xc6\xe5\xa6\xac\xfa\xed\xdf;') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(r1, &(0x7f0000000bc0)='./file0\x00', 0xc0242, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') uname(0x0) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0x141202, 0x0) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50}, 0xfffffec8) fallocate(r4, 0x3, 0x0, 0xd3fd) dup2(r0, r4) 20:19:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 20:19:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x1000}) 20:19:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000d}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f407000904001e000000fe01000100000000", 0x1c) 20:19:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:19:29 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r1 = getpid() tkill(r1, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='schedstat\x00') sendfile(r0, r2, 0x0, 0x10005e) 20:19:29 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x7, 0x4, 0x200, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 20:19:29 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="b2080000000000000a004e2200000003ff"], 0x390) 20:19:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 20:19:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x1b, 0x9b, 0x7, 0x3b, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 20:19:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:19:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x0, 0x5}], 0x18) 20:19:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x268, 0xd8, 0x5002004a, 0x0, 0xd8, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 20:19:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 20:19:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:19:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x19813, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="a2ac4041ff03"}]}, 0x40}}, 0x0) 20:19:30 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0xc8050000}], 0x400000000000132, 0x4000000) 20:19:30 executing program 5: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x6ab}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x0) semget$private(0x0, 0x0, 0x0) [ 546.201106][T13775] Cannot find add_set index 0 as target 20:19:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x3, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request}}}}, 0xfdef) 20:19:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x1000001bd) 20:19:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ffffc) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) 20:19:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x3c6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:19:31 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000, 0xfffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x36}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x1f, 0x8000}, 0xc) unshare(0x40000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) 20:19:31 executing program 2: setgroups(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = dup(r0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) write$FUSE_ATTR(r1, &(0x7f0000000040)={0xffffffffffffff09}, 0xfddf) 20:19:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x8, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request}}}}, 0xfdef) [ 547.485834][T13815] IPVS: ftp: loaded support on port[0] = 21 20:19:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 20:19:32 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x29, 0x5, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = epoll_create1(0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x4000201f, 0x3f000002}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:19:32 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x29, 0x5, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x14000) r1 = epoll_create1(0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x4000201f, 0x3f000002}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:19:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x140, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pipe2(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000003a00)=""/242, 0xf2}], 0x1, 0x0) 20:19:33 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x36}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x1f, 0x8000}, 0xc) unshare(0x40000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) 20:19:33 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 20:19:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20}, 0x20}}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/3, 0x3}, {&(0x7f00000001c0)=""/113, 0x71}], 0x2}, 0x0) [ 549.453622][T13875] IPVS: ftp: loaded support on port[0] = 21 20:19:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000bc0)="89", 0x1}], 0x1}}], 0x1, 0x0) 20:19:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) [ 549.843283][ T8977] tipc: TX() has been purged, node left! 20:19:36 executing program 3: 20:19:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x1, 0x7, 0x0, "000000000000000000ac0000000000000000080000000000000000001d00"}, 0xd8) 20:19:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x1b, 0x25, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 552.263148][ T8977] tipc: TX() has been purged, node left! 20:19:37 executing program 0: 20:19:37 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040f7c, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac2cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:19:37 executing program 2: 20:19:37 executing program 1: 20:19:37 executing program 5: 20:19:37 executing program 3: 20:19:38 executing program 2: 20:19:38 executing program 5: 20:19:38 executing program 1: 20:19:38 executing program 3: 20:19:38 executing program 0: 20:19:38 executing program 2: 20:19:38 executing program 5: 20:19:38 executing program 4: 20:19:38 executing program 3: 20:19:38 executing program 1: 20:19:38 executing program 0: 20:19:38 executing program 5: 20:19:38 executing program 2: 20:19:39 executing program 0: 20:19:39 executing program 2: 20:19:39 executing program 3: 20:19:39 executing program 1: 20:19:39 executing program 5: 20:19:39 executing program 4: 20:19:39 executing program 1: 20:19:39 executing program 3: 20:19:39 executing program 2: 20:19:39 executing program 0: 20:19:39 executing program 5: 20:19:39 executing program 4: 20:19:39 executing program 1: 20:19:39 executing program 3: 20:19:39 executing program 2: 20:19:40 executing program 0: 20:19:40 executing program 5: 20:19:40 executing program 4: 20:19:40 executing program 1: 20:19:40 executing program 3: 20:19:40 executing program 0: 20:19:40 executing program 2: 20:19:40 executing program 5: 20:19:40 executing program 4: 20:19:40 executing program 1: 20:19:40 executing program 3: 20:19:40 executing program 2: 20:19:40 executing program 5: 20:19:40 executing program 0: 20:19:40 executing program 4: 20:19:41 executing program 1: 20:19:41 executing program 2: 20:19:41 executing program 3: 20:19:41 executing program 5: 20:19:41 executing program 0: 20:19:41 executing program 4: 20:19:41 executing program 1: 20:19:41 executing program 2: 20:19:41 executing program 3: 20:19:41 executing program 0: 20:19:41 executing program 5: 20:19:41 executing program 1: 20:19:41 executing program 4: 20:19:41 executing program 2: 20:19:41 executing program 0: 20:19:41 executing program 3: 20:19:41 executing program 5: 20:19:42 executing program 4: 20:19:42 executing program 1: 20:19:42 executing program 0: 20:19:42 executing program 2: 20:19:42 executing program 3: 20:19:42 executing program 5: 20:19:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 20:19:42 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) 20:19:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff85}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) 20:19:42 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x44, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 558.178066][T14042] binder: 14041:14042 ioctl 40046205 0 returned -22 [ 558.204732][T14042] binder: 14041:14042 ioctl c0306201 0 returned -14 20:19:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) 20:19:42 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="db80833c000000001800128008000100767469000c00028008000400ac1e000108000a00", @ANYRES32], 0x40}}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x40) [ 558.230599][T14046] binder: 14041:14046 ioctl 40046205 0 returned -22 20:19:42 executing program 4: semget(0x2, 0x0, 0x64c) 20:19:43 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8f"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x0, 0x10000}}}, 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1}}}, 0xe8) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:19:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:19:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40d20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) 20:19:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, r0}) lseek(r0, 0x7, 0x3) 20:19:43 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) 20:19:43 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000011000/0x2000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmctl$SHM_LOCK(0x0, 0xb) 20:19:43 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 20:19:44 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$9p(0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) splice(r0, 0x0, r2, 0x0, 0x19401, 0x0) 20:19:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 20:19:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="1e"}) 20:19:44 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r0, &(0x7f0000001400)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x4) 20:19:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace(0x11, r0) 20:19:44 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace(0x4207, r0) 20:19:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 20:19:45 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000007, 0x10, 0xffffffffffffffff, 0x50c62000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001600)={0xdc, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read(r0, &(0x7f00000000c0)=""/49, 0x31) readv(r0, 0x0, 0x0) 20:19:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x81}}) 20:19:45 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000011000/0x2000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmctl$SHM_LOCK(0x0, 0xb) 20:19:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807684, 0x0) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 20:19:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) close(r0) 20:19:45 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace(0x4207, r0) 20:19:45 executing program 4: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000007, 0x10, 0xffffffffffffffff, 0x50c62000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:45 executing program 1: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffd55, &(0x7f0000000000)={@dev, @broadcast, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x0, 0x0, 'm', "9d56bb065a43aa16"}}}}}}, &(0x7f0000000080)) 20:19:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, 0x0, 0x0) setregid(0x0, r1) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r2) 20:19:45 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="83"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6b) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 20:19:46 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807684, 0x0) getitimer(0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 20:19:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) dup3(r0, r3, 0x0) 20:19:46 executing program 1: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807684, 0x0) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0) 20:19:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000e9c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:19:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807684, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3142874, 0x0) 20:19:46 executing program 1: dup(0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000008000000417988537aa67e1ca160df5d3c67cfe20fc110d7f3aabfa1bd02abe7ac9e117f8e000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000002df4968433ad4207f30c7bb489c0ae0902280e4d13ef04a57241ff67fec2933bedc5d4574f2bdaf37191b72efff73ab6ea6a277e917952f0f0e947eca7256231d04d5179e8636bbcfa7f672f6118f92a8e754bbce9bf1b90c56eec070d309c1f50e6ecdba2545f038e59ffb37f5a0e63ac422df35bcf2153775c4529507aecdb1adbf4dc8bc55dc24ebbb418b44b1286111893b7fd1be067fdc52495552b"]) dup(0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x10000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffbb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0x0) setregid(0x0, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000200)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\xc1\xf4\x12\f\x86\x9b\xa9\xd5\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfcdV\'\xb8]\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdc*I\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x89\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44', 0xfffffffffffffffd) bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000140)=""/60) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl(r2, 0x6681, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000180)={0x9, 0x10001, 0x5, 0xc5b6, 0x3, 0x3}) syz_open_procfs(0x0, &(0x7f00000004c0)='auxv\x00') 20:19:46 executing program 5: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) 20:19:46 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 20:19:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 20:19:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000015c0)=0x14) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:47 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000e9c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee34b5b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x4, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:19:47 executing program 2: pipe(&(0x7f0000000140)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 20:19:47 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 20:19:47 executing program 4: pipe(&(0x7f0000000140)) r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000017c0), 0x2cb, 0x400000000000) ioctl$TIOCPKT(r1, 0x5420, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) 20:19:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000e9c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a00000072"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:19:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 20:19:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="1269fb18d72e9b2e8fb3f605bb67215f6ac2d0a56ef628df9a6e09c7e0a692a6d3a244b80e089d3c09c9de675b6a1788b8a592b73a18ee112a471cc41c19c7f258", 0x41) 20:19:47 executing program 5: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace(0x4207, r0) 20:19:47 executing program 1: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000015c0)=0x14) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 20:19:48 executing program 4: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2, @mcast1, @ipv4={[], [], @remote}}) read(r0, &(0x7f00000000c0)=""/49, 0x31) 20:19:48 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346d11c7226e80a7a431df019", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 20:19:48 executing program 3: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) 20:19:48 executing program 5: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000001400)="df", 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r4}, 0x38) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:19:48 executing program 1: socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x208}]}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) [ 564.063738][T14274] IPVS: ftp: loaded support on port[0] = 21 [ 564.097769][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 564.107442][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:19:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x0) [ 564.158165][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:19:48 executing program 0: setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x320f) 20:19:48 executing program 3: [ 564.405138][T14282] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.5'. [ 564.415155][T14282] device lo entered promiscuous mode [ 564.420997][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 564.433197][T14282] device tunl0 entered promiscuous mode [ 564.439202][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 564.447242][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 564.455182][T14282] device gre0 entered promiscuous mode [ 564.461173][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 564.469286][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 564.477220][T14282] device gretap0 entered promiscuous mode [ 564.483713][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 564.491637][T14282] device erspan0 entered promiscuous mode [ 564.497966][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 564.506144][T14282] device ip_vti0 entered promiscuous mode [ 564.512462][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 564.520525][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 564.528588][T14282] device ip6_vti0 entered promiscuous mode [ 564.535004][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 564.543412][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 564.551396][T14282] device sit0 entered promiscuous mode [ 564.560585][T14282] device ip6tnl0 entered promiscuous mode [ 564.570050][T14282] device ip6gre0 entered promiscuous mode [ 564.579106][T14282] device syz_tun entered promiscuous mode [ 564.586990][T14282] device ip6gretap0 entered promiscuous mode [ 564.594960][T14282] device bridge0 entered promiscuous mode [ 564.602536][T14282] device vcan0 entered promiscuous mode [ 564.608578][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.617115][T14282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.626299][T14282] device bond0 entered promiscuous mode [ 564.632037][T14282] device bond_slave_0 entered promiscuous mode [ 564.638718][T14282] device bond_slave_1 entered promiscuous mode [ 564.648368][T14282] device team0 entered promiscuous mode [ 564.654163][T14282] device team_slave_0 entered promiscuous mode [ 564.660858][T14282] device team_slave_1 entered promiscuous mode [ 564.670211][T14282] device dummy0 entered promiscuous mode [ 564.679175][T14282] device nlmon0 entered promiscuous mode 20:19:49 executing program 4: [ 564.872260][T14308] IPVS: ftp: loaded support on port[0] = 21 20:19:49 executing program 0: 20:19:49 executing program 3: 20:19:49 executing program 2: 20:19:49 executing program 4: 20:19:49 executing program 3: 20:19:49 executing program 2: [ 565.458717][T14282] device caif0 entered promiscuous mode [ 565.464583][T14282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:19:52 executing program 5: 20:19:52 executing program 0: 20:19:52 executing program 1: 20:19:52 executing program 4: 20:19:52 executing program 3: 20:19:52 executing program 2: 20:19:52 executing program 3: 20:19:52 executing program 2: 20:19:52 executing program 0: 20:19:52 executing program 4: 20:19:52 executing program 1: 20:19:52 executing program 5: 20:19:52 executing program 2: 20:19:52 executing program 3: 20:19:52 executing program 0: 20:19:53 executing program 4: 20:19:53 executing program 1: 20:19:53 executing program 5: 20:19:53 executing program 2: 20:19:53 executing program 0: 20:19:53 executing program 3: 20:19:53 executing program 1: 20:19:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 20:19:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) socket$kcm(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x17, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 20:19:53 executing program 2: perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)='b', 0xff07}], 0x1}, 0x4004044) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x4040060) close(r0) 20:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="240000001e0081aee4050c00000f10fe070101000000000063da9a9a1cae18c1eebd11da", 0x24}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 20:19:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x4300, &(0x7f0000000280)="b95b03b700030700009e40f088471fffffe100004000638477fbac14143fe0004301c699da153f03a0e6e380f6010ef683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 20:19:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 20:19:53 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, 0x0, 0x0) 20:19:54 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x27, 0x0, 0x0) 20:19:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x14, 0x84, 0x1, {0xfffe}}], 0x14}, 0x0) 20:19:54 executing program 0: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@prinfo={0x14, 0x84, 0x7, {0xf}}], 0x14}, 0x0) 20:19:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 20:19:54 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 20:19:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)='6', 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x14}], 0x14}, 0x0) 20:19:54 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0xc) 20:19:54 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 20:19:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xfffffffffffffdff, 0x1c, 0x3}, 0x1c) 20:19:54 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xb, &(0x7f00000002c0), 0x20) 20:19:54 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) 20:19:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)='6', 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x14, 0x84, 0x1, {0x0, 0x2}}], 0x14}, 0x0) 20:19:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 20:19:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) bind$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) 20:19:55 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) 20:19:55 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000000)={r3}, 0x8) 20:19:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="224d0e64b8c56b3c461408d541f32393911532cd9c0082c79095965d227b5145337f63551412df484a7d1603763bcb4c502eec041414b2afeb68e90710f2442d4ca340f4c9924fc1dc246abd8ef2034c42917049c6a620f54a95e789219582728e530b30da770fc35179977c95c93f53765e89b1566816b8df3b4dee7f548c706c40ee2b3590f0d8666d717b4a9206ddb4f87852b4"], 0xa0) 20:19:55 executing program 1: 20:19:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001b00)={&(0x7f0000000240)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 20:19:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)='6', 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x14, 0x84, 0x1, {0x0, 0x0, 0x0, 0x4}}], 0x14}, 0x0) 20:19:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r1) dup2(r2, r0) 20:19:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000040)={0xff, 0x2, 0x9, 0x2007}, 0x8) 20:19:55 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000040)={0x0, 0x2}, 0x8) 20:19:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001800)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), 0x10) 20:19:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x27, &(0x7f0000000500), &(0x7f0000000380)=0x8) 20:19:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x26, 0x0, &(0x7f0000000040)) 20:19:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001800)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x10) 20:19:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) 20:19:56 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000f40)={&(0x7f0000000a80)=@in={0x10, 0x2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)="b4", 0x1}], 0x1, &(0x7f0000000f00)=[@sndrcv={0x2c}], 0x2c}, 0x0) 20:19:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1e) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x3, &(0x7f0000000100), 0x14) accept$inet6(r4, 0x0, 0x0) 20:19:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000200)='4', 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:19:56 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0xc01, 0x3, 0x268, 0xd0, 0x5002004a, 0x0, 0x0, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x133) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) wait4(r1, 0x0, 0x0, 0x0) 20:19:57 executing program 0: setrlimit(0x2, &(0x7f0000000540)={0x1000, 0xa0b74d2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x805000, 0x2) [ 572.550093][T14527] Cannot find del_set index 0 as target 20:19:57 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mlock2(&(0x7f00001f6000/0x2000)=nil, 0x2000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) move_pages(0x0, 0x17, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 20:19:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 20:19:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 572.748136][T14533] mmap: syz-executor.0 (14533): VmData 26943488 exceed data ulimit 4096. Update limits or use boot option ignore_rlimit_data. 20:19:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 20:19:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:19:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') write$binfmt_misc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) [ 573.315665][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.444987][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 20:19:58 executing program 4: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:19:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:19:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 20:19:58 executing program 0: 20:19:58 executing program 1: [ 574.038830][T14571] device batadv0 entered promiscuous mode 20:19:58 executing program 4: 20:19:58 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mlock2(&(0x7f00001f6000/0x2000)=nil, 0x2000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) move_pages(0x0, 0x17, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 20:19:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:19:58 executing program 0: 20:19:58 executing program 5: 20:19:58 executing program 1: 20:19:58 executing program 4: 20:19:59 executing program 0: 20:19:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:19:59 executing program 5: 20:19:59 executing program 1: 20:19:59 executing program 4: 20:19:59 executing program 0: 20:19:59 executing program 3: 20:19:59 executing program 5: 20:19:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:19:59 executing program 1: 20:19:59 executing program 4: 20:19:59 executing program 3: 20:19:59 executing program 0: 20:20:00 executing program 1: 20:20:00 executing program 5: 20:20:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:00 executing program 4: 20:20:00 executing program 0: 20:20:00 executing program 3: 20:20:00 executing program 1: 20:20:00 executing program 5: 20:20:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:00 executing program 4: 20:20:00 executing program 0: 20:20:00 executing program 3: 20:20:00 executing program 1: 20:20:00 executing program 5: 20:20:00 executing program 4: 20:20:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:01 executing program 0: 20:20:01 executing program 3: 20:20:01 executing program 1: 20:20:01 executing program 5: 20:20:01 executing program 4: 20:20:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x3, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:20:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 20:20:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x21, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1d896caeb6967f5dfda313ba62f632b1606579b15b9b0b5d4b2bca71a836f0e2f1", &(0x7f0000000080)=""/19, 0x0, 0x11, 0x0, 0x0}) 20:20:01 executing program 5: semop(0x0, &(0x7f0000000380)=[{0x3, 0x0, 0x1c00}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 20:20:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) 20:20:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:02 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "cf73b57552daf6f35db14799d83749e49ce4f10fa713561ac28f2199930e77e24911aaa77e87ae56c1af20e166b9b1f60b2f253348539884c9f23c9264fa4cba580b07b811e2a8f440f0d5f9a04ae3d1015fcf75b468d389785ba950e61d21ba35098c8d722371beb320b4beab461124d8ea16aa9066f8fe8586653be803704912446e0769393d4ba530e81ef5b3ed67d568282a92ce10c9142d8611a687e8a4dce47d0c814ccd7f165bd823228e6f6f600016552ce6a2bb6b76c47695b774dcecf2cc9ae8cea0884acfefe6052930e114638fb2735373f7f89773d28392b4a7ec9fb59dda6c2e2391a61cd8838b1c32b64d2b5fd31d6ef30763e4651527e484", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 20:20:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') close(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1, 0x0) 20:20:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 20:20:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1d896caeb696", &(0x7f0000000080)=""/19, 0x0, 0x11, 0x0, 0x0}) 20:20:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:03 executing program 3: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x6000, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) 20:20:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0x28}}], 0x2, 0x0) 20:20:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) quotactl(0x2080000201, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000000)) 20:20:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:20:03 executing program 0: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 20:20:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001300)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0xffffffffffffffff}}, "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", "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"}) 20:20:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x0, 0x40000, 0x0, 0x0, 0x0, "0000000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "3abc50afd968c13400"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0xfffffd28) 20:20:03 executing program 3: request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 20:20:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a00000300000000000000000000000000000000000000000000000000000000080012000000020000000000003f000006000000000000000000000000000400ac1414aa000000000000000000000000ac1414bb00000000000000000000000005000500004000000a"], 0xa0}}, 0x0) 20:20:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:04 executing program 0: 20:20:04 executing program 3: 20:20:05 executing program 4: 20:20:05 executing program 1: 20:20:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:05 executing program 3: 20:20:05 executing program 0: 20:20:05 executing program 1: 20:20:05 executing program 5: 20:20:05 executing program 3: 20:20:05 executing program 0: 20:20:05 executing program 4: 20:20:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:05 executing program 1: 20:20:05 executing program 3: 20:20:05 executing program 4: 20:20:05 executing program 0: 20:20:05 executing program 5: 20:20:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:06 executing program 1: 20:20:06 executing program 3: 20:20:06 executing program 4: 20:20:06 executing program 0: 20:20:06 executing program 1: 20:20:06 executing program 5: 20:20:06 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:06 executing program 3: 20:20:06 executing program 4: 20:20:06 executing program 0: 20:20:06 executing program 1: 20:20:06 executing program 5: 20:20:06 executing program 3: 20:20:06 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:06 executing program 4: 20:20:06 executing program 0: 20:20:07 executing program 3: 20:20:07 executing program 1: 20:20:07 executing program 5: 20:20:07 executing program 4: 20:20:07 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:07 executing program 1: 20:20:07 executing program 0: 20:20:07 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x81) preadv(r0, &(0x7f0000002500)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1, 0x1) 20:20:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, "0944b6f34372b1d8d7ad1199d331d3c041fc56c78875df267682634d3ca0897f"}) 20:20:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000023d800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540b, 0x1) 20:20:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x2, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 20:20:07 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:20:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x0, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x20000}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 20:20:08 executing program 5: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') ioctl$int_out(r0, 0x800080804520, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) [ 583.644821][T14780] xt_time: invalid argument - start or stop time greater than 23:59:59 20:20:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) 20:20:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') sendfile(r0, r1, 0x0, 0x1) 20:20:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50402591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 20:20:08 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) 20:20:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01d31160004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 20:20:08 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) 20:20:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 20:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 20:20:08 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:08 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) [ 584.505777][T14807] kvm [14805]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 [ 584.637835][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000079 data 0x25 20:20:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 584.726494][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000042 data 0xc9 [ 584.796011][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000002a data 0x43 20:20:09 executing program 0: socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0x8, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfa, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x2004c000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={[0x200]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07086706000002000000170300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d15871637a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd2b4a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546c087431d7700000006e7c955cfa1f6ab689fde4de5f63ede20271a51445dc8da39e5b0ab7010001000000009af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d74ec88148f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d702a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b482af97787f696649a462e7ee4bcf8b07a10d6735154beb4000004000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887b52d103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd8d8c1aa3ef18d45200b7861bbd0000000000000000c59050647802cf86f1b4c3005f37d83f84e98a52fbbecd106425563d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc3857ff51b324be00000000000000090867f577cdde2144d9d7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b417bbdfb5351defc6e34a961f3593920437bf3cbbc04600c64acad9a04ffe62875177b51d3e2f0c6d7194c26789d2bec2d0846831455b8fcde5beaeca2c1335d8a49a92f9d2bef5f485c4b6f4cf710b7d4550e6f2d830dfcd9d47d50ea838bdf8901a719431a9d1ef918ec0ec79037cb61df16379e3bf2a1127c49407e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8dc5eee909928d0b9dc946dcb30692dc88db84834cc7726429cb20603b5338184f9828aa802e37d3c4f259d616307d8ab86ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c864700000000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d0fe6ae0fd63fa7f32b8ab6cd6a8b8bf1b7d3ed9f8c2a6b6f46c7dad2f9e939c92d63ab1cf2fbea215b96a604444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcccbb83266a1ce1a1dea83ebb89d07b35b1aa09ad2904040e7784e96cd66bda204d47b1c66d5a84e7c3de1d1062fd8a23d1b4e2313c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db8ba6d301fb65a3d8b5baa9bbec017646649fa99537aa453f3e6b2acebeddb6c32a87455f351efc30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e3d3470cdb781817f85373a6c7fd1b626035b666e224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba899acbd64d70bdb364ef3adb5ba1e4d9d5d217c02b"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x401}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000480)="9d91e39655331956b6a6f0b25b759b0f78481924f2f8ae6babfd1f50f59e5f965412f5955d3ebb49f065ea3b0634943a0f5df3933f5dcbd19ff87fa05702c2df8cb22131c783e254474d5c2e38f91e126adafa4e9000764a3589f329233345b7b853096a9885b0729333fd11460c92b9d899215847e9e6e85994540d4825a434d244aba8e86830739ee8cd3f4264198cc2666e016ef2f8c4a07f4bb0c555da4c8175e5242c5dbf3b0932c72da1c5603175fa4c35de7bdb329f7d03b6b3eba3a8f941f24c9b739fabb29ccd7071787fbcb5e94a1f4807d86f811efd059ad418a5f501e3ce", 0xe4}, {&(0x7f00000000c0)="323bfb74108343e1", 0x8}, {&(0x7f0000000f40)="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", 0x7f0}], 0x3, &(0x7f0000000580)}, 0x20048000) iopl(0x0) [ 584.863902][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000027 data 0x2b 20:20:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 585.007913][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001c data 0x26 20:20:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) ftruncate(0xffffffffffffffff, 0x2008001) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 585.116066][T14807] kvm [14805]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000043 data 0x1d 20:20:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x42420, 0x0, 0x0, 0x7, 0xd, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x40) dup(0xffffffffffffffff) open$dir(0x0, 0x250400, 0xc0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000100)=0x8143, 0x4) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 585.243668][T14807] kvm [14805]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000027 [ 585.264629][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:20:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='keyring\x00') 20:20:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 585.379839][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:20:10 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x8}}}}}, 0x0) 20:20:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x202}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x20}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x4c}}, 0x20000080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 20:20:10 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x114, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'wg2\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg2\x00', 'veth1_to_bond\x00'}, 0x0, 0xdc, 0x204, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@unspec=@mark={{0x2c, 'mark\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:gpg_exec_t:s0\x00'}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'caif0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x494) tkill(r0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 20:20:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 20:20:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:20:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x0) 20:20:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4bfb, &(0x7f0000000000)=""/126) 20:20:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 20:20:13 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000fc0)) 20:20:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:20:13 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getpid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x25}, &(0x7f0000000040)) timer_delete(0x0) 20:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000003c0)={0x79}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)) 20:20:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x202}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x20}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x4c}}, 0x20000080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 588.967570][T14916] kvm [14914]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001a data 0x0 [ 589.084358][T14916] kvm [14914]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000041 data 0x1b 20:20:13 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:13 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@empty, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2004c430) [ 589.167995][T14916] kvm [14914]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000003e data 0x9c 20:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 20:20:13 executing program 4: 20:20:13 executing program 1: 20:20:14 executing program 5: 20:20:14 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:14 executing program 3: 20:20:14 executing program 1: 20:20:14 executing program 4: 20:20:14 executing program 0: 20:20:14 executing program 5: 20:20:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:14 executing program 3: 20:20:14 executing program 4: 20:20:14 executing program 0: 20:20:14 executing program 1: 20:20:14 executing program 3: 20:20:14 executing program 5: 20:20:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:15 executing program 1: 20:20:15 executing program 4: 20:20:15 executing program 0: 20:20:15 executing program 3: 20:20:15 executing program 5: 20:20:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:15 executing program 1: 20:20:15 executing program 0: 20:20:15 executing program 4: 20:20:15 executing program 3: 20:20:15 executing program 5: 20:20:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x0) 20:20:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x11, 0x0, 0x100007e00) 20:20:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 20:20:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x24000, 0x0) 20:20:16 executing program 5: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:20:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) 20:20:16 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 20:20:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:16 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 20:20:16 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync() r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2, 0x0) 20:20:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_getres(0x5, 0x0) 20:20:17 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync() r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2, 0x0) 20:20:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1d) creat(&(0x7f0000000080)='./file0\x00', 0x0) 20:20:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a000000}]) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 20:20:17 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000380)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K\x12u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\xf3\\\x14\x89\xe8\xfds\xff\x7f\x00\x00\xf7\xb5\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb3:\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\xf7\xde\x92\x0e\xdc\xd7_\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x1d}]\xce\xc4\x9aUF\x05\xa6\x11~ei\xf2\x95\x86\xa8\xd8\xa8AE\r\xc8\xcbM\xad9\xe0\xec>\x9d \xcb\xab\xe7\x12T\x11\xe6\xd2\x9c}\x18\x1f\xb9_P\xa1a\x98\x87t\x82\xcd\xf7\"\x15\x9da\x8dh\xd4\xaaJ~=\xb2\x17\xb9\xef\x12:\x0f\xe1\x84', 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='syscall\x00') read$FUSE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 20:20:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'ip6tnl0\x00'}) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x8, "19722a4d2e46d63c"}) fadvise64(r0, 0x0, 0x0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r2, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) setsockopt(r2, 0x5, 0x64e, &(0x7f0000000340)="a1ec03db29688dc545fab2347ce94a4dca4de9f15569dabfbc6e5e22e5dc9805a11f27aee7b207052b0ece9756149059d491257c5a7140c6540797b138d5034dc960ccc275525bd86c895ff65b275d4e1054e7d9c380baeb5288bd10bf5881883fc8fa8b28633c2e0e9c1589bbdc20a3e64e4dca802a833e2bbaf5784be93b323986ff7adc1a2ec71a5d124e35ad8b5601860c1d3678e0e4f432c0da3c00aa90b634e93c8fe03f9b", 0xa8) mlockall(0x1) listen(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x2}, 0x0, 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 20:20:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000025e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:20:17 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0xdc, &(0x7f0000000580)="2562cb0362e48ccbc9a05134fdd7b5a97807d1edc960c87783ecc0ec68e107d510e6fcff28f8ec6757002728ce5fcb4284ac1449d397790d4699ac083e6318024ad971ec0a198a47ad56635b9a085584445559fed1215e11d9241f82d600881fdfc2f5788aecd8fad3b6e88ed126e63223c555fac1245e275da894a51426a8f756ac0d06f6572928c5db5ecdaa5e2aa3cc79c3b9d5f1597ec7d9371f3b35fc8ebda8555484da9481e88123eb6c18ab924a25a1cbd3b7cf5aa640d9ab3b8f16e778105facd38126451028fd8932916dfe2d85d0245aeeec76a5f3f986"}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x9, 0x0, 0x1, r0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x48) [ 593.466966][T15066] ===================================================== [ 593.473965][T15066] BUG: KMSAN: uninit-value in kmsan_check_memory+0xd/0x10 [ 593.481110][T15066] CPU: 0 PID: 15066 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 593.489790][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.500035][T15066] Call Trace: [ 593.503362][T15066] dump_stack+0x1df/0x240 [ 593.507717][T15066] kmsan_report+0xf7/0x1e0 [ 593.512162][T15066] kmsan_internal_check_memory+0x238/0x3d0 [ 593.517991][T15066] kmsan_check_memory+0xd/0x10 [ 593.522754][T15066] _copy_to_iter+0x3d4/0x26e0 [ 593.527424][T15066] ? kmsan_get_metadata+0x4f/0x180 [ 593.532634][T15066] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.538620][T15066] __skb_datagram_iter+0x2bb/0x1220 [ 593.543814][T15066] ? skb_copy_datagram_iter+0x2b0/0x2b0 [ 593.549362][T15066] skb_copy_datagram_iter+0x292/0x2b0 [ 593.554733][T15066] packet_recvmsg+0x630/0x1c40 [ 593.559490][T15066] ? kmsan_internal_set_origin+0x75/0xb0 [ 593.565115][T15066] ? __msan_poison_alloca+0xf0/0x120 [ 593.570482][T15066] ? packet_sendmsg+0x87a0/0x87a0 [ 593.575500][T15066] ____sys_recvmsg+0xf58/0x1020 [ 593.580362][T15066] ? kmsan_get_metadata+0x4f/0x180 [ 593.585468][T15066] do_recvmmsg+0x99c/0x1ee0 [ 593.589991][T15066] ? __se_sys_recvmmsg+0xac/0x350 [ 593.595006][T15066] ? __se_sys_recvmmsg+0xac/0x350 [ 593.600019][T15066] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 593.606186][T15066] __se_sys_recvmmsg+0x1d1/0x350 [ 593.611385][T15066] __x64_sys_recvmmsg+0x62/0x80 [ 593.616232][T15066] do_syscall_64+0xb0/0x150 [ 593.620815][T15066] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 593.627133][T15066] RIP: 0033:0x45c1d9 [ 593.631006][T15066] Code: Bad RIP value. [ 593.635059][T15066] RSP: 002b:00007f6ad9620c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 593.643457][T15066] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 593.659849][T15066] RDX: 0000000020004582 RSI: 0000000020004b40 RDI: 0000000000000004 [ 593.668081][T15066] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 593.676264][T15066] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 593.684417][T15066] R13: 0000000000c9fb6f R14: 00007f6ad96219c0 R15: 000000000078bfac [ 593.692605][T15066] [ 593.694924][T15066] Uninit was stored to memory at: [ 593.699947][T15066] kmsan_internal_chain_origin+0xad/0x130 [ 593.705655][T15066] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 593.711664][T15066] kmsan_memcpy_metadata+0xb/0x10 [ 593.716676][T15066] __msan_memcpy+0x43/0x50 [ 593.721096][T15066] pskb_expand_head+0x38b/0x1b00 [ 593.726026][T15066] batadv_skb_head_push+0x234/0x350 [ 593.731212][T15066] batadv_send_skb_packet+0x1a7/0x8c0 [ 593.736569][T15066] batadv_send_broadcast_skb+0x76/0x90 [ 593.742021][T15066] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 593.749031][T15066] process_one_work+0x1540/0x1f30 [ 593.754043][T15066] worker_thread+0xed2/0x23f0 [ 593.758710][T15066] kthread+0x515/0x550 [ 593.762785][T15066] ret_from_fork+0x22/0x30 [ 593.767176][T15066] [ 593.769486][T15066] Uninit was created at: [ 593.773721][T15066] kmsan_save_stack_with_flags+0x3c/0x90 [ 593.779343][T15066] kmsan_alloc_page+0xb9/0x180 [ 593.784093][T15066] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 593.789622][T15066] page_frag_alloc+0x3ae/0x910 [ 593.794371][T15066] __netdev_alloc_skb+0x703/0xbb0 [ 593.799481][T15066] batadv_iv_ogm_queue_add+0x10da/0x1900 [ 593.805101][T15066] batadv_iv_ogm_schedule+0x10ef/0x1430 [ 593.810636][T15066] batadv_iv_send_outstanding_bat_ogm_packet+0xbae/0xd50 [ 593.818012][T15066] process_one_work+0x1540/0x1f30 [ 593.823024][T15066] worker_thread+0xed2/0x23f0 [ 593.827872][T15066] kthread+0x515/0x550 [ 593.832207][T15066] ret_from_fork+0x22/0x30 [ 593.836884][T15066] [ 593.839199][T15066] Bytes 52-53 of 74 are uninitialized [ 593.844574][T15066] Memory access of size 74 starts at ffffa244434f9840 [ 593.851589][T15066] ===================================================== [ 593.859573][T15066] Disabling lock debugging due to kernel taint [ 593.866511][T15066] Kernel panic - not syncing: panic_on_warn set ... [ 593.873183][T15066] CPU: 0 PID: 15066 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 593.883231][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.893374][T15066] Call Trace: [ 593.896659][T15066] dump_stack+0x1df/0x240 [ 593.900982][T15066] panic+0x3d5/0xc3e [ 593.904886][T15066] kmsan_report+0x1df/0x1e0 [ 593.909384][T15066] kmsan_internal_check_memory+0x238/0x3d0 [ 593.915195][T15066] kmsan_check_memory+0xd/0x10 [ 593.919947][T15066] _copy_to_iter+0x3d4/0x26e0 [ 593.924616][T15066] ? kmsan_get_metadata+0x4f/0x180 [ 593.929715][T15066] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.935528][T15066] __skb_datagram_iter+0x2bb/0x1220 [ 593.940717][T15066] ? skb_copy_datagram_iter+0x2b0/0x2b0 [ 593.946261][T15066] skb_copy_datagram_iter+0x292/0x2b0 [ 593.951629][T15066] packet_recvmsg+0x630/0x1c40 [ 593.956386][T15066] ? kmsan_internal_set_origin+0x75/0xb0 [ 593.962010][T15066] ? __msan_poison_alloca+0xf0/0x120 [ 593.967288][T15066] ? packet_sendmsg+0x87a0/0x87a0 [ 593.972298][T15066] ____sys_recvmsg+0xf58/0x1020 [ 593.977165][T15066] ? kmsan_get_metadata+0x4f/0x180 [ 593.982274][T15066] do_recvmmsg+0x99c/0x1ee0 [ 593.986798][T15066] ? __se_sys_recvmmsg+0xac/0x350 [ 593.991810][T15066] ? __se_sys_recvmmsg+0xac/0x350 [ 593.996834][T15066] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 594.002719][T15066] __se_sys_recvmmsg+0x1d1/0x350 [ 594.007655][T15066] __x64_sys_recvmmsg+0x62/0x80 [ 594.012497][T15066] do_syscall_64+0xb0/0x150 [ 594.016994][T15066] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 594.022875][T15066] RIP: 0033:0x45c1d9 [ 594.026865][T15066] Code: Bad RIP value. [ 594.031002][T15066] RSP: 002b:00007f6ad9620c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 594.039415][T15066] RAX: ffffffffffffffda RBX: 0000000000024b40 RCX: 000000000045c1d9 [ 594.047556][T15066] RDX: 0000000020004582 RSI: 0000000020004b40 RDI: 0000000000000004 [ 594.055515][T15066] RBP: 000000000078bff0 R08: 0000000000000000 R09: 0000000000000000 [ 594.063490][T15066] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000078bfac [ 594.071544][T15066] R13: 0000000000c9fb6f R14: 00007f6ad96219c0 R15: 000000000078bfac [ 594.080792][T15066] Kernel Offset: 0x21c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 594.092423][T15066] Rebooting in 86400 seconds..